last executing test programs: 3.204558163s ago: executing program 1 (id=256): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.198526544s ago: executing program 2 (id=257): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x40) fcntl$notify(r2, 0x402, 0x8000003d) (async) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}}, 0x100) 3.126226658s ago: executing program 1 (id=258): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000008000000911173000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) fallocate(r0, 0x0, 0x0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/180}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7ffffffc, 0x3b0a, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x10001, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x2162) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x8, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129502, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r6}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300)) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) 3.044519563s ago: executing program 2 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf0, 0x5, 0xb, 0x7, 0x0, 0x4, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40b, 0x0, @perf_config_ext={0x4, 0x7fffffffffffffff}, 0x2, 0xe, 0x87, 0x0, 0x81, 0x20000005, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000e852c300000000025000000180001801400020064756d6d79300000000000000000000025ae328fe7e0fe07e479861990e7bb492e05bde687b75cbd8744e684190625764221e14a60777c5b1f5907262e180b82662ea37c3350e370201771a3cdd7c227433e25c98ceee259cc091ec1073ccf0e640e51358fa4d9e84c6a40a1e6454122c795260d09fb37445b25ab2119cf5afc4689686aff0decd088fcd67edb5cd65a3ba168466f5f2d510b26542621bc2991bd30ca43ca8022b7e0d287566e07a1d9ba77819fa70417dd0d1497879ef7c4ff36a71eca83f5aad2b1c7206be3f080edeb6f6d2e881df763000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r4 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0xfffffffe, 0x4) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)='u', 0x1}], 0x1}}], 0x1, 0x20008000) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000fcdb9f251600000018000180140002006e657464657673696d3000000000000005000400000000b47b2015b9b00f8b121f7e00ea20a66271c235d8bedbc976e18f553b97654372a21df3347569d22dea83d4a1ed25be45c00a36bf61fa1e2e9b2ec38e08701ad4482d8b27cbaf2d0cf1325a1f34d02e933c4fe6521064e1d0bc31d2a5f1d6e50949605fe56365a4f6330ca44e11256903b02004f484606d6e8d4799f2f78fd705292d3069174ccb168a2bbfbd204d3bfb"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x58fc}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRESOCT], 0x90}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.92327742s ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nobh}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@grpid}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000012c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x90}}, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ba6e8964eadc7cc65f7d7e93df83dd6c3989529acd1ebf0cf123e17faff70e122f2feb2854f94dc82511b9f088eaaba61676b6b336961406b54368f95577a8f3dbe8624f6538115c828f1c74fe7632f3b7f57ef942fb46b6c8acb572c86d9712a0335adaf4c92f6f7648e56964a57bd3576b9ddd185fe63154d9cfb33b6dfabb60e8e1350efd6f7407110864cf596cf0d0973c000395eb6c73ccf0026a5f2a6f041d9ad16abc0eb6772bf0665c95bdcfc14c18db6fd00dbb3eff6df9344537916242bbe207ff0c26a8937f76f982dbcdf4ff3509", 0xd4}, {&(0x7f0000001380)="1c12157e38b45144281422c4552006070063107e36c12c88217b0bc36af1177f89970c8213f8459394babaa2297002c33a2893ec571856055e4d5936351fe48440d2a48a46150e2a7b23bded9483468f10e77efc21a8deaa581f452b5e3e96a6d54718f3ff75d5d7cea0c3b66aba392d1bacea854778933093eb6479c23a929c2bdd1bb65d5352b15f702246d25827fc6143f1018440b51b300340c527c1079dc161bd665f89d8510efe5494358886a9df264dfc2bded827a3c42bb7378eac018757f04430d1a79407778b13fa15acbe050f7b43c0d9540b28cc70b5dc9aefb80335b827bf7d7fa08f3efa1fd4370a2f0b345e08678f3b70e76220c87fceec0dc713d33a8a5d9b1bc5e78ecba87cd9f2d6cb7501478d97ee1e7198f9b973cdb1a234af7b1784688bbc6606ab2803ebe22be654778e29c5a54712fe51981564075efb6c70342d86b8820e859034947eff16069be8f2b38ded1e9ebb6ba29482bea57d3dc457745f984d3cb9ae99709b746aa6a5277064876b3b07a4d65ff4bb4b6c8a3e6ced840b68eb0174c9639eb759fba95cae95e130beeae8c2bd14f01734ed852471b07c4fc84a60ef6919200fcfc2d21badef49347f6884b507cbcc9d8c5f228e4652a287cb038c277b1d70a0098316746543a7049a4cfdf68455f55c6387b1c4ee0c2e7066ac5c264ba9a5c95e2e4c1a218b64f953f7fbdbd738331e3b83e4031143d489f7d1cf4356d67d3e6014d91b3709e3ca8ceb5c238ece3d674566a2bb786ca6b806f33c0b696475828429cd2516d7ad42374d087fe11af811a7202a544eacd460560889cde05898228baff17be369b60853ad81438fce29d49b112c84d49d43f8b6014162108ba89b8322b6fb748684fc801458ff24a0b1f0250b7728b91fb6f71c25f6aace4761b8f573ff779685448a69b54538aae84823f82b9f34a2c4a30bace1a8d557405a80281b6c8145198f26a7e7908b4da7b0c6e417dbc61a23c520021f2b3b1fc104f9b83949a8d6bfe5d31ab76705e9b6af0ccbe79fcdd1b89558630a6e43c9dc7df1bda678b3492fc24aa16aed214d0db0438ac0ebb379ab64b607524c901160beddfd61d0e12ff01cfc2dbbfc867be5837ec6b7051d4c09b177d203776f1ea47bfc6d55e2e67c51c0b1e1d364f1e704532d86b9e1f4e593564dd2754728531924271cdb7e33bbdde74447b829524daf44a6e99e832c054004d2cd3b3b4cec0ba71caa66872dcb61353216279a3a1b83595a3eb8d23112f9ee10b9e71a0327278b931b0c60eeb7e3e55c3e2e234743e4ab6917f1df6fabc30bfc0c783ad66c3e674739fec78826565190294b9c1378ebc31926a55931d9ba792873e4a13f25be4325318abd02367eab305c0ac4029b147d50654377b6965bca4dbf1c2c3069886d080774444e62b3e954424bcd2b57b9f4b2df42cbea64c57e8b950159563b6e1c80055cdb99a2c3dfe31e8c07535bddfd4b3c1ff01733d177e7ffb9e277a4eb858d02dc2c6a61f30e4bc3cff9fcc51300df831f19d1f3aac2275e3df9af9b8dcdb25cd2d40380498caa45cd501f60873760ab01df90779066de1517fc7f28cbeda5bac3babb35e90a90be2a5fc91b2973ed834d220099721a3b255233049f9106dd830bdde808bf3b265dc166fb1d203833b44661ae9a8b443b64c8fc04a0dc063619096dc2d962cc5eaa8dbccaa49613035966839b256a4e07926aadac9e2187463bdca0ceb75db7f93ccbe4c5dfd6ae6830a9b37622ed76c75552b59249fdcd72c365ba0e3bdae534020454d619b1ab6633a7a8e71206be9535ea21256cb23a1cce4cc31104f3eb2673258ca7fdeb350097e023f6bc67e3e1024ac8271560d6b68486c8c7d618a5929e67bfcb2e53f75074a2aafd22f64b71563212c2d94305bd86fcd26200b6f563914b5e47bd4cd0587248854eaee40094fc915d62801e6435c17ce20e80938d9499129d7764ac4ab35dbfe006c4e661dc9435997d6d9726e04265349e525a23fb0f89441a08f2bf8c976400c27c5f0d0e9ba5e9ba154248550f33791c8b82cf8cf48d1a49b3e582f0d59c357203de349a9ae5daa8d54cb3be6ae1934ffd5a9c652f2da5c930f77bc5fe0d0eb3c7a66e70e156cf0ced6b6aca7590986a590749b4f5799af976f566e464a3d566d247d7f1ac3ddac11480f9e564fb2fcf3d6497e8e0d2fe9a112fcb61c2277d9ccb7d1b5e0a1565b1654110678b54e35a7567973fecc74d633b92b03cf9fc3d5e22a16664aeca9728539c5cfec4b9f00db00b4a8ebd245e6a7ccdf5e50051e736277f418a64eba199b6d9cdd6b54ee128118dc71f2103e5b93f7d6aa154b29315e0f87a8c4d7c8a4162e9394c90892a42f9d23225ac8d325e906e76a9005c362849148181380839e0a8d6a41b5f6b67800c080a52dcecc54a414da2f356eec4f0adf261e5a3f10d4315a08a3db38f576b5c0e6ff2c4f9aff6d24939360b8ce12dc11796c2b76232445b37d5ffd1dcf6177203cccc314752ed2c269e1e10d63f32f69d42ae7df17e3bd57d2c7fedd166aec89ea6817f69077f582884524be89654398c6c2a538e7f9cbb9876073e63f635fa8377572aeeda448814aa41103ecb0547eb2eed92a15a9760080574a1b40a793807d5696903a1b1d9ff0290a56da003136fa18079df4aca1db7eac331c363eb2913a6b4aff1929f85ebda65b6d8459d8ff46fca69e92bfa1a1633ee281d796a2e868b19f40c47b8955a3aaeee3a874c3945448957bf4f0ba1962bfda5d2be37de3e7713cd9750f62c782e1764e4b916650c9d06e3394e4569a682646f38fd44833a86fbf7406871f05f54e7fc94951c52bdeb03285d761c8df82a7c9b402b3387e512a54bfc7d3b371bc36d63d19e7277801268711b01672f747cad528af3cab5c529373c983b3220586d011c2344698cfd3840665a11ddcb0be6ee33de3793afd6f19b58f958b094375e74154c16bedc68f358aefafac8b0f2de1fd2a8a9250c91a024672d9ad08cc6ed6a17771adcc00ff982a644c5b532d3e4678bd43cde67ab58815377795bfae918adebaf602f694572b0c915a3f8e0965265ba9a32ba0526345c91b74c668dca522dea667c9b0c95eb3ae48b359b54f258ff67df47385884d302aeb529ccd9977b2c4f8c09e6b620c9dcfe6e3106d0f94ee366450ccba42c2cbe0ac8f38dc2d348d716034ede3dfec7d3778182cb5b29abe47126d68fee84e297915abc078b04a12ad8d268754709674bae85dc2511db3722d8cb52ab7b81d2ee55376643b5d268d29c167aa0bc16abcc2849db50d3ab952090738ea077fcf0fc3a1550e3260541f27b150cf8ab4598a9fe8a3eb3e76a362f500b6489c2a83525a000e727ef4e11eff611db9fc24f3f1d16e568704eb946db3b7d25e37a669178ecaec31dddb6252f4f2129766ad4d6ab0fd31435f371f05610e1e45bb2e19d9c9fa4592b0c8ad763a4859f79a53414c6fdeb4fad6f933ff4e1f5dfb4a3e2fe543e863d0f9a5682fe6c08e35ba7f9044de1f8804783c45aadf0b27833fa5cd579cd910db6f2aa5f05bcabe39cbf14f796a735c30da3f6c271f4906e7d65c818bbe0bf39182595d89a1ef8730fd4330e3956e1665e9eb70247fd970947b4bf1c34e3ff7b099e40f29b0792e2b8b81887b528a37ccfe93736d80b9a5bfedb4311a20d91bbccb0279392b4258fe15d62ff1859b032dedb5081dd32a64893ddbdebe4a57bc575cfabd79a01ef7ddb09d411a641a268179c6bfc6379e9dc9165ec867bb5511889c8bbba62ff80e7b2e0b3a7f7d2fd8b8f29c4a4590d87b5d84c5b702ea56883a86c51e506a326a0c0c4a53a4b969a6d091eebaaaa0c4eaaab0a45587bf498bcdb735dfd576bfcd1a0c49c65a598033c6fe27fbe0ed3a9e64b06007b58c45b537b309b71465c50e1e2786c0d9e8e7089ee4d451019a0ee65e8c3f470884df49c50d8f623acd7702c7a135002fd47155a8e0a7e95407a6630cb93a835bcef80ad3ff51ae351d3067ec0677d9b1ba214064c03ed2458e0145d86e4e4d7927e1b313fa2320e4ddb5a7898fda3178824905c16f55b0b04b98bb47e6640f9907316b8bde37d7b5ab09a1c909c44099a6982a0d75006ceb065549bf95cdbc266dea7e51de9053d9879f48a99a710b9aec491a2eb345ddc4ad68e205eaed0afe10d22e1b2956ab6206f1a7f601ee5046eb8e31b6b12a281361107b06269f9cada4b7ec25c5830dba0bce8ed6dfa4a636e615c080a94ba3839d591e04c07561451535c21192508ae0e30fd1f501fdcac8a2bd89046ec20f2812741ab93c31509ad43e79b967825a9b59e3f680b1dd7bb6d739ca10ce318eb05a2b725cf5c12a540838424f5e58d7d02485dc1d8c598f517b46fc7300450c7d3044c3a781c3cf668acb0cbf8f662f3e004c4b11d9adc7a7fc84129d53564a303de49d8dd61155ff7485da882accef62afd2d9a89b2747a5071da745774e5c478f1b9e1d04fb979ec99e58c3f1743a1d642480c5412e491ea0a5b76cf5420dd4932d4f365dcb9b3c73f7f5d5212c8f09170666f7ec1aee909924001bd021748e8c6b8ad5d1e0ac9aae97e58eb16ea3d82268fe2b9367ba00c7cb4955ec75493558a9879535a81c519c079e5d0c64f1d37b9bc44c0ffae4ee74edfeb4adeca62bc95e5d66cac8f0b51f2ae81fd98d22795a8c8027039fd60a047b0f1ba8223cfb50348eb73517553af0530781569e16f57017458ea6bc1b73d44bff40774a39b50ab2ea8c8d840f0b97207ebf7cc75962324e52eb2e429db84d8359e183d077b93ce6aad74120a64c873649201cc59117a740ac4eb2e6413a70da2ebb300410e70912ef82e31e73069d01f1a6a715737987f6f79494debd41b019f31902c3b9c82eba0cef038e9760f063b9a1802636eb9a3ab6df009f342d7579c9653ae1ecda91c25e5d5bebb3f5d1f4afee43a7d71f883e2484aa228a4322d8a55a9f1e59aa2d6c2883e94f8e17eb362d17f6305ed0d4914312164132f8aab62641a2ea299f3c5da1bf391af905b092f9180b594ead1d61546f551b0fdc3340e1a94a01a09389c582a6b6903d8ac1e090d4aea5dc38b9df1b6e6bdb5e4b40c0e3a0dd0a21a45e8e1c05f4080120b9965d9190f23b1cb4ecb7ec7a584cb1b92034ed718bef7be65d079f2c8edd61e6c74cc173ee6bc1ad33675ca4bcd78d86515707619b75eb33299da20fdd3a4972c3298d1407e4456cd5206bec626ffe5d9974f1eba382b3be4b9e89685445380cbcc9728f21f1ba0469cbe68ccb3683e512f11d07da5664c037c89ce0668eb8a35001e4221a549cad6b7ae9749390bb03794a172cafff662b264b398041b143d17b9c96dec92bbddeae2169a2226e3ecd9293226a0414f1fe13d7a0eda18da6f0909b577e31e3309593558dca17bb9229b0bec9497fd7cb189847364ff1a5be7418dfa307edd9c2fc87e1260e709105560b468d59e7db24d241644106782cea42ef1de005ceddad3022ca2c00e8e6761ea85afb7e471df47b124372a57b0d5beca1401e7a93f53a0866740b2ef298d1ecf5e2e4e3a0d9cc063beaac7409e7d7e08de2bda57890e60278a8445e1b511e95620390d74dccfef84761bdffeb7e071edc48f1c93505c4f21136cccc060c82cb66ae5d52f6eb3ea0bf310d173317cdca3e330dd298e20da57c768b8321a0ff82d21b41f843015daf8cfe5df7e7aa2dbd051fe13ca019775d22cad0083d83716dd4849f5a88915a67eb9d34f849936e9287342348a0efbf3cb", 0x1000}, {&(0x7f0000000100)="011df0320b9f5d6495b0c8502e3e0a1798e0d8d96d99ef271208f6ff94d2ce158ca34d88719736eb15198073f251bca759c887c3b73233ccda8b8bfc625537a923970c7a07930c0ca3f6e0a0ae1d2034709eea71917c05644ccf42b65cf71989db54740acde5a9a101b378eff9b0d3a9b6c8d5ac28dca819abfe9939b119a4677c2453", 0x83}], 0x3}, 0x4048001) 2.524184693s ago: executing program 2 (id=265): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@nouid32}, {@noload}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2.221017621s ago: executing program 3 (id=267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r1) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 2.220244661s ago: executing program 2 (id=268): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x134}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={r0, r0}) 2.124918996s ago: executing program 3 (id=269): futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x50000, 0xa3020000) 2.056621s ago: executing program 1 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0xc, 0x4, 0x4, 0x8, 0x2, 0xc03, 0x0, 0x1e, 0xa, 0x6, 0xa08, 0x9, 0x9, 0x64e9, 0x9d78, 0xffff8000, 0x8, 0x0, 0x6, 0x31, 0xffff, 0x8, 0x3, 0x6, 0xc131c77, 0x200, 0x8, 0x58c60000, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x3, 0xd9c, 0x9, 0x4, 0x10001, 0x3d2, 0x3, 0x0, 0xb, 0xec6, 0x9, 0x5, 0xb, 0xe2, 0xb9c, 0x6, 0x1, 0x82b1, 0xffff, 0x9, 0x401, 0x1, 0x1000, 0x3, 0x6, 0x9, 0x8001, 0x0, 0x2, 0x47b, 0x101, 0x0, 0x6, 0x2ed, 0x6, 0x80000000, 0x1, 0x4cc2, 0x5, 0x0, 0x5, 0x5, 0xff, 0x80, 0x6000000, 0x1, 0xffffff80, 0x8, 0x4a51, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x8, 0x8d8b, 0x0, 0x0, 0x3ff, 0x9, 0x8145, 0x2, 0xffed, 0xcaf, 0x80, 0x1, 0x6, 0xffff, 0x4, 0x6af, 0x7, 0x80, 0x1343, 0x9, 0x40, 0x3, 0x7, 0x2, 0x0, 0xfffffffd, 0x400009, 0x0, 0x4, 0x0, 0xf, 0x14, 0x2, 0x0, 0x4, 0x401, 0x4, 0x5, 0x9, 0x7, 0xffff9aa0, 0xa, 0x7f, 0x7, 0x7, 0x9, 0x9, 0x8, 0x2, 0x4, 0x5, 0x3, 0x7, 0x81, 0x80, 0xa, 0x3, 0x4, 0x9, 0xa, 0x80, 0x5cc, 0x80000001, 0x0, 0x30c, 0xfffffffb, 0x6, 0xfffffff9, 0x0, 0x8, 0x6, 0xd, 0x4, 0x9, 0x0, 0x3, 0x7, 0x7, 0x4, 0x3, 0x2, 0x1, 0x7, 0x1, 0x3, 0xd570, 0x2, 0x0, 0xfffffffb, 0x1, 0x4, 0x1, 0x8, 0x27a0, 0xf1, 0x6, 0x0, 0x5, 0xd3, 0x80, 0x1000, 0x10, 0xfd43, 0x1, 0x37, 0x1, 0x9, 0x1, 0x5, 0x3, 0x0, 0x66b3, 0x1, 0x1, 0x3, 0x5, 0xfffffffa, 0x8, 0x80, 0x2, 0x7f, 0x4, 0x1, 0xc50c, 0x4, 0x4, 0x3, 0x9, 0x7ff, 0xaa, 0x7ff, 0x3ff, 0x3, 0x8, 0x9, 0x10cf, 0x8, 0x6, 0xcc1, 0x10, 0x2, 0x937, 0xf98, 0x5, 0x4, 0x9, 0xbf6, 0x401, 0x40, 0x0, 0x100, 0x8, 0x8, 0x2, 0x8, 0x2a5, 0x3, 0x4, 0x4, 0x1, 0x8, 0x7, 0x10001, 0x7fff, 0x1000]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @mcast1, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000180)=0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaa0800450000b00068000000889078ac1414bbac1414aaff214f24004d90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d01422d01cd53c3abe94331d0b79187240000000000000000"], 0x0) recvmmsg(r8, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r10 = epoll_create1(0x80000) r11 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x30000019}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x90, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "64bce20bb9f433f243482819704ea824b67f3fdfeefa5cf285939009721e3cd2c685a3457aa52cee7ff7d36abe3507ec30a4aa6a71d3316b70766ddb8d4269016281cfce6c2e5accdb3642a1dd3b073503"}]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280), 0x83, 0x4a7, &(0x7f0000001900)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) 1.989001615s ago: executing program 3 (id=272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x4e21, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x8}, 0x9, 0x0, 0x0, 0x1, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1.975086465s ago: executing program 4 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) 1.958347796s ago: executing program 4 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf0, 0x5, 0xb, 0x7, 0x0, 0x4, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40b, 0x0, @perf_config_ext={0x4, 0x7fffffffffffffff}, 0x2, 0xe, 0x87, 0x0, 0x81, 0x20000005, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000e852c300000000025000000180001801400020064756d6d79300000000000000000000025ae328fe7e0fe07e479861990e7bb492e05bde687b75cbd8744e684190625764221e14a60777c5b1f5907262e180b82662ea37c3350e370201771a3cdd7c227433e25c98ceee259cc091ec1073ccf0e640e51358fa4d9e84c6a40a1e6454122c795260d09fb37445b25ab2119cf5afc4689686aff0decd088fcd67edb5cd65a3ba168466f5f2d510b26542621bc2991bd30ca43ca8022b7e0d287566e07a1d9ba77819fa70417dd0d1497879ef7c4ff36a71eca83f5aad2b1c7206be3f080edeb6f6d2e881df763000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r4 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0xfffffffe, 0x4) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)='u', 0x1}], 0x1}}], 0x1, 0x20008000) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000fcdb9f251600000018000180140002006e657464657673696d3000000000000005000400000000b47b2015b9b00f8b121f7e00ea20a66271c235d8bedbc976e18f553b97654372a21df3347569d22dea83d4a1ed25be45c00a36bf61fa1e2e9b2ec38e08701ad4482d8b27cbaf2d0cf1325a1f34d02e933c4fe6521064e1d0bc31d2a5f1d6e50949605fe56365a4f6330ca44e11256903b02004f484606d6e8d4799f2f78fd705292d3069174ccb168a2bbfbd204d3bfb"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x58fc}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRESOCT], 0x90}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.947183737s ago: executing program 3 (id=277): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) set_mempolicy(0x4, 0x0, 0x5) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000280)="0100fd6400000000a48e39036ea7a94026330f8cb85e1a31a9602bf6589730e4240c58f73ade36e57cc4d6778cd32b9209a2be84fff8da3ca42edf19a9117aed4e6edb1c9b2c68f1b8", 0x49, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="098200610e9766ecf05e707f26f6058004000480"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast1, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@loopback, 0x2, 0x10000, 0x7ffffff, 0x0, 0x20100}}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0xfffffffffffffcfd, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) io_destroy(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x20000000, 0x0, 0xfbb}, 0x100}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.760074448s ago: executing program 4 (id=279): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40100001b0067"], 0x1a4}, 0x1, 0x0, 0x0, 0xcb8220b2c0490453}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40100001b0067"], 0x1a4}, 0x1, 0x0, 0x0, 0xcb8220b2c0490453}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x80, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x83c5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf5d}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000800}, 0x81) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.552396169s ago: executing program 3 (id=282): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x8, 0x7, 0x7, 0x7ffc0001}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.419831997s ago: executing program 4 (id=283): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000e0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r2, &(0x7f0000001000), 0x0}, 0x20) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="31030020000000000040480000000887000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x401831}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="68000000e260e34ca819e95b398698d1a72ae50f2b11db30b1c385e9d6659cd1b3e139365cc9d2b619b9c6ae6dd4f2b7db0c26950bd3ed6c06dfff562acb93d40e4a3d6a24b1706ec7dbd634486a5d213e70f3b8c32dcd73b68cb7a9d4ae21e008feee67b907aa9f56c20d3c07552125caa3d828c0aab19eb14c2af7439e938708aa040b1e9a97a53b20bff9e08022a5a424ccde016948eaed83474d57ed1d16a916", @ANYRES16=r5, @ANYBLOB="020025bd7000fddbdf250d000000050030000000000005002f000000000008002b000300000008002b003f00000008000300", @ANYRES32, @ANYBLOB="05003700010000000a000900ffffffffffff000008000600", @ANYRES32=r6, @ANYBLOB="08002c000100008008003a00faffffff"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x4, 0x3}, {0xa, 0xffff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2000000) r7 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}, {@mblk_io_submit}, {@discard}, {@grpquota}]}, 0x1e, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={r4, 0x9, 0x6, 0x1}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)={0xa4, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x500}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1a1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r8], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4096, 0x1000, 0x1, &(0x7f0000000b80)=""/222, 0xde}, &(0x7f0000000240)=0x40) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x110) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)={0x2abc0, 0x1, 0x6}, 0x18) 1.419518737s ago: executing program 0 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x31f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.367701311s ago: executing program 0 (id=285): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb01001800ffff0f0000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28) 1.320035013s ago: executing program 0 (id=286): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mremap(&(0x7f0000836000/0x1000)=nil, 0x1000, 0xa000, 0x4, &(0x7f0000754000/0xa000)=nil) 1.166656102s ago: executing program 1 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r2, 0x0, &(0x7f0000000440)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/183, 0xb7, 0x7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_io_uring_setup(0x47a8, &(0x7f0000000480)={0x0, 0x46b4, 0x2, 0xffffffff, 0x333}, &(0x7f0000000180), &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x6f1a, 0x0, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x3, 0x3, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x0, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0xf9, 0x3, 0xb}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, 0x8001, 0x3, 0xc, 0x400, 0xffffffffffff7fff, 0x2000000, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x94, 0x0, 0x0, 0x0, 0xff, 0x2}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000044f000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.096931286s ago: executing program 4 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf0, 0x5, 0xb, 0x7, 0x0, 0x4, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40b, 0x0, @perf_config_ext={0x4, 0x7fffffffffffffff}, 0x2, 0xe, 0x87, 0x0, 0x81, 0x20000005, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000e852c300000000025000000180001801400020064756d6d79300000000000000000000025ae328fe7e0fe07e479861990e7bb492e05bde687b75cbd8744e684190625764221e14a60777c5b1f5907262e180b82662ea37c3350e370201771a3cdd7c227433e25c98ceee259cc091ec1073ccf0e640e51358fa4d9e84c6a40a1e6454122c795260d09fb37445b25ab2119cf5afc4689686aff0decd088fcd67edb5cd65a3ba168466f5f2d510b26542621bc2991bd30ca43ca8022b7e0d287566e07a1d9ba77819fa70417dd0d1497879ef7c4ff36a71eca83f5aad2b1c7206be3f080edeb6f6d2e881df763000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") r4 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0xfffffffe, 0x4) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)='u', 0x1}], 0x1}}], 0x1, 0x20008000) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000fcdb9f251600000018000180140002006e657464657673696d3000000000000005000400000000b47b2015b9b00f8b121f7e00ea20a66271c235d8bedbc976e18f553b97654372a21df3347569d22dea83d4a1ed25be45c00a36bf61fa1e2e9b2ec38e08701ad4482d8b27cbaf2d0cf1325a1f34d02e933c4fe6521064e1d0bc31d2a5f1d6e50949605fe56365a4f6330ca44e11256903b02004f484606d6e8d4799f2f78fd705292d3069174ccb168a2bbfbd204d3bfb"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x58fc}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRESOCT], 0x90}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.096520876s ago: executing program 0 (id=289): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nodelalloc}, {@auto_da_alloc}, {@lazytime}, {@usrjquota}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0xf862c000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0c5efd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000c00)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'syzkaller1\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000c80)={@initdev={0xfe, 0x88, '\x00', 0xd9, 0x0}, 0x75, r2}) preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/137, 0x89}, {&(0x7f0000000ac0)=""/10, 0xa}], 0x9, 0x4, 0x3) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000002980)=""/4084, 0xff4}], 0x1, 0x40000f73, 0x3) 831.289212ms ago: executing program 0 (id=290): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x7}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xcf, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = openat(r1, &(0x7f0000000640)='./file0/../file0\x00', 0x1c1002, 0x98) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) readahead(r6, 0x7, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000600)=0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000240)={0x60000, 0x130, 0x32}, 0x18) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="0800e5bb59ec815a", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4800) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r1, 0x0, 0x3ffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000380)={@id={0x2, 0x0, @b}}) 655.755272ms ago: executing program 0 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xa) sched_setscheduler(r1, 0x0, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_io_uring_setup(0x47a8, &(0x7f0000000480)={0x0, 0x46b4, 0x2, 0xffffffff, 0x333}, &(0x7f0000000180), &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x6f1a, 0x0, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x94, 0x0, 0x0, 0x0, 0xff, 0x2}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0xfffffff8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x81062) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x0, 0x8}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 373.165739ms ago: executing program 2 (id=292): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) set_mempolicy(0x4, 0x0, 0x5) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000280)="0100fd6400000000a48e39036ea7a94026330f8cb85e1a31a9602bf6589730e4240c58f73ade36e57cc4d6778cd32b9209a2be84fff8da3ca42edf19a9117aed4e6edb1c9b2c68f1b8", 0x49, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="098200610e9766ecf05e707f26f6058004000480"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast1, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@loopback, 0x2, 0x10000, 0x7ffffff, 0x0, 0x20100}}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0xfffffffffffffcfd, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) io_destroy(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x20000000, 0x0, 0xfbb}, 0x100}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 252.586555ms ago: executing program 1 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0xc, 0x4, 0x4, 0x8, 0x2, 0xc03, 0x0, 0x1e, 0xa, 0x6, 0xa08, 0x9, 0x9, 0x64e9, 0x9d78, 0xffff8000, 0x8, 0x0, 0x6, 0x31, 0xffff, 0x8, 0x3, 0x6, 0xc131c77, 0x200, 0x8, 0x58c60000, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x3, 0xd9c, 0x9, 0x4, 0x10001, 0x3d2, 0x3, 0x0, 0xb, 0xec6, 0x9, 0x5, 0xb, 0xe2, 0xb9c, 0x6, 0x1, 0x82b1, 0xffff, 0x9, 0x401, 0x1, 0x1000, 0x3, 0x6, 0x9, 0x8001, 0x0, 0x2, 0x47b, 0x101, 0x0, 0x6, 0x2ed, 0x6, 0x80000000, 0x1, 0x4cc2, 0x5, 0x0, 0x5, 0x5, 0xff, 0x80, 0x6000000, 0x1, 0xffffff80, 0x8, 0x4a51, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x8, 0x8d8b, 0x0, 0x0, 0x3ff, 0x9, 0x8145, 0x2, 0xffed, 0xcaf, 0x80, 0x1, 0x6, 0xffff, 0x4, 0x6af, 0x7, 0x80, 0x1343, 0x9, 0x40, 0x3, 0x7, 0x2, 0x0, 0xfffffffd, 0x400009, 0x0, 0x4, 0x0, 0xf, 0x14, 0x2, 0x0, 0x4, 0x401, 0x4, 0x5, 0x9, 0x7, 0xffff9aa0, 0xa, 0x7f, 0x7, 0x7, 0x9, 0x9, 0x8, 0x2, 0x4, 0x5, 0x3, 0x7, 0x81, 0x80, 0xa, 0x3, 0x4, 0x9, 0xa, 0x80, 0x5cc, 0x80000001, 0x0, 0x30c, 0xfffffffb, 0x6, 0xfffffff9, 0x0, 0x8, 0x6, 0xd, 0x4, 0x9, 0x0, 0x3, 0x7, 0x7, 0x4, 0x3, 0x2, 0x1, 0x7, 0x1, 0x3, 0xd570, 0x2, 0x0, 0xfffffffb, 0x1, 0x4, 0x1, 0x8, 0x27a0, 0xf1, 0x6, 0x0, 0x5, 0xd3, 0x80, 0x1000, 0x10, 0xfd43, 0x1, 0x37, 0x1, 0x9, 0x1, 0x5, 0x3, 0x0, 0x66b3, 0x1, 0x1, 0x3, 0x5, 0xfffffffa, 0x8, 0x80, 0x2, 0x7f, 0x4, 0x1, 0xc50c, 0x4, 0x4, 0x3, 0x9, 0x7ff, 0xaa, 0x7ff, 0x3ff, 0x3, 0x8, 0x9, 0x10cf, 0x8, 0x6, 0xcc1, 0x10, 0x2, 0x937, 0xf98, 0x5, 0x4, 0x9, 0xbf6, 0x401, 0x40, 0x0, 0x100, 0x8, 0x8, 0x2, 0x8, 0x2a5, 0x3, 0x4, 0x4, 0x1, 0x8, 0x7, 0x10001, 0x7fff, 0x1000]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 126.070513ms ago: executing program 1 (id=294): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000000)={0x17, 0x40000000000002, 0xd, 0xf, 0x9, 0x4}) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240400c4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") chdir(&(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000680)=""/248, 0x0, 0xf8, 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1514, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) 32.334458ms ago: executing program 4 (id=295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 2 (id=296): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 34.901897][ T28] audit: type=1400 audit(1771312332.959:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.925157][ T28] audit: type=1400 audit(1771312332.979:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.927596][ T3301] cgroup: Unknown subsys name 'net' [ 34.952995][ T28] audit: type=1400 audit(1771312333.009:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.069419][ T3301] cgroup: Unknown subsys name 'cpuset' [ 35.075701][ T3301] cgroup: Unknown subsys name 'rlimit' [ 35.207250][ T28] audit: type=1400 audit(1771312333.259:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.230571][ T28] audit: type=1400 audit(1771312333.259:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.258185][ T28] audit: type=1400 audit(1771312333.259:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.281236][ T28] audit: type=1400 audit(1771312333.259:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.308307][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.308969][ T28] audit: type=1400 audit(1771312333.289:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.342029][ T28] audit: type=1400 audit(1771312333.289:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.365535][ T28] audit: type=1400 audit(1771312333.319:71): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.396715][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.253917][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.301839][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.344591][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 37.378713][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.399007][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.416027][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.423409][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.430709][ T3314] bridge_slave_0: entered allmulticast mode [ 37.437368][ T3314] bridge_slave_0: entered promiscuous mode [ 37.461481][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.468685][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.476123][ T3314] bridge_slave_1: entered allmulticast mode [ 37.482742][ T3314] bridge_slave_1: entered promiscuous mode [ 37.511115][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.518343][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.525711][ T3313] bridge_slave_0: entered allmulticast mode [ 37.532239][ T3313] bridge_slave_0: entered promiscuous mode [ 37.555616][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.562883][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.570325][ T3313] bridge_slave_1: entered allmulticast mode [ 37.576946][ T3313] bridge_slave_1: entered promiscuous mode [ 37.584531][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.610551][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.625060][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.633198][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.640436][ T3312] bridge_slave_0: entered allmulticast mode [ 37.647150][ T3312] bridge_slave_0: entered promiscuous mode [ 37.658523][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.665657][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.672930][ T3312] bridge_slave_1: entered allmulticast mode [ 37.679723][ T3312] bridge_slave_1: entered promiscuous mode [ 37.703092][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.727280][ T3314] team0: Port device team_slave_0 added [ 37.738354][ T3314] team0: Port device team_slave_1 added [ 37.745286][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.764958][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.774307][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.781749][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.789006][ T3318] bridge_slave_0: entered allmulticast mode [ 37.795998][ T3318] bridge_slave_0: entered promiscuous mode [ 37.802809][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.810026][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.817216][ T3319] bridge_slave_0: entered allmulticast mode [ 37.824051][ T3319] bridge_slave_0: entered promiscuous mode [ 37.835185][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.842544][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.849969][ T3319] bridge_slave_1: entered allmulticast mode [ 37.856482][ T3319] bridge_slave_1: entered promiscuous mode [ 37.863619][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.877727][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.885116][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.892536][ T3318] bridge_slave_1: entered allmulticast mode [ 37.899280][ T3318] bridge_slave_1: entered promiscuous mode [ 37.921062][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.928143][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.954406][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.971250][ T3313] team0: Port device team_slave_0 added [ 37.987456][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.001945][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.009000][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.035300][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.047201][ T3313] team0: Port device team_slave_1 added [ 38.054135][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.064514][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.074770][ T3312] team0: Port device team_slave_0 added [ 38.089918][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.104461][ T3312] team0: Port device team_slave_1 added [ 38.116687][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.124186][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.150377][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.176180][ T3318] team0: Port device team_slave_0 added [ 38.187201][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.194490][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.220654][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.244883][ T3318] team0: Port device team_slave_1 added [ 38.256174][ T3319] team0: Port device team_slave_0 added [ 38.264272][ T3314] hsr_slave_0: entered promiscuous mode [ 38.270449][ T3314] hsr_slave_1: entered promiscuous mode [ 38.277667][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.284900][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.311392][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.327194][ T3319] team0: Port device team_slave_1 added [ 38.337906][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.345113][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.373543][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.384899][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.391955][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.418277][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.437691][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.444743][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.471615][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.520006][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.527000][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.553940][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.566256][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.573544][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.599777][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.613250][ T3313] hsr_slave_0: entered promiscuous mode [ 38.619503][ T3313] hsr_slave_1: entered promiscuous mode [ 38.625640][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.631502][ T3313] Cannot create hsr debugfs directory [ 38.657249][ T3312] hsr_slave_0: entered promiscuous mode [ 38.663487][ T3312] hsr_slave_1: entered promiscuous mode [ 38.669672][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 38.675528][ T3312] Cannot create hsr debugfs directory [ 38.693430][ T3318] hsr_slave_0: entered promiscuous mode [ 38.699446][ T3318] hsr_slave_1: entered promiscuous mode [ 38.705283][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.711096][ T3318] Cannot create hsr debugfs directory [ 38.762798][ T3319] hsr_slave_0: entered promiscuous mode [ 38.769616][ T3319] hsr_slave_1: entered promiscuous mode [ 38.775557][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.781663][ T3319] Cannot create hsr debugfs directory [ 38.960262][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.971670][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.981299][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.992632][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.019780][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.030608][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.041440][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.051357][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.088473][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.100047][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.110369][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.120280][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.154244][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.164679][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.173905][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.182885][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.233806][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.256542][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.269653][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.281017][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.291563][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.303568][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.310711][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.323868][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.334533][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.341754][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.360115][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.387517][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.405330][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.425097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.432239][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.451120][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.458221][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.477199][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.500628][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.510887][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.517974][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.536600][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.547550][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.555110][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.569851][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.576977][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.612350][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.619947][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.664028][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.683897][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.702335][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.716188][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.731570][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.756457][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.783926][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.791117][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.802706][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.809984][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.845498][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.857360][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.875866][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.887983][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.964147][ T3312] veth0_vlan: entered promiscuous mode [ 40.009611][ T3312] veth1_vlan: entered promiscuous mode [ 40.032549][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.063266][ T3313] veth0_vlan: entered promiscuous mode [ 40.074101][ T3313] veth1_vlan: entered promiscuous mode [ 40.095052][ T3314] veth0_vlan: entered promiscuous mode [ 40.107114][ T3312] veth0_macvtap: entered promiscuous mode [ 40.122053][ T3314] veth1_vlan: entered promiscuous mode [ 40.136471][ T3312] veth1_macvtap: entered promiscuous mode [ 40.165199][ T3313] veth0_macvtap: entered promiscuous mode [ 40.176840][ T3313] veth1_macvtap: entered promiscuous mode [ 40.197385][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.207359][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.228286][ T3314] veth0_macvtap: entered promiscuous mode [ 40.236321][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.250397][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.257851][ T3318] veth0_vlan: entered promiscuous mode [ 40.269626][ T3314] veth1_macvtap: entered promiscuous mode [ 40.287526][ T3318] veth1_vlan: entered promiscuous mode [ 40.296107][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.305512][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.314504][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.330240][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.339425][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.348236][ T3319] veth0_vlan: entered promiscuous mode [ 40.361630][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.373496][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.382583][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.395661][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.410894][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.419797][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 40.419814][ T28] audit: type=1400 audit(1771312338.469:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.qnM11Z/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.423998][ T3319] veth1_vlan: entered promiscuous mode [ 40.427414][ T28] audit: type=1400 audit(1771312338.469:86): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.480457][ T28] audit: type=1400 audit(1771312338.469:87): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.qnM11Z/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.506260][ T28] audit: type=1400 audit(1771312338.469:88): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.528858][ T28] audit: type=1400 audit(1771312338.469:89): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.qnM11Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.558119][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.568839][ T28] audit: type=1400 audit(1771312338.479:90): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.qnM11Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.601260][ T28] audit: type=1400 audit(1771312338.479:91): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.628848][ T28] audit: type=1400 audit(1771312338.509:92): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.644615][ T3318] veth0_macvtap: entered promiscuous mode [ 40.657494][ T28] audit: type=1400 audit(1771312338.509:93): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.669341][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.689411][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.698185][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.719705][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.729038][ T3318] veth1_macvtap: entered promiscuous mode [ 40.745084][ T28] audit: type=1400 audit(1771312338.799:94): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.770705][ T3319] veth0_macvtap: entered promiscuous mode [ 40.787574][ T3319] veth1_macvtap: entered promiscuous mode [ 40.808521][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.834465][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.849771][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.859757][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.873189][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.881475][ T3490] loop0: detected capacity change from 0 to 128 [ 40.889713][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.898241][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.984362][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.004563][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.014405][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.067203][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.095770][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.327231][ C1] hrtimer: interrupt took 36684 ns [ 41.364994][ T3516] loop4: detected capacity change from 0 to 512 [ 41.383795][ T3516] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.423732][ T3516] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.461122][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.13: corrupted inode contents [ 41.498962][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.503734][ T3516] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.13: mark_inode_dirty error [ 41.512973][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.513011][ C1] EXT4-fs (loop4): initial error at time 1771312339: ext4_do_update_inode:5569: inode 16 [ 41.513041][ C1] EXT4-fs (loop4): last error at time 1771312339: ext4_do_update_inode:5569: inode 16 [ 41.551613][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.552697][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.13: corrupted inode contents [ 41.585227][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.585466][ T3516] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.13: mark_inode_dirty error [ 41.610541][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.610769][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.13: corrupted inode contents [ 41.661371][ T3528] loop2: detected capacity change from 0 to 128 [ 41.782263][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.782716][ T3516] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 41.823595][ T3516] loop4: lost filesystem error report for type 5 error -117 [ 41.824662][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.13: corrupted inode contents [ 41.864620][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.864879][ T3516] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.13: mark_inode_dirty error [ 41.885372][ T3516] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.889031][ T3516] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 42.230647][ T3516] loop4: lost filesystem error report for type 5 error -117 [ 42.238138][ T3516] EXT4-fs (loop4): 1 truncate cleaned up [ 42.326583][ T3534] loop3: detected capacity change from 0 to 512 [ 42.426662][ T70] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 42.464838][ T3534] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.554523][ T3534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.17: corrupted inode contents [ 42.565168][ T70] loop4: lost filesystem error report for type 5 error -117 [ 42.570515][ T3516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.621510][ T3540] loop2: detected capacity change from 0 to 128 [ 42.628921][ T3534] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.629443][ T3534] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.17: mark_inode_dirty error [ 42.638789][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.638814][ C1] EXT4-fs (loop3): initial error at time 1771312340: ext4_do_update_inode:5569: inode 16 [ 42.638849][ C1] EXT4-fs (loop3): last error at time 1771312340: ext4_do_update_inode:5569: inode 16 [ 42.677038][ T3534] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.682869][ T3542] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 42.700458][ T3534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.17: corrupted inode contents [ 42.712941][ T3542] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 42.721009][ T3534] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.773730][ T3516] syz.4.13 (3516) used greatest stack depth: 9784 bytes left [ 42.799678][ T3534] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.17: mark_inode_dirty error [ 42.850744][ T3534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.17: corrupted inode contents [ 42.888976][ T3534] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 42.889323][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.897750][ T3534] loop3: lost filesystem error report for type 5 error -117 [ 42.907636][ T3534] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.17: corrupted inode contents [ 42.932256][ T3534] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.17: mark_inode_dirty error [ 42.954847][ T3547] loop0: detected capacity change from 0 to 512 [ 42.990485][ T3547] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.032393][ T3534] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 43.041605][ T3534] loop3: lost filesystem error report for type 5 error -117 [ 43.042264][ T3534] EXT4-fs (loop3): 1 truncate cleaned up [ 43.056020][ T3547] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 43.059251][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:1: Failed to release dquot type 1 [ 43.064927][ T3547] EXT4-fs (loop0): 1 truncate cleaned up [ 43.082227][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.095480][ T30] loop3: lost filesystem error report for type 5 error -117 [ 43.096254][ T3534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.160301][ T3547] Zero length message leads to an empty skb [ 43.167009][ T3551] process 'syz.1.21' launched './file0' with NULL argv: empty string added [ 43.179850][ T3547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 43.180181][ T3553] loop2: detected capacity change from 0 to 512 [ 43.197361][ T3547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 43.216926][ T3553] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.229287][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.233864][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.23: corrupted inode contents [ 43.258646][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 43.265218][ C1] EXT4-fs (loop2): initial error at time 1771312341: ext4_do_update_inode:5569: inode 16 [ 43.275168][ C1] EXT4-fs (loop2): last error at time 1771312341: ext4_do_update_inode:5569: inode 16 [ 43.285249][ T3553] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.23: mark_inode_dirty error [ 43.296876][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.23: corrupted inode contents [ 43.309690][ T3547] syz_tun: entered promiscuous mode [ 43.315306][ T3553] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.23: mark_inode_dirty error [ 43.341216][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.23: corrupted inode contents [ 43.381413][ T3561] loop3: detected capacity change from 0 to 512 [ 43.382339][ T3547] syz_tun: left promiscuous mode [ 43.389497][ T3553] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 43.425394][ T3561] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 43.434296][ T3561] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.25: iget: bad i_size value: 12154757448730 [ 43.434408][ T3553] loop2: lost filesystem error report for type 5 error -117 [ 43.448741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 43.458934][ T3561] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.25: couldn't read orphan inode 13 (err -117) [ 43.463304][ C1] EXT4-fs (loop3): initial error at time 1771312341: ext4_orphan_get:1391: inode 13 [ 43.484539][ C1] EXT4-fs (loop3): last error at time 1771312341: ext4_orphan_get:1391: inode 13 [ 43.499048][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.23: corrupted inode contents [ 43.511452][ T3553] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.23: mark_inode_dirty error [ 43.523672][ T3561] loop3: lost filesystem error report for type 5 error -117 [ 43.526711][ T3561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.548347][ T3553] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 43.557417][ T3553] loop2: lost filesystem error report for type 5 error -117 [ 43.561857][ T3553] EXT4-fs (loop2): 1 truncate cleaned up [ 43.577192][ T70] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 43.589162][ T70] loop2: lost filesystem error report for type 5 error -117 [ 43.593919][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.637358][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.652864][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.773394][ T3575] loop3: detected capacity change from 0 to 512 [ 43.842509][ T3553] syz.2.23 (3553) used greatest stack depth: 9528 bytes left [ 43.853778][ T3575] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.875023][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.953867][ T3578] ALSA: seq fatal error: cannot create timer (-22) [ 44.036337][ T3575] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.28: corrupted inode contents [ 44.139155][ T3575] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.28: mark_inode_dirty error [ 44.150754][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 44.150785][ C1] EXT4-fs (loop3): initial error at time 1771312342: ext4_do_update_inode:5569: inode 16 [ 44.150832][ C1] EXT4-fs (loop3): last error at time 1771312342: ext4_do_update_inode:5569: inode 16 [ 44.340573][ T3575] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.28: corrupted inode contents [ 44.393471][ T3575] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.28: mark_inode_dirty error [ 44.501025][ T3575] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.28: corrupted inode contents [ 44.536579][ T3575] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 44.621596][ T3575] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.28: corrupted inode contents [ 44.951959][ T3588] ip6t_REJECT: ECHOREPLY is not supported [ 44.966775][ T3575] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.28: mark_inode_dirty error [ 45.540921][ T3575] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 45.550802][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 45.550820][ T28] audit: type=1400 audit(1771312343.579:211): avc: denied { create } for pid=3583 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.657199][ T3590] ALSA: seq fatal error: cannot create timer (-22) [ 45.667410][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 45.680818][ T3575] EXT4-fs (loop3): 1 truncate cleaned up [ 45.693111][ T70] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.707273][ T70] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 45.906084][ T28] audit: type=1400 audit(1771312343.579:212): avc: denied { create } for pid=3583 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.927213][ T3575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.939640][ T28] audit: type=1400 audit(1771312343.579:213): avc: denied { write } for pid=3583 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.983567][ T28] audit: type=1400 audit(1771312343.589:214): avc: denied { read } for pid=3583 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.034773][ T28] audit: type=1400 audit(1771312343.589:215): avc: denied { ioctl } for pid=3583 comm="syz.1.31" path="socket:[6212]" dev="sockfs" ino=6212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.097794][ T28] audit: type=1400 audit(1771312343.729:216): avc: denied { write } for pid=3583 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.109564][ T3605] loop0: detected capacity change from 0 to 512 [ 46.137959][ T28] audit: type=1400 audit(1771312343.909:217): avc: denied { create } for pid=3595 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.175917][ T3605] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 46.184096][ T28] audit: type=1400 audit(1771312343.919:218): avc: denied { write } for pid=3595 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.184124][ T28] audit: type=1400 audit(1771312343.919:219): avc: denied { nlmsg_write } for pid=3595 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.227817][ T3605] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.37: iget: bad i_size value: 12154757448730 [ 46.250799][ T3605] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.37: couldn't read orphan inode 13 (err -117) [ 46.262549][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.262573][ C1] EXT4-fs (loop0): initial error at time 1771312344: ext4_orphan_get:1391: inode 13 [ 46.262605][ C1] EXT4-fs (loop0): last error at time 1771312344: ext4_orphan_get:1391: inode 13 [ 46.289800][ T3605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.332073][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.342914][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.475176][ T3616] loop2: detected capacity change from 0 to 512 [ 46.498884][ T3616] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.532504][ T3616] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.42: corrupted inode contents [ 46.564719][ T3616] fserror_report: 20 callbacks suppressed [ 46.564741][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.576173][ T3616] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.42: mark_inode_dirty error [ 46.585423][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.585450][ C0] EXT4-fs (loop2): initial error at time 1771312344: ext4_do_update_inode:5569: inode 16 [ 46.585505][ C0] EXT4-fs (loop2): last error at time 1771312344: ext4_do_update_inode:5569: inode 16 [ 46.623613][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.627575][ T3616] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.42: corrupted inode contents [ 46.649018][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.649300][ T3616] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.42: mark_inode_dirty error [ 46.700723][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.700971][ T3616] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.42: corrupted inode contents [ 46.738658][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.738942][ T3616] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 46.766584][ T3619] loop0: detected capacity change from 0 to 8192 [ 46.773746][ T3619] ======================================================= [ 46.773746][ T3619] WARNING: The mand mount option has been deprecated and [ 46.773746][ T3619] and is ignored by this kernel. Remove the mand [ 46.773746][ T3619] option from the mount to silence this warning. [ 46.773746][ T3619] ======================================================= [ 46.813298][ T3616] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.42: corrupted inode contents [ 46.833167][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.833340][ T3616] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.42: mark_inode_dirty error [ 46.857372][ T3616] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.857654][ T3616] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 46.876660][ T3616] fserror_report: 5 callbacks suppressed [ 46.876689][ T3616] loop2: lost filesystem error report for type 5 error -117 [ 46.882983][ T3616] EXT4-fs (loop2): 1 truncate cleaned up [ 46.970007][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 1 [ 46.987369][ T50] loop2: lost filesystem error report for type 5 error -117 [ 46.987887][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.017415][ T3633] loop4: detected capacity change from 0 to 512 [ 47.151014][ T3633] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 47.162505][ T3633] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.48: iget: bad i_size value: 12154757448730 [ 47.175591][ T3633] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.175857][ T3633] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.48: couldn't read orphan inode 13 (err -117) [ 47.185140][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.185161][ C0] EXT4-fs (loop4): initial error at time 1771312345: ext4_orphan_get:1391: inode 13 [ 47.185191][ C0] EXT4-fs (loop4): last error at time 1771312345: ext4_orphan_get:1391: inode 13 [ 47.212735][ T3645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=3645 comm=syz.1.51 [ 47.215534][ T3633] loop4: lost filesystem error report for type 5 error -117 [ 47.235562][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.263321][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.337800][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.475379][ T3666] loop1: detected capacity change from 0 to 1024 [ 47.505616][ T3668] FAULT_INJECTION: forcing a failure. [ 47.505616][ T3668] name failslab, interval 1, probability 0, space 0, times 1 [ 47.519670][ T3668] CPU: 0 UID: 0 PID: 3668 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT(full) [ 47.519707][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.519731][ T3668] Call Trace: [ 47.519772][ T3668] [ 47.519781][ T3668] __dump_stack+0x1d/0x30 [ 47.519814][ T3668] dump_stack_lvl+0x95/0xd0 [ 47.519919][ T3668] dump_stack+0x15/0x1b [ 47.519947][ T3668] should_fail_ex+0x263/0x280 [ 47.519990][ T3668] ? fl_change+0x25b/0x1c40 [ 47.520030][ T3668] should_failslab+0x8c/0xb0 [ 47.520066][ T3668] __kmalloc_cache_noprof+0x5f/0x410 [ 47.520133][ T3668] fl_change+0x25b/0x1c40 [ 47.520174][ T3668] ? radix_tree_lookup+0x12d/0x140 [ 47.520201][ T3668] ? __rcu_read_unlock+0x4e/0x70 [ 47.520298][ T3668] tc_new_tfilter+0xe56/0x1110 [ 47.520340][ T3668] ? ns_capable+0x7c/0xb0 [ 47.520370][ T3668] ? __pfx_tc_new_tfilter+0x10/0x10 [ 47.520408][ T3668] rtnetlink_rcv_msg+0x64b/0x720 [ 47.520567][ T3668] netlink_rcv_skb+0x123/0x220 [ 47.520592][ T3668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.520697][ T3668] rtnetlink_rcv+0x1c/0x30 [ 47.520734][ T3668] netlink_unicast+0x5c0/0x690 [ 47.520767][ T3668] netlink_sendmsg+0x5c8/0x6f0 [ 47.520834][ T3668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.520866][ T3668] ____sys_sendmsg+0x5af/0x600 [ 47.520905][ T3668] ___sys_sendmsg+0x195/0x1e0 [ 47.520954][ T3668] __x64_sys_sendmsg+0xd4/0x160 [ 47.521026][ T3668] x64_sys_call+0x194c/0x3020 [ 47.521053][ T3668] do_syscall_64+0x12c/0x370 [ 47.521097][ T3668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.521125][ T3668] RIP: 0033:0x7fd1f18cbf79 [ 47.521145][ T3668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.521176][ T3668] RSP: 002b:00007fd1f0327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.521197][ T3668] RAX: ffffffffffffffda RBX: 00007fd1f1b45fa0 RCX: 00007fd1f18cbf79 [ 47.521211][ T3668] RDX: 0000000020040084 RSI: 00002000000000c0 RDI: 0000000000000004 [ 47.521267][ T3668] RBP: 00007fd1f0327090 R08: 0000000000000000 R09: 0000000000000000 [ 47.521283][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.521331][ T3668] R13: 00007fd1f1b46038 R14: 00007fd1f1b45fa0 R15: 00007ffff1dffcd8 [ 47.521398][ T3668] [ 47.527663][ T3666] EXT4-fs: Ignoring removed orlov option [ 47.762762][ T3666] EXT4-fs: Ignoring removed nobh option [ 47.798043][ T3666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.846567][ T3678] mmap: syz.2.62 (3678) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.914186][ T3680] loop4: detected capacity change from 0 to 512 [ 47.957220][ T3680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.984219][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.63: corrupted inode contents [ 48.086063][ T3680] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.086261][ T3680] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.63: mark_inode_dirty error [ 48.095563][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 48.095588][ C0] EXT4-fs (loop4): initial error at time 1771312346: ext4_do_update_inode:5569: inode 16 [ 48.095626][ C0] EXT4-fs (loop4): last error at time 1771312346: ext4_do_update_inode:5569: inode 16 [ 48.137705][ T3680] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.138013][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.63: corrupted inode contents [ 48.175330][ T3680] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.63: mark_inode_dirty error [ 48.203669][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'. [ 48.215954][ T3686] gtp0: entered promiscuous mode [ 48.221192][ T3686] gtp0: entered allmulticast mode [ 48.231936][ T3686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3686 comm=syz.2.64 [ 48.244820][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.63: corrupted inode contents [ 48.258753][ T3680] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 48.267489][ T3680] loop4: lost filesystem error report for type 5 error -117 [ 48.267642][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.63: corrupted inode contents [ 48.287404][ T3687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=3687 comm=syz.2.64 [ 48.311006][ T3680] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.63: mark_inode_dirty error [ 48.362174][ T3680] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 48.373261][ T3689] loop2: detected capacity change from 0 to 512 [ 48.381442][ T3680] loop4: lost filesystem error report for type 5 error -117 [ 48.381868][ T3680] EXT4-fs (loop4): 1 truncate cleaned up [ 48.404757][ T3689] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 48.428967][ T3689] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.65: iget: bad i_size value: 12154757448730 [ 48.450048][ T3689] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.65: couldn't read orphan inode 13 (err -117) [ 48.461807][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 48.461833][ C0] EXT4-fs (loop2): initial error at time 1771312346: ext4_orphan_get:1391: inode 13 [ 48.461864][ C0] EXT4-fs (loop2): last error at time 1771312346: ext4_orphan_get:1391: inode 13 [ 48.503428][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:1: Failed to release dquot type 1 [ 48.519040][ T3692] syzkaller0: entered promiscuous mode [ 48.524617][ T3692] syzkaller0: entered allmulticast mode [ 48.537717][ T30] loop4: lost filesystem error report for type 5 error -117 [ 48.541037][ T3689] loop2: lost filesystem error report for type 5 error -117 [ 48.551630][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.553208][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.581871][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.621189][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.634867][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.032327][ T3716] loop4: detected capacity change from 0 to 128 [ 49.215262][ T3720] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 49.249259][ T3722] loop3: detected capacity change from 0 to 1024 [ 49.269572][ T3720] FAT-fs (loop4): Filesystem has been set read-only [ 49.278920][ T3722] EXT4-fs: Ignoring removed orlov option [ 49.307140][ T3724] loop2: detected capacity change from 0 to 512 [ 49.315806][ T3722] EXT4-fs: Ignoring removed nobh option [ 49.338526][ T3724] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 49.360598][ T3722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.380543][ T3724] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.79: iget: bad i_size value: 12154757448730 [ 49.428633][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 49.435149][ C1] EXT4-fs (loop2): initial error at time 1771312347: ext4_orphan_get:1391: inode 13 [ 49.438781][ T3724] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.79: couldn't read orphan inode 13 (err -117) [ 49.444690][ C1] EXT4-fs (loop2): last error at time 1771312347: ext4_orphan_get:1391: inode 13 [ 49.474254][ T3724] loop2: lost filesystem error report for type 5 error -117 [ 49.476460][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.497927][ T3722] FAULT_INJECTION: forcing a failure. [ 49.497927][ T3722] name failslab, interval 1, probability 0, space 0, times 0 [ 49.511448][ T3722] CPU: 0 UID: 0 PID: 3722 Comm: syz.3.78 Not tainted syzkaller #0 PREEMPT(full) [ 49.511480][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.511534][ T3722] Call Trace: [ 49.511543][ T3722] [ 49.511571][ T3722] __dump_stack+0x1d/0x30 [ 49.511605][ T3722] dump_stack_lvl+0x95/0xd0 [ 49.511634][ T3722] dump_stack+0x15/0x1b [ 49.511706][ T3722] should_fail_ex+0x263/0x280 [ 49.511732][ T3722] should_failslab+0x8c/0xb0 [ 49.511864][ T3722] kmem_cache_alloc_noprof+0x66/0x400 [ 49.511963][ T3722] ? __es_insert_extent+0x508/0xee0 [ 49.511997][ T3722] __es_insert_extent+0x508/0xee0 [ 49.512100][ T3722] ? submit_bio_noacct+0x746/0x9b0 [ 49.512128][ T3722] ? should_fail_ex+0xd9/0x280 [ 49.512233][ T3722] ext4_es_cache_extent+0x37e/0x5d0 [ 49.512269][ T3722] ? __es_find_extent_range+0x17d/0x310 [ 49.512343][ T3722] ext4_ext_map_blocks+0x13e8/0x2fb0 [ 49.512375][ T3722] ? try_charge_memcg+0x215/0xa10 [ 49.512434][ T3722] ? css_rstat_updated+0xbb/0x280 [ 49.512472][ T3722] ext4_map_query_blocks+0xb2/0x550 [ 49.512569][ T3722] ? ext4_es_lookup_extent+0x3ae/0x570 [ 49.512667][ T3722] ? __memcg_slab_post_alloc_hook+0x45b/0x540 [ 49.512700][ T3722] ext4_map_blocks+0x306/0x970 [ 49.512727][ T3722] _ext4_get_block+0x117/0x370 [ 49.512757][ T3722] ? folio_alloc_buffers+0x2e3/0x310 [ 49.512795][ T3722] ? _raw_spin_lock+0x52/0xa0 [ 49.512842][ T3722] ext4_get_block+0x39/0x50 [ 49.512896][ T3722] ext4_block_write_begin+0x650/0xcf0 [ 49.512937][ T3722] ? __pfx_ext4_get_block+0x10/0x10 [ 49.512970][ T3722] ext4_convert_inline_data_to_extent+0x3e2/0x7d0 [ 49.513054][ T3722] ext4_try_to_write_inline_data+0x54/0x90 [ 49.513078][ T3722] ext4_write_begin+0x1a3/0xea0 [ 49.513098][ T3722] ? _raw_spin_unlock+0x9/0x30 [ 49.513173][ T3722] ? __schedule+0x85a/0xd40 [ 49.513199][ T3722] ext4_da_write_begin+0x1f0/0x6c0 [ 49.513234][ T3722] ? inode_to_bdi+0x47/0xa0 [ 49.513306][ T3722] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 49.513452][ T3722] generic_perform_write+0x183/0x490 [ 49.513481][ T3722] ext4_buffered_write_iter+0x1ee/0x3c0 [ 49.513512][ T3722] ext4_file_write_iter+0x380/0xfa0 [ 49.513575][ T3722] ? finish_task_switch+0x7d/0x280 [ 49.513597][ T3722] ? __schedule+0x85a/0xd40 [ 49.513634][ T3722] do_iter_readv_writev+0x4fd/0x5a0 [ 49.513669][ T3722] vfs_writev+0x2e1/0x900 [ 49.513740][ T3722] __se_sys_pwritev2+0xfc/0x1c0 [ 49.513780][ T3722] __x64_sys_pwritev2+0x67/0x80 [ 49.513856][ T3722] x64_sys_call+0xe07/0x3020 [ 49.513883][ T3722] do_syscall_64+0x12c/0x370 [ 49.513915][ T3722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.514057][ T3722] RIP: 0033:0x7efe32ebbf79 [ 49.514073][ T3722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.514090][ T3722] RSP: 002b:00007efe3190f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 49.514110][ T3722] RAX: ffffffffffffffda RBX: 00007efe33135fa0 RCX: 00007efe32ebbf79 [ 49.514125][ T3722] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 49.514156][ T3722] RBP: 00007efe3190f090 R08: 0000000000000000 R09: 0000000000000003 [ 49.514173][ T3722] R10: 0000000000001600 R11: 0000000000000246 R12: 0000000000000001 [ 49.514189][ T3722] R13: 00007efe33136038 R14: 00007efe33135fa0 R15: 00007ffccb0f7898 [ 49.514220][ T3722] [ 49.899752][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.986441][ T3733] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.995738][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.035263][ T3733] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.80: corrupted inode contents [ 50.106313][ T3733] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.80: mark_inode_dirty error [ 50.117522][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.117543][ C0] EXT4-fs (loop2): initial error at time 1771312348: ext4_do_update_inode:5569: inode 16 [ 50.117577][ C0] EXT4-fs (loop2): last error at time 1771312348: ext4_do_update_inode:5569: inode 16 [ 50.160999][ T3743] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.183836][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 50.197935][ T3743] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 50.336793][ T3733] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.80: corrupted inode contents [ 50.344914][ T3743] EXT4-fs (loop3): 1 truncate cleaned up [ 50.354955][ T3743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.369030][ T3733] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.80: mark_inode_dirty error [ 50.383356][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 50.415926][ T3733] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.80: corrupted inode contents [ 50.434161][ T3733] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 50.444574][ T3733] loop2: lost filesystem error report for type 5 error -117 [ 50.444914][ T3733] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.80: corrupted inode contents [ 50.464554][ T3733] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.80: mark_inode_dirty error [ 50.476007][ T3733] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 50.485051][ T3733] loop2: lost filesystem error report for type 5 error -117 [ 50.485459][ T3733] EXT4-fs (loop2): 1 truncate cleaned up [ 50.498832][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 1 [ 50.500260][ T3743] netlink: 'syz.3.86': attribute type 33 has an invalid length. [ 50.512133][ T3733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.531215][ T3743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'. [ 50.552732][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 50.565871][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 50.568265][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.586089][ T3743] syz_tun: entered promiscuous mode [ 50.593365][ T3743] syz_tun: left promiscuous mode [ 50.638988][ T3758] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 50.663427][ T3758] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.91: iget: bad i_size value: 12154757448730 [ 50.708622][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.715128][ C1] EXT4-fs (loop2): initial error at time 1771312348: ext4_orphan_get:1391: inode 13 [ 50.724719][ C1] EXT4-fs (loop2): last error at time 1771312348: ext4_orphan_get:1391: inode 13 [ 50.734082][ T3758] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.91: couldn't read orphan inode 13 (err -117) [ 50.746994][ T3758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.760010][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.797705][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.848122][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 50.848136][ T28] audit: type=1400 audit(1771312348.899:294): avc: denied { create } for pid=3764 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.961360][ T28] audit: type=1400 audit(1771312348.929:295): avc: denied { write } for pid=3764 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.981060][ T28] audit: type=1400 audit(1771312348.949:296): avc: denied { create } for pid=3754 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.179523][ T28] audit: type=1400 audit(1771312349.169:297): avc: denied { write } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.243951][ T28] audit: type=1400 audit(1771312349.219:298): avc: denied { read } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.313238][ T28] audit: type=1400 audit(1771312349.219:299): avc: denied { create } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 51.394226][ T28] audit: type=1400 audit(1771312349.219:300): avc: denied { setopt } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 51.466677][ T28] audit: type=1400 audit(1771312349.219:301): avc: denied { getopt } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 51.536410][ T28] audit: type=1400 audit(1771312349.219:302): avc: denied { create } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 51.607678][ T28] audit: type=1400 audit(1771312349.219:303): avc: denied { create } for pid=3773 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 51.757275][ T3793] set_capacity_and_notify: 3 callbacks suppressed [ 51.757291][ T3793] loop3: detected capacity change from 0 to 512 [ 51.809770][ T3793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.852563][ T3793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.101: corrupted inode contents [ 51.877876][ T3793] fserror_report: 15 callbacks suppressed [ 51.877894][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.888644][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.904391][ C0] EXT4-fs (loop3): initial error at time 1771312349: ext4_do_update_inode:5569: inode 16 [ 51.904427][ C0] EXT4-fs (loop3): last error at time 1771312349: ext4_do_update_inode:5569: inode 16 [ 51.904940][ T3793] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.101: mark_inode_dirty error [ 51.904965][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.905163][ T3793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.101: corrupted inode contents [ 51.905191][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.905542][ T3793] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.101: mark_inode_dirty error [ 51.905567][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.906576][ T3793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.101: corrupted inode contents [ 51.906602][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.910213][ T3793] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 51.910230][ T3793] fserror_report: 2 callbacks suppressed [ 51.910238][ T3793] loop3: lost filesystem error report for type 5 error -117 [ 51.920284][ T3793] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.101: corrupted inode contents [ 51.920310][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.931783][ T3793] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.101: mark_inode_dirty error [ 51.931819][ T3793] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.938705][ T3793] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 51.938788][ T3793] loop3: lost filesystem error report for type 5 error -117 [ 51.954351][ T3793] EXT4-fs (loop3): 1 truncate cleaned up [ 51.954601][ T62] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:4: Failed to release dquot type 1 [ 51.954736][ T62] loop3: lost filesystem error report for type 5 error -117 [ 51.955433][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.011694][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.483141][ T3810] loop2: detected capacity change from 0 to 512 [ 52.486371][ T3810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.486497][ T3810] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 52.486743][ T3810] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.107: invalid block [ 52.486767][ T3810] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 52.486937][ T3810] EXT4-fs (loop2): Remounting filesystem read-only [ 52.487176][ T3810] EXT4-fs (loop2): 1 truncate cleaned up [ 52.487689][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.503964][ T3810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 52.504002][ T3810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 52.699119][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.757648][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 52.883095][ T3836] loop2: detected capacity change from 0 to 512 [ 53.178747][ T3836] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 53.220626][ T3836] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.115: iget: bad i_size value: 12154757448730 [ 53.334375][ T3836] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.335959][ T3836] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.115: couldn't read orphan inode 13 (err -117) [ 53.345298][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.345315][ C0] EXT4-fs (loop2): initial error at time 1771312351: ext4_orphan_get:1391: inode 13 [ 53.345353][ C0] EXT4-fs (loop2): last error at time 1771312351: ext4_orphan_get:1391: inode 13 [ 53.477739][ T3836] loop2: lost filesystem error report for type 5 error -117 [ 53.488773][ T3836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.603256][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.859529][ T3867] loop2: detected capacity change from 0 to 2048 [ 53.890966][ T3867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.949163][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.115259][ T3888] ucma_write: process 80 (syz.0.125) changed security contexts after opening file descriptor, this is not allowed. [ 54.203628][ T3884] loop2: detected capacity change from 0 to 764 [ 54.225941][ T3898] bond1: option packets_per_slave: invalid value (65537) [ 54.240840][ T3898] bond1: option packets_per_slave: allowed values 0 - 65535 [ 54.289148][ T3898] bond1 (unregistering): Released all slaves [ 54.707861][ T3912] loop2: detected capacity change from 0 to 512 [ 54.722946][ T3853] syzkaller0: entered promiscuous mode [ 54.735160][ T3853] syzkaller0: entered allmulticast mode [ 54.747038][ T3912] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 54.768678][ T3912] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.128: iget: bad i_size value: 12154757448730 [ 54.785725][ T3912] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.786050][ T3912] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.128: couldn't read orphan inode 13 (err -117) [ 54.795249][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 54.795267][ C1] EXT4-fs (loop2): initial error at time 1771312352: ext4_orphan_get:1391: inode 13 [ 54.795297][ C1] EXT4-fs (loop2): last error at time 1771312352: ext4_orphan_get:1391: inode 13 [ 54.832297][ T3912] loop2: lost filesystem error report for type 5 error -117 [ 54.832985][ T3912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.897036][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.926409][ T3919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 55.551705][ T3849] loop3: detected capacity change from 0 to 512 [ 55.574708][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.117: inode has both inline data and extents flags [ 55.676477][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.117: couldn't read orphan inode 15 (err -117) [ 55.688491][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.688550][ C0] EXT4-fs (loop3): initial error at time 1771312353: ext4_orphan_get:1391: inode 15 [ 55.688637][ C0] EXT4-fs (loop3): last error at time 1771312353: ext4_orphan_get:1391: inode 15 [ 55.732328][ T3849] loop3: lost filesystem error report for type 5 error -117 [ 55.733309][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.933771][ T28] kauditd_printk_skb: 166 callbacks suppressed [ 55.933786][ T28] audit: type=1326 audit(1771312353.989:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 55.967904][ T28] audit: type=1400 audit(1771312354.029:470): avc: denied { write } for pid=3943 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.987652][ T28] audit: type=1326 audit(1771312354.029:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 56.058811][ T28] audit: type=1326 audit(1771312354.109:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 56.083809][ T28] audit: type=1326 audit(1771312354.109:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 56.107779][ T28] audit: type=1326 audit(1771312354.109:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 56.146065][ T28] audit: type=1326 audit(1771312354.149:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd1f18cbf79 code=0x7ffc0000 [ 56.178824][ T28] audit: type=1400 audit(1771312354.199:476): avc: denied { create } for pid=3948 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.207941][ T3953] capability: warning: `syz.1.140' uses 32-bit capabilities (legacy support in use) [ 56.222288][ T28] audit: type=1400 audit(1771312354.259:477): avc: denied { create } for pid=3952 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.282481][ T28] audit: type=1400 audit(1771312354.259:478): avc: denied { write } for pid=3952 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.549404][ T3849] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.117: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 56.616401][ T3967] syzkaller0: entered promiscuous mode [ 56.622139][ T3967] syzkaller0: entered allmulticast mode [ 56.755436][ T3970] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 56.849109][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.869643][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 56.878926][ T3985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.152'. [ 57.032127][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 57.041123][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 57.054667][ T3985] loop3: detected capacity change from 0 to 512 [ 57.062107][ T3985] EXT4-fs: inline encryption not supported [ 57.068204][ T3985] EXT4-fs: dax option not supported [ 57.137967][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3994 comm=syz.3.155 [ 57.153461][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 57.167834][ T3994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.236484][ T3994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.265537][ T4000] FAULT_INJECTION: forcing a failure. [ 57.265537][ T4000] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.279716][ T4000] CPU: 1 UID: 0 PID: 4000 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) [ 57.279745][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.279778][ T4000] Call Trace: [ 57.279786][ T4000] [ 57.279821][ T4000] __dump_stack+0x1d/0x30 [ 57.279849][ T4000] dump_stack_lvl+0x95/0xd0 [ 57.279873][ T4000] dump_stack+0x15/0x1b [ 57.279944][ T4000] should_fail_ex+0x263/0x280 [ 57.279969][ T4000] should_fail+0xb/0x20 [ 57.279991][ T4000] should_fail_usercopy+0x1a/0x20 [ 57.280018][ T4000] strncpy_from_user+0x27/0x250 [ 57.280078][ T4000] strncpy_from_bpfptr+0x43/0x50 [ 57.280103][ T4000] bpf_prog_load+0x882/0x1140 [ 57.280190][ T4000] ? security_bpf+0x2b/0x90 [ 57.280270][ T4000] __sys_bpf+0x505/0x7e0 [ 57.280384][ T4000] __x64_sys_bpf+0x41/0x50 [ 57.280414][ T4000] x64_sys_call+0x10cb/0x3020 [ 57.280558][ T4000] do_syscall_64+0x12c/0x370 [ 57.280625][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.280647][ T4000] RIP: 0033:0x7fcfd53ebf79 [ 57.280663][ T4000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.280682][ T4000] RSP: 002b:00007fcfd3e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.280752][ T4000] RAX: ffffffffffffffda RBX: 00007fcfd5665fa0 RCX: 00007fcfd53ebf79 [ 57.280766][ T4000] RDX: 0000000000000094 RSI: 0000200000001440 RDI: 0000000000000005 [ 57.280779][ T4000] RBP: 00007fcfd3e47090 R08: 0000000000000000 R09: 0000000000000000 [ 57.280793][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.280876][ T4000] R13: 00007fcfd5666038 R14: 00007fcfd5665fa0 R15: 00007ffe04f47b78 [ 57.280896][ T4000] [ 57.476104][ T3994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.497694][ T4006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.510688][ T4006] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.535429][ T3994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.615242][ T4011] FAULT_INJECTION: forcing a failure. [ 57.615242][ T4011] name failslab, interval 1, probability 0, space 0, times 0 [ 57.646519][ T62] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.664428][ T62] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.667903][ T4011] CPU: 0 UID: 0 PID: 4011 Comm: syz.1.162 Not tainted syzkaller #0 PREEMPT(full) [ 57.668045][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.668086][ T4011] Call Trace: [ 57.668106][ T4011] [ 57.668128][ T4011] __dump_stack+0x1d/0x30 [ 57.668215][ T4011] dump_stack_lvl+0x95/0xd0 [ 57.668358][ T4011] dump_stack+0x15/0x1b [ 57.668448][ T4011] should_fail_ex+0x263/0x280 [ 57.668536][ T4011] should_failslab+0x8c/0xb0 [ 57.668684][ T4011] __kvmalloc_node_noprof+0x155/0x650 [ 57.668750][ T4011] ? traverse+0xa2/0x3a0 [ 57.668912][ T4011] traverse+0xa2/0x3a0 [ 57.669025][ T4011] seq_read_iter+0x85f/0x940 [ 57.669186][ T4011] seq_read+0x279/0x2c0 [ 57.669275][ T4011] ? __pfx_seq_read+0x10/0x10 [ 57.669416][ T4011] vfs_read+0x1ab/0x7f0 [ 57.669509][ T4011] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 57.669607][ T4011] __x64_sys_pread64+0xfd/0x150 [ 57.669786][ T4011] x64_sys_call+0x27b5/0x3020 [ 57.669871][ T4011] do_syscall_64+0x12c/0x370 [ 57.670012][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.670080][ T4011] RIP: 0033:0x7fcfd53ebf79 [ 57.670132][ T4011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.670186][ T4011] RSP: 002b:00007fcfd3e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 57.670260][ T4011] RAX: ffffffffffffffda RBX: 00007fcfd5665fa0 RCX: 00007fcfd53ebf79 [ 57.670324][ T4011] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 57.670391][ T4011] RBP: 00007fcfd3e47090 R08: 0000000000000000 R09: 0000000000000000 [ 57.670433][ T4011] R10: 2000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.670477][ T4011] R13: 00007fcfd5666038 R14: 00007fcfd5665fa0 R15: 00007ffe04f47b78 [ 57.670540][ T4011] [ 57.878662][ T62] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.893851][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.989648][ T4028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.168'. [ 58.022081][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 58.036363][ T4028] netlink: 'syz.3.168': attribute type 12 has an invalid length. [ 58.054526][ T4034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.107357][ T4040] netlink: 'syz.3.171': attribute type 21 has an invalid length. [ 58.115731][ T4040] netlink: 164 bytes leftover after parsing attributes in process `syz.3.171'. [ 58.149384][ T4037] pim6reg: entered allmulticast mode [ 59.041498][ T4063] program syz.3.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.165790][ T4014] syzkaller0: entered promiscuous mode [ 59.198682][ T4014] syzkaller0: entered allmulticast mode [ 59.350100][ T4071] 9p: Bad value for 'wfdno' [ 59.621096][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.629734][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.810973][ T4095] FAULT_INJECTION: forcing a failure. [ 59.810973][ T4095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.839336][ T4095] CPU: 0 UID: 0 PID: 4095 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(full) [ 59.839377][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.839453][ T4095] Call Trace: [ 59.839460][ T4095] [ 59.839470][ T4095] __dump_stack+0x1d/0x30 [ 59.839502][ T4095] dump_stack_lvl+0x95/0xd0 [ 59.839550][ T4095] dump_stack+0x15/0x1b [ 59.839575][ T4095] should_fail_ex+0x263/0x280 [ 59.839627][ T4095] should_fail+0xb/0x20 [ 59.839647][ T4095] should_fail_usercopy+0x1a/0x20 [ 59.839727][ T4095] _copy_to_user+0x20/0xa0 [ 59.839832][ T4095] simple_read_from_buffer+0xb5/0x130 [ 59.839870][ T4095] proc_fail_nth_read+0x10e/0x150 [ 59.839921][ T4095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.840017][ T4095] vfs_read+0x1ab/0x7f0 [ 59.840052][ T4095] ? __rcu_read_unlock+0x4e/0x70 [ 59.840077][ T4095] ? __fget_files+0x184/0x1c0 [ 59.840099][ T4095] ? mutex_lock+0x57/0x90 [ 59.840126][ T4095] ksys_read+0xdc/0x1a0 [ 59.840238][ T4095] __x64_sys_read+0x40/0x50 [ 59.840275][ T4095] x64_sys_call+0x2886/0x3020 [ 59.840306][ T4095] do_syscall_64+0x12c/0x370 [ 59.840402][ T4095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.840423][ T4095] RIP: 0033:0x7efe32e7c84e [ 59.840511][ T4095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.840534][ T4095] RSP: 002b:00007efe3190efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.840581][ T4095] RAX: ffffffffffffffda RBX: 00007efe3190f6c0 RCX: 00007efe32e7c84e [ 59.840595][ T4095] RDX: 000000000000000f RSI: 00007efe3190f0a0 RDI: 0000000000000008 [ 59.840607][ T4095] RBP: 00007efe3190f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.840623][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.840672][ T4095] R13: 00007efe33136038 R14: 00007efe33135fa0 R15: 00007ffccb0f7898 [ 59.840691][ T4095] [ 60.450791][ T4014] loop4: detected capacity change from 0 to 512 [ 60.514433][ T4014] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.163: inode has both inline data and extents flags [ 60.569047][ T4014] fserror_report: 1 callbacks suppressed [ 60.569067][ T4014] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.595505][ T4014] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.163: couldn't read orphan inode 15 (err -117) [ 60.605830][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 60.605855][ C0] EXT4-fs (loop4): initial error at time 1771312358: ext4_orphan_get:1391: inode 15 [ 60.605892][ C0] EXT4-fs (loop4): last error at time 1771312358: ext4_orphan_get:1391: inode 15 [ 60.787640][ T4014] loop4: lost filesystem error report for type 5 error -117 [ 60.788224][ T4014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.843507][ T4120] __nla_validate_parse: 1 callbacks suppressed [ 60.843531][ T4120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.196'. [ 61.059528][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 61.059545][ T28] audit: type=1400 audit(1771312359.119:586): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.086122][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.102560][ T4130] FAULT_INJECTION: forcing a failure. [ 61.102560][ T4130] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.127978][ T4130] CPU: 1 UID: 0 PID: 4130 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT(full) [ 61.128016][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.128029][ T4130] Call Trace: [ 61.128105][ T4130] [ 61.128115][ T4130] __dump_stack+0x1d/0x30 [ 61.128155][ T4130] dump_stack_lvl+0x95/0xd0 [ 61.128235][ T4130] dump_stack+0x15/0x1b [ 61.128263][ T4130] should_fail_ex+0x263/0x280 [ 61.128359][ T4130] should_fail_alloc_page+0xf2/0x100 [ 61.128402][ T4130] __alloc_frozen_pages_noprof+0x108/0x360 [ 61.128449][ T4130] alloc_pages_mpol+0xb3/0x260 [ 61.128502][ T4130] vma_alloc_folio_noprof+0x1a9/0x300 [ 61.128527][ T4130] do_wp_page+0xf62/0x2590 [ 61.128561][ T4130] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 61.128606][ T4130] ? __rcu_read_lock+0x36/0x50 [ 61.128632][ T4130] handle_mm_fault+0x8c7/0x3020 [ 61.128665][ T4130] ? vma_start_read+0x1c7/0x2c0 [ 61.128832][ T4130] do_user_addr_fault+0x62f/0x1050 [ 61.128963][ T4130] ? trace_page_fault_user+0x1f/0xe0 [ 61.129053][ T4130] exc_page_fault+0x62/0xa0 [ 61.129088][ T4130] asm_exc_page_fault+0x26/0x30 [ 61.129115][ T4130] RIP: 0033:0x7f1af786be05 [ 61.129134][ T4130] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 61.129158][ T4130] RSP: 002b:00007f1af62fdde0 EFLAGS: 00010293 [ 61.129223][ T4130] RAX: 0000000000000008 RBX: 00007f1af8657e20 RCX: 0000000000000000 [ 61.129240][ T4130] RDX: 0000000000000000 RSI: 00007f1af795f66a RDI: 00007f1af8657e20 [ 61.129258][ T4130] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 61.129274][ T4130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1af795f2d7 [ 61.129291][ T4130] R13: ffffffffffffffe8 R14: 0000000000000020 R15: 00007f1af795f66a [ 61.129317][ T4130] [ 61.320962][ T4130] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.333602][ T4134] syzkaller0: entered promiscuous mode [ 61.339404][ T4134] syzkaller0: entered allmulticast mode [ 61.351049][ T28] audit: type=1400 audit(1771312359.409:587): avc: denied { write } for pid=4133 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.604639][ T4138] netlink: 64 bytes leftover after parsing attributes in process `syz.0.202'. [ 61.808796][ T28] audit: type=1400 audit(1771312359.839:588): avc: denied { create } for pid=4141 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.891579][ T28] audit: type=1400 audit(1771312359.949:589): avc: denied { sys_module } for pid=4141 comm="syz.4.203" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.070026][ T28] audit: type=1400 audit(1771312360.129:590): avc: denied { create } for pid=4167 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.100893][ T28] audit: type=1400 audit(1771312360.149:591): avc: denied { write } for pid=4167 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.134219][ T28] audit: type=1400 audit(1771312360.179:592): avc: denied { mount } for pid=4167 comm="syz.0.208" name="/" dev="ramfs" ino=10189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.288818][ T28] audit: type=1400 audit(1771312360.349:593): avc: denied { getopt } for pid=4167 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.413196][ T4174] loop4: detected capacity change from 0 to 1024 [ 62.460092][ T4174] EXT4-fs: Ignoring removed bh option [ 62.473217][ T4174] ext4: Invalid gid '0x00000000ffffffff' [ 62.493178][ T4174] loop4: detected capacity change from 0 to 1024 [ 62.508904][ T4174] ext4: Unknown parameter 'appraise' [ 62.515437][ T28] audit: type=1400 audit(1771312360.569:594): avc: denied { read } for pid=4173 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.539365][ T4174] netlink: 'syz.4.209': attribute type 10 has an invalid length. [ 62.550975][ T4174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.209'. [ 62.561379][ T4174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.635515][ T4162] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 62.654673][ T4178] loop4: detected capacity change from 0 to 512 [ 62.708955][ T4178] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 62.725915][ T4178] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.740580][ T4180] loop1: detected capacity change from 0 to 1024 [ 62.768878][ T4178] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.210: Block bitmap for bg 0 marked uninitialized [ 62.790272][ T4180] EXT4-fs: Ignoring removed nobh option [ 62.796098][ T4180] EXT4-fs: inline encryption not supported [ 62.823858][ T4178] loop4: lost filesystem error report for type 5 error -117 [ 62.824103][ T4178] EXT4-fs (loop4): Remounting filesystem read-only [ 62.831559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.831582][ C0] EXT4-fs (loop4): initial error at time 1771312360: ext4_read_block_bitmap_nowait:517 [ 62.831602][ C0] EXT4-fs (loop4): last error at time 1771312360: ext4_read_block_bitmap_nowait:517 [ 62.909329][ T4180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.932884][ T4178] EXT4-fs (loop4): 1 orphan inode deleted [ 62.949224][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.985672][ T28] audit: type=1400 audit(1771312361.039:595): avc: denied { add_name } for pid=4179 comm="syz.1.211" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.011577][ T4180] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 63.071133][ T4180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 63.094082][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.118087][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.154371][ T4191] netlink: 'syz.2.216': attribute type 3 has an invalid length. [ 63.226568][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 63.265387][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 63.305250][ T4196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.345315][ T4202] loop4: detected capacity change from 0 to 512 [ 63.382160][ T4202] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.428219][ T4202] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.444871][ T4202] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.218: Block bitmap for bg 0 marked uninitialized [ 63.478366][ T4202] loop4: lost filesystem error report for type 5 error -117 [ 63.478493][ T4199] tipc: Started in network mode [ 63.488665][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 63.497211][ C1] EXT4-fs (loop4): initial error at time 1771312361: ext4_read_block_bitmap_nowait:517 [ 63.498479][ T4202] EXT4-fs (loop4): Remounting filesystem read-only [ 63.506934][ C1] EXT4-fs (loop4): last error at time 1771312361: ext4_read_block_bitmap_nowait:517 [ 63.525764][ T4199] tipc: Node identity fffffffc, cluster identity 4711 [ 63.532454][ T4206] ------------[ cut here ]------------ [ 63.538055][ T4206] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 63.556045][ T4206] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.217/4206 [ 63.566970][ T4206] Modules linked in: [ 63.570989][ T4206] CPU: 1 UID: 0 PID: 4206 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(full) [ 63.580274][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.590459][ T4206] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 63.596835][ T4206] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 63.605129][ T4202] EXT4-fs (loop4): 1 orphan inode deleted [ 63.616705][ T4206] RSP: 0018:ffffc90001cbf368 EFLAGS: 00010246 [ 63.628638][ T4206] RAX: ffff888102384c78 RBX: 0000000000000000 RCX: 0000000004000000 [ 63.636722][ T4206] RDX: ffffffff86812749 RSI: ffffffff867e6cf5 RDI: ffffffff871d3850 [ 63.644846][ T4206] RBP: ffff88811acdc2e0 R08: 0000000000000000 R09: 0000000004000000 [ 63.652875][ T4206] R10: ffffffff893c9af8 R11: 000000002007ff0f R12: ffff88811acdc2a0 [ 63.660912][ T4206] R13: 0000000000000000 R14: ffff88811acdc2ec R15: ffff88811acdc2d8 [ 63.669124][ T4206] FS: 00007f0bdd9e26c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 63.678167][ T4206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.684812][ T4206] CR2: 00007f0bdd9e1ff8 CR3: 000000011cea8000 CR4: 00000000003506f0 [ 63.692958][ T4206] Call Trace: [ 63.696273][ T4206] [ 63.699495][ T4206] reg_set_min_max+0x21c/0x260 [ 63.704310][ T4206] check_cond_jmp_op+0x1355/0x1ab0 [ 63.709569][ T4206] do_check+0x4a9b/0x9860 [ 63.714052][ T4206] do_check_common+0xd0b/0x1630 [ 63.718987][ T4206] bpf_check+0x2f6d/0xcc10 [ 63.723464][ T4206] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 63.728741][ T4199] tipc: Node number set to 4294967292 [ 63.729648][ T4206] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 63.740683][ T4206] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 63.746679][ T4206] ? css_rstat_updated+0xbb/0x280 [ 63.751919][ T4206] ? try_charge_memcg+0x215/0xa10 [ 63.757001][ T4206] ? pcpu_block_update+0x24e/0x3b0 [ 63.762472][ T4206] ? pcpu_block_refresh_hint+0x157/0x170 [ 63.768198][ T4206] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 63.774393][ T4206] ? css_rstat_updated+0xbb/0x280 [ 63.779587][ T4206] ? mod_memcg_state+0x182/0x270 [ 63.784575][ T4206] ? __rcu_read_unlock+0x4e/0x70 [ 63.789826][ T4206] ? avc_has_perm_noaudit+0xab/0x130 [ 63.795190][ T4206] ? avc_has_perm+0x101/0x190 [ 63.799959][ T4206] ? selinux_bpf_prog_load+0x197/0x1c0 [ 63.805655][ T4206] ? security_bpf_prog_load+0x9e/0x140 [ 63.811465][ T4206] bpf_prog_load+0xf76/0x1140 [ 63.816190][ T4206] ? security_bpf+0x2b/0x90 [ 63.820837][ T4206] __sys_bpf+0x505/0x7e0 [ 63.825208][ T4206] __x64_sys_bpf+0x41/0x50 [ 63.829783][ T4206] x64_sys_call+0x10cb/0x3020 [ 63.834644][ T4206] do_syscall_64+0x12c/0x370 [ 63.839315][ T4206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.845248][ T4206] RIP: 0033:0x7f0bdf3ebf79 [ 63.849730][ T4206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.869497][ T4206] RSP: 002b:00007f0bdd9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.878036][ T4206] RAX: ffffffffffffffda RBX: 00007f0bdf666270 RCX: 00007f0bdf3ebf79 [ 63.886218][ T4206] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 63.894287][ T4206] RBP: 00007f0bdf4827e0 R08: 0000000000000000 R09: 0000000000000000 [ 63.902330][ T4206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.910372][ T4206] R13: 00007f0bdf666308 R14: 00007f0bdf666270 R15: 00007fff9122b0f8 [ 63.918556][ T4206] [ 63.921649][ T4206] ---[ end trace 0000000000000000 ]--- [ 63.927740][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.970168][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.099672][ T4225] loop3: detected capacity change from 0 to 1024 [ 64.134597][ T4225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.435923][ T4251] FAULT_INJECTION: forcing a failure. [ 64.435923][ T4251] name failslab, interval 1, probability 0, space 0, times 0 [ 64.467882][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.478671][ T4251] CPU: 1 UID: 0 PID: 4251 Comm: syz.1.225 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.478711][ T4251] Tainted: [W]=WARN [ 64.478727][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.478776][ T4251] Call Trace: [ 64.478808][ T4251] [ 64.478817][ T4251] __dump_stack+0x1d/0x30 [ 64.478846][ T4251] dump_stack_lvl+0x95/0xd0 [ 64.478870][ T4251] dump_stack+0x15/0x1b [ 64.478893][ T4251] should_fail_ex+0x263/0x280 [ 64.478951][ T4251] should_failslab+0x8c/0xb0 [ 64.478991][ T4251] kmem_cache_alloc_noprof+0x66/0x400 [ 64.479053][ T4251] ? fcntl_setlk+0x53/0x960 [ 64.479140][ T4251] ? __rcu_read_unlock+0x4e/0x70 [ 64.479164][ T4251] fcntl_setlk+0x53/0x960 [ 64.479307][ T4251] ? avc_has_perm+0x101/0x190 [ 64.479333][ T4251] ? should_fail_ex+0xd9/0x280 [ 64.479431][ T4251] do_fcntl+0x6a1/0xf80 [ 64.479469][ T4251] __se_sys_fcntl+0xb1/0x120 [ 64.479503][ T4251] __x64_sys_fcntl+0x43/0x50 [ 64.479576][ T4251] x64_sys_call+0x2844/0x3020 [ 64.479609][ T4251] do_syscall_64+0x12c/0x370 [ 64.479651][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.479709][ T4251] RIP: 0033:0x7fcfd53ebf79 [ 64.479735][ T4251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.479757][ T4251] RSP: 002b:00007fcfd3e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 64.479819][ T4251] RAX: ffffffffffffffda RBX: 00007fcfd5665fa0 RCX: 00007fcfd53ebf79 [ 64.479837][ T4251] RDX: 0000200000000400 RSI: 0000000000000025 RDI: 0000000000000003 [ 64.479853][ T4251] RBP: 00007fcfd3e47090 R08: 0000000000000000 R09: 0000000000000000 [ 64.479869][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.479885][ T4251] R13: 00007fcfd5666038 R14: 00007fcfd5665fa0 R15: 00007ffe04f47b78 [ 64.479909][ T4251] [ 64.739658][ T4260] loop2: detected capacity change from 0 to 512 [ 64.788531][ T4256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.817673][ T4263] loop1: detected capacity change from 0 to 4096 [ 64.833932][ T4260] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 64.848811][ T4260] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.230: iget: bad i_size value: 12154757448730 [ 64.880718][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.907063][ T4269] loop3: detected capacity change from 0 to 512 [ 64.922241][ T4260] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.922503][ T4260] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.230: couldn't read orphan inode 13 (err -117) [ 64.931731][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 64.931773][ C0] EXT4-fs (loop2): initial error at time 1771312362: ext4_orphan_get:1391: inode 13 [ 64.931819][ C0] EXT4-fs (loop2): last error at time 1771312362: ext4_orphan_get:1391: inode 13 [ 64.959438][ T4269] EXT4-fs: Ignoring removed nobh option [ 64.983649][ T4260] loop2: lost filesystem error report for type 5 error -117 [ 64.989498][ T4260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.013879][ T4269] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.053632][ T4272] loop4: detected capacity change from 0 to 4096 [ 65.074658][ T4269] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.231: iget: bad i_size value: 38620345925642 [ 65.088882][ T4269] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.089528][ T4269] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.231: couldn't read orphan inode 15 (err -117) [ 65.098742][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.098766][ C1] EXT4-fs (loop3): initial error at time 1771312363: ext4_orphan_get:1391: inode 15 [ 65.098808][ C1] EXT4-fs (loop3): last error at time 1771312363: ext4_orphan_get:1391: inode 15 [ 65.121896][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.127814][ T4269] loop3: lost filesystem error report for type 5 error -117 [ 65.168989][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.173399][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.202194][ T4269] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.231: iget: bad i_size value: 38620345925642 [ 65.215052][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.238427][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.281053][ T4276] 9p: Bad value for 'rfdno' [ 65.351507][ T4285] FAULT_INJECTION: forcing a failure. [ 65.351507][ T4285] name failslab, interval 1, probability 0, space 0, times 0 [ 65.365540][ T4281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.378517][ T4281] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.393429][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: syz.1.236 Tainted: G W syzkaller #0 PREEMPT(full) [ 65.393479][ T4285] Tainted: [W]=WARN [ 65.393488][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.393503][ T4285] Call Trace: [ 65.393513][ T4285] [ 65.393528][ T4285] __dump_stack+0x1d/0x30 [ 65.393567][ T4285] dump_stack_lvl+0x95/0xd0 [ 65.393597][ T4285] dump_stack+0x15/0x1b [ 65.393686][ T4285] should_fail_ex+0x263/0x280 [ 65.393712][ T4285] ? vmstat_start+0x8d/0x480 [ 65.393738][ T4285] should_failslab+0x8c/0xb0 [ 65.393815][ T4285] __kmalloc_cache_noprof+0x5f/0x410 [ 65.393843][ T4285] vmstat_start+0x8d/0x480 [ 65.393872][ T4285] seq_read_iter+0x281/0x940 [ 65.393951][ T4285] proc_reg_read_iter+0x110/0x180 [ 65.393994][ T4285] do_iter_readv_writev+0x4fd/0x5a0 [ 65.394030][ T4285] vfs_readv+0x1f4/0x6e0 [ 65.394072][ T4285] __x64_sys_preadv+0xfd/0x1c0 [ 65.394113][ T4285] x64_sys_call+0x2915/0x3020 [ 65.394146][ T4285] do_syscall_64+0x12c/0x370 [ 65.394234][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.394256][ T4285] RIP: 0033:0x7fcfd53ebf79 [ 65.394271][ T4285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.394289][ T4285] RSP: 002b:00007fcfd3e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 65.394309][ T4285] RAX: ffffffffffffffda RBX: 00007fcfd5665fa0 RCX: 00007fcfd53ebf79 [ 65.394360][ T4285] RDX: 0000000000000001 RSI: 0000200000001e80 RDI: 0000000000000004 [ 65.394377][ T4285] RBP: 00007fcfd3e47090 R08: 0000000000000000 R09: 0000000000000000 [ 65.394393][ T4285] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 65.394405][ T4285] R13: 00007fcfd5666038 R14: 00007fcfd5665fa0 R15: 00007ffe04f47b78 [ 65.394490][ T4285] [ 65.469642][ T4281] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz.4.234: Directory hole found for htree leaf block 0 [ 65.673267][ T4291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.687814][ T4291] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 65.701990][ T4296] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 65.715970][ T4291] EXT4-fs (loop2): 1 truncate cleaned up [ 65.735449][ T4300] SELinux: failed to load policy [ 65.775442][ T4291] netlink: 'syz.2.237': attribute type 33 has an invalid length. [ 65.783587][ T4291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'. [ 65.796502][ T4291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 65.805862][ T4291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 65.820884][ T4291] syz_tun: entered promiscuous mode [ 65.828712][ T4291] syz_tun: left promiscuous mode [ 65.844487][ T4309] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.934554][ T4318] FAULT_INJECTION: forcing a failure. [ 65.934554][ T4318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.947888][ T4318] CPU: 1 UID: 0 PID: 4318 Comm: syz.2.249 Tainted: G W syzkaller #0 PREEMPT(full) [ 65.947926][ T4318] Tainted: [W]=WARN [ 65.947934][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.947948][ T4318] Call Trace: [ 65.947960][ T4318] [ 65.947970][ T4318] __dump_stack+0x1d/0x30 [ 65.948077][ T4318] dump_stack_lvl+0x95/0xd0 [ 65.948158][ T4318] dump_stack+0x15/0x1b [ 65.948176][ T4318] should_fail_ex+0x263/0x280 [ 65.948239][ T4318] should_fail+0xb/0x20 [ 65.948257][ T4318] should_fail_usercopy+0x1a/0x20 [ 65.948280][ T4318] _copy_from_user+0x1c/0xb0 [ 65.948312][ T4318] bpf_test_init+0xb9/0x130 [ 65.948402][ T4318] bpf_prog_test_run_xdp+0x306/0xa10 [ 65.948492][ T4318] ? __rcu_read_unlock+0x4e/0x70 [ 65.948512][ T4318] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 65.948533][ T4318] bpf_prog_test_run+0x204/0x340 [ 65.948573][ T4318] __sys_bpf+0x52e/0x7e0 [ 65.948715][ T4318] __x64_sys_bpf+0x41/0x50 [ 65.948745][ T4318] x64_sys_call+0x10cb/0x3020 [ 65.948770][ T4318] do_syscall_64+0x12c/0x370 [ 65.948852][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.948876][ T4318] RIP: 0033:0x7f0bdf3ebf79 [ 65.948893][ T4318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.948911][ T4318] RSP: 002b:00007f0bdde47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.948933][ T4318] RAX: ffffffffffffffda RBX: 00007f0bdf665fa0 RCX: 00007f0bdf3ebf79 [ 65.948987][ T4318] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 65.949000][ T4318] RBP: 00007f0bdde47090 R08: 0000000000000000 R09: 0000000000000000 [ 65.949084][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.949096][ T4318] R13: 00007f0bdf666038 R14: 00007f0bdf665fa0 R15: 00007fff9122b0f8 [ 65.949117][ T4318] [ 66.141077][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 66.141096][ T28] audit: type=1400 audit(1771312364.199:648): avc: denied { block_suspend } for pid=4308 comm="syz.0.247" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.283381][ T28] audit: type=1400 audit(1771312364.339:649): avc: denied { connect } for pid=4324 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.305572][ T4327] 9p: Bad value for 'wfdno' [ 66.316266][ T4325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4325 comm=syz.2.252 [ 66.367075][ T4332] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 66.375453][ T4332] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.254: iget: bad i_size value: 12154757448730 [ 66.388462][ T4332] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.388800][ T4332] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.254: couldn't read orphan inode 13 (err -117) [ 66.409733][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 66.409762][ C1] EXT4-fs (loop2): initial error at time 1771312364: ext4_orphan_get:1391: inode 13 [ 66.409788][ C1] EXT4-fs (loop2): last error at time 1771312364: ext4_orphan_get:1391: inode 13 [ 66.434813][ T4332] loop2: lost filesystem error report for type 5 error -117 [ 66.463880][ T4335] netlink: 'syz.2.255': attribute type 3 has an invalid length. [ 66.530545][ T4339] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.542099][ T28] audit: type=1400 audit(1771312364.599:650): avc: denied { watch watch_reads } for pid=4338 comm="syz.2.257" path="/71/file2" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.566469][ T28] audit: type=1400 audit(1771312364.629:651): avc: denied { setattr } for pid=4338 comm="syz.2.257" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.627534][ T4346] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.634788][ T4346] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 66.644515][ T4346] EXT4-fs (loop2): 1 truncate cleaned up [ 66.725267][ T4346] netlink: 100 bytes leftover after parsing attributes in process `syz.2.259'. [ 66.798172][ T4359] EXT4-fs: Ignoring removed nobh option [ 66.810075][ T4358] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=311 sclass=netlink_xfrm_socket pid=4358 comm=syz.0.262 [ 66.812567][ T28] audit: type=1400 audit(1771312364.869:652): avc: denied { sqpoll } for pid=4343 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.886321][ T4362] FAULT_INJECTION: forcing a failure. [ 66.886321][ T4362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.918734][ T4362] CPU: 1 UID: 0 PID: 4362 Comm: syz.0.264 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.918833][ T4362] Tainted: [W]=WARN [ 66.918840][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.918852][ T4362] Call Trace: [ 66.918857][ T4362] [ 66.918865][ T4362] __dump_stack+0x1d/0x30 [ 66.918897][ T4362] dump_stack_lvl+0x95/0xd0 [ 66.918932][ T4362] dump_stack+0x15/0x1b [ 66.918969][ T4362] should_fail_ex+0x263/0x280 [ 66.919001][ T4362] should_fail+0xb/0x20 [ 66.919023][ T4362] should_fail_usercopy+0x1a/0x20 [ 66.919051][ T4362] _copy_from_iter+0xcf/0xea0 [ 66.919084][ T4362] ? __alloc_skb+0x4f6/0x690 [ 66.919107][ T4362] ? __alloc_skb+0x200/0x690 [ 66.919157][ T4362] netlink_sendmsg+0x4ae/0x6f0 [ 66.919195][ T4362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.919238][ T4362] ____sys_sendmsg+0x5af/0x600 [ 66.919267][ T4362] ___sys_sendmsg+0x195/0x1e0 [ 66.919343][ T4362] __x64_sys_sendmsg+0xd4/0x160 [ 66.919382][ T4362] x64_sys_call+0x194c/0x3020 [ 66.919415][ T4362] do_syscall_64+0x12c/0x370 [ 66.919479][ T4362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.919506][ T4362] RIP: 0033:0x7f1af78abf79 [ 66.919525][ T4362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.919563][ T4362] RSP: 002b:00007f1af62ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.919588][ T4362] RAX: ffffffffffffffda RBX: 00007f1af7b25fa0 RCX: 00007f1af78abf79 [ 66.919601][ T4362] RDX: 000000000004c050 RSI: 0000200000000000 RDI: 0000000000000006 [ 66.919613][ T4362] RBP: 00007f1af62ff090 R08: 0000000000000000 R09: 0000000000000000 [ 66.919646][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.919658][ T4362] R13: 00007f1af7b26038 R14: 00007f1af7b25fa0 R15: 00007fffd837b7c8 [ 66.919679][ T4362] [ 67.193770][ T4359] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 67.226687][ T4365] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 67.239559][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.265: iget: bad i_size value: 12154757448730 [ 67.263119][ T4368] tipc: Started in network mode [ 67.268040][ T4368] tipc: Node identity 06b08b522565, cluster identity 4711 [ 67.275621][ T4359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 67.292169][ T4359] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.298822][ T4365] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.299009][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.265: couldn't read orphan inode 13 (err -117) [ 67.309624][ T4368] tipc: Enabled bearer , priority 0 [ 67.320040][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 67.333304][ C1] EXT4-fs (loop2): initial error at time 1771312365: ext4_orphan_get:1391: inode 13 [ 67.333963][ T4359] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.263: attempt to clear invalid blocks 1024 len 1 [ 67.342756][ C1] EXT4-fs (loop2): last error at time 1771312365: ext4_orphan_get:1391: inode 13 [ 67.349807][ T4365] loop2: lost filesystem error report for type 5 error -117 [ 67.367690][ T4359] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.375356][ T4359] EXT4-fs (loop3): Remounting filesystem read-only [ 67.384520][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 67.384542][ C1] EXT4-fs (loop3): initial error at time 1771312365: ext4_clear_blocks:876: inode 11 [ 67.384590][ C1] EXT4-fs (loop3): last error at time 1771312365: ext4_clear_blocks:876: inode 11 [ 67.407727][ T4368] syzkaller0: entered promiscuous mode [ 67.422632][ T4359] EXT4-fs (loop3): 1 truncate cleaned up [ 67.449319][ T4368] syzkaller0: entered allmulticast mode [ 67.529089][ T4368] syzkaller0: mtu greater than device maximum [ 67.535667][ T4367] tipc: Resetting bearer [ 67.543781][ T4367] tipc: Disabling bearer [ 67.583762][ T28] audit: type=1400 audit(2000000000.100:653): avc: denied { bind } for pid=4376 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.618626][ T28] audit: type=1400 audit(2000000000.120:654): avc: denied { setopt } for pid=4376 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.634004][ T4378] futex_wake_op: syz.3.269 tries to shift op by 32; fix this program [ 67.702425][ T4382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.735235][ T4389] syzkaller0: entered promiscuous mode [ 67.748868][ T4389] syzkaller0: entered allmulticast mode [ 67.783037][ T4393] set_capacity_and_notify: 10 callbacks suppressed [ 67.783054][ T4393] loop4: detected capacity change from 0 to 512 [ 67.821655][ T4393] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.834326][ T4393] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.843164][ T4393] EXT4-fs (loop4): 1 truncate cleaned up [ 67.853718][ T4382] loop1: detected capacity change from 0 to 512 [ 67.869621][ T4393] netlink: 100 bytes leftover after parsing attributes in process `syz.4.276'. [ 67.886439][ T4382] EXT4-fs (loop1): 1 truncate cleaned up [ 67.948083][ T28] audit: type=1400 audit(2000000000.460:655): avc: denied { write } for pid=4402 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.977585][ T28] audit: type=1400 audit(2000000000.490:656): avc: denied { ioctl } for pid=4402 comm="syz.0.278" path="socket:[11796]" dev="sockfs" ino=11796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.058806][ T4408] netlink: 228 bytes leftover after parsing attributes in process `syz.4.279'. [ 68.068909][ T4409] netlink: 228 bytes leftover after parsing attributes in process `syz.4.279'. [ 68.080261][ T28] audit: type=1400 audit(2000000000.600:657): avc: denied { create } for pid=4406 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.126277][ T4413] syz_tun: entered allmulticast mode [ 68.206082][ T4412] syz_tun: left allmulticast mode [ 68.276226][ T4419] loop4: detected capacity change from 0 to 512 [ 68.298998][ T4419] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.348853][ T4419] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.391891][ T4419] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.283: corrupted xattr block 6: invalid header [ 68.405697][ T4419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 68.415848][ T4419] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.283: corrupted xattr block 6: invalid header [ 68.429434][ T4419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 68.438829][ T4419] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.283: corrupted xattr block 6: invalid header [ 68.452274][ T4419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 68.462830][ T4419] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.283: corrupted xattr block 6: invalid header [ 68.476873][ T4419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 68.487854][ T4419] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.283: corrupted xattr block 6: invalid header [ 68.502206][ T4419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 68.592424][ T4434] loop4: detected capacity change from 0 to 512 [ 68.638979][ T4434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.654880][ T4434] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 68.727816][ T4434] EXT4-fs (loop4): 1 truncate cleaned up [ 68.834829][ T4434] netlink: 100 bytes leftover after parsing attributes in process `syz.4.288'. [ 69.207790][ T4452] capability: warning: `syz.0.291' uses deprecated v2 capabilities in a way that may be insecure [ 69.419375][ T4459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.630874][ T4463] loop1: detected capacity change from 0 to 512 [ 69.707927][ T30] ================================================================== [ 69.716081][ T30] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 69.723418][ T30] [ 69.725774][ T30] read to 0xffff88811b385e00 of 4 bytes by task 70 on cpu 0: [ 69.733210][ T30] atime_needs_update+0x25f/0x3e0 [ 69.738285][ T30] touch_atime+0x4a/0x330 [ 69.742676][ T30] shmem_file_read_iter+0x477/0x540 [ 69.747933][ T30] lo_rw_aio+0x67d/0x730 [ 69.752222][ T30] loop_process_work+0x56c/0xac0 [ 69.757238][ T30] loop_workfn+0x31/0x40 [ 69.761534][ T30] process_scheduled_works+0x4de/0x9e0 [ 69.767027][ T30] worker_thread+0x581/0x770 [ 69.771645][ T30] kthread+0x22a/0x280 [ 69.775751][ T30] ret_from_fork+0x150/0x360 [ 69.780374][ T30] ret_from_fork_asm+0x1a/0x30 [ 69.785169][ T30] [ 69.787512][ T30] write to 0xffff88811b385e00 of 4 bytes by task 30 on cpu 1: [ 69.794988][ T30] touch_atime+0x1d7/0x330 [ 69.799515][ T30] shmem_file_read_iter+0x477/0x540 [ 69.804743][ T30] lo_rw_aio+0x67d/0x730 [ 69.809010][ T30] loop_process_work+0x56c/0xac0 [ 69.813979][ T30] loop_rootcg_workfn+0x22/0x30 [ 69.818858][ T30] process_scheduled_works+0x4de/0x9e0 [ 69.824350][ T30] worker_thread+0x581/0x770 [ 69.828976][ T30] kthread+0x22a/0x280 [ 69.833065][ T30] ret_from_fork+0x150/0x360 [ 69.837774][ T30] ret_from_fork_asm+0x1a/0x30 [ 69.842579][ T30] [ 69.844918][ T30] value changed: 0x0c8458a8 -> 0x0d1cef29 [ 69.850680][ T30] [ 69.853036][ T30] Reported by Kernel Concurrency Sanitizer on: [ 69.859203][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.870084][ T30] Tainted: [W]=WARN [ 69.873909][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.883986][ T30] Workqueue: loop1 loop_rootcg_workfn [ 69.889389][ T30] ==================================================================