last executing test programs: 1m5.218285168s ago: executing program 3 (id=294): r0 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x81) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000500)={{r1}, "9d36ac0bb9f8101494ae49fa987e57b08684e5e7205a2d97312259937aadafadb5c3938c9ffe67fe49da4a36b725b8dbbdef0e76a4b6926f217b4c83df23aa1ef03e2368748758ff393b7cd38caeb7c7e18d542d0e6d15eb35acf47ba61bfeb891a8fe023191c0bb5bb04a242b1538757c0383268a294f21046efe3a1820836f0158f27421c59433cb8fc7e0e66bf53b574397dacb375e6611a5c2c7e2fb8212003d80fff08a50950be22303f0486e26dd04a4fae65c46b25635ec0b82f8f619608132e87c3097da4c11e92a157922d750ed94147c197c777e7929fb534428a27628b4fa0cb306bcf26b6d03e6c3bb1378d9458f350dc174bcbf43e9d16ece0f1c622aabf515a9e73633659a37faa5c7cde023ba1ec1e773c8005b0c2bed98a5d6fef627774f575c368454299815c4dce4c92550bf36661fd37642262fe691224e87fe2a68a518971b67b508bb37cf49e98a084d21ed021a5f768c609a87f9dadbb3520218e01398b2bd4330f2b9cf896107fa6b32773ab3bb4e22d7a41377495dd8b94d9b518b0a94b333ad88d70df7d1a809be61225f0d04b72c3776009ca1fb5bf9996171bd2cfd29c5457ceeb593f2dc8e1d346f97ac488a9ca3e297292b466fba5e8a24401b31e83235437d2510fe1859f6106c34805a14ec2d512cf5b19969588b3f6969f0766677416a0d5b8f96e175bb45316eae44cea072a0a860fa75e206c53d9b23dd229636618843e05ebc5b1c54aa1d33ae747d5aaa5ba44c9e7125042d565801b28110fcf727867bf9e86c7b6b0889449759ee07c5510bdc99612aaca73c14b8b97a72263d0dbb642d661856adfd45bc6601ae180b7a245c6c809695c145310296c8a87125dff238805ec19a735d457845bb0b50bddea266844cf4949a699a76838d0585dafc5cee35396b4f5e032dc1ac85e13713d133f5fe35f4107e45b9219948818ab8e62dc77d2f4f890806765df3d9f2a46c617aa7473cf1debfaff52bf25c93afc8b91a0ca52eca964487da45448a30234a56c6ed2768f18d7abca5a0ff0f21f5d29846674cf5304324c29dcf7b95392e5a3cec1f5bcc16e1664696c6799068d290ba0ece3efe19dded22834d7a130ea2b9597f5d41e0ee44988541f77fc05ea770237e7b9d8c06398147d2d0802cab0b4f3c4f28f2219c67881e0f463702c6f2ee890d1e5572a6bae2b5fe887478be5cf8abdccb809090c44bc3a62cf39a66484f061feb2a4da450b3832da5ca9624b59d1277970e7f55e812c3b4a1afc90f35e9d3a27e4b4e724554d1cfba49fad02bb5c08d7f3dbc3796b7041cc5dd133ae9f24aa07cdf883e42326c48d4800fd4e12540df08a2318252a1e91a0f0fb01c2396253003084f365c1137e9a8e6417f6a54db30646a7de817329612e4daf8bedeab2263bebfcf72b0ee9d1cb2a4b73b596bd334e863a8efcaa59580cacda45b7faa48f18012385b3416d5dd420f042c0bb428e33a15adb9786812629f7f624644e6377f8f5c5939e55404b9c15294ac8bf89c18301507e49178eab0c347e6a4ec765d97dfbfd39758acba8cbe8b05a3389296e9079438796cf87dd8dcab0baf20e53b8b3b88dbace56e69f655a170f411a4f453be5d4f51d1a60c85df27da931cdd238e707f7bfbc1f19c074bfb9dd1d586f4b03bdf76fa1a8268898834bc200d397025bae55612e493fcc082c68b2b466317a70dfc751d0087636ede9d2981f9c11879606664cbf6b0e76260ca1b01da01388cb550fde3d1c6abae6c36ebc75967b1ca659dd5cc471b5f57bf69bb30d1afde1762f3b4e0f1f5a8beb5fa2642f43f999ab218b332f8d11cf273a3bf48c7e025ef39bc03161ae30b00d09fa3b4f4c4cf348969df44fd004358a629b086909aac24a6f84de7b4a2f9a4b9d173897f233f046526464b085415b92b598015fe28637df3abd5b4fe9e4281064ef3d833f3a1652706ae15668e7ccb52efbaae687a6498cc1b7620446aaf617616ff1765342370f04a6388d21979dc050bd2e6e3582c4c80921ce283e001e33f4ec18fbf5e931305ae8630dccf81f1fd01f31919b8153ca54a751a5ea83a29b31c2dd47b4c8302d25aa1c6d183b4093875c2df1e0c38af88e0bc4cdeb964891129da50eaada3b7d703c24337a29565f76606177c1af5300722d46b844b372534d3a4a5221c505bf6ea32f6125d3d7d3fc5cf0767351fa13de39a06d4e1eb2c0123bfe2deec1128f888f3602752ccb4e7121e0e08d0f5339f0752f776931327329fe88e32b2fe6be4756afdd651bfac49710ccdf4535828670e1510f09ed4df87d0b400c0461ae3902b060acad37c85900a7bff8d5bd6dc7bd5bf277e79f01b4ab535fe949ff9f4f526545c75492471b30ac28a0f014d5485f82ff500bdc93c23ecb0bf5d40ef0c0b532a758f3d6dbf6e45f1fa2256489ba83d28f2295aa75d9c09b014fe544350c481f75b88c89e8fca23113e7870a0416021ac726ddd0894301308debc429aa92f03db7d3e7ac1b084aefab0d6de5edf974dfedcc5a02b1e9ab4871351ed3fb0155d35b9ff810bb9ecbffeea083ac45e586b08327e76cb1c1a6946c9c87fae7f08a2af91b6bb444cf71c2499e41779c678f66bc426d30039ebd2da7876b99a5bd174d49912d5ebd291eecfba3e11ca605f98555bf37f1074a66fb3010c8eee0a401b400de10c90478347187be0e53654a0934121edd6d44c2434be70c35c9060455b19bd27c1d19745fa3bc69941c4a0ec420d09ff6eeedd42279342ae4f05b37acc43374a1677f595a401aee8c0bee3b7e1082813d1be730d611d25edc4bb70a156538f81a525f94c56b7198e63ed106c3ba13bc5372915a5c93b76739ce0918cc4a97f8be6b90ea003faec36e98e1a3b4ce65f5d3f5d00ff463eba0e6af2638e1d7edbab4692291f8ecda0cb6629e5fb8b77936139aabfd619937a378b3d96b9f932d9b6337f0492dc4864d5012f3660c4ef8d4a1b445575d16c0e4788ce50ca3b39a366bc39f8a0f2ea56926be9a17da5e058e449fb1fa53593f2d68f6cc14b918f67b831fc4f3a76771b362b2f2ceedb2114efcd38926b422af768f20e2fdc93f46973ba8abb5f4343c740b9902f6797528f513ae904372e896d7997aca9155640e45abe1a374e4ff4889607776dc18fdc33d61ef6fec54aa4c2f502a44e0ebeebd3fc8f564f7e8960aa80c4a13745617dd20871c170af82554cb98857e237c0971684e9a9dd2068544a77c0f06689bbbaaa3c5523ddfa50c2572d26f59a6e66c1759dcbffcb45f140611057059aa1b710a83553a42f33d0a2cbf50fb7ee66f2e6ff5c00c875e2e7580cead8cd9db7656c9fb6bfc7b0189bba05a66faa5f393b422d080ccbc904708143eda568669ec817ff4492dad3ac27063b44d21bfffeb25edfd9f003e7dfa4209c2c9bedc52d53c40dde844d16b8803f409be4ab38ce9d6cd8d0331930ae8fdc0e0fe1b8872548581a3c74f4768e39bbb980da1461a33c3165653d0c7bf306e8c77e43f80b416ab234636a33c1a7025001168412b788029dbe4066667945dec685a82c5644e250dfd9a9d0dc7b843df924071025e6925e1fa594d909076bea48ee8d7e28432545ca978572c7eb05b3ab03997d746a32ccf304c0b34bb982fcffab18eb09ad7b778fd5465c3e0c2d63162e26cbc7a7f1f546914d5a4cf186eaea312fe2202329082dac3786156e3f1d5ecba9cb69596261e4f8856fcd68b31287f1ef358ae6ab1f9ba06d650dca0f432a90ade009f6831da3c346d6bbfa6279c8d2a26eb7168b7646c01884afd900731e58286932a6bf5f2c7b405d88dff201e51541ca1a0bfcbd2ab7f315898f011b9e2496dd3283c25fecbed7766c946878904e246a7c9107849515af605cb2b187f9bf56eb05439dd0d26a655fba6d381e1d862c46b00093aa178d8c79f9d1bc70d52f77b65b33d8d7b95394348b3bbfc70439dd97408d7ee5ee70df7dde4035f458c2863a273e9a66292455a0aa163afa3c410a11ea35fa0f00c923b7b1110326bef4adbd3a176b674a8b649dacbd968e0d96f3c7020c096fc84e030fcafb73db37a4b986c557e4c11eb296e06435d69368d58c9931f2141c0b214ea94dc8b8766ab417e4cff84c6d94386b6c3152bb50a43ae7b37aabae93c5d816ea05eecb0445bde15a5c1d097176a2c0e1f992c159800930f507ea0c2bfee23a080da07aad068c84ec2a54473fea32c3bede8eff835f8bc9fe43d04bda5e3050b14918bc6eb4d420406a7b4465636f06b3473c56d223255a44b1329761deb1efb27573ee785fb86bd87e7e9d0082e7c1a5a9a761987ee410303d807b30f2f6c788aa19757a818514f2f9e4c9b04b53aeecf8d1471dbcd7067e4569a94c9a8c8f896251198afc53c51cc9723798ce41308a30f7f0caac662004011d674b41f45b411930fb8fb215a718ae956b28145c280c1635e6bcc9c422e2c9ea9cae58a4255dcc69e981970252000464bf0821ccd49a63cfc4b82183a021924b70dc42db95aa795fb6d27fca06af5b6ca0f425133363db8cd9b63574a0027d8525361dae28d64f38b01f2529d49a4f694bf02484520870c1b3019ef5c10fd2d574e2df5898d089edd129140d6bd2f5c7eeef9da4070cacac9284405643d757f5f18b257cf3b58c48b0752a4c8f8dea7091c3dc1e0e77926875d38da18386e37b3cc8b775fc4b34abc3ffbc15c243b300df68efc96c331d129205c9a5f0918400685ec6fab40b9ea95840dc12c20bc2e23a7cb700eb4af69a7036112899761c5c1c4e265abb295cec67c5f9231d7b38daf4219ed528e77dd8f800c990ace7a52c7a5a99f3d9074d4b2a3e7e50fe4a206451c6d3ae44cf74066426c3a1133d36fe74c0d1448385ac67f583accf40da38fdb3ba67a77941670fedc468729109bc64dc68432822fd5f4e67105aeffb655a624644e9b38f8c0c25cc18f5b1c2068c64855711722e9fd029371db6b6da91081f43081b4bc4ca23453e7563fcc0e67ea35bb3c8b48e0dfb77b0d84222b0a0f56066682de65eed474ea1307e5b429677f69c90a617271c180d167b5f128dadda2abb26fb7b33dad9332f228b86130614ffda3e98407bb64cda8046dae9e65a0cc866ccceccadfb47f57b7c663756733d5a44182da6b361bde412d0ee7d0018f4ba5c9e36e8ff65d1bd85e5aa0a535bfcb40be617665ed201f2537985de82a5cb6fddc6ad47e0d2d89469e61584cf44b3c9b0eb526237a6218d91607988bedcb06e97420101cfb47d9c31a2e9cdd441f7a048f4aec3e89272629fa0d9108a3f9e278cf0c46b353833460b31d57dd1c550f6119fe80e115bf6f6a7631b48b2c66b4c6ca724e60d916e95e159a056d76cdc78fb85e4b0f53e2ada17bd4069ab1b531e9880c6fb186999d42de54de2242e261b97841656bcad26f76ec75a53f591ffc3e7c014f92097decb0eb571202160834e0d9a7f944cbdc8aa5d4330f75909ce02ee78e29f4d2762df5fc19d1dc13d4ffe538b49c1813a44f86aa6c8f6c441e4cf1e21363c1e45ca32b89f717103e494308314143233341095bd42fb6d4d075bdc1cfbaf84997ce593f71c1f766f06a534cda3c061527e7c31d545f9d88f9127ee4567eb3ead2d4192c4a38913feda39cdbcbd9cbd2b2ba0e4622ac507490c1cecc2e7cad6aa666a6a62693085f8306c198125e49e7382845d848981d4c7f129a1bde44d2dde86625b1c6a052f85e8c5df0c3deba76cb9f864188e29e031106a8f32632c5df25d4d179e80"}) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044944, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='\x00\x00\x16\x00', &(0x7f0000000340)='^', 0x1) 1m5.049948302s ago: executing program 3 (id=297): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x5000000, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1, 0x4}, 0x28) 1m5.034814744s ago: executing program 3 (id=298): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x380020}, 0x1c, 0x0}}], 0x1, 0x20000041) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}, 0x1, 0x0, 0xffffff80}, 0x0) 1m5.008794726s ago: executing program 3 (id=299): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r0, 0x0, 0xe3aa6ea) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000140)={r2, r3+60000000}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe0}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='!~u&\t0|\t\t') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1a00130004001200e27f0000feffffb3a19f015847e08f09000000000000003be3e9e3ca0000000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/138, 0x8a) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) sched_setscheduler(r6, 0x3, &(0x7f0000000300)=0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x40000, 0x2) write(r4, &(0x7f0000000480)="2000001012005f0214f9f4070000fbe40a000000000049d8582d78d1db5142ee", 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) syz_open_procfs(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r8, 0x20, 0x0, 0x8000) r9 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x4a0101) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f0000000100)=0x3) fcntl$setpipe(r4, 0x407, 0x7000000) 1m4.079201528s ago: executing program 3 (id=314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xfffc, 0xf9}, {0x7ff, 0xf9, 0x7, 0x400}, {0x7, 0x7f, 0x9, 0x2}, {0x8, 0x9, 0x81, 0xd}, {0x7, 0xdc, 0x2, 0x4000002}, {0x1, 0x9, 0x5, 0x6c2}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x3000000], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = signalfd(r3, &(0x7f0000001240)={[0x9]}, 0x8) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000100)={0x10000000}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000011c0)='syscall\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x26, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x3, 0x3, 0x4, 0x0, 0xa, 0x6, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdf5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x8da17ef0, 0x20, &(0x7f0000000200)=""/32, 0x40f00, 0x74, '\x00', 0x0, @sk_skb=0x4, r8, 0x8, &(0x7f0000000240)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x5, 0x1c4, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000002c0)=[{0x3, 0x2, 0xb, 0x1}, {0x3, 0x3, 0xe, 0xf9c2cfac7e9980ab}, {0x4, 0x3, 0x6, 0xb}, {0x3, 0x5, 0xa, 0xf}], 0x10, 0x100}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x440000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x18}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.304306956s ago: executing program 3 (id=324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x8000000) 1m2.810420679s ago: executing program 32 (id=324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x8000000) 3.86712351s ago: executing program 0 (id=1006): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e25, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0xffffffffffffffe6}]}}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x101404, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_create1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x18) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) sendmsg$NFT_BATCH(r8, 0x0, 0x10) 3.611464013s ago: executing program 5 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r2 = creat(&(0x7f0000000200)='./file1\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0x5}) 3.5328175s ago: executing program 1 (id=1011): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x50040) fcntl$setstatus(r0, 0x4, 0x2800) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000002c0)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) sendfile(r1, r4, 0x0, 0xffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 3.30506118s ago: executing program 1 (id=1014): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file6\x00', 0x1000000, &(0x7f0000000380)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@noquota}, {@grpid}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3.264796713s ago: executing program 5 (id=1015): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='async\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) 3.208372069s ago: executing program 5 (id=1016): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ptrace$cont(0x21, r0, 0x5, 0x4) mount$bpf(0x200000000000, 0x0, 0x0, 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000201010100000000000000000200000508001b"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bond_slave_1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x17, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x74, 0x4, 0xb, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 2.996952207s ago: executing program 2 (id=1019): prctl$PR_GET_CHILD_SUBREAPER(0xe) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0xffffffffffffffac, 0x1, 0x100000000, 0x5, 0x0, 0x0, 0x406a9}, &(0x7f0000000280)={r2, r3+60000000}, 0x0) 2.879532427s ago: executing program 0 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002840), 0x0, 0xfcd901ce0f01a928, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30004000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.180408918s ago: executing program 2 (id=1021): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (fail_nth: 13) 2.079364878s ago: executing program 2 (id=1023): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000f800010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0xa, [@fwd={0x5}, @restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @union={0x10, 0x8, 0x0, 0x5, 0x1, 0x9, [{0x1, 0x5, 0x3}, {0x10, 0x1, 0x1}, {0x8, 0x1, 0x9}, {0x9, 0x4}, {0x0, 0x4, 0x1}, {0xf, 0x0, 0x9}, {0x10, 0x2, 0x4bc}, {0xd, 0x3, 0x4}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x1}], "cd"}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xf, 0x1}, {0xa, 0x5}, {0xb, 0x1}, {0x2}, {0x10}]}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30, 0x30, 0x30, 0xab7b348e3ed3fba3, 0x0]}}, &(0x7f0000000740)=""/220, 0xfe, 0xdc, 0x1, 0x7, 0x10000, @value=r3}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd5bfa6c8d4b92c3e, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00D\x00\a'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$cgroup_pressure(r7, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x8001, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xa, 0x2}, {}, {0xfff2, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x3, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8858}, 0x4884) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.073849858s ago: executing program 1 (id=1025): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x108) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(r5, r5, 0x0) r6 = socket$inet6(0xa, 0x6, 0x9) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 1.919281192s ago: executing program 0 (id=1026): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='async\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) 1.8272381s ago: executing program 0 (id=1027): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0osaUFlYULMZq40MTEDS5rWxAp1LTVCCFaXeDSkLg3Lk38C1zpxqgrE7a4NyTEsAE1JmPuzL3TaecH0zLtWObzSWbmnHtv55wv95yZc+5hbgA9ayR9SiJ2RcT1iBiqZFceMFJ5uXPr8tTvty5PJVEqvfFbUj7u9q3LU/mh+d/tzDNLK7fXWrh46dzk7OzMfJYfWzz/7tjCxUtPnz0/eWbmzMyFiRMnjh8bf+7ZiWeaV76//TjTOt3e/+HcgX2vvHn1talTV9/68eskj39FHO+3/6atjTTY1pcnHu9UKf8Qu8vPg+XnpJhvLXSvQrQlbZDFrCtdj6Hoi+rJi6F4+ZOuVg7YUKVSqbSt6d7h7IhMkr3WbgO2sKTt3tyv38N9JfuiTyKWptI5cO18vhfcPFmZAKVx38kelT3F6uy1vzq/7bx0tnVq6Y8v0kcsX4cY2KDiAADi25OV13zstzz+KxRrj3shWxsajoh/R8SeiPhPROyNiP9GxP8i4v8R8UDN3zRa91lt9SJJ/fizcGNdgbXp5pGI57O1rZXjv+raxXBflttdjr8/OX12duZoRPwrIg5H/7Y0P96ijO9euvZZlqwb143UjP/SR1p+PhbM6nGjuOoC3fTk4uS9xp27+XHE/mKj+JPqSkB6HvdFxP6D6yvj7FNfHWi27+7xt1BcX31qlb6MeKJy/pdiVfy5pPX65Nj2mJ05Opa3ino//Xzl9Wbl31P8HZCe/x0N2381/uGkdr12Ye1lXPnl06Zzyjbb/4p+k7b/gWRlV/pgcnFxfjxiIHm1nB8of2Kl26P+uInl49P4Dx9q3P/3xPK/xIMRkTbihyLi4Yg4mNX9kYh4NCIOtYj/hxcfe2f98W+sNP7pu5//t5+snv+miXxtu25X37nvvynvyU/ZcIv4k2hw/o+XU4ezLe18/rWs6fy9tGYAAADYegoRsSuSwmg1XSiMjlb+v/ze2FGYnVtYPHJ67r0L05XfCAxHfyG/0jVUvR4aS+PZtD6/PjqxKn8su278ed9gOT86NTc73e3gocftbNL/U7/2dbt2wIbrwDoasEWtt/+XSqWPOlwVYJP5/ofepf9D72rQ/wdX5ZvfIwDY0ooNMjUT+7+WfycM3G+ajf+vbXI9gM1n/g+9S/+H3qX/Q0/KfglfjLZ+Lb9BifTzp+kxfRHRrYo1SZRK2+vvcrAZiYEOvuGu1XdJGFrb+0RhjYUmtW1s+xru0VCXiG43gDUm/sxutrkJZaVdaX6weW9qP9HtTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//wc7YrA==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x8, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)="d17fc5a50a326b8a42ecb907195f690a5d9f8739ae609af97875a10207cce61293d332679762ba8dc52e7df4948cd242df1f9cc4e551ed1bef66e74f601fab845cb66d65b88e317b4265cc903678bc6f3598f54d3ef017839185fd2602e949a23d453e0d7e8fd5d7d8bdd51efc0160edba5c7be510a6753ec6f6bc3f613cedf55c", 0x81, 0xa00}]) 1.82714436s ago: executing program 4 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x40000000, 0x4010}, 0x0) 1.82520678s ago: executing program 2 (id=1029): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b3bde2a2ff2433061ef24e16a6d66bf7d18ee201760bd236e5f276c90b67fe40fa45f5bcefc4d533bb2c063b3535be4aa440cade281c04817daccf0510ba0a747a8e7452f6c52e03b450c989ef05958048423bf5fa225bccd987947c0c249241dd59bb11f197df609deacf91cc0f2468e3e179015916dd4b28169c3d223f39ad2e8c3334e73d4fbf02a495219c6a268fe94cba3b660cf9fb", @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0xf516ec685b69bb28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x4012011, r3, 0x0) r4 = socket(0x5, 0x2, 0x9) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x26020480) socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0xc) 1.787379403s ago: executing program 4 (id=1030): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f00000000c0)) 1.733418068s ago: executing program 5 (id=1031): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xfffffffffffffe77}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.675357813s ago: executing program 4 (id=1032): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0xfff7, 0x1, {0x0, 0x1}, {0x5e, 0x2}, @period={0x59, 0x0, 0xa, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 6) 1.419223455s ago: executing program 2 (id=1033): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") 1.339107752s ago: executing program 4 (id=1034): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) syz_emit_ethernet(0x5b, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13681002c008847000f00000000000000000000194d6a80782352a62cb6d92c138ca6e4b2e972a8d0f479b551d1de16240b1a5309000000000000007abfbb602537a03a6103cdc2aebee10f988148f115"], 0x0) mount$cgroup2(0x0, &(0x7f0000008180)='.\x00', &(0x7f00000081c0), 0x40, &(0x7f0000008200)={[{@pids_localevents}]}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000000500)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/35, 0x23) getdents64(r3, 0xfffffffffffffffe, 0xff80) sendto$rxrpc(r3, &(0x7f0000000600)="7121cb56d11441e1ce9972b38d855ed3b6384ee6b98428d200a2a892bd60bf9e415c17533bd56a240d061f288a6d306a517c", 0x32, 0x80, &(0x7f0000000640)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={r2, 0x4, 0x8, 0x8, 0x6, 0x6}, &(0x7f00000005c0)=0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040059}, 0x8001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x48000) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.107745013s ago: executing program 1 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000026000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.021002001s ago: executing program 0 (id=1036): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0, 0x0, 0x0, 0x2000000}]) 1.020835641s ago: executing program 1 (id=1037): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='async\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) 1.020481631s ago: executing program 5 (id=1038): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r0, 0xb15, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x90500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x418900a6}, 0x0, 0x10000, 0x0, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0xa80, &(0x7f0000000280)="$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") syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bind$xdp(r5, &(0x7f0000000d00)={0x2c, 0x9, r9, 0x2b, r5}, 0x10) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000463000/0x2000)=nil) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x45, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, {0xa, 0x4e23, 0x80000001, @empty, 0x400}, 0xffffffffffffffff, {[0xa, 0x7, 0x5, 0x7fff, 0x7, 0xf, 0x8821, 0x5]}}, 0x5c) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) 1.020207891s ago: executing program 4 (id=1039): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e3, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000400)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) write$cgroup_pid(r6, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000001000000000000002000100000000000000061600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/85, 0x55}, {&(0x7f0000000b40)=""/188, 0xbc}, {&(0x7f0000000c00)=""/207, 0xcf}, {&(0x7f0000000ac0)=""/22, 0x16}], 0x6, &(0x7f0000000d80)=""/134, 0x86}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0xd3732ff5164765fc, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100007056000992cb0e919cbda3fd1988587fda2ff4ac7b49b518c8e4a289446a855bf5f272ddd9efb8a0871acd05fb4037ab5de25353f0972234", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000186000000100000000000000ffffffff18240000", @ANYRES32=0x1, @ANYBLOB="0000000001800000ad723000fcffffff182b0000", @ANYRES32, @ANYBLOB="0000000007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0xef, &(0x7f00000001c0)=""/239, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x4, 0x5, 0x1, 0x3}], 0x10, 0x6}, 0x94) 842.422486ms ago: executing program 1 (id=1040): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 273.482366ms ago: executing program 0 (id=1041): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000300)='\x05\x9e!m{/^}\x87', 0x222001, &(0x7f0000000380)={@align=0x1, {0x1, 0x4000, 0x1, 0x3}}, 0x30, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x2}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000280003801400020062617461647630000000050000000000080001000200000008000300000000000800060073000000140002800800070000000080080003000300000050000380080003000000000008000500e0000001060007004e2300000500080002000000060007004e24000008000300030000001400020067656e65766530000000000000000000080001"], 0xa8}}, 0x2004c010) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x736}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x66}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x2, 0x1}, {0xe, 0xb}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c840}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@gettfilter={0x0, 0x2e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf, 0x2}, {0x7, 0x7}, {0x0, 0xfff3}}, [{0x0, 0xb, 0x71af9ee1}, {0x0, 0xb, 0xfffffffe}, {0x0, 0xb, 0x6da5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r7) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000280), &(0x7f0000000340)=r9}, 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r11, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 240.356189ms ago: executing program 5 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f0000000000000001"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x28}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (fail_nth: 13) 193.948893ms ago: executing program 2 (id=1043): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x9a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) close(0xffffffffffffffff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x6f6) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1b0, 0x1b0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xff], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x133, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x5}, {0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x4, 0x4}, 0x5, 0x3c1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 0s ago: executing program 4 (id=1044): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a000000000000000000000000000000000000000001fc01020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): 99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff35ac629 code=0x0 [ 82.436165][ T5285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17250 sclass=netlink_route_socket pid=5285 comm=syz.4.499 [ 82.543572][ T5285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.499'. [ 82.760231][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.863570][ T28] audit: type=1326 audit(1771649044.326:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5286 comm="syz.5.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8a2c629 code=0x0 [ 83.064911][ T5296] loop0: detected capacity change from 0 to 1024 [ 83.101022][ T5296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 83.110551][ T5296] System zones: 0-1, 3-36 [ 83.126004][ T5296] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.505: bad orphan inode 134217728 [ 83.137708][ T5296] loop0: lost filesystem error report for type 5 error -117 [ 83.156783][ T5296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.223685][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.343488][ T28] audit: type=1400 audit(1771649044.816:347): avc: denied { ioctl } for pid=5286 comm="syz.5.502" path="socket:[10842]" dev="sockfs" ino=10842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.417993][ T5285] batadv_slave_1: left promiscuous mode [ 83.462073][ T5279] syz.4.499 (5279) used greatest stack depth: 5880 bytes left [ 83.582042][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.699897][ T5320] cgroup: subsys name conflicts with all [ 83.723719][ T28] audit: type=1400 audit(1771649045.186:348): avc: denied { mounton } for pid=5286 comm="syz.5.502" path="/proc/92/task" dev="proc" ino=10880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.799335][ T5328] netlink: 'syz.0.516': attribute type 29 has an invalid length. [ 83.815932][ T5329] netlink: 'syz.0.516': attribute type 29 has an invalid length. [ 83.978621][ T28] audit: type=1400 audit(1771649045.446:349): avc: denied { read write } for pid=5338 comm="syz.0.518" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.037472][ T28] audit: type=1400 audit(1771649045.446:350): avc: denied { open } for pid=5338 comm="syz.0.518" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.098555][ T28] audit: type=1400 audit(1771649045.456:351): avc: denied { shutdown } for pid=5338 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.131499][ T5351] serio: Serial port ptm0 [ 84.227084][ T28] audit: type=1400 audit(1771649045.696:352): avc: denied { associate } for pid=5286 comm="syz.5.502" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.407765][ T28] audit: type=1400 audit(1771649045.876:353): avc: denied { create } for pid=5359 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1 [ 84.486332][ T5363] loop0: detected capacity change from 0 to 256 [ 84.533156][ T5363] msdos: Unknown parameter 'Û" ms' [ 84.610344][ T28] audit: type=1400 audit(1771649046.076:354): avc: denied { block_suspend } for pid=5364 comm="syz.1.528" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.808671][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 84.814469][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 84.844751][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.5.535'. [ 85.135950][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.146973][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.173291][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.193265][ T5403] JBD2: no valid journal superblock found [ 85.199046][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.229154][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.243667][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.345553][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.372504][ T5403] JBD2: no valid journal superblock found [ 85.390745][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.476130][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.491365][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.514560][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.532696][ T5403] JBD2: no valid journal superblock found [ 85.546303][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.570952][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.580235][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 85.599925][ T5406] erspan0: entered promiscuous mode [ 85.605798][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.617267][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.625674][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 85.633603][ T5403] JBD2: no valid journal superblock found [ 85.641471][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.667590][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.676467][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.702562][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.742317][ T5403] JBD2: no valid journal superblock found [ 85.753303][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.805722][ T5403] loop5: detected capacity change from 0 to 1024 [ 85.850494][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.862972][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.873593][ T5403] JBD2: no valid journal superblock found [ 85.879615][ T5403] EXT4-fs (loop5): Could not load journal inode [ 85.954210][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.965555][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.976672][ T5403] JBD2: no valid journal superblock found [ 85.988628][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.015540][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.033811][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.046769][ T5403] JBD2: no valid journal superblock found [ 86.052664][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.074528][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.086596][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.101673][ T5403] JBD2: no valid journal superblock found [ 86.107747][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.129432][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.148077][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.165902][ T5403] JBD2: no valid journal superblock found [ 86.177266][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.200765][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.212180][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.236440][ T5403] JBD2: no valid journal superblock found [ 86.252552][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.293741][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.305189][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.315640][ T5403] JBD2: no valid journal superblock found [ 86.321435][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.371107][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.386841][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.387147][ T5435] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 86.398576][ T5403] JBD2: no valid journal superblock found [ 86.417208][ T5435] bond2: entered promiscuous mode [ 86.422823][ T5435] bond2: entered allmulticast mode [ 86.428699][ T5435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.435779][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.458206][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.473291][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.484748][ T5403] JBD2: no valid journal superblock found [ 86.490685][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.533959][ T5442] SELinux: failed to load policy [ 86.584796][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.618606][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.652377][ T5403] JBD2: no valid journal superblock found [ 86.663191][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.669566][ T5451] program syz.1.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.702543][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.753219][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.778162][ T5403] JBD2: no valid journal superblock found [ 86.824262][ T5403] EXT4-fs (loop5): Could not load journal inode [ 86.896721][ T5403] set_capacity_and_notify: 10 callbacks suppressed [ 86.896741][ T5403] loop5: detected capacity change from 0 to 1024 [ 86.927644][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.947121][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.972169][ T5403] JBD2: no valid journal superblock found [ 86.999020][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.039538][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.071878][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.126273][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.151003][ T5403] JBD2: no valid journal superblock found [ 87.156898][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.186331][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'. [ 87.195897][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.218794][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.239220][ T5486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.244787][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.262365][ T5403] JBD2: no valid journal superblock found [ 87.263849][ T5490] FAULT_INJECTION: forcing a failure. [ 87.263849][ T5490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.272530][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.299089][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.316789][ T5490] CPU: 1 UID: 0 PID: 5490 Comm: syz.4.571 Not tainted syzkaller #0 PREEMPT(full) [ 87.316821][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.316836][ T5490] Call Trace: [ 87.316844][ T5490] [ 87.316853][ T5490] __dump_stack+0x1d/0x30 [ 87.316880][ T5490] dump_stack_lvl+0x95/0xd0 [ 87.316997][ T5490] dump_stack+0x15/0x1b [ 87.317022][ T5490] should_fail_ex+0x263/0x280 [ 87.317048][ T5490] should_fail+0xb/0x20 [ 87.317070][ T5490] should_fail_usercopy+0x1a/0x20 [ 87.317098][ T5490] _copy_to_user+0x20/0xa0 [ 87.317137][ T5490] bpf_verifier_vlog+0x36e/0x5a0 [ 87.317169][ T5490] __btf_verifier_log+0x7f/0xb0 [ 87.317205][ T5490] __btf_verifier_log_type+0x302/0x330 [ 87.317316][ T5490] btf_func_proto_check_meta+0xc6/0xf0 [ 87.317423][ T5490] btf_parse_type_sec+0x2a4/0x1570 [ 87.317509][ T5490] ? btf_check_sec_info+0x1fc/0x220 [ 87.317542][ T5490] ? btf_parse_hdr+0x3ac/0x3c0 [ 87.317592][ T5490] btf_new_fd+0x2cd/0x7d0 [ 87.317655][ T5490] ? ns_capable+0x7c/0xb0 [ 87.317676][ T5490] bpf_btf_load+0x112/0x130 [ 87.317701][ T5490] __sys_bpf+0x3d8/0x7e0 [ 87.317731][ T5490] __x64_sys_bpf+0x41/0x50 [ 87.317833][ T5490] x64_sys_call+0x10cb/0x3020 [ 87.317858][ T5490] do_syscall_64+0x12c/0x370 [ 87.317910][ T5490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.317977][ T5490] RIP: 0033:0x7f2ff35ac629 [ 87.317995][ T5490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.318014][ T5490] RSP: 002b:00007f2ff2007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.318032][ T5490] RAX: ffffffffffffffda RBX: 00007f2ff3825fa0 RCX: 00007f2ff35ac629 [ 87.318044][ T5490] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 87.318055][ T5490] RBP: 00007f2ff2007090 R08: 0000000000000000 R09: 0000000000000000 [ 87.318066][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.318113][ T5490] R13: 00007f2ff3826038 R14: 00007f2ff3825fa0 R15: 00007ffc44999918 [ 87.318155][ T5490] [ 87.574076][ T5491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.581700][ T5491] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 87.595611][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.608872][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.620184][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 87.620224][ T28] audit: type=1400 audit(1771649049.086:364): avc: denied { accept } for pid=5494 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.620230][ T5491] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 87.653943][ T5403] JBD2: no valid journal superblock found [ 87.659723][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.680140][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 87.693076][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.703916][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.738635][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.752808][ T5403] JBD2: no valid journal superblock found [ 87.761324][ T5498] loop4: detected capacity change from 0 to 2048 [ 87.780420][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.814151][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.826296][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.837644][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.847883][ T5498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.865959][ T5403] JBD2: no valid journal superblock found [ 87.865973][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.894057][ T5403] loop5: detected capacity change from 0 to 1024 [ 87.918600][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.938261][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.948741][ T5403] JBD2: no valid journal superblock found [ 87.954570][ T5403] EXT4-fs (loop5): Could not load journal inode [ 87.996584][ T5403] loop5: detected capacity change from 0 to 1024 [ 88.003688][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.014766][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.025444][ T5403] JBD2: no valid journal superblock found [ 88.031373][ T5403] EXT4-fs (loop5): Could not load journal inode [ 88.072831][ T5403] loop5: detected capacity change from 0 to 1024 [ 88.099200][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.122772][ T5403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.143905][ T5403] JBD2: no valid journal superblock found [ 88.157351][ T5403] EXT4-fs (loop5): Could not load journal inode [ 88.172908][ T5515] netlink: 7 bytes leftover after parsing attributes in process `syz.1.579'. [ 88.195502][ T5515] netlink: 7 bytes leftover after parsing attributes in process `syz.1.579'. [ 88.365550][ T28] audit: type=1400 audit(1771649049.836:365): avc: denied { checkpoint_restore } for pid=5525 comm="syz.1.582" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.402112][ T5526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.452869][ T5526] EXT4-fs (loop1): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 88.465706][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 88.475714][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.503044][ T5529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 88.528446][ T5529] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 88.538778][ T28] audit: type=1400 audit(1771649050.006:366): avc: denied { connect } for pid=5528 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.600010][ T5536] FAULT_INJECTION: forcing a failure. [ 88.600010][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.671487][ T5536] CPU: 0 UID: 0 PID: 5536 Comm: syz.1.586 Not tainted syzkaller #0 PREEMPT(full) [ 88.671521][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.671537][ T5536] Call Trace: [ 88.671545][ T5536] [ 88.671555][ T5536] __dump_stack+0x1d/0x30 [ 88.671633][ T5536] dump_stack_lvl+0x95/0xd0 [ 88.671680][ T5536] dump_stack+0x15/0x1b [ 88.671762][ T5536] should_fail_ex+0x263/0x280 [ 88.671789][ T5536] should_fail+0xb/0x20 [ 88.671810][ T5536] should_fail_usercopy+0x1a/0x20 [ 88.671838][ T5536] _copy_to_user+0x20/0xa0 [ 88.671936][ T5536] bpf_verifier_vlog+0x36e/0x5a0 [ 88.671967][ T5536] btf_verifier_log+0xb2/0xf0 [ 88.672063][ T5536] btf_func_proto_log+0xca/0x4a0 [ 88.672165][ T5536] __btf_verifier_log_type+0x275/0x330 [ 88.672275][ T5536] btf_func_proto_check_meta+0xc6/0xf0 [ 88.672313][ T5536] btf_parse_type_sec+0x2a4/0x1570 [ 88.672358][ T5536] ? btf_check_sec_info+0x1fc/0x220 [ 88.672462][ T5536] ? btf_parse_hdr+0x3ac/0x3c0 [ 88.672504][ T5536] btf_new_fd+0x2cd/0x7d0 [ 88.672529][ T5536] ? ns_capable+0x7c/0xb0 [ 88.672547][ T5536] bpf_btf_load+0x112/0x130 [ 88.672615][ T5536] __sys_bpf+0x3d8/0x7e0 [ 88.672649][ T5536] __x64_sys_bpf+0x41/0x50 [ 88.672688][ T5536] x64_sys_call+0x10cb/0x3020 [ 88.672774][ T5536] do_syscall_64+0x12c/0x370 [ 88.672818][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.672846][ T5536] RIP: 0033:0x7fa31e78c629 [ 88.672864][ T5536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.672924][ T5536] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.672948][ T5536] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 88.673045][ T5536] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 88.673082][ T5536] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.673097][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.673111][ T5536] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 88.673213][ T5536] [ 88.675877][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 88.953292][ T5549] team_slave_0: entered promiscuous mode [ 88.958999][ T5549] team_slave_1: entered promiscuous mode [ 89.016147][ T5549] macvtap1: entered promiscuous mode [ 89.021750][ T5549] team0: entered promiscuous mode [ 89.028089][ T5549] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.038112][ T5549] team0: Device macvtap1 is already an upper device of the team interface [ 89.103859][ T5551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 89.123566][ T5551] System zones: 0-1, 3-36 [ 89.151168][ T5551] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.589: bad orphan inode 134217728 [ 89.183323][ T5551] loop0: lost filesystem error report for type 5 error -117 [ 89.193907][ T5551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.360954][ T5549] team0: left promiscuous mode [ 89.366694][ T5549] team_slave_0: left promiscuous mode [ 89.372141][ T5549] team_slave_1: left promiscuous mode [ 89.378463][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.617943][ T3513] IPVS: starting estimator thread 0... [ 89.671429][ T5575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.693520][ T5575] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.835404][ T5574] IPVS: using max 2352 ests per chain, 117600 per kthread [ 89.866489][ T5575] FAULT_INJECTION: forcing a failure. [ 89.866489][ T5575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.920955][ T5575] CPU: 1 UID: 0 PID: 5575 Comm: syz.1.599 Not tainted syzkaller #0 PREEMPT(full) [ 89.921002][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.921015][ T5575] Call Trace: [ 89.921022][ T5575] [ 89.921029][ T5575] __dump_stack+0x1d/0x30 [ 89.921059][ T5575] dump_stack_lvl+0x95/0xd0 [ 89.921217][ T5575] dump_stack+0x15/0x1b [ 89.921238][ T5575] should_fail_ex+0x263/0x280 [ 89.921270][ T5575] should_fail+0xb/0x20 [ 89.921287][ T5575] should_fail_usercopy+0x1a/0x20 [ 89.921382][ T5575] _copy_from_user+0x1c/0xb0 [ 89.921411][ T5575] vmemdup_user+0x5e/0xd0 [ 89.921445][ T5575] path_setxattrat+0x1b1/0x310 [ 89.921580][ T5575] __x64_sys_setxattr+0x6e/0x90 [ 89.921602][ T5575] x64_sys_call+0x2ee2/0x3020 [ 89.921625][ T5575] do_syscall_64+0x12c/0x370 [ 89.921658][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.921746][ T5575] RIP: 0033:0x7fa31e78c629 [ 89.921822][ T5575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.921838][ T5575] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 89.921860][ T5575] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 89.921875][ T5575] RDX: 00002000000005c0 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 89.921887][ T5575] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.921959][ T5575] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 89.922014][ T5575] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 89.922031][ T5575] [ 90.205367][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.289678][ T5588] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.505639][ T5596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.533260][ T5596] System zones: 0-1, 3-36 [ 90.561117][ T5596] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.605: bad orphan inode 134217728 [ 90.618110][ T5596] loop4: lost filesystem error report for type 5 error -117 [ 90.622163][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.666444][ T5602] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 90.746872][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.782547][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.918999][ T5611] FAULT_INJECTION: forcing a failure. [ 90.918999][ T5611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.946418][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz.0.609 Not tainted syzkaller #0 PREEMPT(full) [ 90.946515][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.946529][ T5611] Call Trace: [ 90.946537][ T5611] [ 90.946545][ T5611] __dump_stack+0x1d/0x30 [ 90.946574][ T5611] dump_stack_lvl+0x95/0xd0 [ 90.946675][ T5611] dump_stack+0x15/0x1b [ 90.946763][ T5611] should_fail_ex+0x263/0x280 [ 90.946785][ T5611] should_fail+0xb/0x20 [ 90.946808][ T5611] should_fail_usercopy+0x1a/0x20 [ 90.946924][ T5611] _copy_from_iter+0xcf/0xea0 [ 90.946952][ T5611] ? __rcu_read_unlock+0x4e/0x70 [ 90.946977][ T5611] ? terminate_walk+0x1e6/0x210 [ 90.947025][ T5611] ? path_openat+0x1ab2/0x2050 [ 90.947115][ T5611] tun_get_user+0x390/0x27c0 [ 90.947146][ T5611] ? ref_tracker_alloc+0x1f2/0x2f0 [ 90.947178][ T5611] tun_chr_write_iter+0x15e/0x210 [ 90.947263][ T5611] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.947302][ T5611] vfs_write+0x5a6/0x9f0 [ 90.947392][ T5611] ksys_write+0xdc/0x1a0 [ 90.947441][ T5611] __x64_sys_write+0x40/0x50 [ 90.947499][ T5611] x64_sys_call+0x27e1/0x3020 [ 90.947530][ T5611] do_syscall_64+0x12c/0x370 [ 90.947569][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.947654][ T5611] RIP: 0033:0x7fd1c54ec629 [ 90.947673][ T5611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.947692][ T5611] RSP: 002b:00007fd1c3f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.947715][ T5611] RAX: ffffffffffffffda RBX: 00007fd1c5765fa0 RCX: 00007fd1c54ec629 [ 90.947730][ T5611] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 90.947744][ T5611] RBP: 00007fd1c3f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.947755][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.947765][ T5611] R13: 00007fd1c5766038 R14: 00007fd1c5765fa0 R15: 00007ffda500d658 [ 90.947843][ T5611] [ 91.237472][ T5621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.250904][ T5621] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.296072][ T28] audit: type=1400 audit(1771649052.766:367): avc: denied { execute } for pid=5620 comm="syz.4.613" path="/138/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.321837][ T28] audit: type=1400 audit(1771649052.766:368): avc: denied { execute } for pid=5620 comm="syz.4.613" path="/138/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.389225][ T5621] process 'syz.4.613' launched '/dev/fd/8' with NULL argv: empty string added [ 91.405741][ T28] audit: type=1400 audit(1771649052.876:369): avc: denied { execute_no_trans } for pid=5620 comm="syz.4.613" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.418809][ T5634] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 91.480583][ T5635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 91.492329][ T28] audit: type=1400 audit(1771649052.926:370): avc: denied { create } for pid=5636 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.496890][ T5635] System zones: [ 91.513179][ T28] audit: type=1400 audit(1771649052.926:371): avc: denied { setopt } for pid=5636 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.537420][ T5635] 0-1, 3-36 [ 91.542095][ T5634] team0 (unregistering): Port device team_slave_0 removed [ 91.555455][ T5635] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.618: bad orphan inode 134217728 [ 91.567760][ T5634] team0 (unregistering): Port device team_slave_1 removed [ 91.573490][ T5635] loop5: lost filesystem error report for type 5 error -117 [ 91.580002][ T5635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.581600][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'. [ 91.647226][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.745876][ T5654] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 91.763154][ T28] audit: type=1400 audit(1771649053.216:372): avc: denied { mac_admin } for pid=5645 comm="syz.5.621" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.799957][ T5656] FAULT_INJECTION: forcing a failure. [ 91.799957][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.821089][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 91.832310][ T28] audit: type=1400 audit(1771649053.286:373): avc: denied { relabelto } for pid=5645 comm="syz.5.621" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 91.860975][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT(full) [ 91.861004][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.861063][ T5656] Call Trace: [ 91.861071][ T5656] [ 91.861080][ T5656] __dump_stack+0x1d/0x30 [ 91.861112][ T5656] dump_stack_lvl+0x95/0xd0 [ 91.861166][ T5656] dump_stack+0x15/0x1b [ 91.861194][ T5656] should_fail_ex+0x263/0x280 [ 91.861277][ T5656] should_fail+0xb/0x20 [ 91.861295][ T5656] should_fail_usercopy+0x1a/0x20 [ 91.861317][ T5656] _copy_to_user+0x20/0xa0 [ 91.861352][ T5656] bpf_verifier_vlog+0x36e/0x5a0 [ 91.861384][ T5656] __btf_verifier_log+0x7f/0xb0 [ 91.861421][ T5656] __btf_verifier_log_type+0x302/0x330 [ 91.861525][ T5656] btf_func_proto_check_meta+0xc6/0xf0 [ 91.861661][ T5656] btf_parse_type_sec+0x2a4/0x1570 [ 91.861704][ T5656] ? btf_check_sec_info+0x1fc/0x220 [ 91.861743][ T5656] ? btf_parse_hdr+0x3ac/0x3c0 [ 91.861936][ T5656] btf_new_fd+0x2cd/0x7d0 [ 91.861961][ T5656] ? ns_capable+0x7c/0xb0 [ 91.861991][ T5656] bpf_btf_load+0x112/0x130 [ 91.862079][ T5656] __sys_bpf+0x3d8/0x7e0 [ 91.862113][ T5656] __x64_sys_bpf+0x41/0x50 [ 91.862153][ T5656] x64_sys_call+0x10cb/0x3020 [ 91.862204][ T5656] do_syscall_64+0x12c/0x370 [ 91.862271][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.862412][ T5656] RIP: 0033:0x7f81eec1c629 [ 91.862445][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.862542][ T5656] RSP: 002b:00007f81ed66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.862561][ T5656] RAX: ffffffffffffffda RBX: 00007f81eee95fa0 RCX: 00007f81eec1c629 [ 91.862577][ T5656] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 91.862619][ T5656] RBP: 00007f81ed66f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.862634][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.862649][ T5656] R13: 00007f81eee96038 R14: 00007f81eee95fa0 R15: 00007fff811084d8 [ 91.862673][ T5656] [ 92.256522][ T5667] set_capacity_and_notify: 6 callbacks suppressed [ 92.256539][ T5667] loop2: detected capacity change from 0 to 1024 [ 92.356636][ T5667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 92.388056][ T5667] System zones: 0-1, 3-36 [ 92.409366][ T5667] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.631: bad orphan inode 134217728 [ 92.447290][ T5667] loop2: lost filesystem error report for type 5 error -117 [ 92.450099][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.637296][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.666508][ T5672] loop0: detected capacity change from 0 to 512 [ 92.675738][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 92.675752][ T28] audit: type=1400 audit(1771649054.146:375): avc: denied { execute } for pid=5670 comm="syz.1.633" path="/dev/snd/seq" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 92.678671][ T5671] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 92.728085][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 92.755220][ T5671] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 92.776251][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.797585][ T5672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.852710][ T5672] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.910322][ T5684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'. [ 92.963577][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.054408][ T5693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.638'. [ 93.068384][ T5693] IPv6: Can't replace route, no match found [ 93.078036][ T5693] loop0: detected capacity change from 0 to 128 [ 93.089283][ T5693] FAT-fs (loop0): invalid media value (0x00) [ 93.114994][ T5693] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 93.125361][ T28] audit: type=1400 audit(1771649054.586:376): avc: denied { getopt } for pid=5694 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.155276][ T5695] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.641'. [ 93.181732][ T5693] FAT-fs (loop0): Can't find a valid FAT filesystem [ 94.578959][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 94.722781][ T28] audit: type=1400 audit(1771649056.186:377): avc: denied { listen } for pid=5727 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.887045][ T5740] FAULT_INJECTION: forcing a failure. [ 94.887045][ T5740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.918825][ T5745] loop0: detected capacity change from 0 to 164 [ 94.920681][ T5740] CPU: 0 UID: 0 PID: 5740 Comm: syz.2.666 Not tainted syzkaller #0 PREEMPT(full) [ 94.920810][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.920831][ T5740] Call Trace: [ 94.920851][ T5740] [ 94.920873][ T5740] __dump_stack+0x1d/0x30 [ 94.920966][ T5740] dump_stack_lvl+0x95/0xd0 [ 94.921070][ T5740] dump_stack+0x15/0x1b [ 94.921135][ T5740] should_fail_ex+0x263/0x280 [ 94.921207][ T5740] should_fail+0xb/0x20 [ 94.921267][ T5740] should_fail_usercopy+0x1a/0x20 [ 94.921332][ T5740] _copy_from_user+0x1c/0xb0 [ 94.921485][ T5740] io_submit_one+0x52/0x1350 [ 94.921657][ T5740] __se_sys_io_submit+0xfb/0x280 [ 94.921753][ T5740] __x64_sys_io_submit+0x43/0x50 [ 94.921849][ T5740] x64_sys_call+0x19d5/0x3020 [ 94.922055][ T5740] do_syscall_64+0x12c/0x370 [ 94.922199][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.922258][ T5740] RIP: 0033:0x7f81eec1c629 [ 94.922305][ T5740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.922432][ T5740] RSP: 002b:00007f81ed66f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 94.922535][ T5740] RAX: ffffffffffffffda RBX: 00007f81eee95fa0 RCX: 00007f81eec1c629 [ 94.922574][ T5740] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007f81ef9d4000 [ 94.922680][ T5740] RBP: 00007f81ed66f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.922716][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.922753][ T5740] R13: 00007f81eee96038 R14: 00007f81eee95fa0 R15: 00007fff811084d8 [ 94.922805][ T5740] [ 95.355025][ T5758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 95.367083][ T5758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 95.416156][ T5763] loop2: detected capacity change from 0 to 512 [ 95.447032][ T5763] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.513733][ T5763] EXT4-fs (loop2): mount failed [ 95.528910][ T28] audit: type=1400 audit(1771649056.996:378): avc: denied { bind } for pid=5762 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.604620][ T28] audit: type=1400 audit(1771649057.066:379): avc: denied { allowed } for pid=5768 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.661044][ T28] audit: type=1400 audit(1771649057.126:380): avc: denied { setopt } for pid=5775 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.661290][ T5776] ip6erspan0: entered allmulticast mode [ 95.787469][ T5783] loop5: detected capacity change from 0 to 128 [ 95.838090][ T5783] netlink: 'syz.5.670': attribute type 1 has an invalid length. [ 96.150446][ T5793] loop0: detected capacity change from 0 to 512 [ 96.229347][ T5793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.310063][ T5793] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.375909][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.400752][ T5788] loop2: detected capacity change from 0 to 512 [ 96.653907][ T28] audit: type=1400 audit(1771649058.126:381): avc: denied { create } for pid=5805 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.688054][ T5806] netlink: 'syz.0.676': attribute type 9 has an invalid length. [ 96.782711][ T28] audit: type=1400 audit(1771649058.246:382): avc: denied { create } for pid=5741 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.856954][ T28] audit: type=1400 audit(1771649058.326:383): avc: denied { setopt } for pid=5805 comm="syz.0.676" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.903825][ T28] audit: type=1400 audit(1771649058.376:384): avc: denied { bind } for pid=5813 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.943863][ T5812] bridge0: entered allmulticast mode [ 97.418621][ T5827] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 97.440571][ T5820] loop2: detected capacity change from 0 to 1024 [ 97.471044][ T5827] bond4: entered promiscuous mode [ 97.476610][ T5827] bond4: entered allmulticast mode [ 97.482866][ T5827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.496922][ T5820] EXT4-fs: inline encryption not supported [ 97.556255][ T5832] capability: warning: `syz.0.683' uses deprecated v2 capabilities in a way that may be insecure [ 97.603536][ T5838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.615892][ T5820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.667771][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.928826][ T5838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.005001][ T5852] 9p: Bad value for 'rfdno' [ 98.052608][ T5838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.112300][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 98.112316][ T28] audit: type=1400 audit(1771649059.576:389): avc: denied { create } for pid=5856 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.144864][ T5857] loop5: detected capacity change from 0 to 1024 [ 98.150535][ T28] audit: type=1400 audit(1771649059.606:390): avc: denied { write } for pid=5856 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.174678][ T5838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.225918][ T28] audit: type=1400 audit(1771649059.626:391): avc: denied { ioctl } for pid=5856 comm="syz.5.691" path="socket:[11991]" dev="sockfs" ino=11991 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.253719][ T5861] loop4: detected capacity change from 0 to 1024 [ 98.278878][ T5861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.294725][ T5861] netlink: 'syz.4.692': attribute type 6 has an invalid length. [ 98.302457][ T5861] netlink: 164 bytes leftover after parsing attributes in process `syz.4.692'. [ 98.347212][ T28] audit: type=1400 audit(1771649059.816:392): avc: denied { mount } for pid=5869 comm="syz.5.695" name="/" dev="autofs" ino=12728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 98.374435][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.397527][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.410535][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.417279][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.427763][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.443350][ T28] audit: type=1400 audit(1771649059.896:393): avc: denied { ioctl } for pid=5871 comm="syz.1.696" path="socket:[12078]" dev="sockfs" ino=12078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.472112][ T5874] loop5: detected capacity change from 0 to 1024 [ 98.499808][ T5874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 98.512717][ T5874] System zones: 0-1, 3-36 [ 98.544605][ T5874] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.698: bad orphan inode 134217728 [ 98.567394][ T5874] loop5: lost filesystem error report for type 5 error -117 [ 98.577643][ T5874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.661667][ T28] audit: type=1400 audit(1771649060.126:394): avc: denied { mounton } for pid=5898 comm="syz.1.706" path="/125/file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.685439][ T5899] loop1: detected capacity change from 0 to 128 [ 98.710412][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.720501][ T5899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.787504][ T28] audit: type=1400 audit(1771649060.256:395): avc: denied { sqpoll } for pid=5901 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.812346][ T5899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.828053][ T5902] loop5: detected capacity change from 0 to 1024 [ 98.853621][ T5902] EXT4-fs: Ignoring removed orlov option [ 98.883668][ T5902] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 98.914403][ T5899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.029243][ T5899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.070567][ T5919] loop5: detected capacity change from 0 to 512 [ 99.074570][ T5914] serio: Serial port ptm0 [ 99.132202][ T4979] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.157943][ T4979] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.177010][ T5920] netlink: 7 bytes leftover after parsing attributes in process `syz.0.712'. [ 99.183611][ T4979] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.198531][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 99.204843][ T4979] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.245659][ T5920] netlink: 7 bytes leftover after parsing attributes in process `syz.0.712'. [ 99.299246][ T5925] loop1: detected capacity change from 0 to 512 [ 99.312545][ T5927] tipc: Started in network mode [ 99.328543][ T5927] tipc: Node identity 62ec2ae6764a, cluster identity 4711 [ 99.346791][ T5927] tipc: Enabled bearer , priority 0 [ 99.466765][ T5924] tipc: Disabling bearer [ 99.477133][ T5933] loop4: detected capacity change from 0 to 512 [ 99.593939][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 99.702673][ T5939] loop1: detected capacity change from 0 to 1024 [ 99.804156][ T5939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 99.886000][ T5939] System zones: 0-1, 3-36 [ 99.930345][ T5939] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.717: bad orphan inode 134217728 [ 100.030111][ T5939] loop1: lost filesystem error report for type 5 error -117 [ 100.033895][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.065026][ T5933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.078088][ T5933] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.101196][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.131626][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.870752][ T5963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.901902][ T5963] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.725: bad orphan inode 131083 [ 100.923197][ T5963] loop2: lost filesystem error report for type 5 error -117 [ 100.930955][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.973283][ T28] audit: type=1400 audit(1771649062.426:396): avc: denied { execute } for pid=5953 comm="syz.4.722" path="/155/file1" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.979127][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 101.011946][ T5971] x_tables: duplicate entry at hook 1 [ 101.072541][ T5974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 101.112210][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.127642][ T5974] System zones: 0-1, 3-36 [ 101.164187][ T5974] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.729: bad orphan inode 134217728 [ 101.177351][ T5974] loop1: lost filesystem error report for type 5 error -117 [ 101.178018][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.209527][ T5981] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 101.228651][ T5981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.248347][ T5981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.731'. [ 101.264450][ T5981] tmpfs: Bad value for 'mpol' [ 101.271673][ T28] audit: type=1400 audit(1771649062.736:397): avc: denied { mounton } for pid=5980 comm="syz.2.731" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 101.574030][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.580907][ T5981] bond4: (slave geneve2): making interface the new active one [ 101.592382][ T5981] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 101.778147][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 101.794582][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'. [ 102.297748][ T6015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 102.339151][ T6015] System zones: 0-1, 3-36 [ 102.349983][ T6015] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.742: bad orphan inode 134217728 [ 102.379379][ T6015] loop4: lost filesystem error report for type 5 error -117 [ 102.380400][ T6015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.453025][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.629291][ T6024] set_capacity_and_notify: 3 callbacks suppressed [ 102.629384][ T6024] loop1: detected capacity change from 0 to 512 [ 102.718104][ T6024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.732566][ T6024] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.807746][ T28] audit: type=1326 audit(1771649064.276:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa31e78c629 code=0x0 [ 103.268798][ T6033] loop0: detected capacity change from 0 to 512 [ 103.293396][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.306681][ T6037] netlink: 'syz.2.749': attribute type 9 has an invalid length. [ 103.454259][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 103.524257][ T6046] bridge0: entered allmulticast mode [ 103.559204][ T28] audit: type=1400 audit(1771649065.026:399): avc: denied { cmd } for pid=6044 comm="syz.4.752" path="socket:[13520]" dev="sockfs" ino=13520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.648839][ T6056] loop5: detected capacity change from 0 to 256 [ 103.697316][ T6058] loop0: detected capacity change from 0 to 1024 [ 103.719164][ T6058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 103.728568][ T6058] System zones: 0-1, 3-36 [ 103.734643][ T6058] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.758: bad orphan inode 134217728 [ 103.736598][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.756'. [ 103.754418][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.756'. [ 103.764465][ T6058] loop0: lost filesystem error report for type 5 error -117 [ 103.766689][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.826593][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.880691][ T28] audit: type=1400 audit(1771649065.346:400): avc: denied { write } for pid=6068 comm="syz.0.762" lport=40004 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.924579][ T28] audit: type=1400 audit(1771649065.346:401): avc: denied { setopt } for pid=6068 comm="syz.0.762" lport=40004 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.018930][ T6088] netlink: 'syz.5.767': attribute type 1 has an invalid length. [ 104.052532][ T6091] loop0: detected capacity change from 0 to 512 [ 104.059313][ T6088] bond1: entered promiscuous mode [ 104.081562][ T6091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.091479][ T28] audit: type=1400 audit(1771649065.546:402): avc: denied { write } for pid=6092 comm="syz.4.768" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 104.109803][ T6088] bond1: entered allmulticast mode [ 104.120269][ T6088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.132400][ T6091] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.769: bad orphan inode 131083 [ 104.143072][ T6091] loop0: lost filesystem error report for type 5 error -117 [ 104.143155][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 104.154215][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.156923][ C1] EXT4-fs (loop0): initial error at time 1771649065: ext4_orphan_get:1417 [ 104.177515][ C1] EXT4-fs (loop0): last error at time 1771649065: ext4_orphan_get:1417 [ 104.218134][ T6101] netlink: 196 bytes leftover after parsing attributes in process `syz.2.771'. [ 104.229177][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 104.249545][ T6103] loop4: detected capacity change from 0 to 1024 [ 104.275439][ T6103] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 104.294296][ T6108] random: crng reseeded on system resumption [ 104.300414][ T6103] System zones: 0-1, 3-36 [ 104.310977][ T6103] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.772: bad orphan inode 134217728 [ 104.324525][ T6103] loop4: lost filesystem error report for type 5 error -117 [ 104.325126][ T6103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.380926][ T28] audit: type=1400 audit(1771649065.846:403): avc: denied { getopt } for pid=6113 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.403576][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.434360][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.584920][ T28] audit: type=1400 audit(1771649066.026:404): avc: denied { watch_reads } for pid=6109 comm="syz.5.775" path="/72" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.762257][ T28] audit: type=1400 audit(1771649066.206:405): avc: denied { connect } for pid=6131 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.156783][ T6141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'. [ 105.196860][ T6145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5651 sclass=netlink_route_socket pid=6145 comm=syz.2.785 [ 105.215746][ T6145] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 105.248028][ T6145] loop2: detected capacity change from 0 to 1024 [ 105.257371][ T6145] EXT4-fs: Ignoring removed i_version option [ 105.284641][ T6145] EXT4-fs: Ignoring removed bh option [ 105.290237][ T6145] EXT4-fs: inline encryption not supported [ 105.298178][ T6145] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.310617][ T6145] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.785: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.324709][ T6145] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.333140][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 105.348813][ C0] EXT4-fs (loop2): initial error at time 1771649066: ext4_map_blocks:776: inode 3: block 2 [ 105.358894][ C0] EXT4-fs (loop2): last error at time 1771649066: ext4_map_blocks:776: inode 3: block 2 [ 105.363528][ T6145] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 105.380126][ T6145] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.785: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.386741][ T6150] loop5: detected capacity change from 0 to 1024 [ 105.394346][ T6145] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.403792][ T6145] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 105.414964][ T6150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 105.430436][ T6145] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.785: Failed to acquire dquot type 0 [ 105.431019][ T6150] System zones: 0-1, 3-36 [ 105.447213][ T6145] loop2: lost filesystem error report for type 5 error -117 [ 105.447508][ T6145] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 105.474190][ T6150] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.787: bad orphan inode 134217728 [ 105.484915][ T6145] loop2: lost filesystem error report for type 5 error -117 [ 105.485009][ T6145] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.785: mark_inode_dirty error [ 105.493308][ T6150] loop5: lost filesystem error report for type 5 error -117 [ 105.511870][ T6145] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.519293][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 105.519318][ C0] EXT4-fs (loop5): initial error at time 1771649066: ext4_orphan_get:1417 [ 105.519342][ C0] EXT4-fs (loop5): last error at time 1771649066: ext4_orphan_get:1417 [ 105.555295][ T6150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.580463][ T6154] bond1: option mode: unable to set because the bond device is up [ 105.599574][ T6145] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 105.600523][ T6153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6153 comm=syz.1.788 [ 105.610153][ T6145] EXT4-fs (loop2): 1 orphan inode deleted [ 105.628418][ T313] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.629754][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.664703][ T313] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 105.673596][ T313] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 0 [ 105.702896][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.702886][ T6153] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.742163][ T6145] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.785: Invalid inode table block 1 in block_group 0 [ 105.766365][ T6153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.781553][ T6145] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 105.802284][ T6153] bond1: (slave lo): making interface the new active one [ 105.810905][ T6153] bond1: (slave lo): Enslaving as an active interface with an up link [ 105.820601][ T6165] netlink: 72 bytes leftover after parsing attributes in process `syz.5.792'. [ 105.872186][ T6153] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 106.355455][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.369019][ T30] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.393690][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.393840][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:1: Failed to release dquot type 0 [ 106.414705][ T30] loop2: lost filesystem error report for type 5 error -117 [ 106.414924][ T3321] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 106.436314][ T3321] loop2: lost filesystem error report for type 5 error -117 [ 106.436423][ T3321] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 106.453293][ T3321] loop2: lost filesystem error report for type 5 error -117 [ 106.453396][ T3321] EXT4-fs error (device loop2): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 106.472721][ T3321] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.654436][ T6187] netlink: 56 bytes leftover after parsing attributes in process `syz.2.799'. [ 106.822664][ T6198] loop0: detected capacity change from 0 to 512 [ 106.878980][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.901230][ T6198] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.920020][ T6198] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 106.954128][ T6205] FAULT_INJECTION: forcing a failure. [ 106.954128][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 107.033207][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 107.033297][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.033314][ T6205] Call Trace: [ 107.033321][ T6205] [ 107.033328][ T6205] __dump_stack+0x1d/0x30 [ 107.033360][ T6205] dump_stack_lvl+0x95/0xd0 [ 107.033451][ T6205] dump_stack+0x15/0x1b [ 107.033477][ T6205] should_fail_ex+0x263/0x280 [ 107.033501][ T6205] should_failslab+0x8c/0xb0 [ 107.033527][ T6205] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 107.033625][ T6205] ? kvasprintf_const+0xb3/0x130 [ 107.033665][ T6205] kvasprintf+0x8a/0x110 [ 107.033783][ T6205] ? format_decode+0xae/0x540 [ 107.033807][ T6205] kvasprintf_const+0xb3/0x130 [ 107.033897][ T6205] kobject_set_name_vargs+0x44/0xe0 [ 107.033924][ T6205] dev_set_name+0x83/0xb0 [ 107.034027][ T6205] ? hrtimer_setup+0x33/0x110 [ 107.034047][ T6205] ? swiotlb_dev_init+0x19/0x30 [ 107.034141][ T6205] ? swiotlb_dev_init+0x19/0x30 [ 107.034175][ T6205] ? device_initialize+0x1f0/0x200 [ 107.034269][ T6205] __serio_register_port+0xee/0x1c0 [ 107.034370][ T6205] serport_ldisc_read+0x1d6/0x300 [ 107.034399][ T6205] ? __rcu_read_unlock+0x4e/0x70 [ 107.034484][ T6205] tty_read+0x154/0x490 [ 107.034511][ T6205] ? iovec_from_user+0x5e/0x200 [ 107.034541][ T6205] ? rw_verify_area+0x8d/0x160 [ 107.034636][ T6205] aio_read+0x1ea/0x2f0 [ 107.034674][ T6205] io_submit_one+0xba6/0x1350 [ 107.034716][ T6205] __se_sys_io_submit+0xfb/0x280 [ 107.034790][ T6205] __x64_sys_io_submit+0x43/0x50 [ 107.034814][ T6205] x64_sys_call+0x19d5/0x3020 [ 107.034848][ T6205] do_syscall_64+0x12c/0x370 [ 107.034894][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.034922][ T6205] RIP: 0033:0x7fa31e78c629 [ 107.035013][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.035048][ T6205] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 107.035068][ T6205] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 107.035081][ T6205] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007fa31f542000 [ 107.035094][ T6205] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.035130][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.035145][ T6205] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 107.035169][ T6205] [ 107.037647][ T6205] serio: Serial port ptm0 [ 107.199778][ T6204] loop4: detected capacity change from 0 to 256 [ 107.207557][ T23] serio (null): device_add() failed for ptm0/serio0 (Serial port), error: -22 [ 107.216082][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.327316][ T6204] FAT-fs (loop4): Directory bread(block 64) failed [ 107.355939][ T6204] FAT-fs (loop4): Directory bread(block 65) failed [ 107.375220][ T6204] FAT-fs (loop4): Directory bread(block 66) failed [ 107.381894][ T6204] FAT-fs (loop4): Directory bread(block 67) failed [ 107.388565][ T6204] FAT-fs (loop4): Directory bread(block 68) failed [ 107.395271][ T6204] FAT-fs (loop4): Directory bread(block 69) failed [ 107.401866][ T6204] FAT-fs (loop4): Directory bread(block 70) failed [ 107.408448][ T6204] FAT-fs (loop4): Directory bread(block 71) failed [ 107.415061][ T6204] FAT-fs (loop4): Directory bread(block 72) failed [ 107.421661][ T6204] FAT-fs (loop4): Directory bread(block 73) failed [ 107.445155][ T6204] sit0: entered promiscuous mode [ 107.461573][ T6204] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 107.521306][ T6204] netlink: 1 bytes leftover after parsing attributes in process `syz.4.803'. [ 107.623224][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.806'. [ 107.689623][ T6241] FAULT_INJECTION: forcing a failure. [ 107.689623][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.753151][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.4.812 Not tainted syzkaller #0 PREEMPT(full) [ 107.753184][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.753301][ T6241] Call Trace: [ 107.753309][ T6241] [ 107.753318][ T6241] __dump_stack+0x1d/0x30 [ 107.753351][ T6241] dump_stack_lvl+0x95/0xd0 [ 107.753380][ T6241] dump_stack+0x15/0x1b [ 107.753417][ T6241] should_fail_ex+0x263/0x280 [ 107.753445][ T6241] should_fail+0xb/0x20 [ 107.753468][ T6241] should_fail_usercopy+0x1a/0x20 [ 107.753558][ T6241] _copy_to_user+0x20/0xa0 [ 107.753593][ T6241] finalize_log+0xa1/0x100 [ 107.753635][ T6241] btf_new_fd+0x541/0x7d0 [ 107.753659][ T6241] ? ns_capable+0x7c/0xb0 [ 107.753775][ T6241] bpf_btf_load+0x112/0x130 [ 107.753882][ T6241] __sys_bpf+0x3d8/0x7e0 [ 107.753917][ T6241] __x64_sys_bpf+0x41/0x50 [ 107.753960][ T6241] x64_sys_call+0x10cb/0x3020 [ 107.754088][ T6241] do_syscall_64+0x12c/0x370 [ 107.754134][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.754159][ T6241] RIP: 0033:0x7f2ff35ac629 [ 107.754179][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.754272][ T6241] RSP: 002b:00007f2ff2007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.754298][ T6241] RAX: ffffffffffffffda RBX: 00007f2ff3825fa0 RCX: 00007f2ff35ac629 [ 107.754367][ T6241] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 107.754383][ T6241] RBP: 00007f2ff2007090 R08: 0000000000000000 R09: 0000000000000000 [ 107.754398][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.754409][ T6241] R13: 00007f2ff3826038 R14: 00007f2ff3825fa0 R15: 00007ffc44999918 [ 107.754429][ T6241] [ 108.410073][ T6262] set_capacity_and_notify: 1 callbacks suppressed [ 108.410091][ T6262] loop0: detected capacity change from 0 to 2048 [ 108.876997][ T6283] serio: Serial port ptm0 [ 108.969649][ T6299] loop1: detected capacity change from 0 to 512 [ 108.988723][ T6299] EXT4-fs: Ignoring removed oldalloc option [ 109.005292][ T6299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.042333][ T6299] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #11: comm syz.1.828: corrupted in-inode xattr: invalid ea_ino [ 109.064744][ T6299] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.065006][ T6299] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.828: couldn't read orphan inode 11 (err -117) [ 109.074206][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.074225][ C1] EXT4-fs (loop1): initial error at time 1771649070: ext4_iget_extra_inode:5025: inode 11 [ 109.074267][ C1] EXT4-fs (loop1): last error at time 1771649070: ext4_iget_extra_inode:5025: inode 11 [ 109.117618][ T6299] loop1: lost filesystem error report for type 5 error -117 [ 109.137385][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.204633][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.300594][ T6304] FAULT_INJECTION: forcing a failure. [ 109.300594][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.376941][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: syz.4.830 Not tainted syzkaller #0 PREEMPT(full) [ 109.376971][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.376983][ T6304] Call Trace: [ 109.376989][ T6304] [ 109.376996][ T6304] __dump_stack+0x1d/0x30 [ 109.377063][ T6304] dump_stack_lvl+0x95/0xd0 [ 109.377087][ T6304] dump_stack+0x15/0x1b [ 109.377107][ T6304] should_fail_ex+0x263/0x280 [ 109.377129][ T6304] should_fail+0xb/0x20 [ 109.377169][ T6304] should_fail_usercopy+0x1a/0x20 [ 109.377198][ T6304] _copy_from_iter+0xcf/0xea0 [ 109.377277][ T6304] ? skb_set_owner_w+0x19b/0x200 [ 109.377312][ T6304] ? sock_alloc_send_pskb+0x469/0x500 [ 109.377349][ T6304] skb_copy_datagram_from_iter+0xb2/0x480 [ 109.377388][ T6304] ? skb_put+0xa9/0xf0 [ 109.377492][ T6304] tun_get_user+0x90b/0x27c0 [ 109.377524][ T6304] ? ref_tracker_alloc+0x1f2/0x2f0 [ 109.377614][ T6304] tun_chr_write_iter+0x15e/0x210 [ 109.377658][ T6304] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 109.377699][ T6304] vfs_write+0x5a6/0x9f0 [ 109.377817][ T6304] ksys_write+0xdc/0x1a0 [ 109.377858][ T6304] __x64_sys_write+0x40/0x50 [ 109.377898][ T6304] x64_sys_call+0x27e1/0x3020 [ 109.377938][ T6304] do_syscall_64+0x12c/0x370 [ 109.378036][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.378063][ T6304] RIP: 0033:0x7f2ff35ac629 [ 109.378085][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.378109][ T6304] RSP: 002b:00007f2ff2007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.378133][ T6304] RAX: ffffffffffffffda RBX: 00007f2ff3825fa0 RCX: 00007f2ff35ac629 [ 109.378150][ T6304] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 109.378213][ T6304] RBP: 00007f2ff2007090 R08: 0000000000000000 R09: 0000000000000000 [ 109.378228][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.378243][ T6304] R13: 00007f2ff3826038 R14: 00007f2ff3825fa0 R15: 00007ffc44999918 [ 109.378267][ T6304] [ 109.381097][ T6311] loop5: detected capacity change from 0 to 128 [ 109.463039][ T6312] __nla_validate_parse: 3 callbacks suppressed [ 109.463398][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 109.513415][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 109.513487][ T28] audit: type=1400 audit(1771649070.956:428): avc: denied { setopt } for pid=6310 comm="syz.5.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.722125][ T6317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6317 comm=syz.5.832 [ 109.747592][ T6316] netlink: 7 bytes leftover after parsing attributes in process `syz.0.833'. [ 109.806799][ T6316] netlink: 7 bytes leftover after parsing attributes in process `syz.0.833'. [ 109.983819][ T6311] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.000351][ T6311] FAT-fs (loop5): Filesystem has been set read-only [ 110.008086][ T6311] netlink: 'syz.5.832': attribute type 4 has an invalid length. [ 110.019968][ T6333] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 110.177092][ T28] audit: type=1326 audit(1771649071.636:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa31e78c629 code=0x0 [ 110.204682][ T6345] loop2: detected capacity change from 0 to 512 [ 110.469928][ T6351] loop4: detected capacity change from 0 to 512 [ 110.502646][ T6345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.677609][ T6345] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.716180][ T6351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.748790][ T6351] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.863055][ T6359] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.842: resize_inode disabled but reserved GDT blocks non-zero [ 110.941904][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.970388][ T6366] netlink: 196 bytes leftover after parsing attributes in process `syz.0.848'. [ 110.983822][ T6367] FAULT_INJECTION: forcing a failure. [ 110.983822][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 110.996425][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.1.845 Not tainted syzkaller #0 PREEMPT(full) [ 110.996457][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.996547][ T6367] Call Trace: [ 110.996556][ T6367] [ 110.996573][ T6367] __dump_stack+0x1d/0x30 [ 110.996665][ T6367] dump_stack_lvl+0x95/0xd0 [ 110.996748][ T6367] dump_stack+0x15/0x1b [ 110.996773][ T6367] should_fail_ex+0x263/0x280 [ 110.996798][ T6367] ? serio_queue_event+0xcd/0x240 [ 110.996886][ T6367] should_failslab+0x8c/0xb0 [ 110.996911][ T6367] __kmalloc_cache_noprof+0x5f/0x410 [ 110.996975][ T6367] serio_queue_event+0xcd/0x240 [ 110.997013][ T6367] __serio_register_port+0x1aa/0x1c0 [ 110.997047][ T6367] serport_ldisc_read+0x1d6/0x300 [ 110.997108][ T6367] ? __rcu_read_unlock+0x4e/0x70 [ 110.997136][ T6367] tty_read+0x154/0x490 [ 110.997167][ T6367] ? iovec_from_user+0x5e/0x200 [ 110.997273][ T6367] ? rw_verify_area+0x8d/0x160 [ 110.997382][ T6367] aio_read+0x1ea/0x2f0 [ 110.997418][ T6367] io_submit_one+0xba6/0x1350 [ 110.997520][ T6367] __se_sys_io_submit+0xfb/0x280 [ 110.997546][ T6367] __x64_sys_io_submit+0x43/0x50 [ 110.997571][ T6367] x64_sys_call+0x19d5/0x3020 [ 110.997632][ T6367] do_syscall_64+0x12c/0x370 [ 110.997663][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.997682][ T6367] RIP: 0033:0x7fa31e78c629 [ 110.997696][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.997779][ T6367] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 110.997797][ T6367] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 110.997809][ T6367] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007fa31f542000 [ 110.997820][ T6367] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.997863][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.997874][ T6367] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 110.997892][ T6367] [ 110.997944][ T6367] serio: Not enough memory to queue event 3 [ 111.211222][ T6367] serio: Serial port ptm0 [ 111.257909][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.306244][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 111.339254][ T6374] loop2: detected capacity change from 0 to 512 [ 111.375519][ T6374] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.385552][ T6380] loop0: detected capacity change from 0 to 512 [ 111.394532][ T6380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.408988][ T6382] loop5: detected capacity change from 0 to 512 [ 111.423195][ T6374] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (6000000) [ 111.436022][ T6374] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 111.437274][ T6384] netlink: 7 bytes leftover after parsing attributes in process `syz.4.854'. [ 111.454409][ T6382] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 111.473896][ T6380] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.852: bad orphan inode 131083 [ 111.474329][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.854'. [ 111.493420][ T6382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.499892][ T6382] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 8: comm syz.5.853: invalid block [ 111.511019][ T6382] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.511232][ T6382] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.853: couldn't read orphan inode 11 (err -117) [ 111.520565][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 111.520584][ C1] EXT4-fs (loop5): initial error at time 1771649072: __ext4_iget:5378: inode 11: block 8 [ 111.520626][ C1] EXT4-fs (loop5): last error at time 1771649072: __ext4_iget:5378: inode 11: block 8 [ 111.558549][ T6380] loop0: lost filesystem error report for type 5 error -117 [ 111.563752][ T6380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.568658][ T6382] loop5: lost filesystem error report for type 5 error -117 [ 111.584946][ T6382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.622744][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.852'. [ 111.656447][ T28] audit: type=1400 audit(1771649073.126:430): avc: denied { remount } for pid=6381 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.677773][ T6382] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 111.765165][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.775675][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.269045][ T6415] loop4: detected capacity change from 0 to 2048 [ 112.443797][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.571076][ T6415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.863: bg 0: block 234: padding at end of block bitmap is not set [ 112.603448][ T6415] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 744 with error 28 [ 112.618273][ T6415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.618273][ T6415] [ 112.632383][ T6415] EXT4-fs (loop4): Total free blocks count 0 [ 112.641165][ T6415] EXT4-fs (loop4): Free/Dirty block details [ 112.651215][ T6415] EXT4-fs (loop4): free_blocks=0 [ 112.667381][ T6415] EXT4-fs (loop4): dirty_blocks=752 [ 112.699215][ T6415] EXT4-fs (loop4): Block reservation details [ 112.722456][ T6429] loop1: detected capacity change from 0 to 1024 [ 112.729209][ T6415] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 112.745936][ T6429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 112.827507][ T6429] System zones: 0-1, 3-36 [ 112.842083][ T6429] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.866: bad orphan inode 134217728 [ 112.852695][ T6429] loop1: lost filesystem error report for type 5 error -117 [ 112.853226][ T6429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.901889][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.919085][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.982852][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 113.019001][ T6434] EXT4-fs: inline encryption not supported [ 113.076347][ T6434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.211866][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.485781][ T6452] netlink: 72 bytes leftover after parsing attributes in process `syz.1.875'. [ 114.047800][ T28] audit: type=1400 audit(1771649075.516:431): avc: denied { append } for pid=6470 comm="syz.4.880" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.100749][ T6471] netlink: 'syz.4.880': attribute type 21 has an invalid length. [ 114.123917][ T6471] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 114.894869][ T6492] __nla_validate_parse: 2 callbacks suppressed [ 114.894900][ T6492] netlink: 196 bytes leftover after parsing attributes in process `syz.4.886'. [ 114.924404][ T28] audit: type=1400 audit(1771649076.396:432): avc: denied { wake_alarm } for pid=6493 comm="syz.2.887" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.069168][ T6498] serio: Serial port ptm0 [ 115.089028][ T6502] set_capacity_and_notify: 1 callbacks suppressed [ 115.089057][ T6502] loop0: detected capacity change from 0 to 512 [ 115.109717][ T6502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.123082][ T6502] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.891: bad orphan inode 131083 [ 115.135568][ T6502] loop0: lost filesystem error report for type 5 error -117 [ 115.136522][ T6502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.168224][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 115.177393][ T6502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.891'. [ 115.231734][ T6498] FAULT_INJECTION: forcing a failure. [ 115.231734][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 115.263310][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.2.889 Not tainted syzkaller #0 PREEMPT(full) [ 115.263404][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.263436][ T6498] Call Trace: [ 115.263508][ T6498] [ 115.263516][ T6498] __dump_stack+0x1d/0x30 [ 115.263545][ T6498] dump_stack_lvl+0x95/0xd0 [ 115.263574][ T6498] dump_stack+0x15/0x1b [ 115.263599][ T6498] should_fail_ex+0x263/0x280 [ 115.263678][ T6498] ? kobject_uevent_env+0x1c0/0x570 [ 115.263704][ T6498] should_failslab+0x8c/0xb0 [ 115.263785][ T6498] __kmalloc_cache_noprof+0x5f/0x410 [ 115.263809][ T6498] ? _raw_spin_lock_irq+0x53/0xb0 [ 115.263832][ T6498] kobject_uevent_env+0x1c0/0x570 [ 115.263882][ T6498] ? blocking_notifier_call_chain+0x1e9/0x200 [ 115.263928][ T6498] kobject_uevent+0x1d/0x30 [ 115.263960][ T6498] device_del+0x70f/0x790 [ 115.264018][ T6498] serio_destroy_port+0x3c5/0x5a0 [ 115.264056][ T6498] ? device_release_driver_internal+0x4f5/0x510 [ 115.264090][ T6498] serio_unregister_port+0xe1/0x130 [ 115.264229][ T6498] serport_ldisc_read+0x2cd/0x300 [ 115.264256][ T6498] ? __pfx_autoremove_wake_function+0x10/0x10 [ 115.264315][ T6498] tty_read+0x154/0x490 [ 115.264343][ T6498] ? iovec_from_user+0x5e/0x200 [ 115.264382][ T6498] ? rw_verify_area+0x8d/0x160 [ 115.264412][ T6498] aio_read+0x1ea/0x2f0 [ 115.264451][ T6498] io_submit_one+0xba6/0x1350 [ 115.264502][ T6498] __se_sys_io_submit+0xfb/0x280 [ 115.264535][ T6498] __x64_sys_io_submit+0x43/0x50 [ 115.264562][ T6498] x64_sys_call+0x19d5/0x3020 [ 115.264669][ T6498] do_syscall_64+0x12c/0x370 [ 115.264702][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.264723][ T6498] RIP: 0033:0x7f81eec1c629 [ 115.264737][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.264760][ T6498] RSP: 002b:00007f81ed66f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 115.264785][ T6498] RAX: ffffffffffffffda RBX: 00007f81eee95fa0 RCX: 00007f81eec1c629 [ 115.264802][ T6498] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007f81ef9d4000 [ 115.264881][ T6498] RBP: 00007f81ed66f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.264893][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.264906][ T6498] R13: 00007f81eee96038 R14: 00007f81eee95fa0 R15: 00007fff811084d8 [ 115.264937][ T6498] [ 115.567341][ T6509] loop1: detected capacity change from 0 to 1024 [ 115.588767][ T6509] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 115.607359][ T6509] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.893: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.621750][ T6509] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.623125][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 115.638690][ C0] EXT4-fs (loop1): initial error at time 1771649077: ext4_map_blocks:776: inode 3: block 2 [ 115.648746][ C0] EXT4-fs (loop1): last error at time 1771649077: ext4_map_blocks:776: inode 3: block 2 [ 115.650509][ T6509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 115.684713][ T6509] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.893: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.705977][ T6509] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.709607][ T6509] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 115.735848][ T6509] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.893: Failed to acquire dquot type 0 [ 115.764270][ T6509] loop1: lost filesystem error report for type 5 error -117 [ 115.764740][ T6509] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 115.803135][ T6509] loop1: lost filesystem error report for type 5 error -117 [ 115.803239][ T6509] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.893: mark_inode_dirty error [ 115.822478][ T6509] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.822831][ T6509] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 115.855078][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.893490][ T6509] EXT4-fs (loop1): 1 orphan inode deleted [ 115.913650][ T70] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.929632][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.957467][ T6512] loop0: detected capacity change from 0 to 1024 [ 115.969535][ T70] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.969642][ T70] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 115.988110][ T6512] ext4: Bad value for 'journal_dev' [ 116.003620][ T70] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:4: Failed to release dquot type 0 [ 116.036048][ T28] audit: type=1400 audit(1771649077.486:433): avc: denied { write } for pid=6511 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.036079][ T28] audit: type=1400 audit(1771649077.496:434): avc: denied { read write } for pid=6511 comm="syz.0.894" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.036102][ T28] audit: type=1400 audit(1771649077.496:435): avc: denied { open } for pid=6511 comm="syz.0.894" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.230749][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.263109][ T6516] loop2: detected capacity change from 0 to 512 [ 116.273222][ T313] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.288582][ T313] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.288706][ T313] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 116.314152][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.314248][ T313] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 0 [ 116.314276][ T313] loop1: lost filesystem error report for type 5 error -117 [ 116.314880][ T3315] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.346664][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 116.371597][ T3315] loop1: lost filesystem error report for type 5 error -117 [ 116.371795][ T3315] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 116.386188][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.388704][ T3315] loop1: lost filesystem error report for type 5 error -117 [ 116.405277][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 116.423155][ T3315] EXT4-fs error (device loop1): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 116.436011][ T3315] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.490445][ T28] audit: type=1400 audit(1771649077.956:436): avc: denied { unmount } for pid=6529 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.526894][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 116.548749][ T6530] gretap0: entered promiscuous mode [ 116.559767][ T6530] macvtap1: entered promiscuous mode [ 116.575630][ T6530] gretap0: left promiscuous mode [ 116.693703][ T6542] loop1: detected capacity change from 0 to 1024 [ 116.706093][ T6542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.720530][ T6542] System zones: 0-1, 3-36 [ 116.726942][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.730870][ T6542] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.903: bad orphan inode 134217728 [ 116.746978][ T6542] loop1: lost filesystem error report for type 5 error -117 [ 116.747467][ T6542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.774057][ T6542] FAULT_INJECTION: forcing a failure. [ 116.774057][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 116.812691][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.1.903 Not tainted syzkaller #0 PREEMPT(full) [ 116.812761][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.812778][ T6542] Call Trace: [ 116.812791][ T6542] [ 116.812801][ T6542] __dump_stack+0x1d/0x30 [ 116.812836][ T6542] dump_stack_lvl+0x95/0xd0 [ 116.812867][ T6542] dump_stack+0x15/0x1b [ 116.812910][ T6542] should_fail_ex+0x263/0x280 [ 116.812939][ T6542] should_failslab+0x8c/0xb0 [ 116.812962][ T6542] __kmalloc_noprof+0xb8/0x4e0 [ 116.813007][ T6542] ? ext4_mb_init_cache+0x179/0xc10 [ 116.813091][ T6542] ext4_mb_init_cache+0x179/0xc10 [ 116.813217][ T6542] ? __filemap_get_folio_mpol+0x468/0x680 [ 116.813306][ T6542] ext4_mb_init_group+0x3d6/0x580 [ 116.813333][ T6542] ext4_trim_fs+0x8bf/0xab0 [ 116.813391][ T6542] ? should_fail_ex+0xd9/0x280 [ 116.813418][ T6542] ext4_ioctl+0x1b21/0x31b0 [ 116.813487][ T6542] ? ioctl_has_perm+0x27e/0x2d0 [ 116.813516][ T6542] ? do_vfs_ioctl+0x84f/0xe70 [ 116.813557][ T6542] ? selinux_file_ioctl+0x5f7/0xcb0 [ 116.813594][ T6542] ? __rcu_read_unlock+0x4e/0x70 [ 116.813616][ T6542] ? __rcu_read_unlock+0x4e/0x70 [ 116.813634][ T6542] ? __fget_files+0x184/0x1c0 [ 116.813654][ T6542] ? mutex_lock+0x57/0x90 [ 116.813740][ T6542] ? __pfx_ext4_ioctl+0x10/0x10 [ 116.813766][ T6542] __se_sys_ioctl+0xce/0x140 [ 116.813806][ T6542] __x64_sys_ioctl+0x43/0x50 [ 116.813875][ T6542] x64_sys_call+0x1563/0x3020 [ 116.813908][ T6542] do_syscall_64+0x12c/0x370 [ 116.813995][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.814023][ T6542] RIP: 0033:0x7fa31e78c629 [ 116.814081][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.814100][ T6542] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.814120][ T6542] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 116.814143][ T6542] RDX: 0000200000000040 RSI: 00000000c0185879 RDI: 0000000000000004 [ 116.814160][ T6542] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.814222][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.814238][ T6542] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 116.814262][ T6542] [ 117.094253][ T6551] FAULT_INJECTION: forcing a failure. [ 117.094253][ T6551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.107939][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.147225][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(full) [ 117.147334][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.147351][ T6551] Call Trace: [ 117.147358][ T6551] [ 117.147367][ T6551] __dump_stack+0x1d/0x30 [ 117.147397][ T6551] dump_stack_lvl+0x95/0xd0 [ 117.147583][ T6551] dump_stack+0x15/0x1b [ 117.147617][ T6551] should_fail_ex+0x263/0x280 [ 117.147645][ T6551] should_fail+0xb/0x20 [ 117.147739][ T6551] should_fail_usercopy+0x1a/0x20 [ 117.147771][ T6551] _copy_to_user+0x20/0xa0 [ 117.147818][ T6551] btf_new_fd+0x40e/0x7d0 [ 117.147842][ T6551] ? ns_capable+0x7c/0xb0 [ 117.147865][ T6551] bpf_btf_load+0x112/0x130 [ 117.147892][ T6551] __sys_bpf+0x3d8/0x7e0 [ 117.147923][ T6551] __x64_sys_bpf+0x41/0x50 [ 117.148018][ T6551] x64_sys_call+0x10cb/0x3020 [ 117.148051][ T6551] do_syscall_64+0x12c/0x370 [ 117.148092][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.148205][ T6551] RIP: 0033:0x7fd1c54ec629 [ 117.148300][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.148321][ T6551] RSP: 002b:00007fd1c3f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.148345][ T6551] RAX: ffffffffffffffda RBX: 00007fd1c5765fa0 RCX: 00007fd1c54ec629 [ 117.148361][ T6551] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 117.148375][ T6551] RBP: 00007fd1c3f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.148389][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.148430][ T6551] R13: 00007fd1c5766038 R14: 00007fd1c5765fa0 R15: 00007ffda500d658 [ 117.148449][ T6551] [ 117.350977][ T28] audit: type=1400 audit(1771649078.796:437): avc: denied { create } for pid=6552 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.373891][ T6560] netlink: 196 bytes leftover after parsing attributes in process `syz.0.909'. [ 117.394233][ T6558] loop2: detected capacity change from 0 to 4096 [ 117.463498][ T6558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.499898][ T6566] loop1: detected capacity change from 0 to 512 [ 117.531535][ T6566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.559265][ T6553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.907: corrupted inode contents [ 117.573288][ T6566] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.587318][ T6553] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.907: mark_inode_dirty error [ 117.633337][ T6553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.907: corrupted inode contents [ 117.654317][ T6553] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.907: mark_inode_dirty error [ 117.805077][ T6553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.907: corrupted inode contents [ 117.818536][ T6553] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.907: mark_inode_dirty error [ 117.833350][ T6553] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.907: corrupted inode contents [ 117.847713][ T6553] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.907: mark_inode_dirty error [ 117.863642][ T6553] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 117.884758][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.896874][ T6558] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.907: corrupted inode contents [ 118.000791][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.045314][ T6595] FAULT_INJECTION: forcing a failure. [ 118.045314][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.063229][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.1.921 Not tainted syzkaller #0 PREEMPT(full) [ 118.063260][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.063276][ T6595] Call Trace: [ 118.063284][ T6595] [ 118.063293][ T6595] __dump_stack+0x1d/0x30 [ 118.063405][ T6595] dump_stack_lvl+0x95/0xd0 [ 118.063490][ T6595] dump_stack+0x15/0x1b [ 118.063511][ T6595] should_fail_ex+0x263/0x280 [ 118.063534][ T6595] should_fail+0xb/0x20 [ 118.063557][ T6595] should_fail_usercopy+0x1a/0x20 [ 118.063585][ T6595] _copy_from_iter+0xcf/0xea0 [ 118.063658][ T6595] ? _copy_from_iter+0x13e/0xea0 [ 118.063690][ T6595] copy_page_from_iter+0x178/0x2a0 [ 118.063737][ T6595] skb_copy_datagram_from_iter+0x22d/0x480 [ 118.063776][ T6595] tun_get_user+0x90b/0x27c0 [ 118.063806][ T6595] ? ref_tracker_alloc+0x1f2/0x2f0 [ 118.063890][ T6595] tun_chr_write_iter+0x15e/0x210 [ 118.063922][ T6595] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 118.063994][ T6595] vfs_write+0x5a6/0x9f0 [ 118.064031][ T6595] ksys_write+0xdc/0x1a0 [ 118.064058][ T6595] __x64_sys_write+0x40/0x50 [ 118.064137][ T6595] x64_sys_call+0x27e1/0x3020 [ 118.064161][ T6595] do_syscall_64+0x12c/0x370 [ 118.064198][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.064254][ T6595] RIP: 0033:0x7fa31e78c629 [ 118.064270][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.064291][ T6595] RSP: 002b:00007fa31d1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.064312][ T6595] RAX: ffffffffffffffda RBX: 00007fa31ea05fa0 RCX: 00007fa31e78c629 [ 118.064326][ T6595] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 118.064337][ T6595] RBP: 00007fa31d1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.064362][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.064386][ T6595] R13: 00007fa31ea06038 R14: 00007fa31ea05fa0 R15: 00007fff6f208538 [ 118.064407][ T6595] [ 118.067421][ T6597] program syz.4.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.315343][ T6607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.923'. [ 118.602279][ T6615] loop4: detected capacity change from 0 to 1024 [ 118.673508][ T6615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 118.703764][ T6615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 118.753418][ T6615] loop4: detected capacity change from 0 to 512 [ 118.815402][ T6626] loop1: detected capacity change from 0 to 512 [ 118.845071][ T6615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.888991][ T6615] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.918626][ T6626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.978779][ T6626] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.993972][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.018862][ T6626] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 119.064421][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.246828][ T6642] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.934: ea_inode with extended attributes [ 119.338378][ T6642] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.338542][ T6642] EXT4-fs (loop1): Remounting filesystem read-only [ 119.347894][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 119.347910][ C1] EXT4-fs (loop1): initial error at time 1771649080: ext4_xattr_inode_iget:441: inode 11 [ 119.347959][ C1] EXT4-fs (loop1): last error at time 1771649080: ext4_xattr_inode_iget:441: inode 11 [ 119.390849][ T6644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 119.431272][ T6644] System zones: 0-1, 3-36 [ 119.461444][ T6644] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.935: bad orphan inode 134217728 [ 119.490423][ T6644] loop5: lost filesystem error report for type 5 error -117 [ 119.491074][ T6644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.532586][ T6642] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30) [ 119.575696][ T6644] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 119.584911][ T6642] EXT4-fs (loop1): 1 orphan inode deleted [ 119.591216][ T6642] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.608128][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 119.654007][ T6642] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 119.670188][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.053947][ T6665] netlink: 'syz.4.942': attribute type 34 has an invalid length. [ 120.074345][ T6667] netlink: 196 bytes leftover after parsing attributes in process `syz.2.941'. [ 120.140579][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.944'. [ 120.167705][ T6671] sctp: [Deprecated]: syz.1.943 (pid 6671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.167705][ T6671] Use struct sctp_sack_info instead [ 120.227363][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 120.269575][ T6680] set_capacity_and_notify: 3 callbacks suppressed [ 120.269595][ T6680] loop2: detected capacity change from 0 to 4096 [ 120.303798][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.358536][ T6676] loop4: detected capacity change from 0 to 512 [ 120.374132][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 120.425057][ T6693] netlink: 7 bytes leftover after parsing attributes in process `syz.5.950'. [ 120.440333][ T6693] netlink: 7 bytes leftover after parsing attributes in process `syz.5.950'. [ 120.517595][ T6676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.531988][ T6676] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.658137][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.660996][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.749036][ T6705] loop1: detected capacity change from 0 to 512 [ 120.780686][ T6705] EXT4-fs: Ignoring removed i_version option [ 120.788875][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 120.788914][ T28] audit: type=1400 audit(1771649082.256:441): avc: denied { accept } for pid=6709 comm="syz.4.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.823259][ T6705] EXT4-fs: Ignoring removed bh option [ 120.843573][ T6708] can: request_module (can-proto-0) failed. [ 120.855082][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.959'. [ 120.937129][ T28] audit: type=1400 audit(1771649082.366:442): avc: denied { read } for pid=6714 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.963193][ T28] audit: type=1400 audit(1771649082.366:443): avc: denied { connect } for pid=6714 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.041836][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.175107][ T6705] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.525590][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.567923][ T6744] xt_hashlimit: size too large, truncated to 1048576 [ 121.674606][ T6748] loop1: detected capacity change from 0 to 2048 [ 121.746346][ T6748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.821740][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.968'. [ 122.107766][ T6767] SELinux: security_context_str_to_sid (ƒyó²æb) failed with errno=-22 [ 122.128041][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.976'. [ 122.523701][ T6796] loop1: detected capacity change from 0 to 1024 [ 122.571032][ T28] audit: type=1400 audit(1771649084.036:444): avc: denied { getopt } for pid=6790 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.595701][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 122.629236][ T28] audit: type=1400 audit(1771649084.036:445): avc: denied { nlmsg_write } for pid=6790 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.671314][ T6796] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.732137][ T6796] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.981: lblock 3 mapped to illegal pblock 3 (length 3) [ 122.758017][ T6796] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 122.771752][ T6796] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.771752][ T6796] [ 122.805117][ T6808] loop0: detected capacity change from 0 to 764 [ 122.829051][ T6808] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 122.838717][ T6808] Symlink component flag not implemented [ 122.873320][ T6808] Symlink component flag not implemented (7) [ 123.168439][ T70] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 3) [ 123.183345][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 123.203192][ T70] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.203192][ T70] [ 123.215222][ T30] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 123.246174][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 123.259164][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.259164][ T30] [ 123.396918][ T6839] serio: Serial port ptm0 [ 123.402903][ T6844] loop4: detected capacity change from 0 to 512 [ 123.452018][ T6844] EXT4-fs: dax option not supported [ 123.847205][ T6849] loop5: detected capacity change from 0 to 1024 [ 123.868623][ T6849] EXT4-fs: inline encryption not supported [ 124.263220][ T6871] loop5: detected capacity change from 0 to 512 [ 124.318921][ T28] audit: type=1400 audit(1771649085.786:446): avc: denied { setopt } for pid=6878 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.344854][ T6879] loop1: detected capacity change from 0 to 512 [ 124.399930][ T6871] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.401600][ T6879] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.443475][ T6879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.480697][ T28] audit: type=1400 audit(1771649085.946:447): avc: denied { listen } for pid=6886 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.519128][ T28] audit: type=1400 audit(1771649085.986:448): avc: denied { shutdown } for pid=6884 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.554537][ T6892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6892 comm=syz.4.1013 [ 124.623928][ T28] audit: type=1400 audit(1771649086.086:449): avc: denied { create } for pid=6886 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.650127][ T28] audit: type=1400 audit(1771649086.086:450): avc: denied { write } for pid=6886 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.110411][ T6898] ------------[ cut here ]------------ [ 125.116894][ T6898] EA inode 11 i_nlink=2 [ 125.116923][ T6898] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.5.1016/6898 [ 125.133166][ T6898] Modules linked in: [ 125.137862][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.5.1016 Not tainted syzkaller #0 PREEMPT(full) [ 125.148021][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.159000][ T6898] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 125.167023][ T6898] Code: 04 5e 99 ff 4c 8d 2d fd ec 5d 05 49 8d 7e 40 e8 04 f1 b5 ff 49 8b 6e 40 4c 89 e7 e8 38 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 5f 48 dd 03 66 66 66 66 66 66 2e [ 125.188412][ T6898] RSP: 0018:ffffc900020a75a8 EFLAGS: 00010246 [ 125.195402][ T6898] RAX: ffff888104aabbf8 RBX: ffff888106578ec8 RCX: ffffffff81bff738 [ 125.204651][ T6898] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de420 [ 125.213259][ T6898] RBP: 000000000000000b R08: 0001888106578e7b R09: 0000000000000000 [ 125.221839][ T6898] R10: ffffc900020a74d8 R11: 0001c900020a74d8 R12: ffff888106578e78 [ 125.230852][ T6898] R13: ffffffff871de420 R14: ffff888106578e30 R15: 0000000000000001 [ 125.239801][ T6898] FS: 00007fe2f747f6c0(0000) GS:ffff8882ae8da000(0000) knlGS:0000000000000000 [ 125.249362][ T6898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.256403][ T6898] CR2: 0000000034747865 CR3: 000000012b530000 CR4: 00000000003506f0 [ 125.265561][ T6898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.274219][ T6898] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.282668][ T6898] Call Trace: [ 125.286881][ T6898] [ 125.290513][ T6898] ext4_xattr_set_entry+0x77c/0x1010 [ 125.296863][ T6898] ext4_xattr_ibody_set+0x184/0x3c0 [ 125.302849][ T6898] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 125.309741][ T6898] __ext4_expand_extra_isize+0x246/0x280 [ 125.316462][ T6898] __ext4_mark_inode_dirty+0x29b/0x400 [ 125.322393][ T6898] ext4_evict_inode+0x7c3/0xd60 [ 125.328451][ T6898] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.334482][ T6898] evict+0x2af/0x510 [ 125.339033][ T6898] ? __dquot_initialize+0x146/0x7c0 [ 125.347530][ T6898] iput+0x41a/0x580 [ 125.352110][ T6898] ext4_process_orphan+0x1a9/0x1c0 [ 125.357762][ T6898] ext4_orphan_cleanup+0x6a8/0xa00 [ 125.363561][ T6898] ext4_fill_super+0x3408/0x37c0 [ 125.370461][ T6898] ? set_blocksize+0x14c/0x270 [ 125.376282][ T6898] ? setup_bdev_super+0x30e/0x370 [ 125.381899][ T6898] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.388122][ T6898] get_tree_bdev_flags+0x291/0x300 [ 125.394102][ T6898] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.399844][ T6898] get_tree_bdev+0x1f/0x30 [ 125.405050][ T6898] ext4_get_tree+0x1c/0x30 [ 125.410170][ T6898] vfs_get_tree+0x57/0x1d0 [ 125.415641][ T6898] do_new_mount+0x288/0x8d0 [ 125.421001][ T6898] path_mount+0x4d0/0xbc0 [ 125.426835][ T6898] __se_sys_mount+0x28c/0x2e0 [ 125.432381][ T6898] __x64_sys_mount+0x67/0x80 [ 125.437851][ T6898] x64_sys_call+0x2d61/0x3020 [ 125.443150][ T6898] do_syscall_64+0x12c/0x370 [ 125.448128][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.454885][ T6898] RIP: 0033:0x7fe2f8a2d8ca [ 125.459921][ T6898] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.480496][ T6898] RSP: 002b:00007fe2f747ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.489619][ T6898] RAX: ffffffffffffffda RBX: 00007fe2f747eee0 RCX: 00007fe2f8a2d8ca [ 125.497950][ T6898] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe2f747eea0 [ 125.506627][ T6898] RBP: 0000200000000180 R08: 00007fe2f747eee0 R09: 0000000000800700 [ 125.515415][ T6898] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 125.524112][ T6898] R13: 00007fe2f747eea0 R14: 000000000000046f R15: 000000000000002c [ 125.532667][ T6898] [ 125.536272][ T6898] ---[ end trace 0000000000000000 ]--- [ 125.543820][ T6916] __nla_validate_parse: 7 callbacks suppressed [ 125.543846][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 125.758082][ T6898] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1016: iget: bad extra_isize 90 (inode size 256) [ 125.772942][ T6898] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 125.775935][ T6898] EXT4-fs (loop5): Remounting filesystem read-only [ 125.786396][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.786763][ C0] EXT4-fs (loop5): initial error at time 1771649087: ext4_xattr_inode_iget:441: inode 18 [ 125.787223][ C0] EXT4-fs (loop5): last error at time 1771649087: ext4_xattr_inode_iget:441: inode 18 [ 125.964762][ T6898] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -30) [ 125.974872][ T6898] EXT4-fs (loop5): 1 orphan inode deleted [ 126.008881][ T28] audit: type=1400 audit(1771649087.476:451): avc: denied { create } for pid=6936 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 126.051048][ T6941] set_capacity_and_notify: 2 callbacks suppressed [ 126.051076][ T6941] loop0: detected capacity change from 0 to 512 [ 126.073815][ T6941] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 126.113493][ T6943] FAULT_INJECTION: forcing a failure. [ 126.113493][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.127881][ T6941] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1027: bg 0: block 255: padding at end of block bitmap is not set [ 126.146834][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.4.1032 Tainted: G W syzkaller #0 PREEMPT(full) [ 126.146876][ T6943] Tainted: [W]=WARN [ 126.146932][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.146948][ T6943] Call Trace: [ 126.146956][ T6943] [ 126.147041][ T6943] __dump_stack+0x1d/0x30 [ 126.147069][ T6943] dump_stack_lvl+0x95/0xd0 [ 126.147092][ T6943] dump_stack+0x15/0x1b [ 126.147113][ T6943] should_fail_ex+0x263/0x280 [ 126.147194][ T6943] should_fail+0xb/0x20 [ 126.147219][ T6943] should_fail_usercopy+0x1a/0x20 [ 126.147267][ T6943] _copy_from_user+0x1c/0xb0 [ 126.147330][ T6943] input_event_from_user+0x5e/0x190 [ 126.147352][ T6943] ? input_inject_event+0x104/0x120 [ 126.147383][ T6943] evdev_write+0x1b0/0x2b0 [ 126.147415][ T6943] ? __pfx_evdev_write+0x10/0x10 [ 126.147443][ T6943] vfs_write+0x269/0x9f0 [ 126.147522][ T6943] ? __rcu_read_unlock+0x4e/0x70 [ 126.147542][ T6943] ? __fget_files+0x184/0x1c0 [ 126.147568][ T6943] ksys_write+0xdc/0x1a0 [ 126.147600][ T6943] __x64_sys_write+0x40/0x50 [ 126.147693][ T6943] x64_sys_call+0x27e1/0x3020 [ 126.147720][ T6943] do_syscall_64+0x12c/0x370 [ 126.147815][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.147910][ T6943] RIP: 0033:0x7f2ff35ac629 [ 126.147926][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.147944][ T6943] RSP: 002b:00007f2ff2007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.147965][ T6943] RAX: ffffffffffffffda RBX: 00007f2ff3825fa0 RCX: 00007f2ff35ac629 [ 126.147979][ T6943] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.147991][ T6943] RBP: 00007f2ff2007090 R08: 0000000000000000 R09: 0000000000000000 [ 126.148004][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.148024][ T6943] R13: 00007f2ff3826038 R14: 00007f2ff3825fa0 R15: 00007ffc44999918 [ 126.148044][ T6943] [ 126.415051][ T6941] loop0: lost filesystem error report for type 5 error -117 [ 126.433344][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 126.448613][ C1] EXT4-fs (loop0): initial error at time 1771649087: ext4_validate_block_bitmap:441 [ 126.458484][ C1] EXT4-fs (loop0): last error at time 1771649087: ext4_validate_block_bitmap:441 [ 126.482233][ T6941] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 126.491133][ T6941] loop0: lost filesystem error report for type 5 error -117 [ 126.491458][ T6941] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1027: invalid indirect mapped block 1 (level 1) [ 126.512097][ T6941] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.512452][ T6941] EXT4-fs (loop0): 1 truncate cleaned up [ 126.562238][ T28] audit: type=1400 audit(1771649088.026:452): avc: denied { accept } for pid=6951 comm="syz.4.1034" lport=51305 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.595785][ T6952] syzkaller0: entered promiscuous mode [ 126.601697][ T6952] syzkaller0: entered allmulticast mode [ 126.625099][ T28] audit: type=1400 audit(1771649088.056:453): avc: denied { mount } for pid=6951 comm="syz.4.1034" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.678012][ T28] audit: type=1400 audit(1771649088.056:454): avc: denied { getopt } for pid=6951 comm="syz.4.1034" lport=51305 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.801292][ T28] audit: type=1400 audit(1771649088.266:455): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.880088][ T6966] loop5: detected capacity change from 0 to 1764 [ 127.437217][ T6970] loop1: detected capacity change from 0 to 512 [ 127.491849][ T6970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.528328][ T6970] EXT4-fs (loop1): 1 truncate cleaned up [ 127.613530][ T6979] FAULT_INJECTION: forcing a failure. [ 127.613530][ T6979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.643443][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.5.1042 Tainted: G W syzkaller #0 PREEMPT(full) [ 127.643485][ T6979] Tainted: [W]=WARN [ 127.643493][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.643509][ T6979] Call Trace: [ 127.643516][ T6979] [ 127.643525][ T6979] __dump_stack+0x1d/0x30 [ 127.643609][ T6979] dump_stack_lvl+0x95/0xd0 [ 127.643712][ T6979] dump_stack+0x15/0x1b [ 127.643739][ T6979] should_fail_ex+0x263/0x280 [ 127.643767][ T6979] should_fail+0xb/0x20 [ 127.643789][ T6979] should_fail_usercopy+0x1a/0x20 [ 127.643817][ T6979] _copy_from_iter+0xcf/0xea0 [ 127.643895][ T6979] ? _copy_from_iter+0x13e/0xea0 [ 127.643929][ T6979] copy_page_from_iter+0x178/0x2a0 [ 127.643961][ T6979] skb_copy_datagram_from_iter+0x22d/0x480 [ 127.644025][ T6979] tun_get_user+0x90b/0x27c0 [ 127.644061][ T6979] ? ref_tracker_alloc+0x1f2/0x2f0 [ 127.644094][ T6979] tun_chr_write_iter+0x15e/0x210 [ 127.644206][ T6979] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 127.644240][ T6979] vfs_write+0x5a6/0x9f0 [ 127.644279][ T6979] ksys_write+0xdc/0x1a0 [ 127.644331][ T6979] __x64_sys_write+0x40/0x50 [ 127.644403][ T6979] x64_sys_call+0x27e1/0x3020 [ 127.644432][ T6979] do_syscall_64+0x12c/0x370 [ 127.644469][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.644505][ T6979] RIP: 0033:0x7fe2f8a2c629 [ 127.644523][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.644579][ T6979] RSP: 002b:00007fe2f747f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.644658][ T6979] RAX: ffffffffffffffda RBX: 00007fe2f8ca5fa0 RCX: 00007fe2f8a2c629 [ 127.644674][ T6979] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 127.644689][ T6979] RBP: 00007fe2f747f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.644718][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.644732][ T6979] R13: 00007fe2f8ca6038 R14: 00007fe2f8ca5fa0 R15: 00007ffcb126cef8 [ 127.644755][ T6979] [ 127.860576][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 127.957576][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 127.972848][ T6984] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 127.980036][ T6982] ================================================================== [ 127.988189][ T6982] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 127.995537][ T6982] [ 127.997883][ T6982] read-write to 0xffff88811ad056c0 of 8 bytes by task 6970 on cpu 1: [ 128.005967][ T6982] xas_clear_mark+0x91/0x180 [ 128.010590][ T6982] __folio_start_writeback+0x270/0x370 [ 128.016119][ T6982] ext4_bio_write_folio+0x5ad/0x9f0 [ 128.021360][ T6982] mpage_process_page_bufs+0x4a1/0x620 [ 128.026863][ T6982] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 128.032697][ T6982] ext4_do_writepages+0x70f/0x2840 [ 128.037865][ T6982] ext4_writepages+0x18f/0x320 [ 128.042656][ T6982] do_writepages+0x1c6/0x310 [ 128.047284][ T6982] file_write_and_wait_range+0x178/0x2f0 [ 128.052966][ T6982] generic_buffers_fsync_noflush+0x45/0x130 [ 128.058900][ T6982] ext4_sync_file+0x1aa/0x6b0 [ 128.063681][ T6982] vfs_fsync_range+0xc5/0xe0 [ 128.068291][ T6982] ext4_buffered_write_iter+0x34f/0x3c0 [ 128.073882][ T6982] ext4_file_write_iter+0x380/0xfa0 [ 128.079124][ T6982] iter_file_splice_write+0x6bc/0xa80 [ 128.084525][ T6982] direct_splice_actor+0x156/0x2a0 [ 128.089658][ T6982] splice_direct_to_actor+0x311/0x670 [ 128.095063][ T6982] do_splice_direct+0x119/0x1a0 [ 128.099946][ T6982] do_sendfile+0x382/0x650 [ 128.104391][ T6982] __x64_sys_sendfile64+0x105/0x150 [ 128.109612][ T6982] x64_sys_call+0x2dc4/0x3020 [ 128.114334][ T6982] do_syscall_64+0x12c/0x370 [ 128.118972][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.124885][ T6982] [ 128.127222][ T6982] read to 0xffff88811ad056c0 of 8 bytes by task 6982 on cpu 0: [ 128.134860][ T6982] xas_find_marked+0x213/0x620 [ 128.139667][ T6982] filemap_get_folios_tag+0xfa/0x510 [ 128.144969][ T6982] mpage_prepare_extent_to_map+0x328/0xc50 [ 128.150780][ T6982] ext4_do_writepages+0x70f/0x2840 [ 128.155907][ T6982] ext4_writepages+0x18f/0x320 [ 128.160700][ T6982] do_writepages+0x1c6/0x310 [ 128.165328][ T6982] filemap_write_and_wait_range+0x166/0x370 [ 128.171262][ T6982] kiocb_write_and_wait+0x7a/0x110 [ 128.176385][ T6982] __iomap_dio_rw+0x5de/0x14c0 [ 128.181163][ T6982] iomap_dio_rw+0x40/0x90 [ 128.185500][ T6982] ext4_file_read_iter+0x20f/0x290 [ 128.190651][ T6982] copy_splice_read+0x471/0x6c0 [ 128.195523][ T6982] splice_direct_to_actor+0x28f/0x670 [ 128.200902][ T6982] do_splice_direct+0x119/0x1a0 [ 128.205758][ T6982] do_sendfile+0x382/0x650 [ 128.210184][ T6982] __x64_sys_sendfile64+0x105/0x150 [ 128.215412][ T6982] x64_sys_call+0x2dc4/0x3020 [ 128.220181][ T6982] do_syscall_64+0x12c/0x370 [ 128.224806][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.230752][ T6982] [ 128.233077][ T6982] value changed: 0x000000000000ffff -> 0x000000000000fff0 [ 128.240224][ T6982] [ 128.242549][ T6982] Reported by Kernel Concurrency Sanitizer on: [ 128.248703][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.1.1040 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.259639][ T6982] Tainted: [W]=WARN [ 128.263437][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.273491][ T6982] ==================================================================