last executing test programs: 40.068541316s ago: executing program 1 (id=164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 40.031173758s ago: executing program 1 (id=166): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e1d, @loopback}}) tkill(r1, 0x12) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setns(r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 39.65580317s ago: executing program 1 (id=168): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004, 0xf4ffffff}) 39.215250016s ago: executing program 1 (id=173): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/129) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r3) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000240)='fd/3\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000001140)=0x80000000) clock_getres(0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000640)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001240)="5a6090ac0b1a2a4f931d65d0350d2d20c2b8d213107726802546a4b72fabc52384cb327f6af3cb30e6f45014ec101a82c08d51b90066e3048f4f52a62c8820a866371e14d580d1a526f2a8a18ba1fcadd60e28ace5671fdc496190fb12af2104cc643cd6c6a42a7a48d9b2c93b8003ee47e6b6dccd11262d2c1b3216bf88436de16e2e22bdd3aee76377f3919e37a94be61a17d985777b0a207a0751ac34bd2a61edd280649d27e287020aec21460b26932c9e0960332992f29bf1c9b6276ddebca8182e6bcfde0f9ea710e2e7c5758102f176b1f105ffd363266fa8fa62219e4caf44fcf06894102098b9", 0xeb}, {&(0x7f00000002c0)="ea71e815b2d098119c7b30984404c62f61479606a2395f9066d83bc3d101ac8557cf5bcedec5aa77b85a63811ad107b2b44eca87b8033a9d052e7efa6c38e1c1d5db5e59efbc4b3ae180f3b29f996bf5d7c0f557e4251ceaad4ffd0e99a4f107a4903266780977905ff92a11b985d3395334b0fb80866fe66ce7cfc2d4da3430c4d20b9ef1060f8447b4729a71f790f1928fecf473c95a60e5fb4cabf463ccdb6b5ead55c2abf3d05dcb5d7edf46417fb5c714818f0ae4fbda88412fc463884bbbf0d7ee6b68375950fbc4010457b06903c86e97361f683fca60f3fbe63b1ad08e66347029a02c", 0xe7}, {&(0x7f00000003c0)="21dc384c4362cf03927e1825f329e46d4ed63830209c36708509421524893fee5c0e7c8f60b736629232e7e74ce9ffc3111526de0e87d98e62d76775552e058b73b21e7993d9ce3063a84ea13461a51bd9534c6255a277872fa9fa0d2e7274ad4ad083728851a56cc516be581eb1c990700b16c84563bfb2a929437d1e2bf550dfeaa37ef932990b628df7ed18ed8f3ca96b81df4cfc39110d0a5b11337b01960e4fe71a7eec5f70982f23bc388fee3b80a3ec2bf8f7d5961e3c4719f6e3808e6184c909384cad1084a0fe633694cc0aa16ca68c2ca99f", 0xd7}, {&(0x7f00000001c0)="128b1d941cde54a66b9a292c763539b1a035a3b85d3f43abb8e124c18f31f48ac94cdef1833741622a08f8ee7f76caab64ba3f640655bd3bf312d2baddda230c856ad128e70ecf3b74415ab2a8d3614fc06a820245e8068b7a4c6d6f55de737429ac5dcdecf139c2072cdde1ebfffe0ad1c997f47b", 0x75}, {&(0x7f00000004c0)="a2860da3fa67e9e1b0fd754fa6af597e0444a131b74bd28bfc42c9164894a2af33ea5973c28e8178e75669bb2df928b40fddf7a7aa56b94c62a30e84033013b1eb4f035001f4d94053a164d048f3bec33d8992014b0499c50d96ae38a97f917a88c8dc54c7bec988ec6ff61a10e1ed1f", 0x70}, {&(0x7f0000000240)="d0b8caee03616304a3327e9cfa28bb10dddcdf76fda975f4968ef61b5bf179c5", 0x20}], 0x6, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x50}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xd3, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x9, [{@multicast1, 0x3}]}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x4, [0x4, 0x0, 0x3, 0x6]}]}}}], 0x58}, 0x40400c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) creat(&(0x7f00000000c0)='./file1\x00', 0x1a0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000006feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=r6, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000000008001b"], 0x50}}, 0x800) 38.63873543s ago: executing program 1 (id=188): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 38.206187275s ago: executing program 1 (id=184): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x11c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa46}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 38.182160096s ago: executing program 32 (id=184): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x11c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa46}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.902481912s ago: executing program 0 (id=748): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500033f01400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'mem'}, 0xc) r3 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000340)={{r3}, "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"}) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0xe, 0x1, 0x3, 0x2}, 0x10}}, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="15aed1e2c1a53a2806a9bdc56d7069483147195383c57c58de9f6f0f6bf5c36348d96dc592220f7b271e02c96ec2084fdf3a36c1fce6a1c54b176c40b9a1d84351349a5211aa7504dbc3daaf64606f810e4028917fa08904e39e7dd2efd2bf4be2e533991359874eed9a2c14aaa4bfef99745e31372de0affac0d17d0e9779ad85a84983c9da2b"]) close_range(0xffffffffffffffff, r0, 0x0) 3.782864659s ago: executing program 0 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1c}, 0x1, 0x2b1e}, 0x0) 3.744403661s ago: executing program 0 (id=751): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf32(r2, 0x0, 0x69) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x10, r2, 0x180000000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f00000002c0)={[{@grpquota}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpid}]}, 0x1, 0x451, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x141) lseek(r5, 0x9, 0x4) fsetxattr$security_evm(r5, &(0x7f00000000c0), 0x0, 0x0, 0x1) getdents64(r5, 0x0, 0x4a) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x80, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x60, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r1, 0x4, {0x0, r4}, 0x40000, 0xa, 0x1, {0x0, 0x0, r5}}) r6 = socket(0xa, 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x74131, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)=ANY=[], 0x90) syz_emit_ethernet(0x4c, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200aaaaaaaaaa198100000086dd60910100001202000000000000000000000000000000090000000000000000000000000000ecff000000210e220012908e020300000000000008000000efc5ed308dc39b5eff9d02be8cd5d043021f16d5ab97625bb2ee4152a0cae16664c28332c42fad8436a96a51c41b3623f087cea9079bd9caea"], 0x0) close(r3) 3.116859117s ago: executing program 0 (id=756): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4c20, 0x65b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfb}, 0x1c) 3.007823104s ago: executing program 0 (id=757): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x1000, &(0x7f0000000440), 0x0, 0xbcf, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x1800, 0xffffffffffffffff, 0x2, 0x0, 0x10001}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/pid\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0x8004b706, 0x0) 2.113186516s ago: executing program 3 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f310000080001000100000014000600ff010000000000000000000000000001fefe5f30c1f9a1ace7b2f2ecb289cb118869bfac42b869307c75ca36e58542e4b8f0be154a0169006775905b41e8ecf3374f82e2f596c6302bd5d0cd7f26ed824a5604ee51e1f3eeddb308441f160ff4e9f692af3809b39289692f9ccf369734b56b2c3fcda37ef9eda6097dfe0b311aaae99140d80fae63cc6b9cbb90d2c44a17078bf5325cbab1f6c76f07e67469c522cdc87c5ebfc62644b0b1ec190ef3e9bf3e2f377f7cbdbb9f7cb6a37be130f10abb7d518918d03dbada0ec7e3d81853bcda36a5f0457e187355d9"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 2.04351515s ago: executing program 3 (id=771): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000081ffffffffffff", @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500", @ANYRES32], 0x3c}}, 0x8000) 1.946906856s ago: executing program 3 (id=772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086a050e0100000000000109022400010000c00509043f946659f3d45a0021c1030004000921d8112801220700090581030002090a11"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000001440)={0x77359400}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee01) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x149a82, 0x1c8) write$cgroup_int(r7, &(0x7f0000000040)=0x800000000001c9, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003d00)={0x60, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff7}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) r10 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xe, 0x9211, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdf, 0x1, @perf_config_ext={0xfff, 0xffffffff}, 0x1cce3, 0x100004, 0x0, 0x2, 0x20006, 0x400, 0x5, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x75}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETNOCSUM(r6, 0x400454ce, 0x1) 1.946676026s ago: executing program 4 (id=773): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) io_uring_setup(0x6ed5, &(0x7f0000001dc0)={0x0, 0xaf69, 0x400, 0x3, 0x1ce}) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000008e612b001a39178c2d2c5a21faba039437072ee00a6af79903c67ab1878e994a7ccb5a0a4dcf5eee3b9ad826e184fd8fa09e1084b941c67cb75bf68993bb8e3d8be7a1b9036560873b905cd2109df37ff9478109593d689c323819652339928a31eec9075c8cc74762ba524231826af2ebb4cfb42ccee690f160b03f30beca51047ad16a8be0bd850c75e78dad06e09551f5235c84845e", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000640)='cpu<08\n&\f0\xed') write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 1.471389514s ago: executing program 5 (id=778): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="000325bd7000fb"], 0x40}, 0x1, 0x0, 0x0, 0x77503dc51f87cbfc}, 0x80) r2 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r2, 0x6686, 0x2936, 0x28, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="3c1c17000000000000000316d53dec0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0), 0xff, 0x55c, &(0x7f0000000440)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000440)={0xe60d, 0x5, 0x5, 0x7f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x49) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="3c010000100013070000000000000000aafe8000000000000000000000001900aa130000004e2201000014046cd2990b00202000000000aecedddfb8308e4c05ba95a6038667f72c6d5c6c020f299db0776ee8a8f98ee893004c55331fc7b1469bdaccfbc70c5bdf2add341c16d619c75c86c1dce17d46c70ec325869f2ba044ff0cb44e20e2aecf3feb1dcfbb543106be138286462c72", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d63300000064010100000000000000000000000000000000000000000007000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000800000000040000005fd400000100000001020000000000000a00000000000000000000004c0014007368613338342d737373653300"/244], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 1.469010714s ago: executing program 5 (id=779): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4c2, &(0x7f0000000a00)="$eJzs3c9PXFsdAPDvvUDh8XgPnr74K+qrz2o1TWdg2pKmq7rRmKaJsXHlokWYEsIMQ5ihKdgF/R9M7FZXrl2YuDDpyr073RmTujCp2miKiYsx987QUjpDiYW5DfP5JDf3nntm5nsOcM+58wXmBDC0zkbETkSciYg7ETHdPZ90t7je2bLHPX/2YHH32YPFJNrtW/9I8vrsXOx7Tub97mtORMQPvxfxk+T1uM2t7dWFWq260S2XW/X1cnNr+y8r9YXl6nJ1rVKZn5ufvXrpSuXY+vpJ/ddPv7ty40e/++1Xnvxh59s/zZo11a3b34/j1On62Is4mdGIuHESwQow0u3PmaIbwv8ljYjPRMSn2fXfLro1AMAgtNvT0Z7eXwYATrs0z4ElaambC5iKNC2VOjm8j2MyrTWarQt3G5trS51c2UyMpXdXatXZbq5wJsaSrDyXH78sVw6UL0XERxHxs/H38nJpsVFbKvLGBwCG2PsH5v9/j3fmfwDglJsougEAwMCZ/wFg+Jj/AWD4mP8BYPiY/wFg+Jj/AWD4mP8BYKj84ObNbGvvdj//eune1uZq497FpWpztVTfXCwtNjbWS8uNxnL+mT31N71erdFYn7scm/fLrWqzVW5ubd+uNzbXWrfzz/W+XR0bSK8AgMN89MnjPyURsXPtvXyLfWs5mKvhdEuLbgBQmJGiGwAUZrToBgCFGfMWAIZejyV6X9H3T4Qe9X2K9CG8485/Uf4fhpWbfxhe8v8wvOT/YXi124k1/wFgyMjxAyfw+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA49abyLUlL3bXApyJNS6WIDyJiJsaSuyu16mxEfBgRfxwfG8/Kc0U3GgB4S+nfku76X+enz00drD2T/Gc830f86nOdU62Nuez8P/fOR+vRrZ/fX2i1NiqHBrLUIAAUZG+ezvf73sg/f/ZgcW8bZHuefqezuGgWd7e7dWpGYzTfT+Q3DpP/Srrljux+ZeQY4u88jIgv9Op/kudGZrornx6Mn8X+YKDx01fip3ldZ599LT57DG2BYfM4G3+u97r+0jib73tf/xP5CPX29sa/3dfGv/TF+DfSZ/w7e9QYl3///b51DyO+NNorfvIiftIn/rkjxv/zl7/6ab+69i8izkfv+PtjlVv19XJza/viSn1hubpcXatU5ufmZ69eulIp5znq8l6m+nV/v3bhw8P6P9kn/sQb+v+NI/b/l/+98+OvHRL/W1/v/f3/+JD42Zz4zSPGX5j8Td/lu7P4S737331O//5fOGL8J3/dXjriQwGAAWhuba8u1GrVDQcDO8ju3d6BZjgo7CD7CTiO1/n8CTa16JEJOGkvL/qiWwIAAAAAAAAAAAAAAPQziH94KrqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CwAA//8gsNTi") truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x5}, [{0x2, 0x3}, {0x2, 0x5}], {}, [{0x8, 0x6}, {}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x3) 1.468357954s ago: executing program 4 (id=780): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000006060101000000000000000007000003050001000700000075ace2bf6f0a175e03f4b8bf73dd3a3c184fddd81ce58081d5af72fa66cb"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000140)={0x100, 0x80000001, 0xfffffffe, 0x1}) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x3c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe, 0x33}}, 0xe8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000240)) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.330725482s ago: executing program 4 (id=781): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r2, 0x1, 0x4070bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x45}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x18) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa) syz_emit_ethernet(0xd5, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd308009f0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1e5140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x40000, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) 1.325909513s ago: executing program 4 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f310000080001000100000014000600ff010000000000000000000000000001fefe5f30c1f9a1ace7b2f2ecb289cb118869bfac42b869307c75ca36e58542e4b8f0be154a0169006775905b41e8ecf3374f82e2f596c6302bd5d0cd7f26ed824a5604ee51e1f3eeddb308441f160ff4e9f692af3809b39289692f9ccf369734b56b2c3fcda37ef9eda6097dfe0b311aaae99140d80fae63cc6b9cbb90d2c44a17078bf5325cbab1f6c76f07e67469c522cdc87c5ebfc62644b0b1ec190ef3e9bf3e2f377f7cbdbb9f7cb6a37be130f10abb7d518918d03dbada0ec7e3d81853bcda36a5f0457e187355d90909035e"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 1.236717017s ago: executing program 3 (id=784): syz_emit_ethernet(0x66, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x4400}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x500}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) 1.223627528s ago: executing program 4 (id=785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0xff, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x8482, 0x5bd20d9e, 0x800000, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='*-\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1820) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setpgid(r1, r1) setpgid(0x0, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x12, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f0000000800", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x60002016}) fcntl$setpipe(r3, 0x407, 0x10005) open_tree(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x9100) listen(0xffffffffffffffff, 0x5) 1.159014962s ago: executing program 3 (id=787): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000001500)) set_mempolicy(0x0, 0x0, 0x3) 1.067527238s ago: executing program 3 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000080000001}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xae, 0x10000}, 0x28) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x6b, 0x377fd2c6}}]}]}]}, 0x4c}}, 0x0) 971.957593ms ago: executing program 5 (id=792): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000001"], 0x108}}], 0x1, 0xc040) 891.165938ms ago: executing program 5 (id=794): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800c11, &(0x7f00000004c0)=ANY=[], 0x1, 0xa5a, &(0x7f0000001500)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000300"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000020000001d"], 0x642182) socket$isdn(0x22, 0x3, 0x25) 766.980405ms ago: executing program 5 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086a050e0100000000000109022400010000c00509043f946659f3d45a0021c1030004000921d8112801220700090581030002090a11"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000001440)={0x77359400}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee01) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x2) 699.215859ms ago: executing program 2 (id=799): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 623.315673ms ago: executing program 2 (id=800): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40ef000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x298bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000018000100ffff95ff000000000ab28f0a434d228afcd98dfc5ef05cf429000000000000000000810000000001000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4048080) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0xc, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x800001ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 516.97897ms ago: executing program 4 (id=801): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40000022, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x300) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000780)={0x0, "f874babcf1be7e138023083737ccdc75"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x10c4, &(0x7f0000000000)={0x0, 0x7f36, 0x100, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001780)={0x1f, 0x4, {0x8, @usage=0x4, 0x0, 0x0, 0x1ff, 0x400, 0x3, 0x1, 0x95, @usage=0x100, 0x7fffffff, 0x61, [0x9, 0x30, 0xa, 0x2, 0x0, 0xc08]}, {0x1000, @struct={0xfffffff7, 0x3}, 0x0, 0x6, 0x608, 0xa, 0x0, 0xd, 0xd1, @struct={0x2, 0xfff}, 0x2, 0x8, [0x7, 0x2, 0xee0d, 0x4, 0x10004, 0xffff]}, {0x4, @usage=0x5, 0x0, 0x8, 0x2, 0x7, 0x3, 0x800, 0x8a, @usage=0x9, 0x1, 0xfffffff9, [0xae75, 0x2, 0x7fffffffffffffff, 0x81, 0x1, 0x40000]}, {0x100000001, 0x2, 0xb8a}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001b80)={0xa, 0x2, {0x4, @struct={0xffffffff, 0xe}, 0x0, 0x7fffffff, 0x0, 0x9, 0x3, 0x7, 0xe5, @usage=0xb3, 0x4, 0x0, [0x4, 0x30af, 0x0, 0x7, 0xc5, 0x10]}, {0x2, @struct={0xb}, 0x0, 0x3, 0x3, 0x80, 0x5bf, 0x0, 0x449, @usage=0x3, 0x8, 0x8, [0x662ee87d, 0x9, 0xc10c, 0xd5, 0xf1e5, 0x1000]}, {0x40, @struct={0xff, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffff1, 0x2, 0x4e, 0xe2, @usage=0x7, 0xfffffc00, 0x2, [0xd, 0x2, 0x10000, 0xa, 0xfbb, 0x80]}, {0x9, 0xfffffffffffff3a1, 0x80}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002380)={0x1b, 0x8d500f97080de7a0, {0x8, @struct={0x1, 0x8}, r5, 0x8, 0x8000000000000001, 0x2, 0x6fe, 0xe4f6, 0x80, @struct={0xffffffff, 0x900}, 0x7, 0xffffb83b, [0x10001, 0x7, 0xfffffffffffffffc, 0x0, 0x1ff, 0xd]}, {0x7, @struct={0x38f5, 0xe}, r9, 0x1, 0x10000, 0x1, 0x5, 0x4, 0x71, @usage=0x8, 0xe, 0x6, [0x4, 0x7, 0x4, 0x80000001, 0x51089a2c, 0x101]}, {0x1, @usage=0xf, r10, 0x1, 0x35, 0x100, 0x0, 0xb, 0x88, @struct={0x1, 0x8000}, 0x2, 0x7, [0x1000, 0x8000000000000000, 0x9, 0x6, 0x5fe, 0x3]}, {0x20001131aa54, 0x2, 0x4}}) 274.929324ms ago: executing program 2 (id=802): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000002, &(0x7f00000006c0)={[{@user_xattr}], [{@euid_gt={'euid>', r2}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'syzkaller\x00'}}, {@obj_type={'obj_type', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_role={'subj_role', 0x3d, '/dev/ptp0\x00'}}, {@uid_gt={'uid>', r2}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000080)=[{{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) r5 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000980)={0x40000000}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 212.370467ms ago: executing program 2 (id=803): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000640)='cpu<08\n&\f0\xed') 137.000712ms ago: executing program 2 (id=804): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f0000000040), 0x21, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$char_usb(r0, &(0x7f0000001100)="a19155d5", 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x1, 0xff03, 0x3ff, 0x0, 0x2000000}) 726.8µs ago: executing program 2 (id=805): futex(&(0x7f00000000c0)=0x2, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000240)=0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x9e, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xaf}}, {@discard}, {@inode_readahead_blks}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvgKEgIi5Jkxbogg0IpG6QkGBRlqFNq1K3QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A0RC2Q09kzqOnYaO06c1s8jOTln5tjnfT1zkjNz7AAGVjn7kUTsiojfImKkXr29Qbn+a/HmlS351uqbfyW1dn/fvHKyaFo8b2deGUsj0k+SONCi37lLl89NVyozF/P6xPz59ybmLl1+7uz56TMzZ2YuTB07dvTI5IsvTD3fkzx3Z7Hu/3D24L7jb19//eSJ6+/8+HUW7658f2MedaNr7rMc5dvfywZPrvnVN5fdDeVkqI+B0JFSRGSHa7g2/keiFLcO3ki89nFfgwPWVbVarW5dtrVUFBaqwD0siX5HAPRH8Y8+u/4tHhs4/ei7Gy/XL4CyvBfzR33PUKR5m+Gm69teKkfEiYV/Ps8e0fI+BABAb32bzX+ebTX/S+OBhnb/y9eGRiPi/xGxJyLui4i9EXF/RK3tgxHxUIf9l5vqy+c/v2zvKrFVyuZ/L9XXtprmf8XsL0ZLeW13Lf/h5PTZyszh/D0Zi+GtWX1yhT6+e/XXz9rta5z/ZY+s/2IumMfx51DTDbpT0/PTa8m50Y2PIvYPtco/WVq7yn7vi4j9Xbx+9p6dffqrg+323zn/FfRgnan6ZcRT9eO/EE35F5KV1ycntkVl5vBEcVYs99PP195o1383+fdyQGTHf0fL838p/9Gkcb12rvM+rv3+adtrmm7P/y3JW7VysSD9wfT8/MXJiC3JwvLtU7eeW9SL9ln+Y4daj/89Ef9+kT/vQERkJ/HDEfFIRDyax/5YRDweEYdWyP+HV554t/v811eW/6mOjn/nhdK5779p1//qjv/RWmks37Kav393jmtbRHRzNgMAAMDdJ619Bj5Jx5fKaTo+Xv8M/97YkVZm5+afOT37/oVT9c/Kj8ZwWtzpGmm4HzqZ3xsu6lNN9SO1+8bVarW6vVYfPzlbWa81dWB1drYZ/5k/Sv2ODlh3Ha2jtftGG3BX8n1NGFzGPwwu4x8Gl/EPg6vV+L8asdiHUIAN5v8/DC7jHwaX8Q+Dy/iHgbSW7/WvVNhzfL1e+V4rlDZHGB0XIt0UYXRXSDdHGPXC1ohYbeOrsVGB9fsvEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//+RZOMp") socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) unshare(0x22020400) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x200000001, 0xf60e}, 0x9092, 0x0, 0x43a1bd75, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x4908011, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000000)='./file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x61, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x4, 0x3f, 0x9, @vifc_lcl_addr=@rand_addr=0x64010102, @local}, 0x10) 493.32µs ago: executing program 5 (id=806): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 0s ago: executing program 0 (id=807): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000e88c913313b4caad298d5d062fd1305f1a1f0c9c0e1ffa38b656e85f8e88f573554eec517ea388c5fb60a6cf2f5a4d82d44a036fd99276d1a46c5b1ae86cd50b60ba8a98cd57a8c49a6b7465950028faf39b12bf8c3b9006cce88750ea9903a155ef159e2874df01308aa937b32e44f76a157774372a52ce37cb9e9397b29ab41a9f2d73548501b648f65d1be2"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000200001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44046084) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000880)={0x2}) lgetxattr(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB='uS.ck\x00'], &(0x7f0000000a00)=""/221, 0xdd) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000e88c913313b4caad298d5d062fd1305f1a1f0c9c0e1ffa38b656e85f8e88f573554eec517ea388c5fb60a6cf2f5a4d82d44a036fd99276d1a46c5b1ae86cd50b60ba8a98cd57a8c49a6b7465950028faf39b12bf8c3b9006cce88750ea9903a155ef159e2874df01308aa937b32e44f76a157774372a52ce37cb9e9397b29ab41a9f2d73548501b648f65d1be2"], 0x48) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000200001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44046084) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) (async) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000880)={0x2}) (async) lgetxattr(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB='uS.ck\x00'], &(0x7f0000000a00)=""/221, 0xdd) (async) kernel console output (not intermixed with test programs): r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.449776][ T29] audit: type=1400 audit(1769988871.275:216): avc: denied { shutdown } for pid=3754 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.562936][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.570329][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.813397][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.823674][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.918432][ T3758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.942572][ T3758] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.974905][ T3758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.024565][ T3759] bridge_slave_0: left allmulticast mode [ 45.030299][ T3759] bridge_slave_0: left promiscuous mode [ 45.036059][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.060726][ T3759] bridge_slave_1: left allmulticast mode [ 45.066491][ T3759] bridge_slave_1: left promiscuous mode [ 45.072302][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.095513][ T3759] bond0: (slave bond_slave_0): Releasing backup interface [ 45.104610][ T3759] bond0: (slave bond_slave_1): Releasing backup interface [ 45.306332][ T3759] team0: Port device team_slave_0 removed [ 45.314404][ T3759] team0: Port device team_slave_1 removed [ 45.323631][ T3759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.331573][ T3759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.339849][ T3759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.370782][ T3749] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.413780][ T3782] netlink: 'syz.4.104': attribute type 7 has an invalid length. [ 45.421507][ T3782] netlink: 'syz.4.104': attribute type 8 has an invalid length. [ 45.443500][ T3780] veth3: entered promiscuous mode [ 45.448781][ T3780] veth3: entered allmulticast mode [ 45.457269][ T3784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.490258][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.507263][ T3749] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.527433][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.543312][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.577269][ T3749] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.603247][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 45.627394][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.671322][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.687751][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.723989][ T1706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.739422][ T1706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.798853][ T3807] bridge0: entered promiscuous mode [ 45.871400][ T3812] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 45.958467][ T3717] set_capacity_and_notify: 9 callbacks suppressed [ 45.958501][ T3717] loop0: detected capacity change from 0 to 4096 [ 46.129481][ T3825] netlink: 'syz.2.120': attribute type 3 has an invalid length. [ 46.138086][ T3824] loop0: detected capacity change from 0 to 2048 [ 46.146439][ T3824] ext4: Unknown parameter 'smackfsroot' [ 46.357029][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 46.478707][ T3836] loop0: detected capacity change from 0 to 512 [ 46.489481][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.126: corrupted inode contents [ 46.502227][ T3836] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 46.511283][ T3836] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.126: corrupted inode contents [ 46.524044][ T3836] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.126: mark_inode_dirty error [ 46.536304][ T3836] EXT4-fs (loop0): 1 orphan inode deleted [ 46.549047][ T3839] loop1: detected capacity change from 0 to 512 [ 46.566076][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.613955][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.658242][ T3844] netlink: 92 bytes leftover after parsing attributes in process `syz.1.129'. [ 46.670084][ T3843] loop1: detected capacity change from 0 to 512 [ 46.678958][ T3843] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.697350][ T3849] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 46.711631][ T3843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.129: bg 0: block 393: padding at end of block bitmap is not set [ 46.757587][ T3843] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 46.781468][ T3853] bridge0: entered promiscuous mode [ 46.792778][ T3843] EXT4-fs (loop1): 2 truncates cleaned up [ 46.807297][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.943681][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.983508][ T3867] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 46.989580][ T3870] tmpfs: Unknown parameter 'nrcblocks' [ 47.013377][ T3867] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.020695][ T3867] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.091798][ T3877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 47.213365][ T3881] loop4: detected capacity change from 0 to 4096 [ 47.242852][ T3881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.260139][ T3886] loop3: detected capacity change from 0 to 1024 [ 47.285654][ T3881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.144'. [ 47.295763][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.323931][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.424308][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.460386][ T3898] FAULT_INJECTION: forcing a failure. [ 47.460386][ T3898] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.473798][ T3898] CPU: 1 UID: 0 PID: 3898 Comm: syz.4.149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.473833][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.473850][ T3898] Call Trace: [ 47.473864][ T3898] [ 47.473875][ T3898] __dump_stack+0x1d/0x30 [ 47.473907][ T3898] dump_stack_lvl+0x95/0xd0 [ 47.473960][ T3898] dump_stack+0x15/0x1b [ 47.473987][ T3898] should_fail_ex+0x263/0x280 [ 47.474079][ T3898] should_fail+0xb/0x20 [ 47.474116][ T3898] should_fail_usercopy+0x1a/0x20 [ 47.474159][ T3898] _copy_from_user+0x1c/0xb0 [ 47.474250][ T3898] ___sys_sendmsg+0xc1/0x1e0 [ 47.474285][ T3898] __sys_sendmmsg+0x185/0x320 [ 47.474317][ T3898] __x64_sys_sendmmsg+0x57/0x70 [ 47.474339][ T3898] x64_sys_call+0x1e28/0x3000 [ 47.474366][ T3898] do_syscall_64+0xc0/0x2a0 [ 47.474431][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.474455][ T3898] RIP: 0033:0x7f08c470aeb9 [ 47.474553][ T3898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.474573][ T3898] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.474595][ T3898] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 47.474610][ T3898] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 47.474650][ T3898] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 47.474705][ T3898] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 47.474719][ T3898] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 47.474778][ T3898] [ 47.708141][ T3907] loop3: detected capacity change from 0 to 1764 [ 47.723002][ T3907] ISOFS: unable to read i-node block [ 47.733647][ T3908] loop4: detected capacity change from 0 to 128 [ 47.750690][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 47.759733][ T3905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.152'. [ 48.448982][ T3939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.607222][ T3939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.736553][ T3945] loop2: detected capacity change from 0 to 128 [ 48.786566][ T3939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.813376][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.825665][ T3947] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.872895][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 48.872914][ T29] audit: type=1400 audit(1769988875.745:398): avc: denied { connect } for pid=3950 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.901808][ T3951] af_packet: tpacket_rcv: packet too big, clamped from 1448 to 4294967272. macoff=96 [ 48.929179][ T29] audit: type=1400 audit(1769988875.805:399): avc: denied { ioctl } for pid=3946 comm="syz.1.168" path="/29/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.930158][ T3955] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.168: Freeing blocks not in datazone - block = 0, count = 16 [ 48.985782][ T29] audit: type=1326 audit(1769988875.865:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 48.998348][ T3939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.009100][ T29] audit: type=1326 audit(1769988875.865:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.041704][ T29] audit: type=1326 audit(1769988875.895:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.071186][ T29] audit: type=1326 audit(1769988875.895:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.094497][ T29] audit: type=1326 audit(1769988875.895:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.137029][ T29] audit: type=1326 audit(1769988875.975:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.160597][ T29] audit: type=1326 audit(1769988875.975:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.183858][ T29] audit: type=1326 audit(1769988875.975:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 49.207845][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 49.226153][ T3957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 49.236145][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.243601][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.251642][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.263945][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.263945][ T12] [ 49.273647][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 49.279716][ T12] EXT4-fs (loop1): Free/Dirty block details [ 49.285687][ T12] EXT4-fs (loop1): free_blocks=16 [ 49.290758][ T12] EXT4-fs (loop1): dirty_blocks=16 [ 49.295903][ T12] EXT4-fs (loop1): Block reservation details [ 49.301955][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 49.308310][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.315803][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.328820][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.356985][ T1706] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.377528][ T1706] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.386022][ T1706] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.397268][ T1706] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.404718][ T3965] EXT4-fs: Ignoring removed bh option [ 49.411000][ T3965] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.441921][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.463549][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 49.478549][ T3965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.173: corrupted inode contents [ 49.501675][ T3972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 49.511169][ T3965] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.173: mark_inode_dirty error [ 49.527746][ T3965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.173: corrupted inode contents [ 49.541579][ T3972] syz_tun: entered promiscuous mode [ 49.557636][ T3965] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.173: mark_inode_dirty error [ 49.570168][ T3965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.173: corrupted inode contents [ 49.583216][ T3965] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.173: mark_inode_dirty error [ 49.594933][ T3965] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.173: corrupted inode contents [ 49.607520][ T3965] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.173: mark_inode_dirty error [ 49.618904][ T3965] EXT4-fs error (device loop1): ext4_evict_inode:264: comm syz.1.173: couldn't truncate inode 15 (err -117) [ 49.642137][ T3965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.173'. [ 49.652760][ T3965] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 49.678493][ T3979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.690009][ T3979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.706598][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 33: comm syz-executor: path /30/file3/lost+found: bad entry in directory: directory entry overrun - offset=3584, inode=0, rec_len=4096, size=4096 fake=0 [ 49.876023][ T3985] FAULT_INJECTION: forcing a failure. [ 49.876023][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.890452][ T3985] CPU: 1 UID: 0 PID: 3985 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.890485][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.890497][ T3985] Call Trace: [ 49.890503][ T3985] [ 49.890509][ T3985] __dump_stack+0x1d/0x30 [ 49.890538][ T3985] dump_stack_lvl+0x95/0xd0 [ 49.890588][ T3985] dump_stack+0x15/0x1b [ 49.890685][ T3985] should_fail_ex+0x263/0x280 [ 49.890729][ T3985] should_fail+0xb/0x20 [ 49.890754][ T3985] should_fail_usercopy+0x1a/0x20 [ 49.890852][ T3985] _copy_from_user+0x1c/0xb0 [ 49.890930][ T3985] get_itimerspec64+0x4c/0x1b0 [ 49.891007][ T3985] __x64_sys_timerfd_settime+0x89/0x140 [ 49.891068][ T3985] x64_sys_call+0x2b12/0x3000 [ 49.891089][ T3985] do_syscall_64+0xc0/0x2a0 [ 49.891117][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.891149][ T3985] RIP: 0033:0x7fd967beaeb9 [ 49.891162][ T3985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.891178][ T3985] RSP: 002b:00007fd966647028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 49.891195][ T3985] RAX: ffffffffffffffda RBX: 00007fd967e65fa0 RCX: 00007fd967beaeb9 [ 49.891332][ T3985] RDX: 0000200000007000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.891343][ T3985] RBP: 00007fd966647090 R08: 0000000000000000 R09: 0000000000000000 [ 49.891366][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.891383][ T3985] R13: 00007fd967e66038 R14: 00007fd967e65fa0 R15: 00007ffc78ada598 [ 49.891469][ T3985] [ 50.177203][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.187594][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.256072][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.307044][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.365948][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.416209][ T4007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 50.505990][ T12] bridge_slave_1: left allmulticast mode [ 50.511706][ T12] bridge_slave_1: left promiscuous mode [ 50.517423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.545463][ T12] bridge_slave_0: left allmulticast mode [ 50.551602][ T12] bridge_slave_0: left promiscuous mode [ 50.557473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.646026][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.657023][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.667326][ T12] bond0 (unregistering): Released all slaves [ 50.723596][ T12] hsr_slave_0: left promiscuous mode [ 50.729370][ T12] hsr_slave_1: left promiscuous mode [ 50.735373][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.743025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.751254][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.758773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.770025][ T12] veth1_macvtap: left promiscuous mode [ 50.775632][ T12] veth0_macvtap: left promiscuous mode [ 50.781235][ T12] veth1_vlan: left promiscuous mode [ 50.786881][ T12] veth0_vlan: left promiscuous mode [ 50.868170][ T12] team0 (unregistering): Port device team_slave_1 removed [ 50.880116][ T12] team0 (unregistering): Port device team_slave_0 removed [ 50.922742][ T3996] chnl_net:caif_netlink_parms(): no params data found [ 50.992664][ T3996] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.999818][ T3996] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.007622][ T3996] bridge_slave_0: entered allmulticast mode [ 51.024427][ T3996] bridge_slave_0: entered promiscuous mode [ 51.039735][ T3996] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.046971][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.090072][ T3996] bridge_slave_1: entered allmulticast mode [ 51.111486][ T3996] bridge_slave_1: entered promiscuous mode [ 51.157066][ T3996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.177444][ T3996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.220972][ T3996] team0: Port device team_slave_0 added [ 51.234101][ T3996] team0: Port device team_slave_1 added [ 51.268270][ T3996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.275305][ T3996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.301380][ T3996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.314199][ T3996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.321197][ T3996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.347249][ T3996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.380457][ T3996] hsr_slave_0: entered promiscuous mode [ 51.386742][ T3996] hsr_slave_1: entered promiscuous mode [ 51.393081][ T3996] debugfs: 'hsr0' already exists in 'hsr' [ 51.398926][ T3996] Cannot create hsr debugfs directory [ 51.567043][ T4060] set_capacity_and_notify: 3 callbacks suppressed [ 51.567064][ T4060] loop0: detected capacity change from 0 to 512 [ 51.594616][ T4060] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 51.604856][ T4060] EXT4-fs (loop0): group descriptors corrupted! [ 51.781846][ T4073] loop4: detected capacity change from 0 to 1024 [ 51.789278][ T4073] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 51.799888][ T4073] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.811533][ T4073] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.820380][ T4073] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.827058][ T4073] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.198: Inode bitmap for bg 0 marked uninitialized [ 51.839964][ T4073] EXT4-fs (loop4): Remounting filesystem read-only [ 51.847120][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.870367][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.889164][ T4079] FAULT_INJECTION: forcing a failure. [ 51.889164][ T4079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.902314][ T4079] CPU: 1 UID: 0 PID: 4079 Comm: syz.4.200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.902347][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.902364][ T4079] Call Trace: [ 51.902372][ T4079] [ 51.902382][ T4079] __dump_stack+0x1d/0x30 [ 51.902537][ T4079] dump_stack_lvl+0x95/0xd0 [ 51.902592][ T4079] dump_stack+0x15/0x1b [ 51.902623][ T4079] should_fail_ex+0x263/0x280 [ 51.902662][ T4079] should_fail+0xb/0x20 [ 51.902695][ T4079] should_fail_usercopy+0x1a/0x20 [ 51.902739][ T4079] _copy_from_user+0x1c/0xb0 [ 51.902762][ T4079] ___sys_sendmsg+0xc1/0x1e0 [ 51.902801][ T4079] __x64_sys_sendmsg+0xd4/0x160 [ 51.902868][ T4079] x64_sys_call+0x17ba/0x3000 [ 51.902901][ T4079] do_syscall_64+0xc0/0x2a0 [ 51.902936][ T4079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.902961][ T4079] RIP: 0033:0x7f08c470aeb9 [ 51.902980][ T4079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.903024][ T4079] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.903050][ T4079] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 51.903182][ T4079] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 51.903195][ T4079] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 51.903272][ T4079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.903289][ T4079] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 51.903319][ T4079] [ 51.914277][ T4080] syzkaller0: entered promiscuous mode [ 52.067321][ T4080] syzkaller0: entered allmulticast mode [ 52.087365][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4082 comm=syz.4.201 [ 52.526414][ T4092] loop3: detected capacity change from 0 to 512 [ 52.543587][ T4092] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.551698][ T4092] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.559695][ T4092] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.203: corrupted inode contents [ 52.571859][ T4092] EXT4-fs (loop3): Remounting filesystem read-only [ 52.578629][ T4092] EXT4-fs (loop3): 1 truncate cleaned up [ 52.584425][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.595039][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.605666][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.616506][ T4092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.650687][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.016934][ T4102] process 'syz.4.206' launched './file0' with NULL argv: empty string added [ 53.155805][ T4111] bond1: ARP target 9.0.0.0 is already present [ 53.162035][ T4111] bond1: option arp_ip_target: invalid value (9) [ 53.171492][ T4111] bond1 (unregistering): Released all slaves [ 53.271946][ T4116] loop4: detected capacity change from 0 to 512 [ 53.279154][ T4116] EXT4-fs: Ignoring removed i_version option [ 53.289225][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.644877][ T4120] loop3: detected capacity change from 0 to 32768 [ 53.683119][ T3306] loop3: p1 p2 p3 < p5 p6 > [ 53.689125][ T3306] loop3: p2 size 16775168 extends beyond EOD, truncated [ 53.697555][ T3306] loop3: p5 start 4294970168 is beyond EOD, truncated [ 53.707510][ T4120] loop3: p1 p2 p3 < p5 p6 > [ 53.712923][ T4120] loop3: p2 size 16775168 extends beyond EOD, truncated [ 53.720936][ T4120] loop3: p5 start 4294970168 is beyond EOD, truncated [ 53.808962][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.809271][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.821762][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.839998][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 53.855108][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.855551][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 53.867694][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 53.878515][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.895152][ T29] kauditd_printk_skb: 822 callbacks suppressed [ 53.895165][ T29] audit: type=1326 audit(1769988880.775:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 53.925263][ T29] audit: type=1326 audit(1769988880.775:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 53.948808][ T29] audit: type=1326 audit(1769988880.775:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 53.972171][ T29] audit: type=1326 audit(1769988880.775:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 53.995570][ T29] audit: type=1326 audit(1769988880.785:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.018980][ T29] audit: type=1326 audit(1769988880.785:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.042379][ T29] audit: type=1326 audit(1769988880.785:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.065785][ T29] audit: type=1326 audit(1769988880.785:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.089130][ T29] audit: type=1326 audit(1769988880.785:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.112684][ T29] audit: type=1326 audit(1769988880.785:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6e82db78e code=0x7ffc0000 [ 54.203300][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.219907][ T4041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.221110][ T4127] FAULT_INJECTION: forcing a failure. [ 54.221110][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.241841][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.241866][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.241878][ T4127] Call Trace: [ 54.241884][ T4127] [ 54.241891][ T4127] __dump_stack+0x1d/0x30 [ 54.241925][ T4127] dump_stack_lvl+0x95/0xd0 [ 54.241979][ T4127] dump_stack+0x15/0x1b [ 54.241996][ T4127] should_fail_ex+0x263/0x280 [ 54.242022][ T4127] should_fail+0xb/0x20 [ 54.242071][ T4127] should_fail_usercopy+0x1a/0x20 [ 54.242102][ T4127] _copy_from_user+0x1c/0xb0 [ 54.242120][ T4127] ___sys_sendmsg+0xc1/0x1e0 [ 54.242148][ T4127] __x64_sys_sendmsg+0xd4/0x160 [ 54.242184][ T4127] x64_sys_call+0x17ba/0x3000 [ 54.242205][ T4127] do_syscall_64+0xc0/0x2a0 [ 54.242269][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.242364][ T4127] RIP: 0033:0x7f08c470aeb9 [ 54.242377][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.242393][ T4127] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.242410][ T4127] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 54.242422][ T4127] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 54.242433][ T4127] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 54.242444][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.242488][ T4127] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 54.242505][ T4127] [ 54.253390][ T3996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.414259][ T4129] FAULT_INJECTION: forcing a failure. [ 54.414259][ T4129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.427589][ T4129] CPU: 0 UID: 0 PID: 4129 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.427670][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.427731][ T4129] Call Trace: [ 54.427739][ T4129] [ 54.427748][ T4129] __dump_stack+0x1d/0x30 [ 54.427778][ T4129] dump_stack_lvl+0x95/0xd0 [ 54.427801][ T4129] dump_stack+0x15/0x1b [ 54.427861][ T4129] should_fail_ex+0x263/0x280 [ 54.427899][ T4129] should_fail+0xb/0x20 [ 54.427935][ T4129] should_fail_usercopy+0x1a/0x20 [ 54.428021][ T4129] _copy_to_user+0x20/0xa0 [ 54.428050][ T4129] simple_read_from_buffer+0xb5/0x130 [ 54.428096][ T4129] proc_fail_nth_read+0x10e/0x150 [ 54.428133][ T4129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.428169][ T4129] vfs_read+0x1ab/0x7f0 [ 54.428193][ T4129] ? __rcu_read_unlock+0x4e/0x70 [ 54.428230][ T4129] ? __fget_files+0x184/0x1c0 [ 54.428254][ T4129] ? mutex_lock+0x57/0x90 [ 54.428340][ T4129] ksys_read+0xdc/0x1a0 [ 54.428363][ T4129] __x64_sys_read+0x40/0x50 [ 54.428388][ T4129] x64_sys_call+0x2889/0x3000 [ 54.428421][ T4129] do_syscall_64+0xc0/0x2a0 [ 54.428537][ T4129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.428595][ T4129] RIP: 0033:0x7fa63e7cb78e [ 54.428615][ T4129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.428638][ T4129] RSP: 002b:00007fa63d266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.428662][ T4129] RAX: ffffffffffffffda RBX: 00007fa63d2676c0 RCX: 00007fa63e7cb78e [ 54.428676][ T4129] RDX: 000000000000000f RSI: 00007fa63d2670a0 RDI: 0000000000000003 [ 54.428688][ T4129] RBP: 00007fa63d267090 R08: 0000000000000000 R09: 0000000000000000 [ 54.428705][ T4129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.428760][ T4129] R13: 00007fa63ea86038 R14: 00007fa63ea85fa0 R15: 00007ffc94d8daf8 [ 54.428780][ T4129] [ 54.638416][ T4131] loop2: detected capacity change from 0 to 512 [ 54.648968][ T3996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.660371][ T3996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.675091][ T3996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.693141][ T4131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.729627][ T4131] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.821933][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 54.830899][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 54.858177][ T4159] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 54.867447][ T3996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.874417][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 54.899893][ T3996] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.928726][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.939975][ T1706] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.947111][ T1706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.994790][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.002042][ T1706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.048748][ T3996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.059223][ T3996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.071263][ T4175] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 55.123067][ T4179] IPVS: Error connecting to the multicast addr [ 55.214421][ T3996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.371502][ T4206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 55.390333][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 55.733416][ T4233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=4233 comm=syz.3.236 [ 55.769735][ T3996] veth0_vlan: entered promiscuous mode [ 55.785547][ T3996] veth1_vlan: entered promiscuous mode [ 55.844200][ T3996] veth0_macvtap: entered promiscuous mode [ 55.863125][ T3996] veth1_macvtap: entered promiscuous mode [ 55.897746][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.914790][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 55.921338][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.967225][ T4215] ip6erspan0: entered promiscuous mode [ 56.005530][ T1706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.014514][ T1706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.053534][ T1706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.075627][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.141277][ T4230] loop0: detected capacity change from 0 to 32768 [ 56.183380][ T3306] loop0: p1 p2 p3 < p5 p6 > [ 56.189225][ T3306] loop0: p2 size 16775168 extends beyond EOD, truncated [ 56.198272][ T3306] loop0: p5 start 4294970168 is beyond EOD, truncated [ 56.208764][ T4230] loop0: p1 p2 p3 < p5 p6 > [ 56.214429][ T4230] loop0: p2 size 16775168 extends beyond EOD, truncated [ 56.225553][ T4230] loop0: p5 start 4294970168 is beyond EOD, truncated [ 56.350528][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 56.351033][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 56.391989][ T4269] loop0: detected capacity change from 0 to 164 [ 56.476361][ T4276] loop0: detected capacity change from 0 to 512 [ 56.503782][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.506040][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 56.524822][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.249'. [ 56.534445][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 56.577399][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.608252][ T4286] loop4: detected capacity change from 0 to 1024 [ 56.615358][ T4286] EXT4-fs: Ignoring removed oldalloc option [ 56.621372][ T4286] EXT4-fs: Ignoring removed bh option [ 56.640144][ T4286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.673995][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.741239][ T4294] loop3: detected capacity change from 0 to 512 [ 56.769518][ T4294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.792779][ T4294] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.939794][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.137352][ T4305] xt_connbytes: Forcing CT accounting to be enabled [ 57.150223][ T4305] xt_NFQUEUE: number of total queues is 0 [ 57.165487][ T4303] netlink: 143700 bytes leftover after parsing attributes in process `syz.3.258'. [ 57.183095][ T4303] loop3: detected capacity change from 0 to 1024 [ 57.190036][ T4303] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 57.285363][ T4316] loop3: detected capacity change from 0 to 256 [ 57.296869][ T4314] loop2: detected capacity change from 0 to 1024 [ 57.372401][ T4316] FAT-fs (loop3): Directory bread(block 64) failed [ 57.379207][ T4316] FAT-fs (loop3): Directory bread(block 65) failed [ 57.387440][ T4314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.394349][ T4316] FAT-fs (loop3): Directory bread(block 66) failed [ 57.411838][ T4316] FAT-fs (loop3): Directory bread(block 67) failed [ 57.419489][ T4313] bond0: entered promiscuous mode [ 57.423400][ T4316] FAT-fs (loop3): Directory bread(block 68) failed [ 57.424635][ T4313] bond_slave_0: entered promiscuous mode [ 57.432838][ T4316] FAT-fs (loop3): Directory bread(block 69) failed [ 57.437043][ T4313] bond_slave_1: entered promiscuous mode [ 57.443640][ T4316] FAT-fs (loop3): Directory bread(block 70) failed [ 57.456621][ T4316] FAT-fs (loop3): Directory bread(block 71) failed [ 57.463233][ T4316] FAT-fs (loop3): Directory bread(block 72) failed [ 57.471419][ T4316] FAT-fs (loop3): Directory bread(block 73) failed [ 57.488498][ T4313] gretap0: entered promiscuous mode [ 57.494931][ T4313] hsr1: entered promiscuous mode [ 57.513922][ T4316] syz.3.262: attempt to access beyond end of device [ 57.513922][ T4316] loop3: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 57.529249][ T4314] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.261: Allocating blocks 449-513 which overlap fs metadata [ 57.570279][ T4313] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.261: Allocating blocks 449-513 which overlap fs metadata [ 57.634892][ T4333] loop4: detected capacity change from 0 to 4096 [ 57.680321][ T4333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.696689][ T4332] EXT4-fs (loop4): shut down requested (2) [ 57.743297][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.017405][ T4347] loop4: detected capacity change from 0 to 8192 [ 58.042847][ T4347] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.165279][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.231154][ T1036] IPVS: starting estimator thread 0... [ 58.309935][ T4361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=4361 comm=syz.2.276 [ 58.323079][ T4355] IPVS: using max 1824 ests per chain, 91200 per kthread [ 58.395860][ T4365] tipc: Can't bind to reserved service type 0 [ 58.454561][ T4329] loop5: detected capacity change from 0 to 1024 [ 58.623715][ T4378] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 58.661467][ T4378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.700526][ T4382] bond1: (slave veth3): Enslaving as an active interface with a down link [ 58.739845][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 58.774259][ T4378] bond1: (slave batadv1): making interface the new active one [ 58.785664][ T4288] loop0: detected capacity change from 0 to 4096 [ 58.797585][ T4378] batadv1: entered promiscuous mode [ 58.812809][ T4378] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 58.909243][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 58.909302][ T29] audit: type=1400 audit(1769988885.785:1483): avc: denied { setopt } for pid=4388 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.972687][ T29] audit: type=1400 audit(1769988885.815:1484): avc: denied { write } for pid=4388 comm="syz.4.286" path="socket:[7952]" dev="sockfs" ino=7952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.089967][ T29] audit: type=1400 audit(1769988885.905:1485): avc: denied { bind } for pid=4393 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.109471][ T29] audit: type=1400 audit(1769988885.905:1486): avc: denied { name_bind } for pid=4393 comm="syz.4.288" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.131217][ T29] audit: type=1400 audit(1769988885.905:1487): avc: denied { node_bind } for pid=4393 comm="syz.4.288" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 59.153023][ T29] audit: type=1400 audit(1769988885.905:1488): avc: denied { name_connect } for pid=4393 comm="syz.4.288" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.202083][ T4403] loop0: detected capacity change from 0 to 512 [ 59.227910][ T4403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.247971][ T4401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.280835][ T4401] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.466284][ T29] audit: type=1400 audit(1769988886.295:1489): avc: denied { read } for pid=4384 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.496490][ T4403] EXT4-fs (loop0): 1 orphan inode deleted [ 59.502295][ T4403] EXT4-fs (loop0): 1 truncate cleaned up [ 59.523278][ T4403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.565802][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.596019][ T4415] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.293: Bad quota inum: 1, type: 2 [ 59.629211][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.652068][ T4415] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 59.866285][ T4415] EXT4-fs (loop2): mount failed [ 59.946030][ T4415] __nla_validate_parse: 3 callbacks suppressed [ 59.946046][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 60.036075][ T29] audit: type=1400 audit(1769988886.875:1490): avc: denied { write } for pid=4414 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.092119][ T29] audit: type=1400 audit(1769988886.965:1491): avc: denied { wake_alarm } for pid=4414 comm="syz.2.293" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.190547][ T29] audit: type=1326 audit(1769988887.015:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4425 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c470aeb9 code=0x7ffc0000 [ 60.442910][ T4437] netlink: 104 bytes leftover after parsing attributes in process `syz.5.302'. [ 60.624087][ T4446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=4446 comm=syz.5.305 [ 60.753525][ T4449] netlink: 'syz.5.306': attribute type 9 has an invalid length. [ 60.761260][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 60.820670][ T411] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.847364][ T411] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.872971][ T411] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.894604][ T411] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.048116][ T4474] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 61.102867][ T4481] ext4: Unknown parameter 'euid' [ 61.223256][ T4474] syz.4.310 (4474) used greatest stack depth: 9768 bytes left [ 61.243934][ T4498] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.268351][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'. [ 61.497269][ T4515] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.514099][ T4515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 61.522351][ T4515] System zones: 0-1, 3-36 [ 61.533701][ T4515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.556579][ T4515] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.689177][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.704071][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 61.713061][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 61.780437][ T4542] mmap: syz.5.328 (4542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.826129][ T4544] FAULT_INJECTION: forcing a failure. [ 61.826129][ T4544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.839366][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.839486][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.839523][ T4544] Call Trace: [ 61.839531][ T4544] [ 61.839540][ T4544] __dump_stack+0x1d/0x30 [ 61.839586][ T4544] dump_stack_lvl+0x95/0xd0 [ 61.839608][ T4544] dump_stack+0x15/0x1b [ 61.839695][ T4544] should_fail_ex+0x263/0x280 [ 61.839814][ T4544] should_fail+0xb/0x20 [ 61.839852][ T4544] should_fail_usercopy+0x1a/0x20 [ 61.839960][ T4544] _copy_from_user+0x1c/0xb0 [ 61.840028][ T4544] __sys_bpf+0x183/0x7b0 [ 61.840073][ T4544] __x64_sys_bpf+0x41/0x50 [ 61.840179][ T4544] x64_sys_call+0x28e1/0x3000 [ 61.840206][ T4544] do_syscall_64+0xc0/0x2a0 [ 61.840241][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.840267][ T4544] RIP: 0033:0x7f08c470aeb9 [ 61.840285][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.840303][ T4544] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.840324][ T4544] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 61.840428][ T4544] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 61.840446][ T4544] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 61.840462][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.840488][ T4544] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 61.840514][ T4544] [ 62.068625][ T4421] set_capacity_and_notify: 5 callbacks suppressed [ 62.068642][ T4421] loop0: detected capacity change from 0 to 4096 [ 62.091475][ T4553] loop4: detected capacity change from 0 to 1024 [ 62.136833][ T4553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.220189][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.286665][ T4568] loop4: detected capacity change from 0 to 1024 [ 62.299861][ T4567] loop0: detected capacity change from 0 to 128 [ 62.303984][ T4568] EXT4-fs: Ignoring removed orlov option [ 62.318217][ T4567] EXT4-fs: Ignoring removed nobh option [ 62.324262][ T4568] EXT4-fs: Ignoring removed bh option [ 62.329712][ T4568] ext4: Unknown parameter 'audit' [ 62.340576][ T4567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.356542][ T4568] xfrm1: entered allmulticast mode [ 62.379362][ T4567] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.415577][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.621815][ T4583] loop2: detected capacity change from 0 to 512 [ 62.676882][ T4585] loop4: detected capacity change from 0 to 1024 [ 62.684444][ T4585] EXT4-fs: Ignoring removed bh option [ 62.696465][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 62.717159][ T4589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 62.727577][ T4585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.804741][ T4597] netlink: 'syz.4.346': attribute type 10 has an invalid length. [ 62.867188][ T4597] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 62.924737][ T4603] loop3: detected capacity change from 0 to 512 [ 62.932765][ T4603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.974392][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.996396][ T4603] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.351: inode has both inline data and extents flags [ 63.023636][ T4603] EXT4-fs (loop3): Remounting filesystem read-only [ 63.051542][ T4603] FAULT_INJECTION: forcing a failure. [ 63.051542][ T4603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.064849][ T4603] CPU: 1 UID: 0 PID: 4603 Comm: syz.3.351 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.064883][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.064923][ T4603] Call Trace: [ 63.064933][ T4603] [ 63.064943][ T4603] __dump_stack+0x1d/0x30 [ 63.064974][ T4603] dump_stack_lvl+0x95/0xd0 [ 63.065002][ T4603] dump_stack+0x15/0x1b [ 63.065027][ T4603] should_fail_ex+0x263/0x280 [ 63.065157][ T4603] should_fail+0xb/0x20 [ 63.065194][ T4603] should_fail_usercopy+0x1a/0x20 [ 63.065265][ T4603] _copy_from_user+0x1c/0xb0 [ 63.065293][ T4603] ___sys_sendmsg+0xc1/0x1e0 [ 63.065334][ T4603] __x64_sys_sendmsg+0xd4/0x160 [ 63.065366][ T4603] x64_sys_call+0x17ba/0x3000 [ 63.065393][ T4603] do_syscall_64+0xc0/0x2a0 [ 63.065431][ T4603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.065459][ T4603] RIP: 0033:0x7fc6e831aeb9 [ 63.065479][ T4603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.065564][ T4603] RSP: 002b:00007fc6e6d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.065668][ T4603] RAX: ffffffffffffffda RBX: 00007fc6e8595fa0 RCX: 00007fc6e831aeb9 [ 63.065685][ T4603] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000011 [ 63.065700][ T4603] RBP: 00007fc6e6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 63.065818][ T4603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.065834][ T4603] R13: 00007fc6e8596038 R14: 00007fc6e8595fa0 R15: 00007ffd5a0ee5a8 [ 63.065853][ T4603] [ 63.125042][ T4614] netlink: 656 bytes leftover after parsing attributes in process `syz.4.353'. [ 63.302444][ T4624] loop3: detected capacity change from 0 to 512 [ 63.336526][ T4633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.358'. [ 63.349941][ T4624] ------------[ cut here ]------------ [ 63.355515][ T4624] EA inode 11 i_nlink=2 [ 63.355602][ T4624] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.358/4624 [ 63.370548][ T4624] Modules linked in: [ 63.374518][ T4624] CPU: 0 UID: 0 PID: 4624 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.384323][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.394666][ T4624] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 63.401389][ T4624] Code: e4 e5 9a ff 4c 8d 2d 2d 21 3e 05 49 8d 7e 40 e8 f4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 28 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f e1 d0 03 66 66 66 66 66 66 2e [ 63.421172][ T4624] RSP: 0018:ffffc90001887778 EFLAGS: 00010246 [ 63.427363][ T4624] RAX: ffff8881041f4c90 RBX: ffff888100699348 RCX: ffffffff81be19f8 [ 63.435454][ T4624] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 63.443492][ T4624] RBP: 000000000000000b R08: 00018881006992fb R09: 0000000000000000 [ 63.451531][ T4624] R10: ffffc900018876a8 R11: 0001c900018876a8 R12: ffff8881006992f8 [ 63.459656][ T4624] R13: ffffffff86fc3b10 R14: ffff8881006992b0 R15: 0000000000000001 [ 63.467712][ T4624] FS: 00007fc6e6d776c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 63.476761][ T4624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.483424][ T4624] CR2: 00007fa63e7f5dc0 CR3: 000000011ab00000 CR4: 00000000003506f0 [ 63.491447][ T4624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.499621][ T4624] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 63.507677][ T4624] Call Trace: [ 63.510986][ T4624] [ 63.514035][ T4624] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 63.519980][ T4624] ? errseq_check+0x2c/0x50 [ 63.524583][ T4624] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 63.530133][ T4624] ? ext4_truncate+0x92b/0xad0 [ 63.535206][ T4624] ext4_evict_inode+0xa1f/0xd40 [ 63.540118][ T4624] ? __pfx_ext4_evict_inode+0x10/0x10 [ 63.545581][ T4624] evict+0x2af/0x510 [ 63.549524][ T4624] ? __dquot_initialize+0x146/0x7c0 [ 63.554847][ T4624] iput+0x4b9/0x650 [ 63.558716][ T4624] ext4_process_orphan+0x1a9/0x1c0 [ 63.563912][ T4624] ext4_orphan_cleanup+0x6a8/0xa00 [ 63.569120][ T4624] ext4_fill_super+0x3476/0x3800 [ 63.574165][ T4624] ? set_blocksize+0x1a3/0x310 [ 63.578974][ T4624] ? setup_bdev_super+0x30e/0x370 [ 63.584079][ T4624] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.589399][ T4624] get_tree_bdev_flags+0x291/0x300 [ 63.594612][ T4624] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.599940][ T4624] get_tree_bdev+0x1f/0x30 [ 63.604460][ T4624] ext4_get_tree+0x1c/0x30 [ 63.608975][ T4624] vfs_get_tree+0x57/0x1d0 [ 63.613573][ T4624] do_new_mount+0x288/0x700 [ 63.618246][ T4624] path_mount+0x4d0/0xbc0 [ 63.622721][ T4624] ? user_path_at+0xbf/0x130 [ 63.627469][ T4624] __se_sys_mount+0x28c/0x2e0 [ 63.632239][ T4624] __x64_sys_mount+0x67/0x80 [ 63.636954][ T4624] x64_sys_call+0x2cca/0x3000 [ 63.641692][ T4624] do_syscall_64+0xc0/0x2a0 [ 63.646320][ T4624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.652282][ T4624] RIP: 0033:0x7fc6e831c14a [ 63.656917][ T4624] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.676893][ T4624] RSP: 002b:00007fc6e6d76e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.685491][ T4624] RAX: ffffffffffffffda RBX: 00007fc6e6d76ee0 RCX: 00007fc6e831c14a [ 63.693555][ T4624] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007fc6e6d76ea0 [ 63.701562][ T4624] RBP: 0000200000000180 R08: 00007fc6e6d76ee0 R09: 0000000000800700 [ 63.709628][ T4624] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 63.717665][ T4624] R13: 00007fc6e6d76ea0 R14: 000000000000046f R15: 000000000000002c [ 63.725715][ T4624] [ 63.728839][ T4624] ---[ end trace 0000000000000000 ]--- [ 63.748116][ T4624] EXT4-fs (loop3): 1 orphan inode deleted [ 63.764649][ T4648] netlink: 'syz.2.366': attribute type 32 has an invalid length. [ 63.870383][ T4652] FAULT_INJECTION: forcing a failure. [ 63.870383][ T4652] name failslab, interval 1, probability 0, space 0, times 1 [ 63.884329][ T4652] CPU: 1 UID: 0 PID: 4652 Comm: syz.3.368 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.884422][ T4652] Tainted: [W]=WARN [ 63.884429][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.884442][ T4652] Call Trace: [ 63.884450][ T4652] [ 63.884460][ T4652] __dump_stack+0x1d/0x30 [ 63.884489][ T4652] dump_stack_lvl+0x95/0xd0 [ 63.884572][ T4652] dump_stack+0x15/0x1b [ 63.884592][ T4652] should_fail_ex+0x263/0x280 [ 63.884630][ T4652] should_failslab+0x8c/0xb0 [ 63.884658][ T4652] kmem_cache_alloc_noprof+0x68/0x490 [ 63.884751][ T4652] ? prepare_creds+0x38/0x550 [ 63.884789][ T4652] prepare_creds+0x38/0x550 [ 63.884849][ T4652] set_current_groups+0x1b/0x180 [ 63.884878][ T4652] __se_sys_setgroups+0x286/0x310 [ 63.884917][ T4652] __x64_sys_setgroups+0x31/0x40 [ 63.884953][ T4652] x64_sys_call+0x2be3/0x3000 [ 63.884995][ T4652] do_syscall_64+0xc0/0x2a0 [ 63.885031][ T4652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.885059][ T4652] RIP: 0033:0x7fc6e831aeb9 [ 63.885084][ T4652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.885102][ T4652] RSP: 002b:00007fc6e6d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 63.885122][ T4652] RAX: ffffffffffffffda RBX: 00007fc6e8595fa0 RCX: 00007fc6e831aeb9 [ 63.885180][ T4652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.885193][ T4652] RBP: 00007fc6e6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 63.885210][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.885225][ T4652] R13: 00007fc6e8596038 R14: 00007fc6e8595fa0 R15: 00007ffd5a0ee5a8 [ 63.885250][ T4652] [ 64.078113][ T4659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=4659 comm=syz.2.366 [ 64.138192][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 64.138210][ T29] audit: type=1400 audit(1769988891.015:1975): avc: denied { create } for pid=4664 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.245952][ T4674] syzkaller0: entered promiscuous mode [ 64.251578][ T4674] syzkaller0: entered allmulticast mode [ 64.326072][ T4681] loop2: detected capacity change from 0 to 128 [ 64.332805][ T4681] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 64.370818][ T29] audit: type=1400 audit(1769988891.245:1976): avc: denied { write } for pid=4679 comm="syz.2.379" name="dev" dev="proc" ino=4026532888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.448659][ T29] audit: type=1400 audit(1769988891.325:1977): avc: denied { write } for pid=4690 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.477346][ T4691] loop3: detected capacity change from 0 to 2048 [ 64.517554][ T29] audit: type=1326 audit(1769988891.395:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.2.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd967beaeb9 code=0x0 [ 64.579661][ T29] audit: type=1400 audit(1769988891.435:1979): avc: denied { unmount } for pid=4699 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.621164][ T29] audit: type=1400 audit(1769988891.485:1980): avc: denied { create } for pid=4690 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.640878][ T29] audit: type=1400 audit(1769988891.485:1981): avc: denied { setopt } for pid=4690 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.660288][ T29] audit: type=1400 audit(1769988891.485:1982): avc: denied { write } for pid=4690 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.698967][ T4709] 9p: Bad value for 'wfdno' [ 64.749138][ T29] audit: type=1326 audit(1769988891.595:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e831aeb9 code=0x7ffc0000 [ 64.772558][ T29] audit: type=1326 audit(1769988891.595:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4710 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e831aeb9 code=0x7ffc0000 [ 64.804102][ T4717] ip6t_srh: unknown srh match flags FF3F [ 64.862546][ T4723] netlink: 'syz.5.397': attribute type 7 has an invalid length. [ 64.870379][ T4723] netlink: 'syz.5.397': attribute type 8 has an invalid length. [ 65.113577][ T4743] __nla_validate_parse: 6 callbacks suppressed [ 65.113655][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 65.296428][ T4762] netlink: 176 bytes leftover after parsing attributes in process `syz.0.410'. [ 65.307637][ T4763] FAULT_INJECTION: forcing a failure. [ 65.307637][ T4763] name failslab, interval 1, probability 0, space 0, times 0 [ 65.320468][ T4763] CPU: 1 UID: 0 PID: 4763 Comm: syz.3.411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.320507][ T4763] Tainted: [W]=WARN [ 65.320515][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.320531][ T4763] Call Trace: [ 65.320539][ T4763] [ 65.320548][ T4763] __dump_stack+0x1d/0x30 [ 65.320622][ T4763] dump_stack_lvl+0x95/0xd0 [ 65.320650][ T4763] dump_stack+0x15/0x1b [ 65.320669][ T4763] should_fail_ex+0x263/0x280 [ 65.320783][ T4763] should_failslab+0x8c/0xb0 [ 65.320812][ T4763] __kmalloc_cache_noprof+0x64/0x4a0 [ 65.320876][ T4763] ? rtnl_newlink+0x5c/0x1370 [ 65.320899][ T4763] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.320928][ T4763] rtnl_newlink+0x5c/0x1370 [ 65.320966][ T4763] ? __rcu_read_unlock+0x4e/0x70 [ 65.321044][ T4763] ? __memcg_slab_free_hook+0x135/0x230 [ 65.321093][ T4763] ? __rcu_read_unlock+0x4e/0x70 [ 65.321128][ T4763] ? avc_has_perm_noaudit+0xab/0x130 [ 65.321170][ T4763] ? cred_has_capability+0x224/0x290 [ 65.321244][ T4763] ? selinux_capable+0x31/0x40 [ 65.321262][ T4763] ? security_capable+0x7b/0x90 [ 65.321385][ T4763] ? ns_capable+0x7c/0xb0 [ 65.321414][ T4763] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.321506][ T4763] rtnetlink_rcv_msg+0x64b/0x720 [ 65.321534][ T4763] netlink_rcv_skb+0x123/0x220 [ 65.321571][ T4763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.321610][ T4763] rtnetlink_rcv+0x1c/0x30 [ 65.321660][ T4763] netlink_unicast+0x5c0/0x690 [ 65.321692][ T4763] netlink_sendmsg+0x5c8/0x6f0 [ 65.321711][ T4763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.321733][ T4763] ____sys_sendmsg+0x5af/0x600 [ 65.321819][ T4763] ___sys_sendmsg+0x195/0x1e0 [ 65.321854][ T4763] __x64_sys_sendmsg+0xd4/0x160 [ 65.321883][ T4763] x64_sys_call+0x17ba/0x3000 [ 65.321992][ T4763] do_syscall_64+0xc0/0x2a0 [ 65.322029][ T4763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.322049][ T4763] RIP: 0033:0x7fc6e831aeb9 [ 65.322182][ T4763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.322200][ T4763] RSP: 002b:00007fc6e6d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.322219][ T4763] RAX: ffffffffffffffda RBX: 00007fc6e8595fa0 RCX: 00007fc6e831aeb9 [ 65.322231][ T4763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 65.322244][ T4763] RBP: 00007fc6e6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 65.322308][ T4763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.322324][ T4763] R13: 00007fc6e8596038 R14: 00007fc6e8595fa0 R15: 00007ffd5a0ee5a8 [ 65.322403][ T4763] [ 65.582052][ T4760] netlink: 'syz.5.412': attribute type 21 has an invalid length. [ 65.590098][ T4760] netlink: 132 bytes leftover after parsing attributes in process `syz.5.412'. [ 65.599246][ T4760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.412'. [ 65.630793][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 65.710879][ T4773] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 65.764005][ T4773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.908423][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 65.967920][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 65.974243][ T4793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=4793 comm=syz.2.421 [ 66.113052][ T4819] 9p: Bad value for 'rfdno' [ 66.125447][ T4820] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.194415][ T4820] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.259417][ T4843] FAT-fs (loop5): bogus logical sector size 2134 [ 66.265866][ T4843] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 66.275289][ T4843] FAT-fs (loop5): Can't find a valid FAT filesystem [ 66.447988][ T4857] netlink: 'syz.5.435': attribute type 3 has an invalid length. [ 66.959356][ T4874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.438'. [ 67.392588][ T4919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4919 comm=syz.3.450 [ 67.476677][ T4877] set_capacity_and_notify: 4 callbacks suppressed [ 67.476694][ T4877] loop0: detected capacity change from 0 to 128 [ 67.477485][ T4912] lo speed is unknown, defaulting to 1000 [ 67.543663][ T4877] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 67.556924][ T4912] lo speed is unknown, defaulting to 1000 [ 67.593577][ T4912] lo speed is unknown, defaulting to 1000 [ 67.609945][ T4925] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 67.623708][ T4912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.652761][ T4925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 67.679541][ T4912] lo speed is unknown, defaulting to 1000 [ 67.703286][ T4912] lo speed is unknown, defaulting to 1000 [ 67.728875][ T4912] lo speed is unknown, defaulting to 1000 [ 67.760448][ T4912] lo speed is unknown, defaulting to 1000 [ 67.777280][ T4912] lo speed is unknown, defaulting to 1000 [ 67.793091][ T4941] loop5: detected capacity change from 0 to 1764 [ 67.819256][ T4941] ISOFS: unable to read i-node block [ 67.825046][ T4934] loop4: detected capacity change from 0 to 1764 [ 67.907566][ T4948] Illegal XDP return value 4294967274 on prog (id 84) dev N/A, expect packet loss! [ 67.938951][ T4954] netlink: 'syz.4.461': attribute type 9 has an invalid length. [ 67.946803][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 68.023456][ T4962] loop2: detected capacity change from 0 to 512 [ 68.273775][ T4976] loop2: detected capacity change from 0 to 512 [ 68.290763][ T4976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.327086][ T4976] EXT4-fs (loop2): 1 truncate cleaned up [ 68.535538][ T4995] loop5: detected capacity change from 0 to 512 [ 68.571222][ T4995] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.781851][ T5015] FAULT_INJECTION: forcing a failure. [ 68.781851][ T5015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.795203][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.4.480 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.795242][ T5015] Tainted: [W]=WARN [ 68.795249][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.795261][ T5015] Call Trace: [ 68.795294][ T5015] [ 68.795304][ T5015] __dump_stack+0x1d/0x30 [ 68.795336][ T5015] dump_stack_lvl+0x95/0xd0 [ 68.795386][ T5015] dump_stack+0x15/0x1b [ 68.795411][ T5015] should_fail_ex+0x263/0x280 [ 68.795506][ T5015] should_fail+0xb/0x20 [ 68.795546][ T5015] should_fail_usercopy+0x1a/0x20 [ 68.795609][ T5015] strncpy_from_user+0x27/0x250 [ 68.795644][ T5015] getname_flags+0xad/0x3b0 [ 68.795676][ T5015] user_path_at+0x28/0x130 [ 68.795799][ T5015] __se_sys_fspick+0x9a/0x230 [ 68.795917][ T5015] __x64_sys_fspick+0x43/0x50 [ 68.795952][ T5015] x64_sys_call+0x2bf9/0x3000 [ 68.796014][ T5015] do_syscall_64+0xc0/0x2a0 [ 68.796054][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.796080][ T5015] RIP: 0033:0x7f08c470aeb9 [ 68.796126][ T5015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.796169][ T5015] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 68.796192][ T5015] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 68.796211][ T5015] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 68.796229][ T5015] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 68.796247][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.796302][ T5015] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 68.796329][ T5015] [ 69.045899][ T5022] FAULT_INJECTION: forcing a failure. [ 69.045899][ T5022] name failslab, interval 1, probability 0, space 0, times 0 [ 69.058703][ T5022] CPU: 0 UID: 0 PID: 5022 Comm: syz.0.481 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.058778][ T5022] Tainted: [W]=WARN [ 69.058787][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.058804][ T5022] Call Trace: [ 69.058812][ T5022] [ 69.058841][ T5022] __dump_stack+0x1d/0x30 [ 69.058900][ T5022] dump_stack_lvl+0x95/0xd0 [ 69.058925][ T5022] dump_stack+0x15/0x1b [ 69.058999][ T5022] should_fail_ex+0x263/0x280 [ 69.059038][ T5022] should_failslab+0x8c/0xb0 [ 69.059069][ T5022] __kmalloc_cache_noprof+0x64/0x4a0 [ 69.059148][ T5022] ? igmpv3_add_delrec+0x89/0x2e0 [ 69.059186][ T5022] ? __mod_timer+0x6fc/0x9c0 [ 69.059220][ T5022] igmpv3_add_delrec+0x89/0x2e0 [ 69.059260][ T5022] __igmp_group_dropped+0x409/0x460 [ 69.059352][ T5022] ? mod_timer+0x1f/0x30 [ 69.059385][ T5022] ? get_state_synchronize_rcu_full+0x6a/0x80 [ 69.059422][ T5022] __ip_mc_dec_group+0x179/0x390 [ 69.059451][ T5022] ip_mc_drop_socket+0x16c/0x1e0 [ 69.059498][ T5022] inet_release+0x31/0xf0 [ 69.059543][ T5022] sock_close+0x6b/0x150 [ 69.059571][ T5022] ? __pfx_sock_close+0x10/0x10 [ 69.059602][ T5022] __fput+0x29b/0x650 [ 69.059674][ T5022] ____fput+0x1c/0x30 [ 69.059709][ T5022] task_work_run+0x130/0x1a0 [ 69.059752][ T5022] exit_to_user_mode_loop+0x1f7/0x6f0 [ 69.059859][ T5022] do_syscall_64+0x1d3/0x2a0 [ 69.059902][ T5022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.060016][ T5022] RIP: 0033:0x7fa63e80aeb9 [ 69.060038][ T5022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.060062][ T5022] RSP: 002b:00007fa63d267028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 69.060096][ T5022] RAX: 0000000000000000 RBX: 00007fa63ea85fa0 RCX: 00007fa63e80aeb9 [ 69.060126][ T5022] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 69.060143][ T5022] RBP: 00007fa63d267090 R08: 0000000000000000 R09: 0000000000000000 [ 69.060233][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.060246][ T5022] R13: 00007fa63ea86038 R14: 00007fa63ea85fa0 R15: 00007ffc94d8daf8 [ 69.060272][ T5022] [ 69.321253][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 69.321270][ T29] audit: type=1326 audit(1769988896.195:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b5c76b78e code=0x7ffc0000 [ 69.350974][ T29] audit: type=1326 audit(1769988896.195:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.374426][ T29] audit: type=1326 audit(1769988896.195:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.403603][ T29] audit: type=1326 audit(1769988896.205:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.426952][ T29] audit: type=1326 audit(1769988896.205:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.450373][ T29] audit: type=1326 audit(1769988896.235:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.473645][ T29] audit: type=1326 audit(1769988896.255:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.497743][ T29] audit: type=1326 audit(1769988896.255:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.521525][ T29] audit: type=1326 audit(1769988896.255:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.544939][ T29] audit: type=1326 audit(1769988896.255:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 69.743964][ T5049] loop5: detected capacity change from 0 to 1024 [ 69.756774][ T5041] lo speed is unknown, defaulting to 1000 [ 70.525661][ T5080] netlink: 'syz.5.499': attribute type 1 has an invalid length. [ 70.540350][ T5080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.556486][ T5080] macvlan2: entered promiscuous mode [ 70.561842][ T5080] macvlan2: entered allmulticast mode [ 70.567700][ T5080] bond1: entered allmulticast mode [ 70.572882][ T5080] bond1: entered promiscuous mode [ 70.578214][ T5080] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.588503][ T5080] team0: Port device macvlan2 added [ 70.622802][ T5084] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 70.658934][ T5084] syz.0.501(5084): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 70.799544][ T5093] __nla_validate_parse: 2 callbacks suppressed [ 70.799564][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 70.874472][ T5095] loop0: detected capacity change from 0 to 128 [ 70.881194][ T5095] EXT4-fs: Ignoring removed nobh option [ 70.914492][ T5095] EXT4-fs mount: 14 callbacks suppressed [ 70.914512][ T5095] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.950758][ T5102] siw: device registration error -23 [ 70.973101][ T5095] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.010849][ T5102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5102 comm=syz.4.508 [ 71.033745][ T5095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'. [ 71.155176][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.218573][ T5112] loop0: detected capacity change from 0 to 128 [ 71.226283][ T411] batadv1: left promiscuous mode [ 71.234972][ T5112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.291120][ T5112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.323193][ T5112] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.347528][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.377341][ T5119] loop0: detected capacity change from 0 to 764 [ 71.406172][ T5121] xt_hashlimit: size too large, truncated to 1048576 [ 71.413740][ T5121] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 71.469748][ T5125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'. [ 71.681928][ T5141] siw: device registration error -23 [ 71.702790][ T5141] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5141 comm=syz.0.521 [ 72.008634][ T5155] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.023180][ T5155] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.110407][ T3996] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.135407][ T5163] xt_TCPMSS: Only works on TCP SYN packets [ 72.228372][ T5169] journal_path: Non-blockdev passed as './file1' [ 72.234926][ T5169] EXT4-fs: error: could not find journal device path [ 72.263111][ T5174] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=5174 comm=syz.5.531 [ 72.275731][ T5174] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2563 sclass=netlink_xfrm_socket pid=5174 comm=syz.5.531 [ 72.341202][ T5182] FAULT_INJECTION: forcing a failure. [ 72.341202][ T5182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.354380][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: syz.3.533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.354415][ T5182] Tainted: [W]=WARN [ 72.354424][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.354440][ T5182] Call Trace: [ 72.354474][ T5182] [ 72.354484][ T5182] __dump_stack+0x1d/0x30 [ 72.354514][ T5182] dump_stack_lvl+0x95/0xd0 [ 72.354588][ T5182] dump_stack+0x15/0x1b [ 72.354681][ T5182] should_fail_ex+0x263/0x280 [ 72.354732][ T5182] should_fail+0xb/0x20 [ 72.354836][ T5182] should_fail_usercopy+0x1a/0x20 [ 72.354929][ T5182] strncpy_from_user+0x27/0x250 [ 72.354966][ T5182] __se_sys_memfd_create+0x20f/0x3b0 [ 72.355009][ T5182] __x64_sys_memfd_create+0x31/0x40 [ 72.355149][ T5182] x64_sys_call+0x28cb/0x3000 [ 72.355178][ T5182] do_syscall_64+0xc0/0x2a0 [ 72.355272][ T5182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.355333][ T5182] RIP: 0033:0x7fc6e831aeb9 [ 72.355354][ T5182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.355377][ T5182] RSP: 002b:00007fc6e6d76e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 72.355402][ T5182] RAX: ffffffffffffffda RBX: 0000000000000774 RCX: 00007fc6e831aeb9 [ 72.355416][ T5182] RDX: 00007fc6e6d76ee0 RSI: 0000000000000000 RDI: 00007fc6e8387333 [ 72.355429][ T5182] RBP: 00002000000007c0 R08: 00000000ffffffff R09: 0000000000000000 [ 72.355500][ T5182] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 72.355515][ T5182] R13: 00007fc6e6d76ee0 R14: 00007fc6e6d76ea0 R15: 00002000000011c0 [ 72.355537][ T5182] [ 72.532051][ T5180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.534'. [ 72.685333][ T5191] set_capacity_and_notify: 4 callbacks suppressed [ 72.685349][ T5191] loop3: detected capacity change from 0 to 512 [ 72.820697][ T5191] loop3: detected capacity change from 0 to 8192 [ 72.919736][ T5209] loop4: detected capacity change from 0 to 128 [ 72.940726][ T5209] EXT4-fs: Ignoring removed nobh option [ 72.968513][ T5209] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.994955][ T5209] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.031264][ T5209] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.542: checksumming directory block 0 [ 73.046896][ T5209] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.542: checksumming directory block 0 [ 73.075523][ T5216] FAULT_INJECTION: forcing a failure. [ 73.075523][ T5216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.088765][ T5216] CPU: 1 UID: 0 PID: 5216 Comm: syz.0.546 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.088814][ T5216] Tainted: [W]=WARN [ 73.088821][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.088865][ T5216] Call Trace: [ 73.088873][ T5216] [ 73.088884][ T5216] __dump_stack+0x1d/0x30 [ 73.088916][ T5216] dump_stack_lvl+0x95/0xd0 [ 73.088946][ T5216] dump_stack+0x15/0x1b [ 73.089032][ T5216] should_fail_ex+0x263/0x280 [ 73.089074][ T5216] should_fail+0xb/0x20 [ 73.089151][ T5216] should_fail_usercopy+0x1a/0x20 [ 73.089195][ T5216] _copy_from_iter+0xcf/0xea0 [ 73.089219][ T5216] ? should_fail_ex+0xd9/0x280 [ 73.089258][ T5216] ? should_failslab+0x8c/0xb0 [ 73.089312][ T5216] ? __kmalloc_noprof+0x2a3/0x580 [ 73.089345][ T5216] ? kernfs_fop_write_iter+0xe2/0x300 [ 73.089390][ T5216] kernfs_fop_write_iter+0x125/0x300 [ 73.089451][ T5216] ? rw_verify_area+0x8d/0x160 [ 73.089477][ T5216] aio_write+0x2fe/0x430 [ 73.089560][ T5216] io_submit_one+0xbc1/0x1350 [ 73.089608][ T5216] __se_sys_io_submit+0xfb/0x280 [ 73.089646][ T5216] __x64_sys_io_submit+0x43/0x50 [ 73.089710][ T5216] x64_sys_call+0x2e40/0x3000 [ 73.089744][ T5216] do_syscall_64+0xc0/0x2a0 [ 73.089831][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.089861][ T5216] RIP: 0033:0x7fa63e80aeb9 [ 73.089881][ T5216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.090005][ T5216] RSP: 002b:00007fa63d267028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 73.090090][ T5216] RAX: ffffffffffffffda RBX: 00007fa63ea85fa0 RCX: 00007fa63e80aeb9 [ 73.090135][ T5216] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007fa63f5c4000 [ 73.090151][ T5216] RBP: 00007fa63d267090 R08: 0000000000000000 R09: 0000000000000000 [ 73.090169][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.090186][ T5216] R13: 00007fa63ea86038 R14: 00007fa63ea85fa0 R15: 00007ffc94d8daf8 [ 73.090213][ T5216] [ 73.301645][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.641680][ T5239] netlink: 424 bytes leftover after parsing attributes in process `syz.5.557'. [ 73.685119][ T5239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.557'. [ 73.704835][ T5239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.724591][ T5239] bond_slave_0: entered promiscuous mode [ 73.730399][ T5239] bond_slave_1: entered promiscuous mode [ 73.746155][ T5239] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 73.764264][ T5239] bond2: (slave macvlan3): making interface the new active one [ 73.784704][ T5239] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 73.886895][ T5248] FAULT_INJECTION: forcing a failure. [ 73.886895][ T5248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.901109][ T5248] CPU: 0 UID: 0 PID: 5248 Comm: syz.0.560 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.901151][ T5248] Tainted: [W]=WARN [ 73.901158][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.901173][ T5248] Call Trace: [ 73.901182][ T5248] [ 73.901192][ T5248] __dump_stack+0x1d/0x30 [ 73.901225][ T5248] dump_stack_lvl+0x95/0xd0 [ 73.901254][ T5248] dump_stack+0x15/0x1b [ 73.901288][ T5248] should_fail_ex+0x263/0x280 [ 73.901321][ T5248] should_fail+0xb/0x20 [ 73.901423][ T5248] should_fail_usercopy+0x1a/0x20 [ 73.901475][ T5248] _copy_to_user+0x20/0xa0 [ 73.901584][ T5248] simple_read_from_buffer+0xb5/0x130 [ 73.901634][ T5248] proc_fail_nth_read+0x10e/0x150 [ 73.901750][ T5248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.901784][ T5248] vfs_read+0x1ab/0x7f0 [ 73.901857][ T5248] ksys_read+0xdc/0x1a0 [ 73.901877][ T5248] __x64_sys_read+0x40/0x50 [ 73.901927][ T5248] x64_sys_call+0x2889/0x3000 [ 73.901953][ T5248] do_syscall_64+0xc0/0x2a0 [ 73.901986][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.902039][ T5248] RIP: 0033:0x7fa63e7cb78e [ 73.902061][ T5248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.902082][ T5248] RSP: 002b:00007fa63d266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.902103][ T5248] RAX: ffffffffffffffda RBX: 00007fa63d2676c0 RCX: 00007fa63e7cb78e [ 73.902121][ T5248] RDX: 000000000000000f RSI: 00007fa63d2670a0 RDI: 0000000000000004 [ 73.902138][ T5248] RBP: 00007fa63d267090 R08: 0000000000000000 R09: 0000000000000000 [ 73.902208][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.902308][ T5248] R13: 00007fa63ea86038 R14: 00007fa63ea85fa0 R15: 00007ffc94d8daf8 [ 73.902335][ T5248] [ 74.263550][ T5257] lo speed is unknown, defaulting to 1000 [ 74.276927][ T5263] loop5: detected capacity change from 0 to 736 [ 74.329973][ T5263] ISOFS: unable to read i-node block [ 74.335442][ T5263] isofs_fill_super: get root inode failed [ 74.382068][ T29] kauditd_printk_skb: 1131 callbacks suppressed [ 74.382086][ T29] audit: type=1326 audit(2000000002.710:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 74.489284][ T29] audit: type=1400 audit(2000000002.820:3490): avc: denied { read write } for pid=5269 comm="syz.4.567" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.512733][ T29] audit: type=1400 audit(2000000002.820:3491): avc: denied { open } for pid=5269 comm="syz.4.567" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.514869][ T3395] hid-generic 0080:0003:0001.0001: item fetching failed at offset 0/2 [ 74.594117][ T3395] hid-generic 0080:0003:0001.0001: probe with driver hid-generic failed with error -22 [ 74.654992][ T29] audit: type=1400 audit(2000000002.940:3492): avc: denied { mount } for pid=5269 comm="syz.4.567" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.708659][ T5283] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 74.711324][ T5282] loop5: detected capacity change from 0 to 764 [ 74.727722][ T5283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.746160][ T5283] macvlan2: entered promiscuous mode [ 74.751560][ T5283] macvlan2: entered allmulticast mode [ 74.762561][ T29] audit: type=1400 audit(2000000003.020:3493): avc: denied { ioctl } for pid=5273 comm="syz.0.569" path="socket:[12294]" dev="sockfs" ino=12294 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.781102][ T5283] bond2: entered allmulticast mode [ 74.792778][ T5283] bond2: entered promiscuous mode [ 74.798745][ T5283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.807107][ T5283] team0: Port device macvlan2 added [ 74.821749][ T5286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 74.845296][ T5282] Symlink component flag not implemented [ 74.851059][ T5282] Symlink component flag not implemented [ 74.860067][ T5286] loop0: detected capacity change from 0 to 256 [ 74.872019][ T5282] Symlink component flag not implemented (128) [ 74.878420][ T5282] Symlink component flag not implemented (122) [ 74.933386][ T5290] netlink: 'syz.4.574': attribute type 6 has an invalid length. [ 74.982661][ T5289] lo speed is unknown, defaulting to 1000 [ 75.071593][ T29] audit: type=1326 audit(2000000003.400:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 75.095102][ T29] audit: type=1326 audit(2000000003.400:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 75.118555][ T29] audit: type=1326 audit(2000000003.400:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 75.141952][ T29] audit: type=1326 audit(2000000003.400:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 75.165474][ T29] audit: type=1326 audit(2000000003.400:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63e80aeb9 code=0x7ffc0000 [ 75.313485][ T5308] loop3: detected capacity change from 0 to 4096 [ 75.329556][ T5308] EXT4-fs: Ignoring removed bh option [ 75.335091][ T5308] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.393859][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.437202][ T5323] netlink: 52 bytes leftover after parsing attributes in process `syz.0.586'. [ 75.447861][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 75.488034][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 75.672535][ T5343] 9pnet_fd: Insufficient options for proto=fd [ 75.685765][ T5341] can: request_module (can-proto-0) failed. [ 75.876642][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.935239][ T5357] __nla_validate_parse: 1 callbacks suppressed [ 75.935258][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 76.235241][ T5377] loop4: detected capacity change from 0 to 1024 [ 76.275131][ T5377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.335505][ T5377] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.364376][ T5381] loop3: detected capacity change from 0 to 2048 [ 76.407059][ T5391] loop0: detected capacity change from 0 to 512 [ 76.426709][ T3302] loop3: p4 < > [ 76.431707][ T5393] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.601: Freeing blocks not in datazone - block = 0, count = 16 [ 76.452524][ T5381] loop3: p4 < > [ 76.487766][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.517270][ T5391] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.582788][ T5391] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.605: corrupted xattr block 33: bad e_name length [ 76.608162][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.621578][ T5398] ext4: Bad value for 'journal_ioprio' [ 76.643944][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 76.644393][ T5391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 76.683587][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.694931][ T5402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.609'. [ 76.696913][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.716121][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.716121][ T31] [ 76.721590][ T5391] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.605: corrupted xattr block 33: bad e_name length [ 76.725817][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 76.745375][ T31] EXT4-fs (loop4): Free/Dirty block details [ 76.751307][ T31] EXT4-fs (loop4): free_blocks=16 [ 76.755479][ T5400] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.605: Failed to acquire dquot type 0 [ 76.756628][ T31] EXT4-fs (loop4): dirty_blocks=16 [ 76.772944][ T31] EXT4-fs (loop4): Block reservation details [ 76.778960][ T31] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 76.862792][ T5391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 76.876524][ T5391] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.605: corrupted xattr block 33: bad e_name length [ 76.892873][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.910211][ T5391] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.605: corrupted xattr block 33: bad e_name length [ 76.934338][ T5391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 76.943766][ T5391] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.605: Failed to acquire dquot type 0 [ 77.038780][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.117051][ T5419] netlink: 14 bytes leftover after parsing attributes in process `syz.4.610'. [ 77.138696][ T5419] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 77.148806][ T5419] bond0 (unregistering): Released all slaves [ 77.194717][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.238425][ T5426] IPVS: Error connecting to the multicast addr [ 77.342733][ T5438] EXT4-fs: Ignoring removed oldalloc option [ 77.348785][ T5438] EXT4-fs: Ignoring removed bh option [ 77.394430][ T5438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.434376][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.475592][ T5447] netlink: 36 bytes leftover after parsing attributes in process `syz.5.622'. [ 78.263304][ T5475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.633'. [ 78.318552][ T5486] bond0: entered promiscuous mode [ 78.324805][ T5486] bond0: left promiscuous mode [ 78.347701][ T5488] set_capacity_and_notify: 3 callbacks suppressed [ 78.347722][ T5488] loop3: detected capacity change from 0 to 1024 [ 78.361480][ T5488] ext4: Bad value for 'stripe' [ 78.503757][ T5497] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 78.607937][ T5497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.673886][ T5504] macvlan2: entered promiscuous mode [ 78.679271][ T5504] macvlan2: entered allmulticast mode [ 78.762895][ T5504] bond1: entered allmulticast mode [ 78.768087][ T5504] bond1: entered promiscuous mode [ 78.803713][ T5504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.823625][ T5504] team0: Port device macvlan2 added [ 78.893434][ T5508] x_tables: duplicate underflow at hook 1 [ 79.030074][ T5523] nft_compat: unsupported protocol 1 [ 79.066620][ T5392] loop2: detected capacity change from 0 to 4096 [ 79.172300][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 79.216905][ T5529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.650'. [ 79.276684][ T5535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 79.279921][ T5542] netlink: 'syz.0.655': attribute type 5 has an invalid length. [ 79.285675][ T5535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 79.308084][ T5536] loop5: detected capacity change from 0 to 164 [ 79.323936][ T5546] netlink: 'syz.4.656': attribute type 13 has an invalid length. [ 79.333416][ T5546] gretap0: refused to change device tx_queue_len [ 79.340254][ T5546] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 79.368026][ T5536] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 79.511587][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 79.511677][ T29] audit: type=1326 audit(2000000007.840:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.550673][ T29] audit: type=1326 audit(2000000007.840:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.574227][ T29] audit: type=1326 audit(2000000007.880:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.597675][ T29] audit: type=1326 audit(2000000007.880:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.621087][ T29] audit: type=1326 audit(2000000007.880:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.626973][ T5564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'. [ 79.644588][ T29] audit: type=1326 audit(2000000007.880:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.676885][ T29] audit: type=1326 audit(2000000007.880:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.700403][ T29] audit: type=1326 audit(2000000007.880:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.723761][ T29] audit: type=1326 audit(2000000007.880:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.747259][ T29] audit: type=1326 audit(2000000007.880:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.5.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5c7aaeb9 code=0x7ffc0000 [ 79.972693][ T5576] loop3: detected capacity change from 0 to 512 [ 79.999284][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.999354][ T5576] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.176522][ T5576] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #19: comm syz.3.669: corrupted inode contents [ 80.201278][ T5576] EXT4-fs (loop3): Remounting filesystem read-only [ 80.228690][ T5576] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 80.367908][ T5599] loop2: detected capacity change from 0 to 512 [ 80.376011][ T5599] ext4: Unknown parameter 'noacl' [ 80.469841][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.876577][ T5626] loop5: detected capacity change from 0 to 512 [ 80.914145][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.943010][ T5626] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.972990][ T5627] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.686: corrupted xattr block 6: invalid header [ 80.993425][ T5627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 81.010373][ T5626] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.686: corrupted xattr block 6: invalid header [ 81.033982][ T5627] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.686: corrupted xattr block 6: invalid header [ 81.047409][ T5626] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 81.056780][ T5627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 81.078568][ T5626] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.686: corrupted xattr block 6: invalid header [ 81.111703][ T5627] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.686: corrupted xattr block 6: invalid header [ 81.156863][ T5626] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 81.173919][ T5627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 81.210736][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.266843][ T5637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57360 sclass=netlink_route_socket pid=5637 comm=syz.2.689 [ 81.472050][ T5651] : renamed from wg2 (while UP) [ 81.655107][ T5641] loop5: detected capacity change from 0 to 164 [ 81.686474][ T5641] Unable to read rock-ridge attributes [ 81.692524][ T5641] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.718712][ T5663] loop3: detected capacity change from 0 to 1024 [ 81.738442][ T5663] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.754343][ T5663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 81.763007][ T5663] System zones: 0-1, 3-36 [ 81.768606][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.803389][ T5663] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.812382][ T5659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.825413][ T5659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.875964][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.928801][ T5562] loop4: detected capacity change from 0 to 4096 [ 82.019721][ T5678] tipc: Enabling of bearer rejected, failed to enable media [ 82.039835][ T5680] FAULT_INJECTION: forcing a failure. [ 82.039835][ T5680] name failslab, interval 1, probability 0, space 0, times 0 [ 82.052611][ T5680] CPU: 1 UID: 0 PID: 5680 Comm: syz.4.706 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.052683][ T5680] Tainted: [W]=WARN [ 82.052692][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.052793][ T5680] Call Trace: [ 82.052800][ T5680] [ 82.052809][ T5680] __dump_stack+0x1d/0x30 [ 82.052839][ T5680] dump_stack_lvl+0x95/0xd0 [ 82.052944][ T5680] dump_stack+0x15/0x1b [ 82.052980][ T5680] should_fail_ex+0x263/0x280 [ 82.053085][ T5680] should_failslab+0x8c/0xb0 [ 82.053252][ T5680] __kmalloc_noprof+0xb8/0x580 [ 82.053284][ T5680] ? bpf_test_init+0x86/0x130 [ 82.053322][ T5680] bpf_test_init+0x86/0x130 [ 82.053355][ T5680] bpf_prog_test_run_xdp+0x306/0xa10 [ 82.053465][ T5680] ? __rcu_read_unlock+0x4e/0x70 [ 82.053506][ T5680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.053550][ T5680] bpf_prog_test_run+0x204/0x340 [ 82.053641][ T5680] __sys_bpf+0x4c0/0x7b0 [ 82.053671][ T5680] __x64_sys_bpf+0x41/0x50 [ 82.053692][ T5680] x64_sys_call+0x28e1/0x3000 [ 82.053774][ T5680] do_syscall_64+0xc0/0x2a0 [ 82.053808][ T5680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.053828][ T5680] RIP: 0033:0x7f08c470aeb9 [ 82.053843][ T5680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.053875][ T5680] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.053893][ T5680] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 82.053961][ T5680] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 82.053972][ T5680] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 82.053983][ T5680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.053994][ T5680] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 82.054012][ T5680] [ 82.330238][ T5687] team0: Port device vlan2 added [ 82.368888][ T5697] loop4: detected capacity change from 0 to 128 [ 82.388403][ T5697] EXT4-fs: Ignoring removed nobh option [ 82.400631][ T5697] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.418155][ T5697] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.451004][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.866562][ T5724] __nla_validate_parse: 2 callbacks suppressed [ 82.866580][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.722'. [ 82.987660][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 83.007029][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 83.247993][ T5754] ext4: Unknown parameter 'noacl' [ 83.290232][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 83.529074][ T5766] set_capacity_and_notify: 1 callbacks suppressed [ 83.529095][ T5766] loop2: detected capacity change from 0 to 164 [ 83.605385][ T5768] loop2: detected capacity change from 0 to 512 [ 83.634611][ T5768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.648523][ T5768] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.679390][ T5772] netlink: 64 bytes leftover after parsing attributes in process `syz.5.740'. [ 83.689233][ T5768] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.739: corrupted xattr block 33: bad e_name length [ 83.705502][ T5768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 83.716076][ T5768] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.739: corrupted xattr block 33: bad e_name length [ 83.729969][ T5768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 83.739330][ T5768] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.739: corrupted xattr block 33: bad e_name length [ 83.753561][ T5768] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.739: corrupted xattr block 33: bad e_name length [ 83.771577][ T5772] loop5: detected capacity change from 0 to 512 [ 83.778772][ T5772] EXT4-fs (loop5): invalid inodes per group: 0 [ 83.778772][ T5772] [ 83.791529][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.740'. [ 83.827787][ T5773] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.739: Failed to acquire dquot type 0 [ 83.839578][ T5768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 83.851342][ T5776] loop5: detected capacity change from 0 to 128 [ 83.858807][ T5776] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 83.868316][ T5768] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.739: Failed to acquire dquot type 0 [ 83.881024][ T5776] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.894273][ T5776] ext2 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.923168][ T3996] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.071178][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.245770][ T5700] loop0: detected capacity change from 0 to 4096 [ 84.356557][ T5787] dummy0: entered promiscuous mode [ 84.361942][ T5787] macvtap1: entered promiscuous mode [ 84.367369][ T5787] team0: entered promiscuous mode [ 84.372572][ T5787] vlan2: entered promiscuous mode [ 84.402153][ T5790] netlink: 'syz.2.745': attribute type 13 has an invalid length. [ 84.410616][ T5787] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.439904][ T5787] team0: Device macvtap1 is already an upper device of the team interface [ 84.462955][ T5787] team0: left promiscuous mode [ 84.467861][ T5787] vlan2: left promiscuous mode [ 84.496264][ T5787] dummy0: left promiscuous mode [ 84.519666][ T5795] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 84.531196][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 84.531211][ T29] audit: type=1400 audit(2000000012.860:4536): avc: denied { ioctl } for pid=5794 comm="syz.0.748" path="socket:[13124]" dev="sockfs" ino=13124 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.563616][ T5795] 9p: Bad value for 'wfdno' [ 84.580044][ T5788] dummy0: entered promiscuous mode [ 84.585573][ T5788] macvtap1: entered promiscuous mode [ 84.586256][ T29] audit: type=1400 audit(2000000012.900:4537): avc: denied { write } for pid=5794 comm="syz.0.748" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.590907][ T5788] team0: entered promiscuous mode [ 84.591021][ T5788] vlan2: entered promiscuous mode [ 84.645012][ T5788] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.673744][ T5788] team0: Device macvtap1 is already an upper device of the team interface [ 84.693663][ T5788] team0: left promiscuous mode [ 84.698599][ T5788] vlan2: left promiscuous mode [ 84.708333][ T5788] dummy0: left promiscuous mode [ 84.713559][ T5802] loop0: detected capacity change from 0 to 2048 [ 84.793239][ T5802] loop0: p1 p3 p4 [ 84.802163][ T5802] loop0: p4 size 589824 extends beyond EOD, truncated [ 84.883375][ T29] audit: type=1400 audit(2000000013.190:4538): avc: denied { write } for pid=5800 comm="syz.0.751" name="loop0p1" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.906335][ T29] audit: type=1400 audit(2000000013.190:4539): avc: denied { open } for pid=5800 comm="syz.0.751" path="/dev/loop0p1" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.913097][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.936671][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.954389][ T29] audit: type=1400 audit(2000000013.290:4540): avc: denied { map } for pid=5800 comm="syz.0.751" path="/dev/loop0p1" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.984027][ T5813] loop4: detected capacity change from 0 to 512 [ 85.004503][ T5813] ext4: Unknown parameter 'noacl' [ 85.022844][ T29] audit: type=1400 audit(2000000013.290:4541): avc: denied { read } for pid=5800 comm="syz.0.751" path="/dev/loop0p1" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.073621][ T29] audit: type=1400 audit(2000000013.400:4542): avc: denied { setattr } for pid=5800 comm="syz.0.751" name="loop0p1" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.174230][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.207652][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.222459][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.269743][ T5825] loop5: detected capacity change from 0 to 128 [ 85.306613][ T5825] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.318375][ T29] audit: type=1400 audit(2000000013.650:4543): avc: denied { bind } for pid=5828 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.338153][ T29] audit: type=1400 audit(2000000013.650:4544): avc: denied { name_bind } for pid=5828 comm="syz.0.756" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.359127][ T29] audit: type=1400 audit(2000000013.650:4545): avc: denied { node_bind } for pid=5828 comm="syz.0.756" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.407865][ T5825] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.490940][ T52] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.512717][ T52] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.534808][ T52] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.557641][ T3996] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.568605][ T52] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.581585][ T5835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 85.650965][ T5847] bridge0: entered promiscuous mode [ 85.721239][ T5858] FAULT_INJECTION: forcing a failure. [ 85.721239][ T5858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.734473][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.4.760 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.734559][ T5858] Tainted: [W]=WARN [ 85.734569][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.734586][ T5858] Call Trace: [ 85.734594][ T5858] [ 85.734660][ T5858] __dump_stack+0x1d/0x30 [ 85.734693][ T5858] dump_stack_lvl+0x95/0xd0 [ 85.734722][ T5858] dump_stack+0x15/0x1b [ 85.734755][ T5858] should_fail_ex+0x263/0x280 [ 85.734863][ T5858] should_fail+0xb/0x20 [ 85.734899][ T5858] should_fail_usercopy+0x1a/0x20 [ 85.734960][ T5858] _copy_from_user+0x1c/0xb0 [ 85.734987][ T5858] __sys_connect+0xd0/0x2a0 [ 85.735033][ T5858] __x64_sys_connect+0x3f/0x50 [ 85.735121][ T5858] x64_sys_call+0x2e09/0x3000 [ 85.735153][ T5858] do_syscall_64+0xc0/0x2a0 [ 85.735194][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.735252][ T5858] RIP: 0033:0x7f08c470aeb9 [ 85.735349][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.735371][ T5858] RSP: 002b:00007f08c3167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 85.735398][ T5858] RAX: ffffffffffffffda RBX: 00007f08c4985fa0 RCX: 00007f08c470aeb9 [ 85.735416][ T5858] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000004 [ 85.735460][ T5858] RBP: 00007f08c3167090 R08: 0000000000000000 R09: 0000000000000000 [ 85.735477][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.735494][ T5858] R13: 00007f08c4986038 R14: 00007f08c4985fa0 R15: 00007ffd0f057f98 [ 85.735519][ T5858] [ 86.108915][ T31] tipc: Subscription rejected, illegal request [ 86.333868][ T5834] cgroup: fork rejected by pids controller in /syz2 [ 86.374361][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 86.438439][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.461973][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.524347][ T5901] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 86.592115][ T5897] tipc: Enabling of bearer rejected, failed to enable media [ 86.641291][ T5905] 9pnet_virtio: no channels available for device 127.0.0.1 [ 86.669995][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.775'. [ 86.825242][ T5910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.776'. [ 86.864905][ T5912] netlink: 'syz.5.777': attribute type 4 has an invalid length. [ 86.876121][ T5912] netlink: 'syz.5.777': attribute type 4 has an invalid length. [ 86.917385][ T5910] loop2: detected capacity change from 0 to 512 [ 86.940589][ T5919] loop5: detected capacity change from 0 to 512 [ 86.973300][ T5910] EXT4-fs (loop2): invalid inodes per group: 0 [ 86.973300][ T5910] [ 87.010013][ T5919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.062880][ T5919] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.113787][ T5929] IPVS: Error connecting to the multicast addr [ 87.124159][ T5919] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.779: corrupted xattr block 33: bad e_name length [ 87.189960][ T5919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 87.223231][ T5919] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.779: corrupted xattr block 33: bad e_name length [ 87.254919][ T5935] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.779: Failed to acquire dquot type 0 [ 87.268075][ T5919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 87.278313][ T5919] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.779: corrupted xattr block 33: bad e_name length [ 87.314873][ T5919] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.779: corrupted xattr block 33: bad e_name length [ 87.329751][ T5919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 87.346295][ T5919] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.779: Failed to acquire dquot type 0 [ 87.435359][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.564962][ T5959] ISOFS: unable to read i-node block [ 87.660577][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.681065][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.819185][ T5974] lo speed is unknown, defaulting to 1000 [ 87.938423][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.999197][ T5974] __nla_validate_parse: 5 callbacks suppressed [ 87.999215][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 88.090213][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.306540][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.332709][ T5989] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.374887][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.416680][ T5995] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 88.440020][ T5995] ================================================================== [ 88.448165][ T5995] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 88.457083][ T5995] [ 88.459444][ T5995] read-write to 0xffff888100481838 of 8 bytes by task 3306 on cpu 0: [ 88.467577][ T5995] __filemap_add_folio+0x671/0x8a0 [ 88.472732][ T5995] filemap_add_folio+0x1d3/0x350 [ 88.477718][ T5995] page_cache_ra_unbounded+0x204/0x440 [ 88.483238][ T5995] page_cache_sync_ra+0x26e/0x6a0 [ 88.488315][ T5995] filemap_get_pages+0x30a/0x1260 [ 88.493394][ T5995] filemap_read+0x231/0xa10 [ 88.497979][ T5995] blkdev_read_iter+0x22d/0x2e0 [ 88.502963][ T5995] vfs_read+0x6c0/0x7f0 [ 88.507162][ T5995] ksys_read+0xdc/0x1a0 [ 88.511383][ T5995] __x64_sys_read+0x40/0x50 [ 88.515926][ T5995] x64_sys_call+0x2889/0x3000 [ 88.520648][ T5995] do_syscall_64+0xc0/0x2a0 [ 88.525205][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.531143][ T5995] [ 88.533507][ T5995] read to 0xffff888100481838 of 8 bytes by task 5995 on cpu 1: [ 88.541091][ T5995] filemap_write_and_wait_range+0x59/0x370 [ 88.546946][ T5995] sync_blockdev+0x35/0x50 [ 88.551427][ T5995] kill_block_super+0x3c/0x70 [ 88.556140][ T5995] ext4_kill_sb+0x63/0x80 [ 88.560551][ T5995] deactivate_locked_super+0x75/0x1c0 [ 88.565970][ T5995] get_tree_bdev_flags+0x2ad/0x300 [ 88.571140][ T5995] get_tree_bdev+0x1f/0x30 [ 88.575582][ T5995] ext4_get_tree+0x1c/0x30 [ 88.580035][ T5995] vfs_get_tree+0x57/0x1d0 [ 88.584480][ T5995] do_new_mount+0x288/0x700 [ 88.589021][ T5995] path_mount+0x4d0/0xbc0 [ 88.593372][ T5995] __se_sys_mount+0x28c/0x2e0 [ 88.598070][ T5995] __x64_sys_mount+0x67/0x80 [ 88.602697][ T5995] x64_sys_call+0x2cca/0x3000 [ 88.607415][ T5995] do_syscall_64+0xc0/0x2a0 [ 88.611950][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.617870][ T5995] [ 88.620231][ T5995] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 88.627372][ T5995] [ 88.629710][ T5995] Reported by Kernel Concurrency Sanitizer on: [ 88.635894][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.2.805 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.647116][ T5995] Tainted: [W]=WARN [ 88.650936][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.661105][ T5995] ================================================================== [ 88.681552][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.764964][ T5995] set_capacity_and_notify: 6 callbacks suppressed [ 88.764984][ T5995] loop2: detected capacity change from 0 to 1024 [ 88.801622][ T5995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.828064][ T5995] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.856678][ T5995] System zones: 0-1, 3-36 [ 88.873364][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.908705][ T6004] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.807: Allocating blocks 497-513 which overlap fs metadata [ 88.923233][ T6004] EXT4-fs (loop0): Remounting filesystem read-only [ 88.930457][ T6004] EXT4-fs (loop0): pa ffff888107de3150: logic 128, phys. 385, len 8 [ 88.938933][ T6004] syz.0.807 (6004) used greatest stack depth: 9424 bytes left [ 88.964957][ T5995] pimreg: entered allmulticast mode [ 88.995258][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.137806][ T5995] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.