last executing test programs: 26.285871515s ago: executing program 0 (id=311): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.984002559s ago: executing program 0 (id=323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x611, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) shutdown(r1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xf3, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f0000000140), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}, @call={0x85, 0x0, 0x0, 0xa1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24}, 0x94) socket$packet(0x11, 0x3, 0x300) 24.438340257s ago: executing program 0 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r6, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0xbd93, 0x7, 0xffffffffffffffff}, {0x1, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x80) 23.696196391s ago: executing program 0 (id=338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000c800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 23.616022748s ago: executing program 0 (id=341): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 23.496341399s ago: executing program 0 (id=343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x2, 0x0, 0x5, 0x8b, @tick=0xa8, {0xfd}, {0x3}, @result={0x6, 0xfffe}}, {0x6, 0x4, 0x9, 0x3, @time={0xe, 0xffffffff}, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x50}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f00000000c0)=0x7b, 0x4) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 8.150225008s ago: executing program 32 (id=343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x2, 0x0, 0x5, 0x8b, @tick=0xa8, {0xfd}, {0x3}, @result={0x6, 0xfffe}}, {0x6, 0x4, 0x9, 0x3, @time={0xe, 0xffffffff}, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x50}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f00000000c0)=0x7b, 0x4) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 6.153030653s ago: executing program 2 (id=463): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000001fc0)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 5.171221149s ago: executing program 4 (id=471): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2, 0xfffffffc}, 0x1c) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000008000100"/36, 0x24) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r8, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) (async) write$rfkill(r8, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000aa03000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000000000000090000009500000000000000fd7d87b83f47842976cad17b39d90a0aa909b5e8c68b09badaea85575eac5edad67373e4579d15219e0d"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000aa03000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000000000000090000009500000000000000fd7d87b83f47842976cad17b39d90a0aa909b5e8c68b09badaea85575eac5edad67373e4579d15219e0d"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.028403171s ago: executing program 1 (id=472): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='./file1\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18) set_mempolicy(0x8000, &(0x7f0000000080)=0x3, 0x7fffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 4.602795238s ago: executing program 4 (id=473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000418000/0x3000)=nil, &(0x7f000041a000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r1 = epoll_create1(0x80000) (async) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) (async, rerun: 64) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0e698411995a78a34e0cbdbc8dd4b763c518f75f046d67db708bb83aa8d0454055f866d6294ac133d7be25c19b07a43ecc87a11d95b88fdd979a485de4be39233abb2e819f55b2eb1a51994366030cb984d505cdfc659a6211ce0a25fd03fb4bb608e375db41231a56bc95e1f0d37d92fea06bded798a8d718ab8e7172e8cd5d5ddc7858b8b38c810", @ANYRES16=r3, @ANYBLOB="080000000000000000007e000000010000007921dda576e1ad6b59dff017c6db7c2404d8a547c16fb11ee4d152e50d39c841e99b1aca4cd4249856ab8709750e0a35fea6e0c767c1baf2da7ccd2ca6690cfedb5289601582c70d2b14fb368a161bd025e24ac2aca8a43919d20aadec758da0f3bcf5d75446b5c9c59dfe4a13edca73d2f847293240122b19e916c75ad68921d5a125828d961c384de70b2fbdadff9eb88dee4363b616a5cefa98238050a56ebfa8a59e47e905b1ffff000000000000fcdf7fd7f604580ff0a9717923000000000000", @ANYRESOCT=r3, @ANYBLOB="9c7d4abbb7ee5109ac4e2532daf7acbc5fcead208d146b4c6ae855001b2d38f15e2f705090cf"], 0x1c}, 0x1, 0x0, 0x0, 0x40834}, 0x4000054) (async) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000}) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) flock(0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) sendmmsg$sock(r8, &(0x7f00000003c0)=[{{&(0x7f0000000140)=@l2={0x1f, 0x6f3, @none, 0x3, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="f3f922b478a2ea955c8c8425ff17ad77f23da2ab7d73dd358dd67b707e741a3e3e04afe441bf0beebbee4b3fe1629337bd0acc123aa2fa0f96", 0x39}, {&(0x7f0000000240)="387ce9f9102a62236ee2f68842e671ee971847c6e76052ca0004943ac320012288d93b5bac6fe5c5e490e68db968e9a117a2f1e8e9973b62a4374dd7a73de4c27fd7e04dcb449f515cdb8bb9f1c61ea51ff52f316ae033cd03fc94eff26a18a7f78d214f25807247a6b5a84f08b9d4", 0x6f}, {&(0x7f00000002c0)="08e405db02080f08676d5c97f9ef", 0xe}], 0x3, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0xfffff000}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x48}}], 0x1, 0x800) 4.405361056s ago: executing program 4 (id=474): socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x12014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x110938, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 4.35815287s ago: executing program 4 (id=475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") syz_clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x9}, &(0x7f0000000100)=""/103, 0x67, &(0x7f0000000180)=""/34, &(0x7f00000001c0)=[0x0, 0x0], 0x2}, 0x58) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f00000002c0)={@local, 0x1, 0x0, 0x50, 0x0, [{@local}, {@empty}, {@multicast2}, {}, {}]}}) 4.261984768s ago: executing program 1 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0xa2) close(r5) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x5b, 0x65, 0x66, 0x64, 0x2e, 0x34], 0x2d, [0x38, 0x62, 0x32, 0x30], 0x2d, [0x37, 0x32, 0x34, 0x31], 0x2d, [0x65, 0x34, 0x36, 0x30], 0x2d, [0x33, 0x38, 0x37, 0x36, 0x34, 0x66, 0x39, 0x65]}}}, {@fowner_lt}]}}) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000001700)=0x4) 4.0082135s ago: executing program 3 (id=477): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009"], 0x7c}}, 0x0) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') syz_io_uring_setup(0x110c, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x8) 3.925181537s ago: executing program 1 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/137, 0x89}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/23, 0x17}, 0x80}], 0x2, 0x45833af92e4b39ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x0, 0x4000}, 0xc) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x800000, 0x0, 0x0, 0x1f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 2.785977767s ago: executing program 2 (id=479): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='!\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff) 2.785069357s ago: executing program 3 (id=480): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000bc0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=r1, @ANYBLOB="000900006440000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8841}, 0x4048800) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) 2.702944514s ago: executing program 4 (id=481): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) ioperm(0x0, 0x7, 0x80006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x8903, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0xe0, 0x21, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 2.63722119s ago: executing program 2 (id=482): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 2.470423254s ago: executing program 3 (id=483): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003c80)={&(0x7f0000003b80)=ANY=[@ANYBLOB="9feb01001800000000000000e0000000e0000000050000000d0000000000000e0500000002000000010000000000000903000000000000000000000300000000010000000400000009000000000000000800000d000000000c000000000000000c0000000000000005000000030019000e000000a7005584a3d3611b9da480338fd0d70100000005000000050000000f000000000006000000030000000600000000000009000000000200050000000d000000060000000200000002000000090000000c0000000100000009e8000001000000060000000f0000000100000004000000000000004000"/243], &(0x7f0000001780)=""/54, 0xfd, 0x36, 0x1, 0x8}, 0x28) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) r4 = dup(r2) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003cc0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@bloom_filter={0x1e, 0x81a, 0x4, 0x818, 0x2809a, r5, 0x4, '\x00', r6, r1, 0x2, 0x5, 0x0, 0xf, @value=r1}, 0x50) r7 = perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001840), 0x6}, 0x410, 0x2000000, 0x0, 0x0, 0x2, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x0, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048861}, 0x840) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000001200)=""/142, 0x8e}, {&(0x7f00000012c0)=""/49, 0x31}, {&(0x7f0000001300)=""/142, 0x8e}], 0x6, &(0x7f0000001440)=""/193, 0xc1}, 0xd}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001540)=""/19, 0x13}, {&(0x7f0000001580)=""/181, 0xb5}, {&(0x7f0000001640)=""/43, 0x2b}, {&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000001780)}], 0x5, &(0x7f0000002340)=""/142, 0x8e}, 0xe}, {{&(0x7f0000002400)=@hci, 0x80, &(0x7f0000002900)=[{&(0x7f0000002480)=""/144, 0x90}, {&(0x7f0000002540)=""/72, 0x48}, {&(0x7f00000025c0)=""/193, 0xc1}, {&(0x7f00000026c0)=""/94, 0x5e}, {&(0x7f0000002740)=""/16, 0x10}, {&(0x7f0000002780)=""/80, 0x50}, {&(0x7f0000002800)=""/255, 0xff}], 0x7}, 0x40}, {{&(0x7f0000002980)=@isdn, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/44, 0x2c}], 0x1, &(0x7f0000002a80)=""/4096, 0x1000}, 0x7f}], 0x4, 0x40000023, 0x0) 2.186714259s ago: executing program 5 (id=453): r0 = socket(0x1, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0xe4ff}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 1.961385259s ago: executing program 5 (id=484): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0xc8) (fail_nth: 4) 1.937478921s ago: executing program 5 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x40, 0x2e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getitimer(0x0, &(0x7f0000000000)) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$invalidate(0x15, r4) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000300)="da61e3cb5549625fa08a4b8a39829df8cf8805494fbe501bb809fdd43c079e860f3631e55c4425eb4d34cdc8b2dcb70605d93de16bf4c61a2a73bb58465ed69145363c81676a83737920092c9b40506397b771c1b08ee2cf5959eac487a0abd433966463ccf068df1024b4f9ba1296340fedefc09947bdb54ef528bf3c849a5aab36459e1bc74a2118dcab2a04981d0d88c3e03564fb604172286a90838d5521a8d8ad9689c079c82691a8f60f07cdbd8a1df3d2f13a8d858d2d2b2427ad0fd76f5bc7", 0xc3, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}}, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, 0x0) keyctl$search(0xa, r5, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000040)=@chain) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r5}, &(0x7f0000000100)=""/20, 0x14, 0x0) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}], 0x1, 0x2090) shutdown(r2, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1.853596348s ago: executing program 1 (id=486): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$setstatus(r0, 0x4, 0x2800) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) write(r2, &(0x7f00000002c0)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x20, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setreuid(0x0, 0xee01) fsopen(0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44080) sendfile(r1, r2, 0x0, 0xffff) 1.762640896s ago: executing program 5 (id=487): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x101080) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000040000000001000000080001000000000034000480050020000100000005000300000000000500030002000000052003000500000005000300050000000500030005000000080002000100000004000880ef"], 0x5c}}, 0x44100) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fcdbdf2501000000080002000100000018000c8014000b8008000900a0e5c03108000a009e160000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004081) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000001c0)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe1000, 0x20200) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000040)=""/42) 1.6070782s ago: executing program 1 (id=488): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008"], 0x48}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480080, 0x0) socket$inet6(0xa, 0x802, 0xfffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0xffffffffffffffff, @ANYRES32=r2, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$eJzs3EFrE2sUxvHTprdJU9rkwuWCgnrQjW5CGz+ABmlBDCi1KepCmNqJhoxJmQmViNhsxK2fo7h0J6hfoBtx495dEQQ3XYivdCZpJ23apm3SxPb/gzInc96HeZuk5SSQrN1787SY91J5qyKDMZVBkZqsiyQ3qrqB+nHQr4clrCZXRn9+PXf3/oNbmWx2akZ1OjN7Na2q4xc+PHvx9uKnyujcu/H3UVlNPlz7kf62Orx6Zu337JOCpwVPS+WKWjpfLlesecfWhYJXTKnecWzLs7VQ8my3qZ93youLVbVKC2PxRdf2PLVKVS3aVa2UteJW1XpsFUqaSqV0LC6n21Aba3IrMzNWZte2iQx0dEvotpFWJ103U2vdzK0cw54AAECf2Xv+D2b93ef/7FxwPMj8///+878I83+X1Jpu7TP/40Rw3YwVr//9NmP+BwAAAAAAAAAAAAAAAAAAAADgb7BuTMIYk9g41k/5t6MiEhMRU+/3eJvokvDjb0I/+zz+13q0XXRY6IN7MRHn9VJuKRccg34mLwVxxJYJScgv//lQF9TTN7NTE+pLykdnuZ5fXspFJNrINyRb5c//OxnktTn/j8TD109LQv5rff10y/ywXL4UyqckIZ8fSVkcWfCf11v5l5OqN25nt+VH/HUAAAAAAJwEKd204/W73/cXxGRnP8iH3h8wxizv9f7AttfXQ3K2na+oBAAAAAAAR+ZVnxctx7HdQxRRETlCvPOFMSK930ZE+uPeaC6ui0gfbOO4ipiIBGf0MPHvm/G2UqaNNUMi0vO75QBFr/8zAQAAAOi0raH/AKEvr7q4IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATp92vw+ssX5Hq9HYIx66XOTYf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wJAAD//7YRHKA=") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r2, @ANYRES64], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000001c0001002cbd7000fddbdf2502000000", @ANYRES64=r3, @ANYBLOB="000000000c3acbb3cb34f4213968"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x8000, 0x10000, 0x8008, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x140c4, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$key(0xf, 0x3, 0x2) 1.60677135s ago: executing program 5 (id=489): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$eJzs3MtvG0UcAODfrpO09JVQyqOlQKBCRDySJi3QAxcQSByKQIJDgVNw0qpq2qAmSLSKaECovSChSnAGjkj8Bdy4IOCEhMQJ7qhSBb20cApae7e1XTtPN27j75OczHhmPTOend3ZHdsBdK3B7E8SsS0i/oiI/mq0PsNg9d+1K3Plf6/MlZNYWHjz76SS7+qVuXKRtdhuax4ZSiPST5O8kHozZ86eGJ+amjydx0dmT74/MnPm7DPHT44fmzw2eWrs0KGDB0aff27s2ba0M2vX1T0fTe/d/erbF18rH7n43s/fZfXdlqfXtmNV+m5+ajBr+D8LFY1pj8ddayrudrO9Jpz0dLAirEgpIrLu6q2M//4oxY3O649XPulo5YBbKjs3bWqdPL8AbGBJdLoGQGcUJ/oLfXPl7Bp4zdfBd5jLL1YvgLJ2X8sf1ZSeSPM8vQ3Xt+00GBFH5v/7KntEO+5DAAAs4bPyl4fj6eq8o37+l8Z9Nfl25GsoAxFxd0TsjIh7ImJXRNwbUcl7f0Q8sMLyG5eGbp7/pJdW1bBlyuZ/L+RrW/Xzv2L2FwOlPLa90v7e5Ojxqcn9+XsyFL2bsvjoImX88PJvn7dKq53/ZY+s/GIumNfjUk/DDbqJ8dnxyqS0DS5/HLGnp1n7k+srAUlE7I6IPSt76R1F4PiT3+5tlSlZsv2LaMM608I3EU9U+38+GtpfW8dF1idHNsfU5P6RYq+42S+/nn+jVflL938z7Vs7zPp/S/3+n6d8fSYPDLxbu147s/LSz/95oeU1zWr3/77krcrxqFh2/XB8dvb0aERfcrgSr3t+7Ma2RbzIn7V/aF/z8b8z3ybr/wcjItuJH4qIhyPikbzuj0bEYxGxb5H2//RS67TV9X/7ZO2faHr8u77/DyR1/b/yQOnEj9+3Kn95/X+wEhrKn6kc/5aw3Aqu5b0DAACAO0Va+Qx8kg5fD6fp8HD1M/y7Yks6NT0z+9TR6Q9OTVQ/Kz8QvWlxp6u/5n7oaDKfv2I1PpbfKy7SD+T3jb8oRSU+XJ6emuhw26HbbW0x/jN/lTpdO+CWa7aONtbkC23AxtM4/tP66LnX17MywLryfW3oXkuM/3S96gGsP+d/6F7Nxv+5hri1ANiYVnv+39zmegDrz/wfupfxD92rYfyX4vdO1QRYR2v5Xv8dEdia/1rF7VKfDROItGOl7+qJWNFWy/89iFsdeOf2qMYyAp0+MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTH/wEAAP//tADp4w==") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0xd00, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 1.388658479s ago: executing program 3 (id=490): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x29, &(0x7f0000003e80)=""/44, &(0x7f0000003ec0)=0x2c) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x7, 0x20002f9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x800, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x6, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x0) listen(r1, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) clock_gettime(0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x4}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}]}}]}, 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {0x0, 0xf}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = syz_io_uring_setup(0x10b, &(0x7f0000000440)={0x0, 0x46a9, 0x400, 0x3, 0x108}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10100, 0x1}) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$unix(r10, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 1.37065239s ago: executing program 5 (id=491): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) 1.36895942s ago: executing program 2 (id=492): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, 0x0, 0x4000000) fcntl$getflags(r0, 0x81f) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004006, &(0x7f0000001180)=ANY=[], 0x25, 0x352, &(0x7f0000000c80)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.26126583s ago: executing program 1 (id=493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@dax_never}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") sendfile(r0, r0, &(0x7f0000000040), 0x0) semop(0x0, &(0x7f0000000180), 0x0) acct(&(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0xa, 0x0, 0x8, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000, 0x6}, 0x102260, 0x10000, 0x0, 0xe, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) fallocate(r2, 0x0, 0x800, 0x8000c62) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) 1.229411993s ago: executing program 3 (id=494): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208814, &(0x7f0000000040)={[{@block_validity}, {@grpquota}]}, 0x0, 0x4d4, &(0x7f00000011c0)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x20, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000001340)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(r3, &(0x7f0000000740)=ANY=[], 0x2e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.042214879s ago: executing program 2 (id=495): r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x101, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)={[{0x2d, 'devices'}]}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000200)=""/223, 0xdf}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0xc000) 454.81446ms ago: executing program 4 (id=496): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000580)='./file1\x00', 0x400) 104.841811ms ago: executing program 3 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000090a010400000000000000000a0000040900020073797a310000000008000a40000000000900010073797a3100000000000000000009000b1400128010000180090001006c617374000000000800034000000130140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0x1, 0x4) 0s ago: executing program 2 (id=498): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbf8, 0x7, 0xb6b, 0x800c1, 0x2, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7ff, 0x3, 0x63d, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x881, 0x79b, 0x5, 0x1, 0x7e, 0x7, 0xa, 0x7, 0x2f, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x7, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xf, 0x84, 0x100, 0x5, 0x252, 0x81, 0xfffffff8, 0x4, 0xa0006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x5, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x82, 0x42, 0x7ff, 0x4, 0x4, 0x401, 0x66cd, 0x1000000a, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.969095][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.971763][ T3739] loop3: detected capacity change from 0 to 512 [ 52.989279][ T3737] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.70: inode has both inline data and extents flags [ 53.040290][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.065111][ T3739] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.71: inode has both inline data and extents flags [ 53.087689][ T3739] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.087789][ T3737] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.097609][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 53.113345][ C1] EXT4-fs (loop3): initial error at time 1771735262: ext4_orphan_get:1391: inode 15 [ 53.122805][ C1] EXT4-fs (loop3): last error at time 1771735262: ext4_orphan_get:1391: inode 15 [ 53.133957][ T3739] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.71: couldn't read orphan inode 15 (err -117) [ 53.153281][ T3737] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.70: couldn't read orphan inode 15 (err -117) [ 53.165023][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.165057][ C1] EXT4-fs (loop1): initial error at time 1771735262: ext4_orphan_get:1391: inode 15 [ 53.165091][ C1] EXT4-fs (loop1): last error at time 1771735262: ext4_orphan_get:1391: inode 15 [ 53.195181][ T3739] loop3: lost filesystem error report for type 5 error -117 [ 53.195952][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 53.218816][ T3743] loop2: detected capacity change from 0 to 128 [ 53.225626][ T28] audit: type=1400 audit(1771735262.509:188): avc: denied { getopt } for pid=3742 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.270365][ T3739] tipc: Enabling of bearer rejected, already enabled [ 53.299620][ T3737] loop1: lost filesystem error report for type 5 error -117 [ 53.323170][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 53.385656][ T3737] tipc: Enabling of bearer rejected, already enabled [ 53.481994][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 53.560425][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 53.595764][ T3757] loop3: detected capacity change from 0 to 512 [ 53.645377][ T3757] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.79: iget: bad extra_isize 90 (inode size 256) [ 53.662064][ T3761] loop2: detected capacity change from 0 to 512 [ 53.672699][ T3764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 53.688703][ T3757] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.690565][ T3757] EXT4-fs (loop3): Remounting filesystem read-only [ 53.699841][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 53.699858][ C1] EXT4-fs (loop3): initial error at time 1771735262: ext4_xattr_inode_iget:441: inode 11 [ 53.699902][ C1] EXT4-fs (loop3): last error at time 1771735262: ext4_xattr_inode_iget:441: inode 11 [ 53.734364][ T3761] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.80: iget: bad extra_isize 90 (inode size 256) [ 53.747616][ T3761] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.747750][ T3757] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 53.767039][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 53.767075][ C1] EXT4-fs (loop2): initial error at time 1771735263: ext4_xattr_inode_iget:441: inode 11 [ 53.767120][ C1] EXT4-fs (loop2): last error at time 1771735263: ext4_xattr_inode_iget:441: inode 11 [ 53.793701][ T3764] loop1: detected capacity change from 0 to 2048 [ 53.800227][ T3761] EXT4-fs (loop2): Remounting filesystem read-only [ 53.812136][ T3764] EXT4-fs: inline encryption not supported [ 53.818165][ T3761] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 53.836018][ T3761] EXT4-fs (loop2): 1 orphan inode deleted [ 53.865173][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.880718][ T3767] syzkaller0: entered promiscuous mode [ 53.886341][ T3767] syzkaller0: entered allmulticast mode [ 53.900535][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.936340][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.958401][ T3757] EXT4-fs (loop3): 1 orphan inode deleted [ 53.973208][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.986666][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.996305][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.044018][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.044018][ T50] [ 54.070906][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.080617][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 54.091199][ T50] EXT4-fs (loop1): Free/Dirty block details [ 54.118922][ T50] EXT4-fs (loop1): free_blocks=2415919104 [ 54.120716][ T3775] Zero length message leads to an empty skb [ 54.142276][ T50] EXT4-fs (loop1): dirty_blocks=16 [ 54.151891][ T50] EXT4-fs (loop1): Block reservation details [ 54.163480][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 54.175101][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.241169][ T3779] loop4: detected capacity change from 0 to 512 [ 54.276805][ T3779] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.324903][ T3783] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.352864][ T3783] SELinux: failed to load policy [ 54.393790][ T3784] mmap: syz.2.83 (3784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.549892][ T3789] loop1: detected capacity change from 0 to 512 [ 54.590382][ T3789] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.88: inode has both inline data and extents flags [ 54.616433][ T3789] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.616622][ T3789] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 54.625887][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 54.625910][ C1] EXT4-fs (loop1): initial error at time 1771735263: ext4_orphan_get:1391: inode 15 [ 54.625943][ C1] EXT4-fs (loop1): last error at time 1771735263: ext4_orphan_get:1391: inode 15 [ 54.662749][ T3789] loop1: lost filesystem error report for type 5 error -117 [ 54.664169][ T3789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 54.699763][ T3789] tipc: Enabling of bearer rejected, already enabled [ 54.728456][ T3777] loop3: detected capacity change from 0 to 128 [ 54.894729][ T3802] loop2: detected capacity change from 0 to 512 [ 54.941794][ T3802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.955497][ T3802] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.019889][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 55.234469][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.309699][ T3812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.94: iget: bad extra_isize 90 (inode size 256) [ 55.372103][ T3812] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.372296][ T3812] EXT4-fs (loop4): Remounting filesystem read-only [ 55.381562][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 55.381585][ C1] EXT4-fs (loop4): initial error at time 1771735264: ext4_xattr_inode_iget:441: inode 11 [ 55.381610][ C1] EXT4-fs (loop4): last error at time 1771735264: ext4_xattr_inode_iget:441: inode 11 [ 55.427832][ T3812] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 55.446521][ T3812] EXT4-fs (loop4): 1 orphan inode deleted [ 55.497144][ T3812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.651662][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.774488][ T3820] SELinux: failed to load policy [ 55.814935][ T3826] bond0: entered promiscuous mode [ 55.820127][ T3826] bond_slave_0: entered promiscuous mode [ 55.826043][ T3826] bond_slave_1: entered promiscuous mode [ 55.838134][ T3826] bond0: left promiscuous mode [ 55.843138][ T3826] bond_slave_0: left promiscuous mode [ 55.849225][ T3826] bond_slave_1: left promiscuous mode [ 56.375459][ T312] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.864900][ T9] net_ratelimit: 13 callbacks suppressed [ 56.864925][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.069940][ T3851] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.271345][ T3858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.365373][ T3851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.104'. [ 57.584533][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.597337][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 57.597350][ T28] audit: type=1400 audit(1771735266.879:223): avc: denied { create } for pid=3860 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.623402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.632504][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.642120][ T28] audit: type=1400 audit(1771735266.899:224): avc: denied { connect } for pid=3860 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.671153][ T28] audit: type=1400 audit(1771735266.899:225): avc: denied { write } for pid=3860 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.721185][ T28] audit: type=1400 audit(1771735266.999:226): avc: denied { ioctl } for pid=3862 comm="syz.1.106" path="socket:[6543]" dev="sockfs" ino=6543 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.789246][ T28] audit: type=1400 audit(1771735266.999:227): avc: denied { nlmsg_write } for pid=3862 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.872155][ T28] audit: type=1400 audit(1771735267.159:228): avc: denied { remount } for pid=3871 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.880529][ T3873] SELinux: failed to load policy [ 57.962409][ T3883] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.970660][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 58.006319][ T3884] set_capacity_and_notify: 3 callbacks suppressed [ 58.006338][ T3884] loop3: detected capacity change from 0 to 2048 [ 58.070812][ T3886] loop0: detected capacity change from 0 to 512 [ 58.090911][ T3886] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.117: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0) [ 58.110312][ T3886] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 58.110513][ T3886] EXT4-fs (loop0): get root inode failed [ 58.119667][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.119684][ C0] EXT4-fs (loop0): initial error at time 1771735267: ext4_ext_check_inode:521: inode 2 [ 58.119709][ C0] EXT4-fs (loop0): last error at time 1771735267: ext4_ext_check_inode:521: inode 2 [ 58.151430][ T3886] EXT4-fs (loop0): mount failed [ 58.165615][ T28] audit: type=1400 audit(1771735267.449:229): avc: denied { create } for pid=3885 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.216193][ T28] audit: type=1400 audit(1771735267.499:230): avc: denied { mounton } for pid=3897 comm="syz.0.118" path="/proc/76/task" dev="proc" ino=6604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 58.255563][ T28] audit: type=1400 audit(1771735267.539:231): avc: denied { associate } for pid=3901 comm="syz.0.118" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.299522][ T28] audit: type=1400 audit(1771735267.579:232): avc: denied { bpf } for pid=3881 comm="syz.1.116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.447810][ T3548] Bluetooth: hci0: command 0x1003 tx timeout [ 58.454101][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.490681][ T3908] loop4: detected capacity change from 0 to 1024 [ 58.521270][ T3908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 58.534939][ T3908] System zones: 0-1, 3-36 [ 58.543674][ T3908] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.121: bad orphan inode 134217728 [ 58.584938][ T3918] netlink: 'syz.1.123': attribute type 3 has an invalid length. [ 58.607690][ T3908] loop4: lost filesystem error report for type 5 error -117 [ 58.612626][ T3918] netlink: 'syz.1.123': attribute type 3 has an invalid length. [ 58.628400][ T3918] netlink: 336 bytes leftover after parsing attributes in process `syz.1.123'. [ 58.653559][ T3920] 9p: Bad value for 'rfdno' [ 58.697899][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.706209][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.779826][ T3922] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 58.803943][ T3931] loop3: detected capacity change from 0 to 512 [ 58.810976][ T3922] SELinux: failed to load policy [ 58.838261][ T3931] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.129: iget: bad extra_isize 90 (inode size 256) [ 58.838303][ T3931] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.846189][ T3931] EXT4-fs (loop3): Remounting filesystem read-only [ 58.855283][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.855304][ C0] EXT4-fs (loop3): initial error at time 1771735268: ext4_xattr_inode_iget:441: inode 11 [ 58.855334][ C0] EXT4-fs (loop3): last error at time 1771735268: ext4_xattr_inode_iget:441: inode 11 [ 58.928797][ T3933] loop1: detected capacity change from 0 to 4096 [ 58.937905][ T3931] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 58.948206][ T3931] EXT4-fs (loop3): 1 orphan inode deleted [ 59.044051][ T3936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.102156][ T3942] loop3: detected capacity change from 0 to 512 [ 59.118474][ T3942] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.145349][ T3942] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.152127][ T3942] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 59.258045][ T3942] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.131: attempt to clear invalid blocks 2 len 1 [ 59.283102][ T3945] loop1: detected capacity change from 0 to 512 [ 59.297893][ T3942] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.307608][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 59.323487][ C1] EXT4-fs (loop3): initial error at time 1771735268: ext4_clear_blocks:876: inode 13 [ 59.333339][ C1] EXT4-fs (loop3): last error at time 1771735268: ext4_clear_blocks:876: inode 13 [ 59.347133][ T3942] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.363569][ T3945] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.377629][ T3942] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.131: invalid indirect mapped block 1819239214 (level 0) [ 59.426961][ T3942] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.427335][ T3942] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.131: invalid indirect mapped block 1819239214 (level 1) [ 59.430642][ T3936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.457501][ T3942] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.480788][ T3942] EXT4-fs (loop3): 1 truncate cleaned up [ 59.518613][ T3942] EXT4-fs: Ignoring sb option on remount [ 59.526149][ T3942] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 59.539646][ T3942] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.580032][ T3955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.588278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.618746][ T3959] FAULT_INJECTION: forcing a failure. [ 59.618746][ T3959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.637642][ T3959] CPU: 1 UID: 0 PID: 3959 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 59.637675][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.637697][ T3959] Call Trace: [ 59.637705][ T3959] [ 59.637716][ T3959] __dump_stack+0x1d/0x30 [ 59.637744][ T3959] dump_stack_lvl+0x95/0xd0 [ 59.637773][ T3959] dump_stack+0x15/0x1b [ 59.637854][ T3959] should_fail_ex+0x263/0x280 [ 59.637881][ T3959] should_fail+0xb/0x20 [ 59.637902][ T3959] should_fail_usercopy+0x1a/0x20 [ 59.637940][ T3959] _copy_to_user+0x20/0xa0 [ 59.637972][ T3959] simple_read_from_buffer+0xb5/0x130 [ 59.638000][ T3959] proc_fail_nth_read+0x10e/0x150 [ 59.638035][ T3959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.638127][ T3959] vfs_read+0x1ab/0x7f0 [ 59.638175][ T3959] ? __rcu_read_unlock+0x4e/0x70 [ 59.638202][ T3959] ? __fget_files+0x184/0x1c0 [ 59.638225][ T3959] ? kfree+0x101/0x380 [ 59.638253][ T3959] ? mutex_lock+0x57/0x90 [ 59.638296][ T3959] ksys_read+0xdc/0x1a0 [ 59.638332][ T3959] __x64_sys_read+0x40/0x50 [ 59.638404][ T3959] x64_sys_call+0x2886/0x3020 [ 59.638434][ T3959] do_syscall_64+0x12c/0x370 [ 59.638469][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.638530][ T3959] RIP: 0033:0x7f083d01cece [ 59.638551][ T3959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.638623][ T3959] RSP: 002b:00007f083baaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.638650][ T3959] RAX: ffffffffffffffda RBX: 00007f083baaf6c0 RCX: 00007f083d01cece [ 59.638700][ T3959] RDX: 000000000000000f RSI: 00007f083baaf0a0 RDI: 0000000000000007 [ 59.638717][ T3959] RBP: 00007f083baaf090 R08: 0000000000000000 R09: 0000000000000000 [ 59.638732][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.638744][ T3959] R13: 00007f083d2d6038 R14: 00007f083d2d5fa0 R15: 00007ffdd80739c8 [ 59.638763][ T3959] [ 59.888595][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.896924][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.906204][ T3955] loop1: detected capacity change from 0 to 1024 [ 59.915482][ T3936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.932242][ T3955] EXT4-fs: Ignoring removed orlov option [ 59.950898][ T3955] EXT4-fs: Invalid want_extra_isize 128 [ 60.024435][ T3936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.066062][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 60.109784][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119880][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.177643][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.203990][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.505788][ T3979] loop3: detected capacity change from 0 to 2048 [ 60.512719][ T3977] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 60.530873][ T3975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3975 comm=syz.1.142 [ 60.577741][ T3977] SELinux: failed to load policy [ 60.629064][ T3979] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.143: bg 0: block 234: padding at end of block bitmap is not set [ 60.653128][ T3973] loop0: detected capacity change from 0 to 512 [ 60.671596][ T3979] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 720 with error 28 [ 60.684550][ T3979] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.684550][ T3979] [ 60.697265][ T3979] EXT4-fs (loop3): Total free blocks count 0 [ 60.705358][ T3988] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.715950][ T3979] EXT4-fs (loop3): Free/Dirty block details [ 60.734574][ T3979] EXT4-fs (loop3): free_blocks=0 [ 60.734593][ T3979] EXT4-fs (loop3): dirty_blocks=736 [ 60.734606][ T3979] EXT4-fs (loop3): Block reservation details [ 60.734617][ T3979] EXT4-fs (loop3): i_reserved_data_blocks=46 [ 60.769280][ T3986] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.453157][ T4005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 61.560352][ T4013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.153'. [ 61.578159][ T4015] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 61.627806][ T4020] bridge_slave_1: default FDB implementation only supports local addresses [ 61.684650][ T4025] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.700390][ T4028] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 61.719366][ T4028] SELinux: failed to load policy [ 61.824369][ T4032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4032 comm=syz.4.160 [ 61.843943][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 61.892172][ T4037] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.913920][ T4031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.962234][ T4036] tipc: Enabling of bearer rejected, already enabled [ 61.970134][ T3419] net_ratelimit: 4 callbacks suppressed [ 61.970152][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.979375][ T4021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.984765][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.005170][ T4036] tipc: Enabled bearer , priority 0 [ 62.192666][ T4052] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 62.234115][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.245711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.173921][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.182242][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.193192][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.195930][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.210513][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.210459][ T4049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.237839][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 63.237854][ T28] audit: type=1400 audit(1771735271.549:264): avc: denied { getopt } for pid=4044 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.237660][ T28] audit: type=1400 audit(1771735273.519:265): avc: denied { block_suspend } for pid=4044 comm="syz.4.161" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.471567][ T4057] FAT-fs (loop1): Directory bread(block 64) failed [ 64.478219][ T4057] FAT-fs (loop1): Directory bread(block 65) failed [ 64.484792][ T4057] FAT-fs (loop1): Directory bread(block 66) failed [ 64.491388][ T4057] FAT-fs (loop1): Directory bread(block 67) failed [ 64.498034][ T4057] FAT-fs (loop1): Directory bread(block 68) failed [ 64.504654][ T4057] FAT-fs (loop1): Directory bread(block 69) failed [ 64.511241][ T4057] FAT-fs (loop1): Directory bread(block 70) failed [ 64.517812][ T4057] FAT-fs (loop1): Directory bread(block 71) failed [ 64.524383][ T4057] FAT-fs (loop1): Directory bread(block 72) failed [ 64.531012][ T4057] FAT-fs (loop1): Directory bread(block 73) failed [ 65.218112][ T28] audit: type=1400 audit(1771735273.839:266): avc: denied { module_request } for pid=4046 comm="syz.1.162" kmod="snd-card--1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.243334][ T4013] syz.0.153 (4013) used greatest stack depth: 8448 bytes left [ 65.397254][ T28] audit: type=1400 audit(1771735274.679:267): avc: denied { listen } for pid=4066 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 65.458327][ T4067] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 65.472078][ T28] audit: type=1400 audit(1771735274.719:268): avc: denied { ioctl } for pid=4068 comm="syz.2.168" path="socket:[6978]" dev="sockfs" ino=6978 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.513531][ T4067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.628894][ T4077] set_capacity_and_notify: 6 callbacks suppressed [ 65.628909][ T4077] loop4: detected capacity change from 0 to 512 [ 65.692004][ T4071] bond1: (slave geneve2): making interface the new active one [ 65.901491][ T4071] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.944706][ T4077] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.031693][ T28] audit: type=1326 audit(1771735274.729:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e72cc629 code=0x7ffc0000 [ 66.061718][ T4082] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 66.074074][ T4082] SELinux: failed to load policy [ 66.080715][ T28] audit: type=1326 audit(1771735274.739:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f95e72cc629 code=0x7ffc0000 [ 66.118344][ T28] audit: type=1326 audit(1771735274.739:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e72cc629 code=0x7ffc0000 [ 66.142456][ T28] audit: type=1326 audit(1771735274.739:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e72cc629 code=0x7ffc0000 [ 66.180397][ T28] audit: type=1326 audit(1771735274.739:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f95e72cc629 code=0x7ffc0000 [ 66.248500][ T4089] loop0: detected capacity change from 0 to 1024 [ 66.261769][ T4089] EXT4-fs: Ignoring removed oldalloc option [ 66.289404][ T4089] EXT4-fs: Ignoring removed bh option [ 66.316372][ T4093] loop4: detected capacity change from 0 to 128 [ 66.340769][ T4093] FAT-fs (loop4): Directory bread(block 32) failed [ 66.357691][ T4093] FAT-fs (loop4): Directory bread(block 33) failed [ 66.369252][ T4093] FAT-fs (loop4): Directory bread(block 34) failed [ 66.386017][ T4093] FAT-fs (loop4): Directory bread(block 35) failed [ 66.426320][ T4093] FAT-fs (loop4): Directory bread(block 36) failed [ 66.439738][ T4093] FAT-fs (loop4): Directory bread(block 37) failed [ 66.483486][ T4093] FAT-fs (loop4): Directory bread(block 38) failed [ 66.490342][ T4093] FAT-fs (loop4): Directory bread(block 39) failed [ 66.497003][ T4093] FAT-fs (loop4): Directory bread(block 40) failed [ 66.503879][ T4093] FAT-fs (loop4): Directory bread(block 41) failed [ 66.601480][ T4104] loop3: detected capacity change from 0 to 1024 [ 66.610164][ T4104] EXT4-fs: Ignoring removed nobh option [ 66.616208][ T4104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.844352][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 66.969500][ T4093] syz.4.172: attempt to access beyond end of device [ 66.969500][ T4093] loop4: rw=8912896, sector=4108, nr_sectors = 4 limit=128 [ 67.059041][ T4110] net_ratelimit: 2056 callbacks suppressed [ 67.059063][ T4110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.275494][ T4093] syz.4.172: attempt to access beyond end of device [ 67.275494][ T4093] loop4: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 67.318991][ T4110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.410734][ T4110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.509407][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.517773][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.525970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.553477][ T4109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.587234][ T4109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.744389][ T4120] loop4: detected capacity change from 0 to 512 [ 67.772243][ T4113] loop2: detected capacity change from 0 to 8192 [ 67.803541][ T4119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.803662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.828745][ T4113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 67.846670][ T4120] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 68.302747][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.505156][ T4145] loop0: detected capacity change from 0 to 512 [ 68.611842][ T4147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4147 comm=syz.3.190 [ 68.645159][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.191: iget: bad extra_isize 90 (inode size 256) [ 68.744166][ T4150] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 68.789666][ T4145] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.790073][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.191: error while reading EA inode 11 err=-117 [ 68.797933][ T4150] tipc: Enabled bearer , priority 10 [ 68.799369][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.824321][ C0] EXT4-fs (loop0): initial error at time 1771735278: ext4_xattr_inode_iget:441: inode 11 [ 68.834236][ C0] EXT4-fs (loop0): last error at time 1771735278: ext4_xattr_inode_iget:441: inode 11 [ 68.875599][ T4145] loop0: lost filesystem error report for type 5 error -117 [ 68.875804][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.191: iget: bad extra_isize 90 (inode size 256) [ 68.896913][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 68.896929][ T28] audit: type=1326 audit(1771735278.179:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 68.935373][ T4145] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.937162][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.191: error while reading EA inode 11 err=-117 [ 68.961154][ T4153] loop4: detected capacity change from 0 to 512 [ 68.969114][ T28] audit: type=1326 audit(1771735278.219:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 68.993042][ T28] audit: type=1326 audit(1771735278.219:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 69.018221][ T4145] loop0: lost filesystem error report for type 5 error -117 [ 69.019141][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.191: iget: bad extra_isize 90 (inode size 256) [ 69.040227][ T4157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 69.043032][ T28] audit: type=1326 audit(1771735278.219:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 69.050388][ T4157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 69.082142][ T28] audit: type=1326 audit(1771735278.219:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa91b98c392 code=0x7ffc0000 [ 69.088723][ T4145] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 69.105918][ T28] audit: type=1326 audit(1771735278.219:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa91b94cece code=0x7ffc0000 [ 69.139614][ T28] audit: type=1326 audit(1771735278.249:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 69.163400][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.191: error while reading EA inode 18 err=-117 [ 69.197771][ T4145] loop0: lost filesystem error report for type 5 error -117 [ 69.207797][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.191: iget: bad extra_isize 90 (inode size 256) [ 69.213054][ T28] audit: type=1326 audit(1771735278.249:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa91b98c457 code=0x7ffc0000 [ 69.229387][ T4145] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 69.312834][ T28] audit: type=1326 audit(1771735278.249:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91b94cece code=0x7ffc0000 [ 69.359956][ T4145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.191: error while reading EA inode 18 err=-117 [ 69.386741][ T4145] loop0: lost filesystem error report for type 5 error -117 [ 69.387543][ T4145] EXT4-fs (loop0): 1 orphan inode deleted [ 70.244049][ T28] audit: type=1326 audit(1771735278.249:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98c2bb code=0x7ffc0000 [ 70.367625][ T3548] Bluetooth: hci0: command 0x1003 tx timeout [ 70.373698][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.476800][ T4171] netlink: 27 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.504893][ T4177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 70.584928][ T4185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'. [ 70.674232][ T4190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 70.700120][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 70.873494][ T4195] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 70.945802][ T4195] tipc: Enabled bearer , priority 10 [ 71.130633][ T4198] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 71.246704][ T4220] bond1: ARP target 9.0.0.0 is already present [ 71.311797][ T4220] bond1: option arp_ip_target: invalid value (9) [ 71.821692][ T4220] bond1 (unregistering): Released all slaves [ 71.860815][ T4235] loop0: detected capacity change from 0 to 512 [ 71.868554][ T4233] loop4: detected capacity change from 0 to 1024 [ 71.940581][ T4235] EXT4-fs mount: 32 callbacks suppressed [ 71.940602][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.970373][ T4244] loop4: detected capacity change from 0 to 1024 [ 71.978124][ T4244] EXT4-fs: inline encryption not supported [ 71.984958][ T4244] EXT4-fs: Ignoring removed nobh option [ 71.990758][ T4244] EXT4-fs: Ignoring removed bh option [ 71.998064][ T4235] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.010835][ T4251] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2530209338/2530209340 [ 72.036878][ T4251] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2530209338/2530209339 [ 72.047471][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.048902][ T4251] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2530209338/2530209340 [ 72.070664][ T4244] capability: warning: `syz.4.214' uses 32-bit capabilities (legacy support in use) [ 72.078837][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.099475][ T4251] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2530209338/2530209339 [ 72.130283][ T10] net_ratelimit: 52 callbacks suppressed [ 72.130299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.171414][ T4262] bridge_slave_1: default FDB implementation only supports local addresses [ 72.198021][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.208912][ T4264] loop3: detected capacity change from 0 to 512 [ 72.216111][ T4265] loop1: detected capacity change from 0 to 4096 [ 72.246745][ T4265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.262408][ T4264] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.219: inode has both inline data and extents flags [ 72.283605][ T4264] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.283874][ T4264] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.219: couldn't read orphan inode 15 (err -117) [ 72.293409][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 72.293428][ C1] EXT4-fs (loop3): initial error at time 1771735281: ext4_orphan_get:1391: inode 15 [ 72.293481][ C1] EXT4-fs (loop3): last error at time 1771735281: ext4_orphan_get:1391: inode 15 [ 72.330601][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.339330][ T4264] loop3: lost filesystem error report for type 5 error -117 [ 72.340126][ T4264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 72.394876][ T4264] tipc: Enabling of bearer rejected, already enabled [ 72.458270][ T4272] bridge_slave_1: default FDB implementation only supports local addresses [ 72.481550][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.659668][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 72.729687][ T4269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 72.736283][ T4269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.751863][ T4283] loop2: detected capacity change from 0 to 2048 [ 72.759555][ T4283] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 72.778159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.786721][ T4279] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 72.793489][ T4279] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.847742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.852675][ T4269] vhci_hcd vhci_hcd.0: Device attached [ 72.943098][ T4279] vhci_hcd vhci_hcd.0: Device attached [ 72.968221][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.027737][ T3412] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 73.097707][ T3412] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 73.137009][ T4296] loop0: detected capacity change from 0 to 128 [ 73.163938][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 73.224409][ T4284] vhci_hcd: connection reset by peer [ 73.229949][ T4286] vhci_hcd: connection closed [ 73.230317][ T118] vhci_hcd vhci_hcd.4: stop threads [ 73.250572][ T118] vhci_hcd vhci_hcd.4: release socket [ 73.266527][ T118] vhci_hcd vhci_hcd.4: disconnect device [ 73.296736][ T118] vhci_hcd vhci_hcd.4: stop threads [ 73.302243][ T118] vhci_hcd vhci_hcd.4: release socket [ 73.322003][ T118] vhci_hcd vhci_hcd.4: disconnect device [ 73.330163][ T4300] netlink: 'syz.0.228': attribute type 3 has an invalid length. [ 73.339357][ T4300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=4300 comm=syz.0.228 [ 73.406652][ T4302] loop3: detected capacity change from 0 to 8192 [ 73.414295][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.425594][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.433789][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.475340][ T4292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.483614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.495250][ T4292] loop1: detected capacity change from 0 to 512 [ 73.505135][ T4302] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.527705][ T4292] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 73.549586][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 73.560391][ T4292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 73.571959][ T4292] System zones: 1-12 [ 73.576087][ T4292] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.588335][ T4292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.225: bg 0: block 361: padding at end of block bitmap is not set [ 73.607641][ T4292] loop1: lost filesystem error report for type 5 error -117 [ 73.607859][ T4292] EXT4-fs (loop1): Remounting filesystem read-only [ 73.621846][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 73.621871][ C1] EXT4-fs (loop1): initial error at time 1771735282: ext4_validate_block_bitmap:441 [ 73.621912][ C1] EXT4-fs (loop1): last error at time 1771735282: ext4_validate_block_bitmap:441 [ 73.730493][ T4292] EXT4-fs (loop1): 1 truncate cleaned up [ 73.737644][ T4292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 73.948762][ T4292] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.225: error -117 reading directory block [ 74.126994][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 74.127036][ T28] audit: type=1400 audit(1771735283.409:426): avc: denied { getopt } for pid=4291 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.220253][ T4316] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 74.255418][ T4316] SELinux: failed to load policy [ 74.264223][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.305902][ T4322] loop1: detected capacity change from 0 to 1024 [ 74.330020][ T4322] EXT4-fs: Ignoring removed orlov option [ 74.473586][ T4326] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.236: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2053(2053) [ 74.536467][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.570620][ T4337] netlink: 'syz.0.238': attribute type 21 has an invalid length. [ 74.578603][ T4326] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 74.578835][ T4326] EXT4-fs (loop2): Remounting filesystem read-only [ 74.587926][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 74.587949][ C0] EXT4-fs (loop2): initial error at time 1771735283: ext4_ext_check_inode:521: inode 2 [ 74.588004][ C0] EXT4-fs (loop2): last error at time 1771735283: ext4_ext_check_inode:521: inode 2 [ 74.638772][ T4337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.238'. [ 74.651084][ T4337] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 74.660124][ T4326] EXT4-fs (loop2): get root inode failed [ 74.666068][ T4326] EXT4-fs (loop2): mount failed [ 74.926066][ T28] audit: type=1400 audit(1771735284.209:427): avc: denied { create } for pid=4321 comm="syz.1.235" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 74.953515][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 75.070135][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.147098][ T4349] syz.3.242 uses obsolete (PF_INET,SOCK_PACKET) [ 75.165508][ T28] audit: type=1400 audit(1771735284.449:428): avc: denied { create } for pid=4325 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.204877][ T28] audit: type=1400 audit(1771735284.469:429): avc: denied { bind } for pid=4348 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.225468][ T28] audit: type=1400 audit(1771735284.469:430): avc: denied { read append } for pid=4348 comm="syz.3.242" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.249442][ T28] audit: type=1400 audit(1771735284.469:431): avc: denied { open } for pid=4348 comm="syz.3.242" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.283781][ T28] audit: type=1400 audit(1771735284.469:432): avc: denied { ioctl } for pid=4348 comm="syz.3.242" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.318377][ T4351] EXT4-fs (loop1): 1 truncate cleaned up [ 75.340255][ T4344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.358190][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.382329][ T4354] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 75.428699][ T4344] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop4 blocksize: 4096 [ 75.445734][ T4344] grow_buffers: requested out-of-range block 144115188075855873 for device loop4 [ 75.458835][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.471106][ T4344] EXT4-fs warning (device loop4): ext4_resize_fs:2018: can't read last block, resize aborted [ 75.531236][ T4359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.583238][ T4363] EXT4-fs: dax option not supported [ 75.596618][ T4359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.658772][ T4365] bridge_slave_0: left allmulticast mode [ 75.664558][ T4365] bridge_slave_0: left promiscuous mode [ 75.670475][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.673805][ T4367] netlink: 764 bytes leftover after parsing attributes in process `syz.3.246'. [ 75.690520][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.694252][ T4365] bridge_slave_1: left allmulticast mode [ 75.721670][ T4365] bridge_slave_1: left promiscuous mode [ 75.728378][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.815260][ T4365] bond0: (slave bond_slave_0): Releasing backup interface [ 75.855827][ T4365] bond0: (slave bond_slave_1): Releasing backup interface [ 75.894188][ T4372] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 75.906083][ T28] audit: type=1400 audit(1771735285.169:433): avc: denied { create } for pid=4371 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 75.988132][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 76.000824][ T4377] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.045591][ T28] audit: type=1400 audit(1771735285.179:434): avc: denied { write } for pid=4371 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 76.082834][ T4365] team0: Port device team_slave_0 removed [ 76.093342][ T4377] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 76.114508][ T4365] team0: Port device team_slave_1 removed [ 76.122011][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.130933][ T4377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.248: bg 0: block 248: padding at end of block bitmap is not set [ 76.146960][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.156533][ T4377] loop0: lost filesystem error report for type 5 error -117 [ 76.157610][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 76.171398][ C1] EXT4-fs (loop0): last error at time 1771735285: ext4_validate_block_bitmap:441 [ 76.183549][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.191403][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.204655][ T4377] Quota error (device loop0): write_blk: dquota write failed [ 76.246487][ T4377] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.248: Failed to acquire dquot type 1 [ 76.280648][ T4359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.316607][ T4372] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 76.403206][ T4379] macvlan2: entered promiscuous mode [ 76.426475][ T4377] loop0: lost filesystem error report for type 5 error -117 [ 76.427100][ T4377] EXT4-fs (loop0): 1 truncate cleaned up [ 76.448871][ T4383] EXT4-fs: Ignoring removed orlov option [ 76.472540][ T4377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 76.485662][ T4379] macvlan2: entered allmulticast mode [ 76.492638][ T4383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.516353][ T4377] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 76.524339][ T4379] veth0_virt_wifi: entered allmulticast mode [ 76.541213][ T4359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.572073][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'. [ 76.606505][ T4377] bond2: (slave bridge1): making interface the new active one [ 76.634825][ T4377] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 76.653418][ T4387] macvlan2: entered promiscuous mode [ 76.661296][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.678207][ T4387] macvlan2: entered allmulticast mode [ 76.728819][ T4387] bond2: entered promiscuous mode [ 76.751677][ T4387] bridge1: entered promiscuous mode [ 76.781594][ T4387] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.808158][ T4387] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 76.845118][ T4387] bond2: left promiscuous mode [ 76.855060][ T4387] bridge1: left promiscuous mode [ 77.314147][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 77.324347][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.336876][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351449][ T4393] set_capacity_and_notify: 7 callbacks suppressed [ 77.351538][ T4393] loop4: detected capacity change from 0 to 512 [ 77.371047][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393236][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503585][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 77.581704][ T3360] net_ratelimit: 12 callbacks suppressed [ 77.581719][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.599236][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.665592][ T4408] Non-string source [ 77.673533][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.256'. [ 77.724769][ T4413] loop2: detected capacity change from 0 to 512 [ 77.757879][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.259: inode has both inline data and extents flags [ 77.780938][ T4413] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.797594][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 77.813275][ C1] EXT4-fs (loop2): initial error at time 1771735287: ext4_orphan_get:1391: inode 15 [ 77.822831][ C1] EXT4-fs (loop2): last error at time 1771735287: ext4_orphan_get:1391: inode 15 [ 77.838105][ T4413] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.259: couldn't read orphan inode 15 (err -117) [ 77.856850][ T4413] loop2: lost filesystem error report for type 5 error -117 [ 77.857513][ T4413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 77.888718][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.902363][ T4413] tipc: Started in network mode [ 77.907474][ T4413] tipc: Node identity ac14140f, cluster identity 4711 [ 77.915289][ T4413] tipc: New replicast peer: 255.255.255.255 [ 77.921868][ T4413] tipc: Enabled bearer , priority 10 [ 77.975470][ T4416] loop0: detected capacity change from 0 to 512 [ 77.994736][ T4416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.047731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.061828][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.070788][ T4416] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 78.079074][ T4416] System zones: 0-2, 18-18, 34-34 [ 78.085813][ T4416] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 78.100884][ T4416] EXT4-fs (loop0): Remounting filesystem read-only [ 78.107628][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 78.114209][ C0] EXT4-fs (loop0): initial error at time 1771735287: ext4_mb_generate_buddy:1315 [ 78.123508][ C0] EXT4-fs (loop0): last error at time 1771735287: ext4_mb_generate_buddy:1315 [ 78.126597][ T4416] EXT4-fs (loop0): 1 truncate cleaned up [ 78.135684][ T3412] usb 9-1: enqueue for inactive port 0 [ 78.147008][ T3412] usb 9-1: enqueue for inactive port 0 [ 78.154250][ T4416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.186864][ T4435] loop3: detected capacity change from 0 to 1024 [ 78.195168][ T4435] EXT4-fs: test_dummy_encryption option not supported [ 78.244853][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.266901][ T3412] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 78.285104][ T4416] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.300211][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.392207][ T50] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.984842][ T4441] loop4: detected capacity change from 0 to 164 [ 79.019197][ T4441] Symlink component flag not implemented [ 79.050881][ T4441] Symlink component flag not implemented (7) [ 79.074580][ T4444] Symlink component flag not implemented (7) [ 79.087751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.096165][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.105391][ T3420] tipc: Node number set to 2886997007 [ 79.111336][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.141651][ T4439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'. [ 79.162579][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 79.162593][ T28] audit: type=1400 audit(1771735288.449:440): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 79.168959][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.234911][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 79.431167][ T28] audit: type=1400 audit(1771735288.719:441): avc: denied { add_name } for pid=4414 comm="syz.0.260" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.498781][ T4446] loop4: detected capacity change from 0 to 512 [ 79.655034][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 80.028463][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.069653][ T4457] bridge_slave_1: default FDB implementation only supports local addresses [ 80.097747][ T4458] loop1: detected capacity change from 0 to 512 [ 80.135137][ T28] audit: type=1400 audit(1771735289.419:442): avc: denied { name_bind } for pid=4456 comm="syz.3.271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.177399][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 80.410142][ T4458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.447985][ T4458] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.523518][ T4466] Unsupported ieee802154 address type: 0 [ 80.529374][ T28] audit: type=1400 audit(1771735289.809:443): avc: denied { bind } for pid=4465 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.550114][ T4468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 80.599118][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.620444][ T4473] loop2: detected capacity change from 0 to 1024 [ 80.636414][ T4464] loop4: detected capacity change from 0 to 8192 [ 80.644960][ T4473] EXT4-fs: Ignoring removed oldalloc option [ 80.660630][ T4474] loop3: detected capacity change from 0 to 4096 [ 80.674932][ T4473] EXT4-fs: Ignoring removed bh option [ 80.681442][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.692743][ T4476] EXT4-fs: dax option not supported [ 80.699150][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 80.708481][ T3307] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 80.713756][ T3307] loop4: partition table partially beyond EOD, truncated [ 80.721033][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 80.726187][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.742822][ T3307] loop4: p1 start 30976 is beyond EOD, truncated [ 80.749322][ T3307] loop4: p2 size 16128 extends beyond EOD, truncated [ 80.764774][ T28] audit: type=1400 audit(1771735290.039:444): avc: denied { read } for pid=4475 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.766625][ T3307] loop4: p3 start 327168 is beyond EOD, truncated [ 80.799499][ T3307] loop4: p5 start 30976 is beyond EOD, truncated [ 80.805941][ T3307] loop4: p6 size 16128 extends beyond EOD, truncated [ 80.807252][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.841096][ T4464] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 80.846354][ T4464] loop4: partition table partially beyond EOD, truncated [ 80.871099][ T4464] loop4: p1 start 30976 is beyond EOD, truncated [ 80.882674][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 80.903144][ T4464] loop4: p2 size 16128 extends beyond EOD, truncated [ 80.911539][ T4464] loop4: p3 start 327168 is beyond EOD, truncated [ 80.912120][ T4464] loop4: p5 start 30976 is beyond EOD, truncated [ 80.912139][ T4464] loop4: p6 size 16128 extends beyond EOD, truncated [ 80.952535][ T4483] veth1_macvtap: left promiscuous mode [ 80.992219][ T4490] 9p: Bad value for 'rfdno' [ 81.019280][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.024702][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 81.032440][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 81.052060][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 81.066286][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.078231][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 81.089615][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 81.105520][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.116766][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 81.129328][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 81.140813][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.278932][ T4499] bridge_slave_1: default FDB implementation only supports local addresses [ 81.310227][ T4496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 81.319809][ T4496] veth1_macvtap: left promiscuous mode [ 81.496121][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.515859][ T4505] syzkaller0: entered promiscuous mode [ 81.521532][ T4505] syzkaller0: entered allmulticast mode [ 81.639304][ T28] audit: type=1400 audit(1771735290.929:445): avc: denied { setattr } for pid=4517 comm="syz.0.292" name="" dev="pipefs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 81.693509][ T28] audit: type=1400 audit(1771735290.959:446): avc: denied { ioctl } for pid=4517 comm="syz.0.292" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.813424][ T28] audit: type=1400 audit(1771735291.079:447): avc: denied { setopt } for pid=4519 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.858022][ T28] audit: type=1326 audit(1771735291.089:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 81.933144][ T28] audit: type=1326 audit(1771735291.089:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 82.045663][ T4537] EXT4-fs: Ignoring removed oldalloc option [ 82.067769][ T4537] EXT4-fs: Ignoring removed bh option [ 82.145726][ T4537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.231264][ T4544] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.301: inode has both inline data and extents flags [ 82.248526][ T4512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.263125][ T4544] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.263555][ T4544] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.301: couldn't read orphan inode 15 (err -117) [ 82.272771][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 82.272796][ C1] EXT4-fs (loop1): initial error at time 1771735291: ext4_orphan_get:1391: inode 15 [ 82.272828][ C1] EXT4-fs (loop1): last error at time 1771735291: ext4_orphan_get:1391: inode 15 [ 82.316572][ T4544] loop1: lost filesystem error report for type 5 error -117 [ 82.316793][ T4512] EXT4-fs (loop3): 1 truncate cleaned up [ 82.318626][ T4544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 82.338737][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.355674][ T4544] tipc: Enabling of bearer rejected, already enabled [ 82.508006][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.577744][ T4554] set_capacity_and_notify: 5 callbacks suppressed [ 82.577762][ T4554] loop3: detected capacity change from 0 to 1024 [ 82.594288][ T4554] EXT4-fs: Ignoring removed orlov option [ 82.609556][ T4554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.642742][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 82.677366][ T4558] FAULT_INJECTION: forcing a failure. [ 82.677366][ T4558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.691306][ T4558] CPU: 0 UID: 0 PID: 4558 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT(full) [ 82.691372][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.691399][ T4558] Call Trace: [ 82.691406][ T4558] [ 82.691413][ T4558] __dump_stack+0x1d/0x30 [ 82.691441][ T4558] dump_stack_lvl+0x95/0xd0 [ 82.691468][ T4558] dump_stack+0x15/0x1b [ 82.691551][ T4558] should_fail_ex+0x263/0x280 [ 82.691579][ T4558] should_fail+0xb/0x20 [ 82.691603][ T4558] should_fail_usercopy+0x1a/0x20 [ 82.691633][ T4558] _copy_from_user+0x1c/0xb0 [ 82.691668][ T4558] do_tcp_getsockopt+0xc8/0x1ba0 [ 82.691761][ T4558] ? _parse_integer_limit+0x170/0x190 [ 82.691869][ T4558] ? _parse_integer+0x27/0x40 [ 82.691901][ T4558] ? __rcu_read_unlock+0x4e/0x70 [ 82.691925][ T4558] ? avc_has_perm_noaudit+0xab/0x130 [ 82.691981][ T4558] ? avc_has_perm+0x101/0x190 [ 82.692047][ T4558] tcp_getsockopt+0x6e/0xe0 [ 82.692082][ T4558] sock_common_getsockopt+0x60/0x70 [ 82.692127][ T4558] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 82.692172][ T4558] do_sock_getsockopt+0x1c4/0x210 [ 82.692238][ T4558] __x64_sys_getsockopt+0x11d/0x1a0 [ 82.692277][ T4558] x64_sys_call+0x2dcf/0x3020 [ 82.692307][ T4558] do_syscall_64+0x12c/0x370 [ 82.692429][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.692457][ T4558] RIP: 0033:0x7fee30ffc629 [ 82.692478][ T4558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.692501][ T4558] RSP: 002b:00007fee2fa57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.692567][ T4558] RAX: ffffffffffffffda RBX: 00007fee31275fa0 RCX: 00007fee30ffc629 [ 82.692581][ T4558] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 82.692620][ T4558] RBP: 00007fee2fa57090 R08: 0000200000000200 R09: 0000000000000000 [ 82.692637][ T4558] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 82.692653][ T4558] R13: 00007fee31276038 R14: 00007fee31275fa0 R15: 00007ffd4b1ab148 [ 82.692675][ T4558] [ 83.003209][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.054381][ T4562] loop1: detected capacity change from 0 to 4096 [ 83.062517][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.083359][ T4565] loop3: detected capacity change from 0 to 4096 [ 83.247709][ C1] net_ratelimit: 11 callbacks suppressed [ 83.247736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.264906][ T4562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.300059][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.465518][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.578096][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.615272][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.682307][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.746177][ T4582] loop1: detected capacity change from 0 to 128 [ 83.914673][ T4588] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 83.936732][ T4590] __nla_validate_parse: 5 callbacks suppressed [ 83.936752][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 83.936790][ T4588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.980260][ T4588] team0: Port device bond0 added [ 83.987755][ T4591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.315'. [ 84.022073][ T4595] FAULT_INJECTION: forcing a failure. [ 84.022073][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.061326][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(full) [ 84.061362][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.061408][ T4595] Call Trace: [ 84.061417][ T4595] [ 84.061426][ T4595] __dump_stack+0x1d/0x30 [ 84.061468][ T4595] dump_stack_lvl+0x95/0xd0 [ 84.061500][ T4595] dump_stack+0x15/0x1b [ 84.061529][ T4595] should_fail_ex+0x263/0x280 [ 84.061635][ T4595] should_fail+0xb/0x20 [ 84.061660][ T4595] should_fail_usercopy+0x1a/0x20 [ 84.061745][ T4595] _copy_from_user+0x1c/0xb0 [ 84.061781][ T4595] __sys_bpf+0x183/0x7e0 [ 84.061815][ T4595] __x64_sys_bpf+0x41/0x50 [ 84.061908][ T4595] x64_sys_call+0x10cb/0x3020 [ 84.061942][ T4595] do_syscall_64+0x12c/0x370 [ 84.061989][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.062027][ T4595] RIP: 0033:0x7fee30ffc629 [ 84.062047][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.062146][ T4595] RSP: 002b:00007fee2fa57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.062166][ T4595] RAX: ffffffffffffffda RBX: 00007fee31275fa0 RCX: 00007fee30ffc629 [ 84.062180][ T4595] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 84.062216][ T4595] RBP: 00007fee2fa57090 R08: 0000000000000000 R09: 0000000000000000 [ 84.062234][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.062250][ T4595] R13: 00007fee31276038 R14: 00007fee31275fa0 R15: 00007ffd4b1ab148 [ 84.062276][ T4595] [ 84.263062][ T4599] loop1: detected capacity change from 0 to 4096 [ 84.327715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.369450][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 84.369466][ T28] audit: type=1326 audit(1771735293.659:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 84.411825][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.431137][ T28] audit: type=1326 audit(1771735293.659:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 84.698078][ T4607] loop3: detected capacity change from 0 to 1024 [ 84.765985][ T4607] EXT4-fs: Ignoring removed orlov option [ 84.972513][ T28] audit: type=1326 audit(1771735293.659:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 84.996095][ T28] audit: type=1326 audit(1771735293.659:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.019502][ T28] audit: type=1326 audit(1771735293.659:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.042777][ T28] audit: type=1326 audit(1771735293.689:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.071317][ T28] audit: type=1326 audit(1771735293.689:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.081641][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.104717][ T28] audit: type=1326 audit(1771735293.689:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.129195][ T4607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.163722][ T28] audit: type=1326 audit(1771735293.689:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.188703][ T28] audit: type=1326 audit(1771735293.689:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98c629 code=0x7ffc0000 [ 85.214116][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.227368][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.337845][ T4628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 85.407842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.425524][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 85.519167][ T4636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.331'. [ 85.530259][ T4640] 9p: Bad value for 'rfdno' [ 85.589546][ T4643] ucma_write: process 205 (syz.1.334) changed security contexts after opening file descriptor, this is not allowed. [ 86.027877][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.096881][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.104216][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.114872][ T4655] loop1: detected capacity change from 0 to 4096 [ 86.127983][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.144352][ T4655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.274090][ T4667] netlink: 'syz.3.342': attribute type 64 has an invalid length. [ 86.287849][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 86.343297][ T4670] loop3: detected capacity change from 0 to 1024 [ 86.354348][ T4670] EXT4-fs: Ignoring removed oldalloc option [ 86.360774][ T4670] EXT4-fs: Ignoring removed bh option [ 86.361340][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.447703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.600912][ T4670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.869409][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.946143][ T4684] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 86.978525][ T4685] loop1: detected capacity change from 0 to 1024 [ 86.999948][ T4685] EXT4-fs: Ignoring removed oldalloc option [ 87.021774][ T4684] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 87.039836][ T4685] EXT4-fs: Ignoring removed bh option [ 87.049874][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 87.067835][ T4684] FAULT_INJECTION: forcing a failure. [ 87.067835][ T4684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.097904][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(full) [ 87.097938][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.097953][ T4684] Call Trace: [ 87.097961][ T4684] [ 87.098042][ T4684] __dump_stack+0x1d/0x30 [ 87.098074][ T4684] dump_stack_lvl+0x95/0xd0 [ 87.098138][ T4684] dump_stack+0x15/0x1b [ 87.098200][ T4684] should_fail_ex+0x263/0x280 [ 87.098223][ T4684] should_fail+0xb/0x20 [ 87.098393][ T4684] should_fail_usercopy+0x1a/0x20 [ 87.098413][ T4684] _copy_to_user+0x20/0xa0 [ 87.098524][ T4684] simple_read_from_buffer+0xb5/0x130 [ 87.098547][ T4684] proc_fail_nth_read+0x10e/0x150 [ 87.098637][ T4684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.098662][ T4684] vfs_read+0x1ab/0x7f0 [ 87.098710][ T4684] ? __rcu_read_unlock+0x4e/0x70 [ 87.098728][ T4684] ? __fget_files+0x184/0x1c0 [ 87.098748][ T4684] ? mutex_lock+0x57/0x90 [ 87.098848][ T4684] ksys_read+0xdc/0x1a0 [ 87.098875][ T4684] __x64_sys_read+0x40/0x50 [ 87.098974][ T4684] x64_sys_call+0x2886/0x3020 [ 87.099075][ T4684] do_syscall_64+0x12c/0x370 [ 87.099105][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.099124][ T4684] RIP: 0033:0x7f4b99bdcece [ 87.099140][ T4684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.099155][ T4684] RSP: 002b:00007f4b98676fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.099214][ T4684] RAX: ffffffffffffffda RBX: 00007f4b986776c0 RCX: 00007f4b99bdcece [ 87.099225][ T4684] RDX: 000000000000000f RSI: 00007f4b986770a0 RDI: 0000000000000004 [ 87.099299][ T4684] RBP: 00007f4b98677090 R08: 0000000000000000 R09: 0000000000000000 [ 87.099310][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.099390][ T4684] R13: 00007f4b99e96038 R14: 00007f4b99e95fa0 R15: 00007ffd0f8fb9d8 [ 87.099408][ T4684] [ 87.307814][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.350216][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.440915][ T4695] loop3: detected capacity change from 0 to 512 [ 87.470424][ T4695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.566301][ T4703] FAULT_INJECTION: forcing a failure. [ 87.566301][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 87.593960][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.4.355 Not tainted syzkaller #0 PREEMPT(full) [ 87.593991][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.594081][ T4703] Call Trace: [ 87.594087][ T4703] [ 87.594095][ T4703] __dump_stack+0x1d/0x30 [ 87.594125][ T4703] dump_stack_lvl+0x95/0xd0 [ 87.594152][ T4703] dump_stack+0x15/0x1b [ 87.594242][ T4703] should_fail_ex+0x263/0x280 [ 87.594267][ T4703] should_failslab+0x8c/0xb0 [ 87.594345][ T4703] kmem_cache_alloc_noprof+0x66/0x400 [ 87.594370][ T4703] ? skb_clone+0x151/0x1f0 [ 87.594401][ T4703] skb_clone+0x151/0x1f0 [ 87.594476][ T4703] __netlink_deliver_tap+0x2c9/0x500 [ 87.594549][ T4703] netlink_unicast+0x66b/0x690 [ 87.594583][ T4703] netlink_sendmsg+0x5c8/0x6f0 [ 87.594622][ T4703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.594715][ T4703] ____sys_sendmsg+0x5af/0x600 [ 87.594755][ T4703] ___sys_sendmsg+0x195/0x1e0 [ 87.594884][ T4703] __x64_sys_sendmsg+0xd4/0x160 [ 87.594924][ T4703] x64_sys_call+0x194c/0x3020 [ 87.594960][ T4703] do_syscall_64+0x12c/0x370 [ 87.595006][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.595104][ T4703] RIP: 0033:0x7fa91b98c629 [ 87.595198][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.595222][ T4703] RSP: 002b:00007fa91a3df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.595248][ T4703] RAX: ffffffffffffffda RBX: 00007fa91bc05fa0 RCX: 00007fa91b98c629 [ 87.595331][ T4703] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 87.595345][ T4703] RBP: 00007fa91a3df090 R08: 0000000000000000 R09: 0000000000000000 [ 87.595360][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.595397][ T4703] R13: 00007fa91bc06038 R14: 00007fa91bc05fa0 R15: 00007ffcf01908e8 [ 87.595418][ T4703] [ 87.607275][ T4695] EXT4-fs error (device loop3): __ext4_iget:5378: inode #15: block 1803188595: comm syz.3.352: invalid block [ 87.811410][ T4695] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.817668][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 87.833342][ C0] EXT4-fs (loop3): initial error at time 1771735297: __ext4_iget:5378: inode 15: block 1803188595 [ 87.844026][ C0] EXT4-fs (loop3): last error at time 1771735297: __ext4_iget:5378: inode 15: block 1803188595 [ 87.854989][ T4695] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.352: couldn't read orphan inode 15 (err -117) [ 87.867051][ T4695] loop3: lost filesystem error report for type 5 error -117 [ 87.868319][ T4706] loop4: detected capacity change from 0 to 1024 [ 87.941568][ T4706] EXT4-fs: Ignoring removed orlov option [ 88.024242][ T4695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.090319][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.112211][ T4695] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.352: invalid fast symlink length 39 [ 88.224620][ T4710] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.352: invalid fast symlink length 39 [ 88.354867][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.416234][ T23] net_ratelimit: 3 callbacks suppressed [ 88.416294][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.468435][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.527717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.584102][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.611447][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.488892][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.567797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.580177][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 89.580272][ T28] audit: type=1400 audit(1771735298.869:544): avc: denied { listen } for pid=4729 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.657692][ T28] audit: type=1400 audit(1771735298.899:545): avc: denied { write } for pid=4729 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.713991][ T4737] loop2: detected capacity change from 0 to 512 [ 89.727695][ T28] audit: type=1400 audit(1771735298.899:546): avc: denied { write } for pid=4729 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.743672][ T4737] EXT4-fs (loop2): inodes count not valid: 23 vs 32 [ 89.794394][ T28] audit: type=1400 audit(1771735298.899:547): avc: denied { ioctl } for pid=4729 comm="syz.1.364" path="socket:[8130]" dev="sockfs" ino=8130 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.840037][ T4742] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 89.859217][ T28] audit: type=1400 audit(1771735299.079:548): avc: denied { bind } for pid=4741 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.869756][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.913514][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.981474][ T4749] loop2: detected capacity change from 0 to 512 [ 90.008396][ T4746] loop1: detected capacity change from 0 to 8192 [ 90.024797][ T4746] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 90.037857][ T4746] FAT-fs (loop1): Filesystem has been set read-only [ 90.050414][ T4755] loop4: detected capacity change from 0 to 1024 [ 90.057273][ T4749] EXT4-fs (loop2): 1 orphan inode deleted [ 90.062791][ T4755] EXT4-fs: Ignoring removed orlov option [ 90.069016][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.082023][ T4746] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 90.089936][ T4749] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.107420][ T118] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.128462][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.154321][ T118] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 90.198797][ T4759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.207062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.227761][ T4759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.237543][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.246474][ T4758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.300850][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.360440][ T28] audit: type=1400 audit(1771735299.649:549): avc: denied { checkpoint_restore } for pid=4762 comm="syz.1.377" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.382948][ T4763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.377'. [ 90.398661][ T4767] loop4: detected capacity change from 0 to 128 [ 90.402179][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.516727][ T28] audit: type=1326 audit(1771735299.799:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.1.379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee30ffc629 code=0x0 [ 90.551074][ T4774] loop4: detected capacity change from 0 to 1024 [ 90.566952][ T4778] loop2: detected capacity change from 0 to 1024 [ 90.572762][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 90.574550][ T28] audit: type=1400 audit(1771735299.859:551): avc: denied { ioctl } for pid=4770 comm="syz.1.379" path="cgroup:[4026532391]" dev="nsfs" ino=4026532391 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.598793][ T4778] EXT4-fs: Ignoring removed orlov option [ 90.635669][ T4774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.655821][ T28] audit: type=1400 audit(1771735299.939:552): avc: denied { ioctl } for pid=4773 comm="syz.4.380" path="/76/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.695780][ T3548] Bluetooth: hci0: command 0x1003 tx timeout [ 90.702287][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.703666][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.719254][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.143979][ T4798] netlink: 56 bytes leftover after parsing attributes in process `syz.4.386'. [ 91.485864][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.836308][ T56] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.317411][ T4830] loop1: detected capacity change from 0 to 1024 [ 92.338849][ T4830] EXT4-fs: Ignoring removed oldalloc option [ 92.344842][ T4830] EXT4-fs: Ignoring removed bh option [ 92.777035][ T4844] loop4: detected capacity change from 0 to 1024 [ 92.872065][ T4844] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.890750][ T4841] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.399: lblock 3 mapped to illegal pblock 3 (length 3) [ 92.905930][ T4841] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 92.918332][ T4841] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.918332][ T4841] [ 93.278520][ T4849] loop2: detected capacity change from 0 to 512 [ 93.300086][ T4849] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.400: bad orphan inode 15 [ 93.317143][ T4849] loop2: lost filesystem error report for type 5 error -117 [ 93.317611][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 93.331436][ C0] EXT4-fs (loop2): initial error at time 1771735302: ext4_orphan_get:1417 [ 93.340007][ C0] EXT4-fs (loop2): last error at time 1771735302: ext4_orphan_get:1417 [ 93.348428][ T4849] ext4_test_bit(bit=14, block=5) = 0 [ 93.364334][ T4849] EXT4-fs error (device loop2): ext4_nfs_get_inode:1550: inode #17: comm syz.2.400: iget: bad extra_isize 255 (inode size 256) [ 93.385648][ T4849] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.400: reserved inode found cleared - inode=1 [ 93.398921][ T56] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 93.414828][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 93.440957][ T4852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 93.474471][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.474471][ T56] [ 93.574222][ T4858] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.588311][ T4858] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.648281][ T3360] net_ratelimit: 15 callbacks suppressed [ 93.648372][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.737816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.907659][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.908001][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.100414][ T4874] netlink: 'syz.1.409': attribute type 16 has an invalid length. [ 94.121819][ T4875] loop2: detected capacity change from 0 to 4096 [ 94.160243][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 94.169648][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 94.178858][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 94.464554][ T312] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.571274][ T4888] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.631471][ T4888] vhci_hcd vhci_hcd.2: invalid port number 96 [ 94.682353][ T4888] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 94.777714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.847333][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.979159][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 94.979177][ T28] audit: type=1326 audit(1771735304.269:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.051477][ T28] audit: type=1326 audit(1771735304.269:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.107337][ T4893] tap0: tun_chr_ioctl cmd 1074025677 [ 95.112912][ T4893] tap0: linktype set to 519 [ 95.127651][ T28] audit: type=1326 audit(1771735304.269:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.174712][ T28] audit: type=1326 audit(1771735304.269:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.208039][ T28] audit: type=1326 audit(1771735304.269:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.232187][ T28] audit: type=1326 audit(1771735304.269:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.255758][ T28] audit: type=1326 audit(1771735304.269:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.280300][ T28] audit: type=1326 audit(1771735304.269:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.304039][ T4889] loop3: detected capacity change from 0 to 4096 [ 95.311672][ T4889] EXT4-fs: Ignoring removed bh option [ 95.317255][ T4889] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.403413][ T28] audit: type=1326 audit(1771735304.279:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f083d05c629 code=0x7ffc0000 [ 95.485053][ T28] audit: type=1326 audit(1771735304.279:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f083d05c392 code=0x7ffc0000 [ 95.655222][ T4896] loop4: detected capacity change from 0 to 512 [ 95.716168][ T4896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.745868][ T4896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.417: invalid indirect mapped block 4294967295 (level 1) [ 95.778030][ T4896] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.779169][ T4896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.417: invalid indirect mapped block 4294967295 (level 1) [ 95.788800][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.789116][ C0] EXT4-fs (loop4): initial error at time 1771735305: ext4_free_branches:1023: inode 11 [ 95.789298][ C0] EXT4-fs (loop4): last error at time 1771735305: ext4_free_branches:1023: inode 11 [ 95.817963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.883568][ T4896] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.897874][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.911668][ T4896] EXT4-fs (loop4): 2 truncates cleaned up [ 96.047756][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.428006][ T56] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.443824][ T56] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.467711][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.588789][ T4918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.697142][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.718368][ T4918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.751000][ T4922] loop2: detected capacity change from 0 to 128 [ 96.847686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.979443][ T4925] loop1: detected capacity change from 0 to 4096 [ 98.368910][ T3506] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 98.560766][ T4945] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 98.643965][ T4941] loop1: detected capacity change from 0 to 256 [ 98.897254][ T4948] loop3: detected capacity change from 0 to 1024 [ 98.937773][ C1] net_ratelimit: 3 callbacks suppressed [ 98.937795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.956300][ T4950] tipc: Enabled bearer , priority 28 [ 98.959279][ T4948] EXT4-fs: inline encryption not supported [ 99.007314][ T4950] loop2: detected capacity change from 0 to 512 [ 99.018302][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.070600][ T4950] EXT4-fs: quotafile must be on filesystem root [ 99.097796][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.203646][ T4960] loop3: detected capacity change from 0 to 512 [ 99.220456][ T4958] loop2: detected capacity change from 0 to 1764 [ 99.228571][ T4960] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.434: inode has both inline data and extents flags [ 99.251944][ T4960] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.267598][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 99.274177][ C1] EXT4-fs (loop3): initial error at time 1771735308: ext4_orphan_get:1391: inode 15 [ 99.283657][ C1] EXT4-fs (loop3): last error at time 1771735308: ext4_orphan_get:1391: inode 15 [ 99.301902][ T4958] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 99.307934][ T4960] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.434: couldn't read orphan inode 15 (err -117) [ 99.321363][ T4960] loop3: lost filesystem error report for type 5 error -117 [ 99.352803][ T4960] tipc: Enabling of bearer rejected, already enabled [ 99.668077][ T4972] loop1: detected capacity change from 0 to 128 [ 99.680957][ T4974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4974 comm=syz.4.439 [ 99.722619][ T4972] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.803545][ T4975] tipc: Enabled bearer , priority 10 [ 99.829716][ T4978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 99.861448][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 99.880879][ T4966] IPVS: set_ctl: invalid protocol: 0 13.0.1.0:30052 [ 99.895470][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 99.906349][ T4982] usb usb7: usbfs: interface 0 claimed by usbfs while 'syz.3.442' sets config #7 [ 99.924511][ T4972] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 99.977874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.013730][ T4989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.088604][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 100.151787][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 100.151805][ T28] audit: type=1400 audit(1771735309.439:747): avc: denied { mount } for pid=4987 comm="syz.1.444" name="/" dev="autofs" ino=10651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.237987][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.269421][ T4990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 100.275997][ T4990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.347815][ T4990] vhci_hcd vhci_hcd.0: Device attached [ 100.427207][ T56] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.672781][ T4996] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 100.679460][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.829313][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 100.984097][ T5014] bridge_slave_1: default FDB implementation only supports local addresses [ 101.002595][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.011033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.032236][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.057887][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.073289][ T5006] vhci_hcd: connection closed [ 101.073506][ T312] vhci_hcd vhci_hcd.3: stop threads [ 101.073519][ T4992] vhci_hcd: connection closed [ 101.083569][ T312] vhci_hcd vhci_hcd.3: release socket [ 101.094031][ T312] vhci_hcd vhci_hcd.3: disconnect device [ 101.104199][ T312] vhci_hcd vhci_hcd.3: stop threads [ 101.114855][ T312] vhci_hcd vhci_hcd.3: release socket [ 101.126660][ T312] vhci_hcd vhci_hcd.3: disconnect device [ 101.317852][ T5023] program syz.1.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.855878][ T56] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.017219][ T28] audit: type=1400 audit(1771735567.274:748): avc: denied { create } for pid=5027 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.037839][ T56] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.047474][ T28] audit: type=1400 audit(1771735567.274:749): avc: denied { bind } for pid=5027 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.241726][ T28] audit: type=1400 audit(1771735567.524:750): avc: denied { setopt } for pid=5049 comm="syz.3.457" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.457056][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.577722][ T5054] loop4: detected capacity change from 0 to 1024 [ 102.616819][ T5052] loop3: detected capacity change from 0 to 1024 [ 102.623846][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 102.629979][ T5052] EXT4-fs: Ignoring removed bh option [ 102.645318][ T5054] EXT4-fs mount: 20 callbacks suppressed [ 102.645335][ T5054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.649900][ T5030] chnl_net:caif_netlink_parms(): no params data found [ 102.812587][ T56] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.838484][ T5052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.869478][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.877039][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.877429][ T5030] bridge_slave_0: entered allmulticast mode [ 102.878317][ T5030] bridge_slave_0: entered promiscuous mode [ 102.879436][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.879481][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.879551][ T5030] bridge_slave_1: entered allmulticast mode [ 102.880243][ T5030] bridge_slave_1: entered promiscuous mode [ 102.898970][ T56] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.929776][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.943770][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.966646][ T5069] loop1: detected capacity change from 0 to 512 [ 102.989965][ T5069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.990055][ T5069] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.026502][ T5030] team0: Port device team_slave_0 added [ 103.033585][ T5030] team0: Port device team_slave_1 added [ 103.050221][ T28] audit: type=1400 audit(1771735568.335:751): avc: denied { read } for pid=3040 comm="dhcpcd" name="n26" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.050309][ T28] audit: type=1400 audit(1771735568.335:752): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.050334][ T28] audit: type=1400 audit(1771735568.335:753): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.112587][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.269971][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.348572][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.442271][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.452501][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.466590][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.493394][ T28] audit: type=1400 audit(1771735568.775:754): avc: denied { create } for pid=5074 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.516190][ T28] audit: type=1400 audit(1771735568.775:755): avc: denied { write } for pid=5074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.526666][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.542453][ T28] audit: type=1400 audit(1771735568.775:756): avc: denied { append } for pid=5074 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.587250][ T56] bridge_slave_1: left allmulticast mode [ 103.592987][ T56] bridge_slave_1: left promiscuous mode [ 103.606509][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.615341][ T56] bridge_slave_0: left allmulticast mode [ 103.621428][ T56] bridge_slave_0: left promiscuous mode [ 103.650389][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.673076][ T5088] loop4: detected capacity change from 0 to 1764 [ 103.680901][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.849994][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.856625][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.873694][ T5096] loop4: detected capacity change from 0 to 1024 [ 103.948774][ T5096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.338769][ T5106] netlink: 272 bytes leftover after parsing attributes in process `syz.3.464'. [ 104.355308][ T56] bond1 (unregistering): (slave geneve2): Releasing active interface [ 104.404117][ T5110] loop3: detected capacity change from 0 to 1764 [ 104.419478][ T56] bond2 (unregistering): (slave bridge1): Releasing active interface [ 104.431170][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.469299][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.484668][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.519742][ T56] bond0 (unregistering): Released all slaves [ 104.528180][ T56] bond1 (unregistering): Released all slaves [ 104.537510][ T56] bond2 (unregistering): Released all slaves [ 104.593042][ T5030] hsr_slave_0: entered promiscuous mode [ 104.606440][ T5030] hsr_slave_1: entered promiscuous mode [ 104.616398][ T5030] debugfs: 'hsr0' already exists in 'hsr' [ 104.622157][ T5030] Cannot create hsr debugfs directory [ 104.707782][ T56] hsr_slave_0: left promiscuous mode [ 104.714572][ T56] hsr_slave_1: left promiscuous mode [ 104.732360][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.739952][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.757585][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.804071][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.816012][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.838942][ T56] veth0_macvtap: left promiscuous mode [ 104.854754][ T56] veth1_vlan: left promiscuous mode [ 104.867824][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 104.870549][ T56] veth0_vlan: left promiscuous mode [ 104.905764][ T5115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 104.912399][ T5115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.936059][ T5115] vhci_hcd vhci_hcd.0: Device attached [ 104.950883][ T5125] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 104.957559][ T5125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.965755][ T5132] program syz.1.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.975103][ T5125] vhci_hcd vhci_hcd.0: Device attached [ 105.033910][ T56] team0 (unregistering): Port device team_slave_1 removed [ 105.070582][ T56] team0 (unregistering): Port device team_slave_0 removed [ 105.117771][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 105.197975][ T5127] vhci_hcd: connection closed [ 105.198235][ T118] vhci_hcd vhci_hcd.3: stop threads [ 105.203086][ T5130] vhci_hcd: connection closed [ 105.208460][ T118] vhci_hcd vhci_hcd.3: release socket [ 105.219079][ T118] vhci_hcd vhci_hcd.3: disconnect device [ 105.225411][ T118] vhci_hcd vhci_hcd.3: stop threads [ 105.231139][ T118] vhci_hcd vhci_hcd.3: release socket [ 105.243687][ T5138] loop4: detected capacity change from 0 to 512 [ 105.286897][ T5030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.305187][ T5030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.320215][ T118] vhci_hcd vhci_hcd.3: disconnect device [ 105.355968][ T5030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.369146][ T5030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.437807][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.462513][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.476274][ T118] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.483434][ T118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.497834][ T5161] loop4: detected capacity change from 0 to 512 [ 105.504495][ T5161] EXT4-fs: Ignoring removed bh option [ 105.529201][ T5161] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.538243][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.545458][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.555956][ T5161] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 105.573122][ T5161] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.581735][ T5161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.588995][ T5161] __quota_error: 5 callbacks suppressed [ 105.589011][ T5161] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 105.605785][ T5161] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 105.618552][ T5161] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.475: Failed to acquire dquot type 1 [ 105.634673][ T5030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.647253][ T5030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.660285][ T5161] loop4: lost filesystem error report for type 5 error -5 [ 105.665339][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 105.679092][ C0] EXT4-fs (loop4): last error at time 1771735570: ext4_acquire_dquot:7001 [ 105.691708][ T5161] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.475: Invalid block bitmap block 0 in block_group 0 [ 105.716597][ T28] audit: type=1400 audit(1771735570.976:762): avc: denied { mounton } for pid=5166 comm="syz.1.476" path="/114/file0" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.740760][ T5161] loop4: lost filesystem error report for type 5 error -117 [ 105.743974][ T5161] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.475: Invalid block bitmap block 0 in block_group 0 [ 105.766752][ T5161] loop4: lost filesystem error report for type 5 error -117 [ 105.777918][ T5161] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.475: Invalid block bitmap block 0 in block_group 0 [ 105.799421][ T5161] loop4: lost filesystem error report for type 5 error -117 [ 105.807457][ T5161] Quota error (device loop4): write_blk: dquota write failed [ 105.829180][ T5161] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 105.876666][ T5161] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.475: Failed to acquire dquot type 1 [ 105.889425][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.896321][ T3506] Bluetooth: hci0: command 0x1003 tx timeout [ 105.925305][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.932393][ T5161] loop4: lost filesystem error report for type 5 error -28 [ 105.940477][ T5161] Quota error (device loop4): write_blk: dquota write failed [ 105.955714][ T5161] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 105.966436][ T5161] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.475: Failed to acquire dquot type 1 [ 105.977878][ T5161] loop4: lost filesystem error report for type 5 error -28 [ 105.997877][ T5161] EXT4-fs (loop4): 1 orphan inode deleted [ 106.028301][ T5161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.475673][ T28] audit: type=1400 audit(1771735571.736:763): avc: denied { bind } for pid=5176 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.047614][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 107.057072][ T28] audit: type=1400 audit(1771735572.337:764): avc: denied { ioctl } for pid=5211 comm="syz.3.480" path="socket:[10948]" dev="sockfs" ino=10948 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.082867][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.139735][ T5222] loop2: detected capacity change from 0 to 1024 [ 107.170360][ T5222] EXT4-fs: Ignoring removed oldalloc option [ 107.189495][ T5030] veth0_vlan: entered promiscuous mode [ 107.195481][ T5222] EXT4-fs: Ignoring removed bh option [ 107.206413][ T5030] veth1_vlan: entered promiscuous mode [ 107.224053][ T5030] veth0_macvtap: entered promiscuous mode [ 107.234080][ T5030] veth1_macvtap: entered promiscuous mode [ 107.246351][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.274823][ T5222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.300630][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.367758][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.404706][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.448417][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.464897][ T28] audit: type=1400 audit(1771735572.747:765): avc: denied { connect } for pid=5232 comm="syz.3.483" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.498701][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.660957][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.453'. [ 107.694770][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.453'. [ 107.885047][ T5246] bridge_slave_1: default FDB implementation only supports local addresses [ 108.058869][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.487'. [ 108.094911][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 108.145181][ T5249] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 108.151776][ T5249] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.179116][ T5269] loop5: detected capacity change from 0 to 512 [ 108.187862][ T5249] vhci_hcd vhci_hcd.0: Device attached [ 108.197234][ T5270] loop1: detected capacity change from 0 to 128 [ 108.216505][ T5269] EXT4-fs: Ignoring removed i_version option [ 108.222580][ T5269] EXT4-fs: Ignoring removed oldalloc option [ 108.229497][ T5260] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 108.236149][ T5260] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.244734][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 108.259460][ T5270] loop1: detected capacity change from 0 to 512 [ 108.269117][ T5270] journal_path: Non-blockdev passed as './file2' [ 108.276348][ T5270] EXT4-fs: error: could not find journal device path [ 108.291375][ T5269] EXT4-fs (loop5): 1 truncate cleaned up [ 108.301857][ T5269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.318272][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 108.344309][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 108.363779][ T5260] vhci_hcd vhci_hcd.0: Device attached [ 108.372626][ T5270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.488'. [ 108.424064][ T10] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 108.434245][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.446401][ T5030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.526196][ T5286] loop1: detected capacity change from 0 to 512 [ 108.539528][ T5286] EXT4-fs: dax option not supported [ 108.579970][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.595991][ T5286] usb usb1: usbfs: process 5286 (syz.1.493) did not claim interface 0 before use [ 108.614587][ T5266] vhci_hcd: connection closed [ 108.614678][ T5263] vhci_hcd: connection reset by peer [ 108.619012][ T312] vhci_hcd vhci_hcd.4: stop threads [ 108.630495][ T312] vhci_hcd vhci_hcd.4: release socket [ 108.636019][ T312] vhci_hcd vhci_hcd.4: disconnect device [ 108.641905][ T312] vhci_hcd vhci_hcd.4: stop threads [ 108.647420][ T312] vhci_hcd vhci_hcd.4: release socket [ 108.653052][ T312] vhci_hcd vhci_hcd.4: disconnect device [ 108.689809][ T5292] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.494: inode has both inline data and extents flags [ 108.734085][ T5292] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.734228][ T5292] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.494: couldn't read orphan inode 15 (err -117) [ 108.755592][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.755616][ C0] EXT4-fs (loop3): initial error at time 1771735574: ext4_orphan_get:1391: inode 15 [ 108.755645][ C0] EXT4-fs (loop3): last error at time 1771735574: ext4_orphan_get:1391: inode 15 [ 108.806169][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.851348][ T5292] loop3: lost filesystem error report for type 5 error -117 [ 108.852027][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 108.873877][ T5292] tipc: Enabling of bearer rejected, already enabled [ 109.479597][ T5310] set_capacity_and_notify: 2 callbacks suppressed [ 109.479614][ T5310] loop4: detected capacity change from 0 to 1024 [ 109.592448][ T5310] EXT4-fs: Ignoring removed oldalloc option [ 109.598512][ T5310] EXT4-fs: Ignoring removed bh option [ 109.625017][ T5310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.681160][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 109.865761][ T5319] ================================================================== [ 109.873927][ T5319] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 109.881116][ T5319] [ 109.883480][ T5319] write to 0xffff88811a8a940c of 4 bytes by task 5310 on cpu 1: [ 109.891130][ T5319] xas_set_mark+0x12b/0x140 [ 109.895685][ T5319] __folio_start_writeback+0x17b/0x370 [ 109.901191][ T5319] ext4_bio_write_folio+0x5ad/0x9f0 [ 109.906438][ T5319] mpage_process_page_bufs+0x4a1/0x620 [ 109.911935][ T5319] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 109.917785][ T5319] ext4_do_writepages+0xa07/0x2840 [ 109.922949][ T5319] ext4_writepages+0x18f/0x320 [ 109.927744][ T5319] do_writepages+0x1c6/0x310 [ 109.932376][ T5319] file_write_and_wait_range+0x178/0x2f0 [ 109.938070][ T5319] generic_buffers_fsync_noflush+0x45/0x130 [ 109.944012][ T5319] ext4_sync_file+0x1aa/0x6b0 [ 109.948732][ T5319] vfs_fsync_range+0xc5/0xe0 [ 109.953371][ T5319] ext4_buffered_write_iter+0x34f/0x3c0 [ 109.958974][ T5319] ext4_file_write_iter+0x380/0xfa0 [ 109.964239][ T5319] iter_file_splice_write+0x6c4/0xa80 [ 109.969648][ T5319] direct_splice_actor+0x156/0x2a0 [ 109.974797][ T5319] splice_direct_to_actor+0x311/0x670 [ 109.980198][ T5319] do_splice_direct+0x119/0x1a0 [ 109.985075][ T5319] do_sendfile+0x382/0x650 [ 109.989556][ T5319] __x64_sys_sendfile64+0x105/0x150 [ 109.994785][ T5319] x64_sys_call+0x2dc4/0x3020 [ 109.999518][ T5319] do_syscall_64+0x12c/0x370 [ 110.004161][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.010090][ T5319] [ 110.012445][ T5319] read to 0xffff88811a8a940c of 4 bytes by task 5319 on cpu 0: [ 110.020092][ T5319] xas_find_marked+0x5d7/0x620 [ 110.024897][ T5319] filemap_get_folios_tag+0xfa/0x510 [ 110.030210][ T5319] filemap_fdatawait_range+0x88/0x1e0 [ 110.035717][ T5319] __writeback_single_inode+0xdb/0x860 [ 110.041222][ T5319] writeback_single_inode+0x16d/0x3f0 [ 110.046636][ T5319] sync_inode_metadata+0x6e/0xa0 [ 110.051609][ T5319] generic_buffers_fsync_noflush+0xee/0x130 [ 110.057536][ T5319] ext4_sync_file+0x1aa/0x6b0 [ 110.062246][ T5319] vfs_fsync_range+0xc5/0xe0 [ 110.066897][ T5319] ext4_buffered_write_iter+0x34f/0x3c0 [ 110.072658][ T5319] ext4_file_write_iter+0x380/0xfa0 [ 110.077981][ T5319] iter_file_splice_write+0x6c4/0xa80 [ 110.083380][ T5319] direct_splice_actor+0x156/0x2a0 [ 110.088515][ T5319] splice_direct_to_actor+0x311/0x670 [ 110.093916][ T5319] do_splice_direct+0x119/0x1a0 [ 110.098805][ T5319] do_sendfile+0x382/0x650 [ 110.103248][ T5319] __x64_sys_sendfile64+0x105/0x150 [ 110.108477][ T5319] x64_sys_call+0x2dc4/0x3020 [ 110.113190][ T5319] do_syscall_64+0x12c/0x370 [ 110.117824][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.123742][ T5319] [ 110.126083][ T5319] value changed: 0x0a000021 -> 0x04000021 [ 110.131815][ T5319] [ 110.134154][ T5319] Reported by Kernel Concurrency Sanitizer on: [ 110.140319][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.4.496 Not tainted syzkaller #0 PREEMPT(full) [ 110.149550][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.159625][ T5319] ================================================================== [ 110.443486][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.481643][ T10] usb 9-1: enqueue for inactive port 0 [ 113.487163][ T10] usb 9-1: enqueue for inactive port 0 [ 113.562572][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set