last executing test programs: 7.948132186s ago: executing program 4 (id=602): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0xfffffffffffffdc0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(r0, &(0x7f0000000240)='./file1\x00', 0x42, 0x146) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) fallocate(r1, 0x3, 0x800000, 0x8000c62) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:* w'], 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x9, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x6738, 0xe7}, 0x110010, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 7.562593499s ago: executing program 2 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0xc00) 7.354145775s ago: executing program 2 (id=604): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1d}, 0x94) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xe, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0xc}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x200080c5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe33) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x63, 0xc0, 0xfc, 0xc, 0x0, 0x7fff, 0x60004, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x1518}, 0x20, 0x8000000006, 0x2, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1c0000000000002}, 0x0, 0x6, 0xffffffffffffffff, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) execve(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb5, @loopback, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000580)='cpu<-0||!') r4 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.164411072s ago: executing program 2 (id=605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe24, &(0x7f0000000040), 0x0, &(0x7f0000000080), 0x0, 0x4060019}, 0x20000041) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4e6}, 0x114244, 0x0, 0x4, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x2, 0x0, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2076) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000440)=@sg0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.354878189s ago: executing program 4 (id=616): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") timerfd_create(0x9, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 5.1103249s ago: executing program 0 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000006000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 5.098860631s ago: executing program 4 (id=623): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x5, 0xda, 0x7, 0x0, 0xd}, 0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xfc}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x43000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x10}, 0x5580, 0x0, 0x800000, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x7, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) syz_clone(0x48400, &(0x7f0000001940)="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", 0x1000, &(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)="eef9b5b44842328667de6e8140a923a4ce051b3a78574424fc3cb4a1fb0d90dad34e20d8448c670a6b0da6b5e706e04ea6e96187d5f54de530b84c09c51070455bd09e305f60747391a68f9ba440ec66f3e27ec875d9e7579be7f033dffbde29cefe3d51dbf4024378e3908176e4156652806d0b84b29d8a2d02c8002f207c281c386c8cd742f5c3cfb3a7b42747a05d301b27c908ca6e2d37836f996d2ac73ef13a6c9629c23079fc809ffda2440cd44dc5544c688ceea8c5bf4bed91cdd84c0d9e1dccb967b92c84f03d63d548581a4faaa41c7f82071f") r7 = syz_open_procfs(r0, &(0x7f0000000080)='smaps\x00') read$snapshot(r7, &(0x7f0000000000)=""/31, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500001198000000008085b5000002000000850000007b3f818dd0a8a9c8210000950b63ee675514aec5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) preadv(r7, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/190, 0xbe}], 0x1, 0x4004, 0x0) 5.095073071s ago: executing program 0 (id=624): r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7b, 0x6, 0x1, 0x6, 0x0, 0x800, 0x842a0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x1}, 0x80, 0x0, 0x7, 0x6, 0x543, 0x6, 0x8, 0x0, 0xbb0a, 0x0, 0xde}, 0xffffffffffffffff, 0xfffffffffffffeff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) syz_emit_ethernet(0x95, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x87, 0x65, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010100, @remote}, {0x4e21, 0x4e23, 0x73, 0x0, @opaque="d9ad988b9714d222661335d1bd7f91f6314f0e9522dbe691ad9d2cc76ac412093d8a193505a213ea52cb7a396b0cb3d1902205932ae61b7aac5a0a6858d1b5685c836b9a6101fab3321cc0a0a160f5f9c3a69d2e693ed4f6a8aaf2dc8c4f715cb2381d8570b7c8af4f519b"}}}}}, &(0x7f00000002c0)={0x0, 0x2, [0x338, 0x624, 0x9a3, 0x338]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x827235f, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a8642e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad9ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee389dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b00300000002ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec1aeaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396d0300c1e02b88c114f200000000f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd8499045689166940600000000000000f520310a1e9fdc18cde98d662eee077515d0a881192292ffff53929a3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b3892f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad64f50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcb1f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d6f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945993fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a35cb62c8f76040a08a7935414f262d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703f06000000349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217ea619952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c0400000051ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9efffffffffffffff78ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6000000000000000000000093f4713ae4578f6b8c2db36802bf47511b4f66b32e0b100a14b8e02d791cdeb30951aed3589df3dfaa64f96842797f45129d1092408a09609d3a619ee9da19cd8cccb34b2c1456cb2e5bcb9b4f7f48afda72204c97a25bf1653845c090260fcc39eb91151c4c31777d512e7bf0e61dbdcb20d981ffeec3a5461b92dfaebbcf801ffbee82a1631218c103ccbf67d98ed078b3a3aa0e40279bab29ecfc49939bb5440b1dc2952a621b189d137081fd7ed30c983849b2382af9ffd1c1c351d4392364e6d3294096c42a95fd03200a21681509e1a9499a46d2762fce4ebb69142d47f171729e6c0bf18e253e9d120e0b4f665ad67ec403b516d2548c0062880bd2a8808ceab03da88a59e55effde33960fbad03c55dc4db0ac7972c9f3e75a590a4077d4f7cf9741eeb9fe9c90d6cdce0161a992d63e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5.050141352s ago: executing program 0 (id=625): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x87, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x40) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0xb0000000}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0), &(0x7f0000000100), 0x1, 0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 4.444833363s ago: executing program 2 (id=627): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0xfffffffffffffdc0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(r0, &(0x7f0000000240)='./file1\x00', 0x42, 0x146) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) fallocate(r1, 0x3, 0x800000, 0x8000c62) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:* w'], 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x9, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x6738, 0xe7}, 0x110010, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 4.070430225s ago: executing program 1 (id=629): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, 0x0) dup(r2) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000a40000000800000000000000", @ANYRES32, @ANYBLOB="008b0f000000000000000000000000000000000063b02daf5bf29e49df4468e2cd09d1eddcfb40c1493a587e52a1c547bf8e74d4d381eb5a9d7416b28dcd5f7382d8f9440a4c60918f1f280f57b03ef74e545d8278fdb54aff4cf36d2a1d67806a4412afd54dbda3c464008553905865e38085617d18bcc3d343bf1e9e02c8147ad9391f32fe687a3d539dde82eb9b1c41df8c00af97a1f16a8792d19da6916538077f1b9dc956d2f658e27fe78b3650eeac9223e532b60b8fe9ac8be8209f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r3, 0x800000000000000}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d64657669636573202dfc0bd5ad4d6114ce76970177db9f637d9542150b766837118b44a1326f895c1f3c0ae153d4397402149c6901565dd32c6b73eea3672401a4fae9b6f2346e236337c919b11734e0af6f22c12d1d3cc49f2705bbb85681538a82855e68efef9da27bebcb05a78500ebd41bb3a75244ac5cf946ad4da75f66fa20e9c8"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00251d0102020800ea8fe2be4d30000000000000000000126d5205cd4f0f214669145af811687a00cb75264bf05c363767e1808518a8cc12606be99dc18e9ed1939c97d304da2bd13f63a40a8b376f5f27106fa83650c99248e9", @ANYRES32=0x0, @ANYBLOB="0800050003fffd0015000100000000000402000092c9040000001caf030000006e89cc7ed4b6f35effdf2f5213c9a56560de6c505f6d41b5f1d4e0a8ce3863eb7120d575104b1d0d8fbb78978a21905e9de63800dd136bd08051c48391b6bfe96d9c1cff367f5e4a2a15da24a2e0026ecd8298995991b4050e1b1333ed5eb77d9c35b063f1f521d3db9b2de81b1df010ae8d260fc9ad3ed961c0c51d1bfdae5c1f3a5e3006a77fbe98c7753f18e2d0b162d54dcb5285e4267f33301ed3421f749e42"], 0x3c}}, 0x4020011) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r8, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r4, 0x0, r7, 0x0, 0x10d00, 0xf) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x50, 0x14, 0xf0b, 0x70bd29, 0x3, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x8000095f}) r10 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmsg(r10, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/98, 0x62}, 0x10060) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a0000000000000000000000050000000500000008"], 0x100}}, 0x0) 4.069923965s ago: executing program 1 (id=630): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wg2\x00', 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_proto_private(r1, 0x89e5, &(0x7f00000001c0)="a68652113c3e7df90ead31e7d63b73d2b100c6931fd9434ea40310c9d2c843683a7f7f8d65574b33384c08b8c7cc4dfca1181c089dc3e106b1c89075d77cd21a40401e190e260352e669ee48b78e320f3f5d90826bbd106a48f5dd59065d7d44f9c83e96fe2b30ed2c16736cd2eee7dcbee12b49feda7cf7377c3cf6c0") r4 = socket$igmp(0x2, 0x3, 0x2) fcntl$setstatus(r4, 0x4, 0x6000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 3.071267358s ago: executing program 1 (id=631): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file3\x00', 0x214000, &(0x7f0000000000)={[{@abort}, {@data_err_ignore}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x0, 0xbd2, &(0x7f0000001e80)="$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") syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x121}, &(0x7f0000ffc000), &(0x7f0000ffc000), &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)=0x3f00) 2.322016013s ago: executing program 4 (id=634): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0xf5ff) 2.280236404s ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) 1.938333635s ago: executing program 3 (id=637): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000001c0)='\x00', 0x12000, &(0x7f00000002c0)={@_ha_fsid={[0x7, 0x9]}, {0x8, 0x8001, 0x1, 0x8}}, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x100}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000180)='./file0\x00', r2, 0x4000, r0}, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private0, 0x7fffffff}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x2f, 0x25, 0x6, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x80, 0x7, 0x7, 0x5}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0xfffffffffffffffe) 1.936738366s ago: executing program 0 (id=638): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f00000001c0)={0xa, 0x4, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000340)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="140000000000"], 0x18}}], 0x2, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000002380), 0x12) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x6, 0x0, 0x6, 0x0, 0x5, 0xc, 0x6}, &(0x7f00000000c0)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7f, 0xb5) statx(0xffffffffffffff9c, 0x0, 0x100, 0x40, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r5, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@seclabel}, {@dont_hash}, {@fowner_lt={'fowner<', r5}}, {@audit}, {@obj_user={'obj_user', 0x3d, '\\'}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xd, {0x100000000}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xf04, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 1.936211726s ago: executing program 1 (id=639): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x7}, 0x0, 0x0, 0xfffffffd, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"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", 0x1049}}, 0x1006) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xda7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20004, 0xb, 0x0, 0x400, 0x0, 0x20000006}, r0, 0x3, 0xffffffffffffffff, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e00000000000000806e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',version=9p2000,\x00']) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r6, 0x40786e88, &(0x7f0000000840)={{&(0x7f0000000140)=[{0x30000000000, 0x5, 0x4, {0xffdffffffffffffe, 0x3}, 0xa, 0x47, 0xc}, {0x92, 0x0, 0x5, {0xf9, 0x3}, 0x6, 0x1, 0x5}, {0x0, 0x46, 0x8000000000000000, {0xc, 0x7}, 0x8, 0x3, 0x80000001}], 0x3, 0x40, 0xfffa, 0x5}, {&(0x7f00000008c0)=[{0x8001, 0x3}, {0xd3, 0x9}, {0x5, 0xfffffffffffffffd}, {0x6fd, 0x9}, {0x4, 0x8}, {0x100000001, 0x1}, {0x1, 0x5fc}], 0x7, 0x10, 0x1000, 0x10000005}, {&(0x7f0000000700)=[0x4, 0x1000, 0x4], 0x3, 0x8, 0x2, 0x303}, {&(0x7f0000000740), 0x0, 0x28, 0xf80, 0xd39}, {&(0x7f0000000800)=[0x7, 0x8, 0x1, 0xbf6f], 0x4, 0x8, 0xd2c3}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x9, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x810, 0x400000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x52f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) socket$inet6_tcp(0xa, 0x1, 0x0) 1.923970576s ago: executing program 3 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d", 0x15}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007af1608017846963b6fb07963ce00e978000000f2ffffff88c5165a98a0b5987e9fa1205a96f2cbb6f79f8cdba419e6"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.915174307s ago: executing program 2 (id=641): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xeba) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xeba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x7, 0x800000, 0x7, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x7, 0x800000, 0x7, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_sctp(0xa, 0x5, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fcffffff15000000000000000000000000000000f4c9a81582b8a296e673f231a6376cc197975c6390525991e38b4f7477ba2d372b417fce3d1f4591306e399751fa0b92d96f335cb90957c4082cbc2b6d3e851f2330fba72cd4ab829d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYRES8=r3], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x201800100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.590491227s ago: executing program 3 (id=642): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x2, 0xf2}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, 0x0, 0xc8) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r3 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c00)={{0x0, 0xfffffffffffffffc, 0x8, 0x100, 0xc, 0x200, 0x5, 0x156, 0x8, 0x0, 0x401, 0x81, 0x6, 0x3, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001c00)={{r4, 0x2, 0x6, 0x6, 0x4, 0x5, 0xe7b, 0x5, 0x1ad2, 0x1000, 0x80000001, 0xfffffffffffffe01, 0x80, 0x0, 0x1ff}}) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.288526507s ago: executing program 3 (id=643): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x806e791e3c366c09, 0x80, 0x80, 0x8, 0xd, 0x6, 0x0, 0x400000002, 0x4500, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffe}, 0x100046, 0x6, 0xd, 0x2, 0x18ad4c73, 0x9, 0x7, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000080)="4afefcd96ccd2fa2ecb64e7e563bee2ee373ab5c0d1867eb07e055055be27efbe422cfc3b8047d895b190c1fc04e8f1d5af6f3bbcd7c32f75a3fd2ad9c5876be2c5a0cf7f97c4fc4f1c755ecb98113ca48d2091607157272a9b586e7c05a59308a24cf5c20f5db83086e8a9c33e53539293641aba7196b05e733f83a47d31f23f3592f5366674cd3172aa87d0da91e94ac573eb5f80468b51bf6a5e645135e874bf61eafecd05af14a34cddd3a8ae35c887d516545124e9d1102a25400a54c3abf596956b446f1cb3f6a9370f0858d191b37a9fef10189d653a549db50980594d6f7f1fd0887279829180c", 0xeb, 0x1) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 1.286734427s ago: executing program 1 (id=644): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) syz_emit_ethernet(0x72, &(0x7f00000004c0)={@remote, @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "b6b2a4", 0x34, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x21}], @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2, 0x8773, 0x5, 0x0, 0x4e20, 0x40}, 0x2}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f00000005c0)={0x0, 0x2, [0xd35, 0x67c, 0xdd8, 0xe53]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=@newqdisc={0x120, 0x24, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xb, 0xf8}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x0, 0x8, 0x0, 0x109, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x7000, 0x7, 0xfff7, 0x8, 0x5, 0x1]}}, {{0x1c, 0x1, {0x3, 0x7, 0x7, 0x2, 0x0, 0xccb2, 0x8, 0x6}}, {0x10, 0x2, [0xc, 0xffdc, 0x8b, 0x5, 0x7, 0x6]}}, {{0x1c, 0x1, {0x10, 0x0, 0x2, 0x100, 0x0, 0x2, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x3, 0x1, 0x6, 0x9, 0x1, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x22d95093c81fbc8d}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1ff}, @TCA_NETEM_RATE64={0xc, 0x8, 0x1ff3c85230438a75}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_CORR={0x10, 0x1, {0x371, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x217}]}, 0x120}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800642d784e500010000fa000008000340000000011400000011000100000000000000000001c8000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000ff00000000000000feffffff1801000028646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xe}, 0x94) 1.260871068s ago: executing program 0 (id=645): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.175634761s ago: executing program 3 (id=646): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0xa, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=@unlock_all, 0xb) tee(r4, r1, 0xec, 0xd) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@grpquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@nolazytime}, {@resgid}, {@data_err_abort}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x71, 0x2000004, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0x1000, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r7, 0xffffffffffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, 0x0, &(0x7f0000000400)=@tcp6=r8, 0x2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r6) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008082}, 0x1) 1.150090462s ago: executing program 0 (id=647): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x9, 0xa, 0xff, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800001, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0xea, 0x7, 0x6, 0x1, 0x8, 0xb2, 0xfffc, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x1, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdc01, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x50001) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x101, 0x84e, 0x5}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000480)=0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c616c6c6fe08a775f7574696d653d30313737373737373737373737373737373737373737372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370b499d0cb476cc07157313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d30"], 0x6, 0x2e6, &(0x7f0000000780)="$eJzs3cuKHFUYB/Cveqqr2wvpWbgSwQJduAqZbN1MFgmII4hhFtGFDiYBmR6EDIx4wdaVuPMFfAJBcOs7CCK4ENwIPoDuIgRKTl3Sl5SdMaRHTH6/Rc+ZOuc/9dU5NTO16dPvPHd0eL2Mm59/8luMx1kMdkcRt7PYjkF0Poslu18FAPB/druq4o+q0dP9y5drsuMN1gUAbM59/v+38vr1Whrx3dnVBgBsxtVrb756aW/v8htlOY4rR1+c7GcRkb42/ZduxnsxjRtxISZxJ6J+UBhG/bSQmleqqprlZbIdLx7NTvZT8ujtH5r466+l15TfiUls18fuPm3U+Vf2Lu+UjYX8LNXxZHv+3ZS/GJN45m54KX+xJx/7Rbz0wkL952MSP70b78c0rtdFzPOf7pTlzz9GfPxWKi/ls9nJ/qgeN1dtdSefpW+HZ7tOAAAAAAAAAAAAAAAAAAAAAAA8Ws63e+eMot6/Jx1q99/ZuhP1NjdlZ3t5f54mn0Wcqxvz/YFiUFXVrIqvu/11LpRlWWXN+Hk+j2fzdmNBAAAAAAAAAAAAAAAAAAAAeMwdf/jR4cF0euPWQ2m0b/KPUUT8dTXiQX/O7sKR52P94FF7zoPpdNA2l8fki0diqxuTRawtI/KI3q7vU/phzVjdeCJ+/bO365tve1Ppio7z6Osa3/+kw3jgUp+er8UHw2Yeewd3d9fhQdY/h6OiOzJOCxerC1dEfxnD1Zkv/qnU7lY83QUWvV2Tfz1RxVN1Y7ZmTGTrfi9e/r0pe+EqlsYU9az2xodtYyG+cm/0r8VKI8ZN/N6/FZndOgAAAAAAAAAAAAAAAAAAYKPm7/69t+9ctjY6qEabqwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAztL88/9P08iXw6dIFXHr+L+6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4ffwcAAP//IjRTsQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000380)=0xe) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) 176.764825ms ago: executing program 2 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x20, 0x1}, 0x20) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000600)=@sack_info={0x0, 0x5, 0x4}, 0xc) sendmsg$nl_route(r1, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x40000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x8020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 90.586987ms ago: executing program 4 (id=649): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file3\x00', 0x214000, &(0x7f0000000000)={[{@abort}, {@data_err_ignore}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x0, 0xbd2, &(0x7f0000001e80)="$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") syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x121}, &(0x7f0000ffc000), &(0x7f0000ffc000), &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)=0x3f00) 90.139357ms ago: executing program 3 (id=650): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x24}, 0x100, 0x8, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002829fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) mount$nfs(0x0, 0x0, 0x0, 0x2c4b032, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000000005000000f8ff00002c00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028008000700e00000020a000100aaaaaaaaaa200000"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x0, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x1100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x80000ff, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x0, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0xd, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74e, 0xfffffffe, 0x3, 0x0, 0x8, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2c, 0x2, 0x2081, 0x100, 0x5, 0x6, 0x0, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x9, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x3ff, 0x0, 0x4, 0x2, 0x7, 0x8, 0x5, 0x33c, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_open_pts(r0, 0x20000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000140)={r5}, 0x1) socket$netlink(0x10, 0x3, 0x13) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x30, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) 0s ago: executing program 1 (id=651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x9}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0xfffffffffffffffe, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffd, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) kernel console output (not intermixed with test programs): ? set_blocksize+0x14c/0x270 [ 70.998115][ T4340] ? setup_bdev_super+0x30e/0x370 [ 71.003833][ T4340] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.010524][ T4340] get_tree_bdev_flags+0x291/0x300 [ 71.016546][ T4340] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.022404][ T4340] get_tree_bdev+0x1f/0x30 [ 71.027646][ T4340] ext4_get_tree+0x1c/0x30 [ 71.032513][ T4340] vfs_get_tree+0x57/0x1d0 [ 71.037985][ T4340] do_new_mount+0x288/0x8d0 [ 71.043924][ T4340] path_mount+0x4d0/0xbc0 [ 71.049785][ T4340] __se_sys_mount+0x28c/0x2e0 [ 71.055684][ T4340] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 71.062743][ T4340] __x64_sys_mount+0x67/0x80 [ 71.073574][ T4340] x64_sys_call+0x2d61/0x3020 [ 71.079696][ T4340] do_syscall_64+0x12c/0x3b0 [ 71.085425][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.092703][ T4340] RIP: 0033:0x7f78921de0ca [ 71.098304][ T4340] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.118945][ T4340] RSP: 002b:00007f7890bece58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.129172][ T4340] RAX: ffffffffffffffda RBX: 00007f7890becee0 RCX: 00007f78921de0ca [ 71.138016][ T4340] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f7890becea0 [ 71.146356][ T4340] RBP: 00002000000009c0 R08: 00007f7890becee0 R09: 0000000000800718 [ 71.154879][ T4340] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 71.164155][ T4340] R13: 00007f7890becea0 R14: 000000000000048d R15: 0000200000000200 [ 71.173673][ T4340] [ 71.177703][ T4340] ---[ end trace 0000000000000000 ]--- [ 71.203084][ T4321] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.256: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.228671][ T4340] EXT4-fs (loop4): 1 orphan inode deleted [ 71.250474][ T4340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.289108][ T4340] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.333942][ T4321] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.256: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.383307][ T28] audit: type=1400 audit(1780419251.858:424): avc: denied { remount } for pid=4336 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.408455][ T4321] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.256: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.429027][ T4337] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 71.438712][ T4337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.449968][ T28] audit: type=1400 audit(1780419251.938:425): avc: denied { create } for pid=4349 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.456543][ T4321] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.256: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 71.474257][ T28] audit: type=1400 audit(1780419251.948:426): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.508180][ T28] audit: type=1400 audit(1780419251.998:427): avc: denied { read } for pid=4349 comm="syz.1.265" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.532597][ T28] audit: type=1400 audit(1780419251.998:428): avc: denied { open } for pid=4349 comm="syz.1.265" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.556018][ T28] audit: type=1400 audit(1780419251.998:429): avc: denied { ioctl } for pid=4349 comm="syz.1.265" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.584090][ T4321] EXT4-fs error (device loop2) in ext4_setattr:6120: Corrupt filesystem [ 71.642588][ T3305] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 71.654622][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.750854][ T4371] set_capacity_and_notify: 1 callbacks suppressed [ 71.750896][ T4371] loop2: detected capacity change from 0 to 512 [ 71.783200][ T4371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.836637][ T4371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.873413][ T4371] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.017479][ T4361] Failed to initialize the IGMP autojoin socket (err -2) [ 72.427162][ T4388] loop3: detected capacity change from 0 to 256 [ 72.458898][ T4388] FAT-fs (loop3): Directory bread(block 64) failed [ 72.465600][ T4388] FAT-fs (loop3): Directory bread(block 65) failed [ 72.485886][ T4388] FAT-fs (loop3): Directory bread(block 66) failed [ 72.501376][ T4388] FAT-fs (loop3): Directory bread(block 67) failed [ 72.517340][ T4388] FAT-fs (loop3): Directory bread(block 68) failed [ 72.518035][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 72.535604][ T4388] FAT-fs (loop3): Directory bread(block 69) failed [ 72.545432][ T4388] FAT-fs (loop3): Directory bread(block 70) failed [ 72.563696][ T4388] FAT-fs (loop3): Directory bread(block 71) failed [ 72.575144][ T4388] FAT-fs (loop3): Directory bread(block 72) failed [ 72.587914][ T4388] FAT-fs (loop3): Directory bread(block 73) failed [ 73.790994][ T35] usb 3-1: enqueue for inactive port 0 [ 73.798722][ T35] usb 3-1: enqueue for inactive port 0 [ 74.789655][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 75.816663][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.861636][ T4400] FAULT_INJECTION: forcing a failure. [ 75.861636][ T4400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.880640][ T4401] netlink: 'syz.3.281': attribute type 3 has an invalid length. [ 75.888468][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 75.888483][ T28] audit: type=1400 audit(1780419256.388:435): avc: denied { accept } for pid=4399 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.936063][ T4401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 75.944850][ T4393] syz.0.278 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 75.948816][ T4400] CPU: 1 UID: 0 PID: 4400 Comm: syz.1.279 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 75.948848][ T4400] Tainted: [W]=WARN [ 75.948855][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.948866][ T4400] Call Trace: [ 75.948873][ T4400] [ 75.948881][ T4400] __dump_stack+0x1d/0x30 [ 75.948905][ T4400] dump_stack_lvl+0x95/0xd0 [ 75.948926][ T4400] dump_stack+0x15/0x1b [ 75.948945][ T4400] should_fail_ex+0x263/0x280 [ 75.949004][ T4400] should_fail+0xb/0x20 [ 75.949022][ T4400] should_fail_usercopy+0x1a/0x20 [ 75.949061][ T4400] _copy_from_user+0x1c/0xb0 [ 75.949084][ T4400] kstrtouint_from_user+0x69/0xf0 [ 75.949115][ T4400] ? 0xffffffff81000000 [ 75.949149][ T4400] ? selinux_file_permission+0x1e1/0x320 [ 75.949232][ T4400] proc_fail_nth_write+0x50/0x160 [ 75.949260][ T4400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.949343][ T4400] vfs_write+0x269/0x9f0 [ 75.949369][ T4400] ? __rcu_read_unlock+0x4e/0x70 [ 75.949389][ T4400] ? __fget_files+0x184/0x1c0 [ 75.949410][ T4400] ? mutex_lock+0x57/0x90 [ 75.949546][ T4400] ksys_write+0xdc/0x1a0 [ 75.949573][ T4400] __x64_sys_write+0x40/0x50 [ 75.949649][ T4400] x64_sys_call+0x27e1/0x3020 [ 75.949672][ T4400] do_syscall_64+0x12c/0x3b0 [ 75.949701][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.949723][ T4400] RIP: 0033:0x7f660d77d68e [ 75.949762][ T4400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.949779][ T4400] RSP: 002b:00007f660c216fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.949814][ T4400] RAX: ffffffffffffffda RBX: 00007f660c2176c0 RCX: 00007f660d77d68e [ 75.949828][ T4400] RDX: 0000000000000001 RSI: 00007f660c2170a0 RDI: 0000000000000004 [ 75.949841][ T4400] RBP: 00007f660c217090 R08: 0000000000000000 R09: 0000000000000000 [ 75.949905][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.949918][ T4400] R13: 00007f660da36038 R14: 00007f660da35fa0 R15: 00007ffd13f842d8 [ 75.949945][ T4400] [ 75.967205][ T4401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 75.969733][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.0.278 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 75.969766][ T4393] Tainted: [W]=WARN [ 75.969781][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.969858][ T4393] Call Trace: [ 75.969866][ T4393] [ 75.969874][ T4393] __dump_stack+0x1d/0x30 [ 75.969923][ T4393] dump_stack_lvl+0x95/0xd0 [ 75.970021][ T4393] dump_stack+0x15/0x1b [ 75.970040][ T4393] dump_header+0x80/0x240 [ 75.970061][ T4393] oom_kill_process+0x295/0x350 [ 75.970158][ T4393] out_of_memory+0x97d/0xb80 [ 75.970186][ T4393] try_charge_memcg+0x62f/0xa10 [ 75.970218][ T4393] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 75.970285][ T4393] __alloc_frozen_pages_noprof+0x18a/0x350 [ 75.970311][ T4393] alloc_pages_mpol+0xb3/0x260 [ 75.970415][ T4393] alloc_pages_noprof+0x8f/0x140 [ 75.970439][ T4393] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 75.970469][ T4393] __kvmalloc_node_noprof+0x3d4/0x640 [ 75.970512][ T4393] ? futex_hash_allocate+0x190/0x9a0 [ 75.970541][ T4393] ? futex_hash_allocate+0x190/0x9a0 [ 75.970572][ T4393] futex_hash_allocate+0x190/0x9a0 [ 75.970661][ T4393] ? cap_task_prctl+0x13f/0x6b0 [ 75.970687][ T4393] futex_hash_prctl+0xd8/0xf0 [ 75.970716][ T4393] __se_sys_prctl+0x4f4/0x1400 [ 75.970750][ T4393] __x64_sys_prctl+0x67/0x80 [ 75.970798][ T4393] x64_sys_call+0x2533/0x3020 [ 75.970822][ T4393] do_syscall_64+0x12c/0x3b0 [ 75.970853][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.970876][ T4393] RIP: 0033:0x7f05bcbbce59 [ 75.970894][ T4393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.970953][ T4393] RSP: 002b:00007f05bb617028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 75.970975][ T4393] RAX: ffffffffffffffda RBX: 00007f05bce35fa0 RCX: 00007f05bcbbce59 [ 75.970990][ T4393] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 75.971004][ T4393] RBP: 00007f05bcc52d6f R08: 0000000000000000 R09: 0000000000000000 [ 75.971017][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.971030][ T4393] R13: 00007f05bce36038 R14: 00007f05bce35fa0 R15: 00007ffe92fb9608 [ 75.971048][ T4393] [ 75.971103][ T4393] memory: usage 307200kB, limit 307200kB, failcnt 206 [ 75.994446][ T28] audit: type=1400 audit(1780419256.498:436): avc: denied { map } for pid=4399 comm="syz.3.281" path="socket:[8255]" dev="sockfs" ino=8255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.998727][ T4393] memory+swap: usage 375212kB, limit 9007199254740988kB, failcnt 0 [ 76.014068][ T4401] syz_tun: entered promiscuous mode [ 76.016918][ T4393] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 76.016936][ T4393] Memory cgroup stats for /syz0: [ 76.017201][ T4393] cache 4096 [ 76.034316][ T28] audit: type=1400 audit(1780419256.498:437): avc: denied { read } for pid=4399 comm="syz.3.281" path="socket:[8255]" dev="sockfs" ino=8255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.036449][ T4393] rss 4096 [ 76.036461][ T4393] shmem 0 [ 76.036470][ T4393] mapped_file 4096 [ 76.036480][ T4393] dirty 0 [ 76.065026][ T4406] loop1: detected capacity change from 0 to 764 [ 76.065408][ T4393] writeback 0 [ 76.065420][ T4393] workingset_refault_anon 1 [ 76.065430][ T4393] workingset_refault_file 64 [ 76.506844][ T4393] swap 69644288 [ 76.510303][ T4393] swapcached 73842688 [ 76.514275][ T4393] pgpgin 57160 [ 76.517678][ T4393] pgpgout 57158 [ 76.521135][ T4393] pgfault 40521 [ 76.524656][ T4393] pgmajfault 6 [ 76.528040][ T4393] inactive_anon 0 [ 76.531667][ T4393] active_anon 4096 [ 76.535412][ T4393] inactive_file 0 [ 76.539053][ T4393] active_file 4096 [ 76.542773][ T4393] unevictable 0 [ 76.546224][ T4393] hierarchical_memory_limit 314572800 [ 76.551604][ T4393] hierarchical_memsw_limit 9223372036854771712 [ 76.557774][ T4393] total_cache 4096 [ 76.561491][ T4393] total_rss 4096 [ 76.565085][ T4393] total_shmem 0 [ 76.568639][ T4393] total_mapped_file 4096 [ 76.572878][ T4393] total_dirty 0 [ 76.576330][ T4393] total_writeback 0 [ 76.580147][ T4393] total_workingset_refault_anon 1 [ 76.585167][ T4393] total_workingset_refault_file 64 [ 76.590291][ T4393] total_swap 69644288 [ 76.594266][ T4393] total_swapcached 73842688 [ 76.598789][ T4393] total_pgpgin 57160 [ 76.602676][ T4393] total_pgpgout 57158 [ 76.606666][ T4393] total_pgfault 40521 [ 76.610641][ T4393] total_pgmajfault 6 [ 76.614530][ T4393] total_inactive_anon 0 [ 76.618690][ T4393] total_active_anon 4096 [ 76.623014][ T4393] total_inactive_file 0 [ 76.627178][ T4393] total_active_file 4096 [ 76.631475][ T4393] total_unevictable 0 [ 76.635449][ T4393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.278,pid=4392,uid=0 [ 76.650010][ T4393] Memory cgroup out of memory: Killed process 4392 (syz.0.278) total-vm:94168kB, anon-rss:1236kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 76.675403][ T4393] syz.0.278 (4393) used greatest stack depth: 8184 bytes left [ 76.686113][ T4401] syz_tun: left promiscuous mode [ 76.789876][ T4412] loop3: detected capacity change from 0 to 764 [ 76.867711][ T4415] netlink: 'syz.3.285': attribute type 4 has an invalid length. [ 77.132343][ T4412] Failed to initialize the IGMP autojoin socket (err -2) [ 77.141135][ T2120] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.157058][ T2120] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.172545][ T2120] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.201338][ T2120] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.244826][ T4426] loop4: detected capacity change from 0 to 1024 [ 77.290600][ T4426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 77.328655][ T4426] System zones: 0-1, 3-8 [ 77.343681][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.365329][ T28] audit: type=1400 audit(1780419257.858:438): avc: denied { bind } for pid=4435 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.406393][ T4426] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.439915][ T28] audit: type=1400 audit(1780419257.868:439): avc: denied { listen } for pid=4435 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.447826][ T4417] loop1: detected capacity change from 0 to 512 [ 77.474953][ T4426] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.288: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.506249][ T28] audit: type=1400 audit(1780419257.868:440): avc: denied { getopt } for pid=4435 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.532820][ T4426] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 77.545762][ T4440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.292'. [ 77.560520][ T28] audit: type=1400 audit(1780419257.968:441): avc: denied { write } for pid=4425 comm="syz.4.288" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.572365][ T4426] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.572365][ T4426] [ 77.613242][ T28] audit: type=1400 audit(1780419257.968:442): avc: denied { write } for pid=4438 comm="syz.3.292" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.665403][ T4417] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.286: inode has both inline data and extents flags [ 77.685942][ T4408] loop0: detected capacity change from 0 to 4096 [ 77.693349][ T2120] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.700197][ T4417] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.705818][ T4417] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.286: couldn't read orphan inode 15 (err -117) [ 77.706873][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 77.707574][ C0] EXT4-fs (loop1): initial error at time 1780419258: ext4_orphan_get:1397: inode 15 [ 77.707914][ C0] EXT4-fs (loop1): last error at time 1780419258: ext4_orphan_get:1397: inode 15 [ 77.734574][ T4426] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.288: bg 0: block 112: padding at end of block bitmap is not set [ 77.743248][ T28] audit: type=1400 audit(1780419258.238:443): avc: denied { write } for pid=4425 comm="syz.4.288" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.761742][ T4417] loop1: lost filesystem error report for type 5 error -117 [ 77.786317][ T4426] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.288: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 77.820943][ T4408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.837555][ T4426] EXT4-fs error (device loop4) in ext4_setattr:6120: Corrupt filesystem [ 77.870695][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.878253][ T28] audit: type=1400 audit(1780419258.388:444): avc: denied { write } for pid=4407 comm="syz.0.284" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.949707][ T4417] FAULT_INJECTION: forcing a failure. [ 77.949707][ T4417] name failslab, interval 1, probability 0, space 0, times 0 [ 77.965543][ T4417] CPU: 1 UID: 0 PID: 4417 Comm: syz.1.286 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 77.965604][ T4417] Tainted: [W]=WARN [ 77.965613][ T4417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.965625][ T4417] Call Trace: [ 77.965702][ T4417] [ 77.965711][ T4417] __dump_stack+0x1d/0x30 [ 77.965737][ T4417] dump_stack_lvl+0x95/0xd0 [ 77.965798][ T4417] dump_stack+0x15/0x1b [ 77.965819][ T4417] should_fail_ex+0x263/0x280 [ 77.965917][ T4417] should_failslab+0x8c/0xb0 [ 77.965950][ T4417] kmem_cache_alloc_noprof+0x66/0x3f0 [ 77.966000][ T4417] ? skb_clone+0x151/0x1f0 [ 77.966029][ T4417] skb_clone+0x151/0x1f0 [ 77.966127][ T4417] __netlink_deliver_tap+0x2c9/0x500 [ 77.966161][ T4417] ? netlink_unicast+0x553/0x680 [ 77.966189][ T4417] netlink_unicast+0x653/0x680 [ 77.966218][ T4417] netlink_sendmsg+0x5c8/0x6f0 [ 77.966315][ T4417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.966454][ T4417] ____sys_sendmsg+0x563/0x5b0 [ 77.966484][ T4417] ___sys_sendmsg+0x195/0x1e0 [ 77.966541][ T4417] ? _raw_spin_unlock+0x9/0x30 [ 77.966573][ T4417] __x64_sys_sendmsg+0xd4/0x160 [ 77.966609][ T4417] x64_sys_call+0x194c/0x3020 [ 77.966631][ T4417] do_syscall_64+0x12c/0x3b0 [ 77.966667][ T4417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.966702][ T4417] RIP: 0033:0x7f660d7bce59 [ 77.966778][ T4417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.966799][ T4417] RSP: 002b:00007f660c217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.966819][ T4417] RAX: ffffffffffffffda RBX: 00007f660da35fa0 RCX: 00007f660d7bce59 [ 77.966832][ T4417] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 77.966845][ T4417] RBP: 00007f660c217090 R08: 0000000000000000 R09: 0000000000000000 [ 77.966858][ T4417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.966871][ T4417] R13: 00007f660da36038 R14: 00007f660da35fa0 R15: 00007ffd13f842d8 [ 77.966975][ T4417] [ 78.170851][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.181974][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.210256][ T4448] netlink: 128 bytes leftover after parsing attributes in process `syz.0.294'. [ 78.221206][ T4448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.258022][ T4451] netlink: 260 bytes leftover after parsing attributes in process `syz.4.293'. [ 78.376445][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.386530][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.396148][ T4455] netlink: 22 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.406608][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.416129][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.426915][ T4455] netlink: 22 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.436169][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 78.453655][ T4466] syz.4.300 uses obsolete (PF_INET,SOCK_PACKET) [ 78.570703][ T4472] wireguard: wireguard0: Could not create IPv4 socket [ 78.644579][ T4473] loop4: detected capacity change from 0 to 512 [ 78.656075][ T4473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.684903][ T4473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.703397][ T4473] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.714658][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.047675][ T4496] FAULT_INJECTION: forcing a failure. [ 79.047675][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 79.069119][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: syz.1.309 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 79.069154][ T4496] Tainted: [W]=WARN [ 79.069162][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.069175][ T4496] Call Trace: [ 79.069183][ T4496] [ 79.069192][ T4496] __dump_stack+0x1d/0x30 [ 79.069274][ T4496] dump_stack_lvl+0x95/0xd0 [ 79.069359][ T4496] dump_stack+0x15/0x1b [ 79.069438][ T4496] should_fail_ex+0x263/0x280 [ 79.069501][ T4496] should_failslab+0x8c/0xb0 [ 79.069533][ T4496] kmem_cache_alloc_noprof+0x66/0x3f0 [ 79.069566][ T4496] ? skb_clone+0x151/0x1f0 [ 79.069614][ T4496] skb_clone+0x151/0x1f0 [ 79.069640][ T4496] __netlink_deliver_tap+0x2c9/0x500 [ 79.069744][ T4496] netlink_unicast+0x653/0x680 [ 79.069771][ T4496] netlink_sendmsg+0x5c8/0x6f0 [ 79.069870][ T4496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.069901][ T4496] ____sys_sendmsg+0x563/0x5b0 [ 79.069930][ T4496] ___sys_sendmsg+0x195/0x1e0 [ 79.070046][ T4496] __x64_sys_sendmsg+0xd4/0x160 [ 79.070077][ T4496] x64_sys_call+0x194c/0x3020 [ 79.070132][ T4496] do_syscall_64+0x12c/0x3b0 [ 79.070163][ T4496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.070245][ T4496] RIP: 0033:0x7f660d7bce59 [ 79.070263][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.070298][ T4496] RSP: 002b:00007f660c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.070321][ T4496] RAX: ffffffffffffffda RBX: 00007f660da36090 RCX: 00007f660d7bce59 [ 79.070334][ T4496] RDX: 0000000000000000 RSI: 0000200000001980 RDI: 0000000000000006 [ 79.070348][ T4496] RBP: 00007f660c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.070361][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.070448][ T4496] R13: 00007f660da36128 R14: 00007f660da36090 R15: 00007ffd13f842d8 [ 79.070468][ T4496] [ 79.364140][ T4511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 79.370866][ T4511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.383717][ T4511] vhci_hcd vhci_hcd.0: Device attached [ 79.397614][ T4511] tipc: Invalid UDP bearer configuration [ 79.397726][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 79.462376][ T4511] loop0: detected capacity change from 0 to 512 [ 79.499082][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.517862][ T4512] vhci_hcd: connection closed [ 79.558436][ T123] vhci_hcd vhci_hcd.0: stop threads [ 79.568658][ T123] vhci_hcd vhci_hcd.0: release socket [ 79.574479][ T123] vhci_hcd vhci_hcd.0: disconnect device [ 79.696505][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.757425][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.834191][ T4532] FAULT_INJECTION: forcing a failure. [ 79.834191][ T4532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.849135][ T4532] CPU: 0 UID: 0 PID: 4532 Comm: syz.3.325 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 79.849166][ T4532] Tainted: [W]=WARN [ 79.849172][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.849183][ T4532] Call Trace: [ 79.849190][ T4532] [ 79.849198][ T4532] __dump_stack+0x1d/0x30 [ 79.849296][ T4532] dump_stack_lvl+0x95/0xd0 [ 79.849319][ T4532] dump_stack+0x15/0x1b [ 79.849340][ T4532] should_fail_ex+0x263/0x280 [ 79.849363][ T4532] should_fail+0xb/0x20 [ 79.849382][ T4532] should_fail_usercopy+0x1a/0x20 [ 79.849427][ T4532] _copy_from_user+0x1c/0xb0 [ 79.849452][ T4532] memdup_user+0x5e/0xd0 [ 79.849480][ T4532] strndup_user+0x68/0xb0 [ 79.849529][ T4532] __se_sys_mount+0x8e/0x2e0 [ 79.849565][ T4532] ? fput+0x8f/0xc0 [ 79.849667][ T4532] ? ksys_write+0x194/0x1a0 [ 79.849696][ T4532] __x64_sys_mount+0x67/0x80 [ 79.849792][ T4532] x64_sys_call+0x2d61/0x3020 [ 79.849818][ T4532] do_syscall_64+0x12c/0x3b0 [ 79.849850][ T4532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.849923][ T4532] RIP: 0033:0x7f48a9d0ce59 [ 79.849941][ T4532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.849960][ T4532] RSP: 002b:00007f48a8767028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.849983][ T4532] RAX: ffffffffffffffda RBX: 00007f48a9f85fa0 RCX: 00007f48a9d0ce59 [ 79.849998][ T4532] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 79.850039][ T4532] RBP: 00007f48a8767090 R08: 0000200000000300 R09: 0000000000000000 [ 79.850053][ T4532] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 79.850067][ T4532] R13: 00007f48a9f86038 R14: 00007f48a9f85fa0 R15: 00007ffff861cd18 [ 79.850087][ T4532] [ 80.033501][ T4530] loop4: detected capacity change from 0 to 4096 [ 80.052840][ T4534] Failed to initialize the IGMP autojoin socket (err -2) [ 80.076120][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.102388][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.111140][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.179890][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.201822][ T4539] FAULT_INJECTION: forcing a failure. [ 80.201822][ T4539] name failslab, interval 1, probability 0, space 0, times 0 [ 80.214886][ T4539] CPU: 1 UID: 0 PID: 4539 Comm: syz.0.328 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 80.214922][ T4539] Tainted: [W]=WARN [ 80.214928][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.214939][ T4539] Call Trace: [ 80.214969][ T4539] [ 80.214977][ T4539] __dump_stack+0x1d/0x30 [ 80.215045][ T4539] dump_stack_lvl+0x95/0xd0 [ 80.215067][ T4539] dump_stack+0x15/0x1b [ 80.215084][ T4539] should_fail_ex+0x263/0x280 [ 80.215125][ T4539] should_failslab+0x8c/0xb0 [ 80.215152][ T4539] __kmalloc_noprof+0xb8/0x4d0 [ 80.215189][ T4539] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 80.215222][ T4539] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 80.215250][ T4539] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 80.215302][ T4539] ? selinux_capable+0x31/0x40 [ 80.215328][ T4539] ? security_capable+0x7b/0x90 [ 80.215396][ T4539] ? ns_capable+0x7c/0xb0 [ 80.215425][ T4539] genl_rcv_msg+0x432/0x470 [ 80.215459][ T4539] ? __pfx_nfc_genl_se_io+0x10/0x10 [ 80.215496][ T4539] netlink_rcv_skb+0x123/0x220 [ 80.215527][ T4539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.215556][ T4539] genl_rcv+0x28/0x40 [ 80.215584][ T4539] netlink_unicast+0x5a8/0x680 [ 80.215614][ T4539] netlink_sendmsg+0x5c8/0x6f0 [ 80.215672][ T4539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.215699][ T4539] ____sys_sendmsg+0x563/0x5b0 [ 80.215734][ T4539] ___sys_sendmsg+0x195/0x1e0 [ 80.215819][ T4539] __x64_sys_sendmsg+0xd4/0x160 [ 80.215853][ T4539] x64_sys_call+0x194c/0x3020 [ 80.215929][ T4539] do_syscall_64+0x12c/0x3b0 [ 80.215965][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.215988][ T4539] RIP: 0033:0x7f05bcbbce59 [ 80.216004][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.216085][ T4539] RSP: 002b:00007f05bb617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.216108][ T4539] RAX: ffffffffffffffda RBX: 00007f05bce35fa0 RCX: 00007f05bcbbce59 [ 80.216124][ T4539] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 80.216138][ T4539] RBP: 00007f05bb617090 R08: 0000000000000000 R09: 0000000000000000 [ 80.216152][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.216166][ T4539] R13: 00007f05bce36038 R14: 00007f05bce35fa0 R15: 00007ffe92fb9608 [ 80.216245][ T4539] [ 80.458090][ T4541] FAULT_INJECTION: forcing a failure. [ 80.458090][ T4541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.484640][ T4541] CPU: 0 UID: 0 PID: 4541 Comm: syz.3.329 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 80.484694][ T4541] Tainted: [W]=WARN [ 80.484701][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.484714][ T4541] Call Trace: [ 80.484721][ T4541] [ 80.484728][ T4541] __dump_stack+0x1d/0x30 [ 80.484759][ T4541] dump_stack_lvl+0x95/0xd0 [ 80.484780][ T4541] dump_stack+0x15/0x1b [ 80.484798][ T4541] should_fail_ex+0x263/0x280 [ 80.484864][ T4541] should_fail+0xb/0x20 [ 80.484884][ T4541] should_fail_usercopy+0x1a/0x20 [ 80.484906][ T4541] _copy_from_iter+0xcf/0xea0 [ 80.484928][ T4541] ? __alloc_skb+0x4f6/0x690 [ 80.484949][ T4541] ? __alloc_skb+0x200/0x690 [ 80.484973][ T4541] netlink_sendmsg+0x4ae/0x6f0 [ 80.485008][ T4541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.485057][ T4541] ____sys_sendmsg+0x563/0x5b0 [ 80.485108][ T4541] ___sys_sendmsg+0x195/0x1e0 [ 80.485196][ T4541] __x64_sys_sendmsg+0xd4/0x160 [ 80.485235][ T4541] x64_sys_call+0x194c/0x3020 [ 80.485261][ T4541] do_syscall_64+0x12c/0x3b0 [ 80.485349][ T4541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.485369][ T4541] RIP: 0033:0x7f48a9d0ce59 [ 80.485418][ T4541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.485453][ T4541] RSP: 002b:00007f48a8767028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.485590][ T4541] RAX: ffffffffffffffda RBX: 00007f48a9f85fa0 RCX: 00007f48a9d0ce59 [ 80.485605][ T4541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 80.485619][ T4541] RBP: 00007f48a8767090 R08: 0000000000000000 R09: 0000000000000000 [ 80.485634][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.485647][ T4541] R13: 00007f48a9f86038 R14: 00007f48a9f85fa0 R15: 00007ffff861cd18 [ 80.485666][ T4541] [ 80.681687][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.716850][ T4534] loop2: detected capacity change from 0 to 8192 [ 80.740031][ T4534] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.778029][ T4547] loop3: detected capacity change from 0 to 512 [ 80.793139][ T4547] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.811892][ T4547] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 80.820740][ T4551] FAULT_INJECTION: forcing a failure. [ 80.820740][ T4551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.826820][ T4547] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.333: corrupted in-inode xattr: overlapping e_value [ 80.833804][ T4551] CPU: 1 UID: 0 PID: 4551 Comm: syz.4.331 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 80.833840][ T4551] Tainted: [W]=WARN [ 80.833846][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.833857][ T4551] Call Trace: [ 80.833927][ T4551] [ 80.833936][ T4551] __dump_stack+0x1d/0x30 [ 80.833961][ T4551] dump_stack_lvl+0x95/0xd0 [ 80.833981][ T4551] dump_stack+0x15/0x1b [ 80.834000][ T4551] should_fail_ex+0x263/0x280 [ 80.834026][ T4551] should_fail+0xb/0x20 [ 80.834043][ T4551] should_fail_usercopy+0x1a/0x20 [ 80.834099][ T4551] _copy_from_user+0x1c/0xb0 [ 80.834123][ T4551] kstrtouint_from_user+0x69/0xf0 [ 80.834153][ T4551] ? 0xffffffff81000000 [ 80.834168][ T4551] ? selinux_file_permission+0x1e1/0x320 [ 80.834226][ T4551] proc_fail_nth_write+0x50/0x160 [ 80.834254][ T4551] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.834343][ T4551] vfs_write+0x269/0x9f0 [ 80.834370][ T4551] ? __rcu_read_unlock+0x4e/0x70 [ 80.834418][ T4551] ? __fget_files+0x184/0x1c0 [ 80.834438][ T4551] ? mutex_lock+0x57/0x90 [ 80.834462][ T4551] ksys_write+0xdc/0x1a0 [ 80.834548][ T4551] __x64_sys_write+0x40/0x50 [ 80.834690][ T4551] x64_sys_call+0x27e1/0x3020 [ 80.834713][ T4551] do_syscall_64+0x12c/0x3b0 [ 80.834752][ T4551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.834790][ T4551] RIP: 0033:0x7f789219d68e [ 80.834806][ T4551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.834823][ T4551] RSP: 002b:00007f7890c2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.834843][ T4551] RAX: ffffffffffffffda RBX: 00007f7890c2f6c0 RCX: 00007f789219d68e [ 80.834888][ T4551] RDX: 0000000000000001 RSI: 00007f7890c2f0a0 RDI: 0000000000000006 [ 80.834961][ T4551] RBP: 00007f7890c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.834974][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.834986][ T4551] R13: 00007f7892456038 R14: 00007f7892455fa0 R15: 00007ffc7c3f20c8 [ 80.835005][ T4551] [ 80.988064][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 80.988080][ T28] audit: type=1400 audit(1780419261.358:603): avc: denied { create } for pid=4552 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 81.006235][ T4547] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.023632][ T28] audit: type=1400 audit(1780419261.358:604): avc: denied { bind } for pid=4552 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 81.126434][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.132912][ C1] EXT4-fs (loop3): initial error at time 1780419261: ext4_iget_extra_inode:5128: inode 15 [ 81.142853][ C1] EXT4-fs (loop3): last error at time 1780419261: ext4_iget_extra_inode:5128: inode 15 [ 81.178279][ T4547] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 81.190317][ T4547] loop3: lost filesystem error report for type 5 error -117 [ 81.192128][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.307963][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.388503][ T4558] loop3: detected capacity change from 0 to 128 [ 81.476103][ T4558] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 81.576071][ T28] audit: type=1400 audit(1780419262.078:605): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.629544][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.658100][ T4560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.680011][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.712774][ T28] audit: type=1400 audit(1780419262.218:606): avc: denied { setopt } for pid=4565 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.736281][ T4560] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.832508][ T4560] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.336: lblock 3 mapped to illegal pblock 3 (length 3) [ 81.854391][ T28] audit: type=1400 audit(1780419262.218:607): avc: denied { bind } for pid=4565 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.911840][ T4560] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 81.938930][ T28] audit: type=1400 audit(1780419262.258:608): avc: denied { map_create } for pid=4565 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.966662][ T4560] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.966662][ T4560] [ 81.994713][ T4562] set_capacity_and_notify: 1 callbacks suppressed [ 81.994733][ T4562] loop4: detected capacity change from 0 to 2048 [ 82.009323][ T28] audit: type=1400 audit(1780419262.318:609): avc: denied { write } for pid=4559 comm="syz.0.336" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.030949][ T28] audit: type=1400 audit(1780419262.328:610): avc: denied { ioctl } for pid=4559 comm="syz.0.336" path="/79/file1/file1" dev="loop0" ino=15 ioctlcmd=0x550b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.055295][ T28] audit: type=1400 audit(1780419262.328:611): avc: denied { read } for pid=4565 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.076549][ T4562] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 82.137048][ T30] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 82.175527][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 82.188887][ T28] audit: type=1400 audit(1780419262.588:612): avc: denied { mounton } for pid=4561 comm="syz.4.338" path="/65/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.231706][ T4562] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.248486][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.248486][ T30] [ 82.271445][ T3301] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.290399][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.300247][ T4574] loop2: detected capacity change from 0 to 4096 [ 82.334454][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.461749][ T4583] loop4: detected capacity change from 0 to 512 [ 82.485436][ T4583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.498984][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.550451][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.591547][ T4583] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.615003][ T4591] loop2: detected capacity change from 0 to 1024 [ 82.623947][ T4591] EXT4-fs: Ignoring removed oldalloc option [ 82.630768][ T4591] EXT4-fs: Ignoring removed oldalloc option [ 82.641513][ T4583] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.345: Failed to acquire dquot type 1 [ 82.668383][ T4597] loop1: detected capacity change from 0 to 512 [ 82.683684][ T4591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.699597][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710969][ T4597] ext4: Bad value for 'mb_optimize_scan' [ 82.752914][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.917231][ T4608] loop3: detected capacity change from 0 to 512 [ 82.924042][ T4608] ext4: Unknown parameter 'memory.events' [ 83.017489][ T4612] loop3: detected capacity change from 0 to 512 [ 83.038911][ T4612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.074904][ T4612] EXT4-fs (loop3): 1 truncate cleaned up [ 83.083847][ T4615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57360 sclass=netlink_route_socket pid=4615 comm=syz.2.356 [ 83.089679][ T4612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.422792][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.499358][ T4636] hub 8-0:1.0: USB hub found [ 85.504183][ T4636] hub 8-0:1.0: 8 ports detected [ 85.511593][ T4636] __nla_validate_parse: 28 callbacks suppressed [ 85.511606][ T4636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.361'. [ 85.596220][ T4632] loop0: detected capacity change from 0 to 1024 [ 85.608405][ T4635] loop1: detected capacity change from 0 to 4096 [ 85.613502][ T4632] EXT4-fs: Ignoring removed nobh option [ 85.679805][ T4635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.698860][ T4632] EXT4-fs: Ignoring removed bh option [ 85.721383][ T4645] 9p: Bad value for 'wfdno' [ 85.731999][ T4632] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 85.796865][ T4632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.869001][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.950318][ T4649] loop3: detected capacity change from 0 to 1024 [ 85.986623][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.006935][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.020812][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.089757][ T28] kauditd_printk_skb: 224 callbacks suppressed [ 86.089857][ T28] audit: type=1400 audit(1780419266.588:835): avc: denied { write } for pid=4648 comm="syz.3.366" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.173208][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.189825][ T28] audit: type=1400 audit(1780419266.668:836): avc: denied { create } for pid=4648 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.217638][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 86.219330][ T28] audit: type=1400 audit(1780419266.668:837): avc: denied { ioctl } for pid=4655 comm="syz.2.368" path="socket:[8015]" dev="sockfs" ino=8015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.278134][ T4657] Failed to initialize the IGMP autojoin socket (err -2) [ 86.326427][ T28] audit: type=1400 audit(1780419266.668:838): avc: denied { bind } for pid=4655 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.347689][ T28] audit: type=1400 audit(1780419266.668:839): avc: denied { mounton } for pid=4648 comm="syz.3.366" path="/62/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.371052][ T28] audit: type=1400 audit(1780419266.668:840): avc: denied { module_request } for pid=4648 comm="syz.3.366" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.393665][ T28] audit: type=1400 audit(1780419266.718:841): avc: denied { write } for pid=4648 comm="syz.3.366" path="socket:[8012]" dev="sockfs" ino=8012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.417405][ T28] audit: type=1400 audit(1780419266.718:842): avc: denied { write } for pid=4648 comm="syz.3.366" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.439335][ T28] audit: type=1400 audit(1780419266.728:843): avc: denied { read } for pid=4648 comm="syz.3.366" path=2F36322F66696C65312F233138202864656C6574656429 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.465215][ T28] audit: type=1400 audit(1780419266.738:844): avc: denied { mount } for pid=4648 comm="syz.3.366" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.507993][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.535949][ T4652] iso9660: Unknown parameter '' [ 86.601276][ T4674] FAULT_INJECTION: forcing a failure. [ 86.601276][ T4674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.642050][ T4674] CPU: 0 UID: 0 PID: 4674 Comm: syz.3.372 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 86.642084][ T4674] Tainted: [W]=WARN [ 86.642092][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.642107][ T4674] Call Trace: [ 86.642115][ T4674] [ 86.642123][ T4674] __dump_stack+0x1d/0x30 [ 86.642149][ T4674] dump_stack_lvl+0x95/0xd0 [ 86.642253][ T4674] dump_stack+0x15/0x1b [ 86.642274][ T4674] should_fail_ex+0x263/0x280 [ 86.642296][ T4674] should_fail+0xb/0x20 [ 86.642315][ T4674] should_fail_usercopy+0x1a/0x20 [ 86.642338][ T4674] _copy_from_user+0x1c/0xb0 [ 86.642378][ T4674] kstrtouint_from_user+0x69/0xf0 [ 86.642409][ T4674] ? 0xffffffff81000000 [ 86.642424][ T4674] ? selinux_file_permission+0x1e1/0x320 [ 86.642548][ T4674] proc_fail_nth_write+0x50/0x160 [ 86.642579][ T4674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.642607][ T4674] vfs_write+0x269/0x9f0 [ 86.642653][ T4674] ? __rcu_read_unlock+0x4e/0x70 [ 86.642675][ T4674] ? __fget_files+0x184/0x1c0 [ 86.642697][ T4674] ? mutex_lock+0x57/0x90 [ 86.642794][ T4674] ksys_write+0xdc/0x1a0 [ 86.642824][ T4674] __x64_sys_write+0x40/0x50 [ 86.642852][ T4674] x64_sys_call+0x27e1/0x3020 [ 86.642907][ T4674] do_syscall_64+0x12c/0x3b0 [ 86.642972][ T4674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.643052][ T4674] RIP: 0033:0x7f48a9ccd68e [ 86.643069][ T4674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.643088][ T4674] RSP: 002b:00007f48a8745fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.643191][ T4674] RAX: ffffffffffffffda RBX: 00007f48a87466c0 RCX: 00007f48a9ccd68e [ 86.643205][ T4674] RDX: 0000000000000001 RSI: 00007f48a87460a0 RDI: 0000000000000003 [ 86.643219][ T4674] RBP: 00007f48a8746090 R08: 0000000000000000 R09: 0000000000000000 [ 86.643233][ T4674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.643247][ T4674] R13: 00007f48a9f86128 R14: 00007f48a9f86090 R15: 00007ffff861cd18 [ 86.643267][ T4674] [ 87.046947][ T4681] netlink: 'syz.2.375': attribute type 21 has an invalid length. [ 87.054726][ T4681] netlink: 156 bytes leftover after parsing attributes in process `syz.2.375'. [ 87.064439][ T4681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 87.449675][ T4688] set_capacity_and_notify: 1 callbacks suppressed [ 87.449692][ T4688] loop2: detected capacity change from 0 to 4096 [ 87.559145][ T4688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.704070][ T4698] nfs: Unknown parameter '' [ 87.718593][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 87.783821][ T4698] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 87.796159][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.813423][ T4698] loop1: detected capacity change from 0 to 512 [ 87.839070][ T4698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.861905][ T4698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.878773][ T4698] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.909244][ T4698] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.380: Allocating blocks 41-42 which overlap fs metadata [ 87.933617][ T4698] loop1: lost filesystem error report for type 5 error -117 [ 87.933836][ T4698] EXT4-fs (loop1): Remounting filesystem read-only [ 87.941178][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.941197][ C0] EXT4-fs (loop1): initial error at time 1780419268: ext4_mb_mark_diskspace_used:4222 [ 87.941223][ C0] EXT4-fs (loop1): last error at time 1780419268: ext4_mb_mark_diskspace_used:4222 [ 88.016474][ T4698] EXT4-fs (loop1): 1 truncate cleaned up [ 88.031339][ T4698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.116860][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.153980][ T4706] loop1: detected capacity change from 0 to 128 [ 88.477333][ T4711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 88.514220][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 88.614474][ T4726] loop2: detected capacity change from 0 to 256 [ 88.628315][ T4726] FAT-fs (loop2): Directory bread(block 64) failed [ 88.638740][ T4727] loop0: detected capacity change from 0 to 512 [ 88.652015][ T4726] FAT-fs (loop2): Directory bread(block 65) failed [ 88.671035][ T4727] EXT4-fs: Ignoring removed nobh option [ 88.678005][ T4726] FAT-fs (loop2): Directory bread(block 66) failed [ 88.689983][ T4727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.697026][ T4726] FAT-fs (loop2): Directory bread(block 67) failed [ 88.703594][ T4726] FAT-fs (loop2): Directory bread(block 68) failed [ 88.710334][ T4727] EXT4-fs: Ignoring removed bh option [ 88.716040][ T4727] EXT4-fs: Ignoring removed oldalloc option [ 88.722293][ T4726] FAT-fs (loop2): Directory bread(block 69) failed [ 88.729429][ T4727] EXT4-fs (loop0): filesystem is read-only [ 88.735499][ T4726] FAT-fs (loop2): Directory bread(block 70) failed [ 88.742203][ T4727] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.753497][ T4726] FAT-fs (loop2): Directory bread(block 71) failed [ 88.761844][ T4726] FAT-fs (loop2): Directory bread(block 72) failed [ 88.769199][ T4727] EXT4-fs (loop0): filesystem is read-only [ 88.775058][ T4726] FAT-fs (loop2): Directory bread(block 73) failed [ 88.782047][ T4727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.802895][ T4727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.386: bg 0: block 64: padding at end of block bitmap is not set [ 88.827298][ T4727] loop0: lost filesystem error report for type 5 error -117 [ 88.827405][ T4727] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.843490][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.843508][ C1] EXT4-fs (loop0): initial error at time 1780419269: ext4_validate_block_bitmap:441 [ 88.843537][ C1] EXT4-fs (loop0): last error at time 1780419269: ext4_validate_block_bitmap:441 [ 88.871424][ T4727] loop0: lost filesystem error report for type 5 error -117 [ 88.871596][ T4727] EXT4-fs (loop0): 1 orphan inode deleted [ 88.925889][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.960218][ T4734] loop2: detected capacity change from 0 to 4096 [ 89.022214][ T4734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.173315][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.758620][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.002650][ T4756] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.036808][ T4750] loop2: detected capacity change from 0 to 256 [ 90.070750][ T4760] program syz.3.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.080362][ T4760] forcing mempool usage for bio_alloc_bioset+0x39f/0x640 [ 90.167413][ T4762] loop0: detected capacity change from 0 to 1024 [ 90.176006][ T4762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.198583][ T4762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.398711][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.408090][ T4772] Process accounting resumed [ 90.532842][ T4788] FAULT_INJECTION: forcing a failure. [ 90.532842][ T4788] name failslab, interval 1, probability 0, space 0, times 0 [ 90.546300][ T4788] CPU: 1 UID: 0 PID: 4788 Comm: syz.0.402 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 90.546336][ T4788] Tainted: [W]=WARN [ 90.546344][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.546357][ T4788] Call Trace: [ 90.546365][ T4788] [ 90.546374][ T4788] __dump_stack+0x1d/0x30 [ 90.546452][ T4788] dump_stack_lvl+0x95/0xd0 [ 90.546475][ T4788] dump_stack+0x15/0x1b [ 90.546492][ T4788] should_fail_ex+0x263/0x280 [ 90.546582][ T4788] should_failslab+0x8c/0xb0 [ 90.546613][ T4788] kmem_cache_alloc_noprof+0x66/0x3f0 [ 90.546645][ T4788] ? do_getname+0x2e/0x1c0 [ 90.546666][ T4788] do_getname+0x2e/0x1c0 [ 90.546731][ T4788] getname_flags+0x1d/0x30 [ 90.546751][ T4788] __se_sys_acct+0x7a/0x500 [ 90.546775][ T4788] __x64_sys_acct+0x1f/0x30 [ 90.546795][ T4788] x64_sys_call+0x2e7f/0x3020 [ 90.546873][ T4788] do_syscall_64+0x12c/0x3b0 [ 90.546981][ T4788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.547004][ T4788] RIP: 0033:0x7f05bcbbce59 [ 90.547038][ T4788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.547057][ T4788] RSP: 002b:00007f05bb617028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 90.547076][ T4788] RAX: ffffffffffffffda RBX: 00007f05bce35fa0 RCX: 00007f05bcbbce59 [ 90.547089][ T4788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 90.547102][ T4788] RBP: 00007f05bb617090 R08: 0000000000000000 R09: 0000000000000000 [ 90.547113][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.547199][ T4788] R13: 00007f05bce36038 R14: 00007f05bce35fa0 R15: 00007ffe92fb9608 [ 90.547220][ T4788] [ 90.549419][ T4786] loop2: detected capacity change from 0 to 512 [ 90.604083][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 90.625477][ T4786] EXT4-fs (loop2): unsupported inode size: 143 [ 90.742017][ T4786] EXT4-fs (loop2): blocksize: 2048 [ 90.761848][ T4796] Failed to initialize the IGMP autojoin socket (err -2) [ 90.780974][ T4795] loop1: detected capacity change from 0 to 256 [ 90.820776][ T4802] Failed to initialize the IGMP autojoin socket (err -2) [ 91.265568][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.274497][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.284802][ T4826] netlink: 2 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.325635][ T4826] veth1_to_bridge: entered allmulticast mode [ 91.332586][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.342439][ T4826] netlink: 2 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.433570][ T4831] bond0: (slave bond_slave_1): Releasing backup interface [ 91.460943][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 91.472463][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 91.482924][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 91.497365][ T4838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 91.557916][ T4840] FAT-fs (loop0): bogus number of FAT sectors [ 91.564722][ T4840] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 91.576039][ T4840] FAT-fs (loop0): Can't find a valid FAT filesystem [ 91.588179][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 91.588243][ T28] audit: type=1400 audit(1780419272.098:951): avc: denied { append } for pid=4830 comm="syz.4.424" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.675197][ T28] audit: type=1400 audit(1780419272.098:952): avc: denied { execute } for pid=4830 comm="syz.4.424" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.704711][ T28] audit: type=1400 audit(1780419272.178:953): avc: denied { create } for pid=4842 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.734610][ T28] audit: type=1400 audit(1780419272.238:954): avc: denied { read write } for pid=4832 comm="syz.1.425" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.738110][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.769993][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.899777][ T4855] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 91.913428][ T4855] bond1: entered promiscuous mode [ 91.918770][ T4855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.934358][ T4855] bond1: (slave bridge1): making interface the new active one [ 91.941978][ T4855] bridge1: entered promiscuous mode [ 91.949181][ T4855] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 91.979838][ T4858] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.054225][ T4858] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.068783][ T28] audit: type=1400 audit(1780419272.578:955): avc: denied { setattr } for pid=4857 comm="syz.3.434" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.099892][ T28] audit: type=1400 audit(1780419272.578:956): avc: denied { write } for pid=4857 comm="syz.3.434" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.129490][ T28] audit: type=1400 audit(1780419272.608:957): avc: denied { append } for pid=4857 comm="syz.3.434" path="/75/mnt/freezer.self_freezing" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.153682][ T4846] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.154990][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.173767][ T28] audit: type=1400 audit(1780419272.608:958): avc: denied { write } for pid=4857 comm="syz.3.434" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.195828][ T28] audit: type=1400 audit(1780419272.608:959): avc: denied { create } for pid=4857 comm="syz.3.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.280571][ T28] audit: type=1400 audit(1780419272.628:960): avc: denied { setattr } for pid=4857 comm="syz.3.434" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.555038][ T4872] FAULT_INJECTION: forcing a failure. [ 92.555038][ T4872] name failslab, interval 1, probability 0, space 0, times 0 [ 92.661098][ T4872] CPU: 0 UID: 0 PID: 4872 Comm: syz.0.438 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 92.661181][ T4872] Tainted: [W]=WARN [ 92.661188][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.661199][ T4872] Call Trace: [ 92.661205][ T4872] [ 92.661212][ T4872] __dump_stack+0x1d/0x30 [ 92.661259][ T4872] dump_stack_lvl+0x95/0xd0 [ 92.661294][ T4872] dump_stack+0x15/0x1b [ 92.661313][ T4872] should_fail_ex+0x263/0x280 [ 92.661337][ T4872] should_failslab+0x8c/0xb0 [ 92.661371][ T4872] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 92.661475][ T4872] ? __alloc_skb+0x2d6/0x690 [ 92.661500][ T4872] __alloc_skb+0x2d6/0x690 [ 92.661523][ T4872] ? __alloc_skb+0x200/0x690 [ 92.661555][ T4872] netlink_alloc_large_skb+0xbf/0xf0 [ 92.661582][ T4872] netlink_sendmsg+0x40c/0x6f0 [ 92.661679][ T4872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.661775][ T4872] ____sys_sendmsg+0x563/0x5b0 [ 92.661805][ T4872] ___sys_sendmsg+0x195/0x1e0 [ 92.661843][ T4872] __x64_sys_sendmsg+0xd4/0x160 [ 92.661882][ T4872] x64_sys_call+0x194c/0x3020 [ 92.661909][ T4872] do_syscall_64+0x12c/0x3b0 [ 92.661944][ T4872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.662034][ T4872] RIP: 0033:0x7f05bcbbce59 [ 92.662049][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.662089][ T4872] RSP: 002b:00007f05bb617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.662114][ T4872] RAX: ffffffffffffffda RBX: 00007f05bce35fa0 RCX: 00007f05bcbbce59 [ 92.662196][ T4872] RDX: 0000000010000840 RSI: 0000200000000140 RDI: 0000000000000003 [ 92.662209][ T4872] RBP: 00007f05bb617090 R08: 0000000000000000 R09: 0000000000000000 [ 92.662225][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.662239][ T4872] R13: 00007f05bce36038 R14: 00007f05bce35fa0 R15: 00007ffe92fb9608 [ 92.662261][ T4872] [ 92.941316][ T4871] set_capacity_and_notify: 3 callbacks suppressed [ 92.945005][ T4871] loop3: detected capacity change from 0 to 512 [ 93.018871][ T4882] netlink: 'syz.0.443': attribute type 12 has an invalid length. [ 93.027569][ T4883] loop4: detected capacity change from 0 to 512 [ 93.082324][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.095819][ T4871] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.106908][ T4883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 93.124941][ T4883] System zones: 1-12 [ 93.129940][ T4883] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.442: error while reading EA inode 32 err=-116 [ 93.153737][ T4883] loop4: lost filesystem error report for type 5 error -117 [ 93.153921][ T4883] EXT4-fs (loop4): Remounting filesystem read-only [ 93.161316][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 93.161338][ C0] EXT4-fs (loop4): initial error at time 1780419273: ext4_xattr_inode_iget:446 [ 93.161367][ C0] EXT4-fs (loop4): last error at time 1780419273: ext4_xattr_inode_iget:446 [ 93.204742][ T4883] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 93.237274][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.279094][ T4883] EXT4-fs (loop4): 1 orphan inode deleted [ 93.310605][ T4895] loop0: detected capacity change from 0 to 4096 [ 93.352608][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.372380][ T4883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.446477][ T4883] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 93.483173][ T4903] veth0_vlan: Caught tx_queue_len zero misconfig [ 95.158901][ T4928] loop3: detected capacity change from 0 to 512 [ 95.188376][ T4928] EXT4-fs: Ignoring removed orlov option [ 95.239642][ T4928] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.300125][ T4928] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.457: corrupted xattr block 33: invalid ea_ino [ 95.331871][ T4933] loop4: detected capacity change from 0 to 4096 [ 95.379402][ T4928] EXT4-fs (loop3): Remounting filesystem read-only [ 95.418012][ T4928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.455851][ T4928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.489463][ T4928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.748591][ T4940] loop4: detected capacity change from 0 to 512 [ 95.769716][ T4940] ext4: Unknown parameter 'smackfstransmute' [ 95.797554][ T4942] loop0: detected capacity change from 0 to 128 [ 95.830980][ T4940] Failed to initialize the IGMP autojoin socket (err -2) [ 95.844904][ T4942] FAT-fs (loop0): bogus number of reserved sectors [ 95.868327][ T4942] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 95.879425][ T4942] FAT-fs (loop0): Can't find a valid FAT filesystem [ 96.097633][ T4950] __nla_validate_parse: 8 callbacks suppressed [ 96.097649][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 96.144878][ T4950] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 96.178958][ T4950] netlink: 96 bytes leftover after parsing attributes in process `syz.3.464'. [ 96.678500][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 96.678527][ T28] audit: type=1400 audit(1780419277.178:984): avc: denied { create } for pid=4955 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.015701][ T4948] loop2: detected capacity change from 0 to 4096 [ 97.067537][ T28] audit: type=1400 audit(1780419277.568:985): avc: denied { write } for pid=4947 comm="syz.2.463" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.469602][ T28] audit: type=1400 audit(1780419277.708:986): avc: denied { write } for pid=4947 comm="syz.2.463" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.856862][ T28] audit: type=1326 audit(1780419278.318:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.3.467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a9d0ce59 code=0x7ffc0000 [ 97.883966][ T3305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.931421][ T3305] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 98.012618][ T3305] audit: backlog limit exceeded [ 98.053102][ T3305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.080887][ T4975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.115171][ T28] audit: type=1326 audit(1780419278.318:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.3.467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a9d0ce59 code=0x7ffc0000 [ 98.151299][ T4975] netlink: 104 bytes leftover after parsing attributes in process `syz.1.472'. [ 98.174903][ T3305] EXT4-fs unmount: 7 callbacks suppressed [ 98.174929][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.192338][ T4970] loop0: detected capacity change from 0 to 4096 [ 98.241167][ T4970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.658048][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.558035][ T4993] loop0: detected capacity change from 0 to 4096 [ 100.652835][ T4993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.851032][ T5002] loop3: detected capacity change from 0 to 4096 [ 101.250788][ T5002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.707737][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 101.707754][ T28] audit: type=1400 audit(1780419282.188:1065): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.769617][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.779460][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.802551][ T5016] netlink: 'syz.4.483': attribute type 6 has an invalid length. [ 101.811924][ T28] audit: type=1400 audit(1780419282.188:1066): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.867673][ T28] audit: type=1400 audit(1780419282.188:1067): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.913366][ T28] audit: type=1400 audit(1780419282.188:1068): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.960232][ T28] audit: type=1400 audit(1780419282.188:1069): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.005073][ T28] audit: type=1400 audit(1780419282.268:1070): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.528262][ T28] audit: type=1400 audit(1780419283.018:1071): avc: denied { mount } for pid=5017 comm="syz.4.485" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.561509][ T5021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.484'. [ 102.572910][ T5023] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 102.588615][ T5023] audit: out of memory in audit_log_start [ 102.606705][ T5021] FAULT_INJECTION: forcing a failure. [ 102.606705][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.622469][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: syz.3.484 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 102.622501][ T5021] Tainted: [W]=WARN [ 102.622508][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.622521][ T5021] Call Trace: [ 102.622607][ T5021] [ 102.622616][ T5021] __dump_stack+0x1d/0x30 [ 102.622642][ T5021] dump_stack_lvl+0x95/0xd0 [ 102.622665][ T5021] dump_stack+0x15/0x1b [ 102.622697][ T5021] should_fail_ex+0x263/0x280 [ 102.622719][ T5021] should_fail+0xb/0x20 [ 102.622793][ T5021] should_fail_usercopy+0x1a/0x20 [ 102.622816][ T5021] _copy_to_user+0x20/0xa0 [ 102.622845][ T5021] simple_read_from_buffer+0xb5/0x130 [ 102.622893][ T5021] proc_fail_nth_read+0x10e/0x150 [ 102.622999][ T5021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.623024][ T5021] vfs_read+0x1ab/0x7f0 [ 102.623048][ T5021] ? __rcu_read_unlock+0x4e/0x70 [ 102.623071][ T5021] ? __fget_files+0x184/0x1c0 [ 102.623094][ T5021] ? mutex_lock+0x57/0x90 [ 102.623162][ T5021] ksys_read+0xdc/0x1a0 [ 102.623270][ T5021] __x64_sys_read+0x40/0x50 [ 102.623302][ T5021] x64_sys_call+0x2886/0x3020 [ 102.623364][ T5021] do_syscall_64+0x12c/0x3b0 [ 102.623441][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.623465][ T5021] RIP: 0033:0x7f48a9ccd68e [ 102.623484][ T5021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.623504][ T5021] RSP: 002b:00007f48a8766fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.623527][ T5021] RAX: ffffffffffffffda RBX: 00007f48a87676c0 RCX: 00007f48a9ccd68e [ 102.623590][ T5021] RDX: 000000000000000f RSI: 00007f48a87670a0 RDI: 0000000000000003 [ 102.623604][ T5021] RBP: 00007f48a8767090 R08: 0000000000000000 R09: 0000000000000000 [ 102.623618][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.623632][ T5021] R13: 00007f48a9f86038 R14: 00007f48a9f85fa0 R15: 00007ffff861cd18 [ 102.623726][ T5021] [ 102.831760][ T5025] loop1: detected capacity change from 0 to 128 [ 102.850988][ T5025] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.863934][ T5025] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.899960][ T28] audit: type=1400 audit(1780419283.388:1072): avc: denied { write } for pid=5024 comm="syz.1.487" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.939980][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.970236][ T5037] loop3: detected capacity change from 0 to 512 [ 103.002179][ T5037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.055811][ T5030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.486'. [ 103.067668][ T5037] EXT4-fs (loop3): 1 truncate cleaned up [ 103.176734][ T5037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.549025][ T5037] mmap: syz.3.491 (5037) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.749822][ T5065] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57871 sclass=netlink_xfrm_socket pid=5065 comm=syz.0.498 [ 104.659883][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.491'. [ 104.669011][ T5068] netlink: 100 bytes leftover after parsing attributes in process `syz.3.491'. [ 104.678133][ T5068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.491'. [ 104.945676][ T5070] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 105.641769][ T5070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.655449][ T5073] macvlan2: entered promiscuous mode [ 105.661161][ T5073] macvlan2: entered allmulticast mode [ 105.666817][ T5073] bond2: entered allmulticast mode [ 105.672091][ T5073] bond2: entered promiscuous mode [ 105.681602][ T5073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.971826][ T5073] team0: Port device macvlan2 added [ 106.001617][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.141742][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 106.161516][ T5070] bond2: (slave ip6gretap1): making interface the new active one [ 106.184161][ T5070] ip6gretap1: entered promiscuous mode [ 106.201566][ T5070] ip6gretap1: entered allmulticast mode [ 106.211044][ T5070] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 106.258072][ T5087] loop2: detected capacity change from 0 to 164 [ 106.265246][ T5087] iso9660: Bad value for 'check' [ 106.288687][ T5077] bond1: entered promiscuous mode [ 106.319605][ T5077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.356715][ T5099] loop0: detected capacity change from 0 to 4096 [ 106.460605][ T5099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.482900][ T5100] syzkaller0: entered promiscuous mode [ 106.507881][ T5100] syzkaller0: entered allmulticast mode [ 106.554223][ T5115] netlink: 556 bytes leftover after parsing attributes in process `syz.4.514'. [ 107.615633][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.646465][ T4444] Bluetooth: hci0: command 0x1003 tx timeout [ 108.716549][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.522182][ T5144] loop3: detected capacity change from 0 to 1024 [ 109.550304][ T5144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 109.579404][ T5144] System zones: 0-1, 3-8 [ 109.602464][ T5144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.616786][ T5144] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.629722][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 109.629736][ T28] audit: type=1400 audit(1780419290.138:1084): avc: denied { write } for pid=5143 comm="syz.3.523" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.701284][ T5144] FAULT_INJECTION: forcing a failure. [ 109.701284][ T5144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.764226][ T5144] CPU: 0 UID: 0 PID: 5144 Comm: syz.3.523 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 109.764260][ T5144] Tainted: [W]=WARN [ 109.764267][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.764328][ T5144] Call Trace: [ 109.764335][ T5144] [ 109.764344][ T5144] __dump_stack+0x1d/0x30 [ 109.764373][ T5144] dump_stack_lvl+0x95/0xd0 [ 109.764392][ T5144] dump_stack+0x15/0x1b [ 109.764449][ T5144] should_fail_ex+0x263/0x280 [ 109.764472][ T5144] should_fail+0xb/0x20 [ 109.764489][ T5144] should_fail_usercopy+0x1a/0x20 [ 109.764508][ T5144] strncpy_from_user+0x27/0x250 [ 109.764583][ T5144] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 109.764626][ T5144] do_getname+0x59/0x1c0 [ 109.764644][ T5144] getname_flags+0x1d/0x30 [ 109.764696][ T5144] ksys_truncate+0x51/0x140 [ 109.764722][ T5144] __x64_sys_truncate+0x31/0x40 [ 109.764748][ T5144] x64_sys_call+0x19fb/0x3020 [ 109.764784][ T5144] do_syscall_64+0x12c/0x3b0 [ 109.764817][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.764843][ T5144] RIP: 0033:0x7f48a9d0ce59 [ 109.764909][ T5144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.764999][ T5144] RSP: 002b:00007f48a8767028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 109.765022][ T5144] RAX: ffffffffffffffda RBX: 00007f48a9f85fa0 RCX: 00007f48a9d0ce59 [ 109.765035][ T5144] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 109.765093][ T5144] RBP: 00007f48a8767090 R08: 0000000000000000 R09: 0000000000000000 [ 109.765107][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.765122][ T5144] R13: 00007f48a9f86038 R14: 00007f48a9f85fa0 R15: 00007ffff861cd18 [ 109.765145][ T5144] [ 109.961251][ T5152] loop0: detected capacity change from 0 to 4096 [ 110.026831][ T28] audit: type=1400 audit(1780419290.528:1085): avc: denied { write } for pid=5154 comm="syz.4.524" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.042941][ T5152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.073376][ T28] audit: type=1400 audit(1780419290.578:1086): avc: denied { write } for pid=5141 comm="syz.0.522" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.088633][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.177388][ T5162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 110.210509][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.217772][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.253149][ T5162] bridge_slave_0: left allmulticast mode [ 110.259252][ T5162] bridge_slave_0: left promiscuous mode [ 110.265017][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.278634][ T5162] bridge_slave_1: left allmulticast mode [ 110.286578][ T5162] bridge_slave_1: left promiscuous mode [ 110.292304][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.302742][ T5162] bond0: (slave bond_slave_0): Releasing backup interface [ 110.314635][ T5162] team0: Port device team_slave_0 removed [ 110.323327][ T5162] team0: Port device team_slave_1 removed [ 110.330860][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.388137][ T5168] loop2: detected capacity change from 0 to 4096 [ 110.397062][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.416776][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.442254][ T5168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.480925][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.502810][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.541864][ T5162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.594011][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.606023][ T5174] loop0: detected capacity change from 0 to 512 [ 110.655693][ T28] audit: type=1400 audit(1780419291.158:1087): avc: denied { connect } for pid=5175 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.683267][ T5174] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.529: inode has both inline data and extents flags [ 110.722006][ T5179] loop4: detected capacity change from 0 to 2048 [ 110.736839][ T28] audit: type=1400 audit(1780419291.238:1088): avc: denied { read } for pid=5175 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.756421][ T5174] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.773695][ T5174] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.529: couldn't read orphan inode 15 (err -117) [ 110.837028][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 110.843503][ C1] EXT4-fs (loop0): initial error at time 1780419291: ext4_orphan_get:1397: inode 15 [ 110.846189][ T5174] loop0: lost filesystem error report for type 5 error -117 [ 110.852949][ C1] EXT4-fs (loop0): last error at time 1780419291: ext4_orphan_get:1397: inode 15 [ 110.873938][ T5174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.895025][ T5179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.923168][ T28] audit: type=1400 audit(1780419291.428:1089): avc: denied { connect } for pid=5178 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.974910][ T5185] tipc: Started in network mode [ 110.979908][ T5185] tipc: Node identity 2007ff, cluster identity 4711 [ 110.986551][ T5185] tipc: Node number set to 2099199 [ 110.991845][ T28] audit: type=1400 audit(1780419291.478:1090): avc: denied { ioctl } for pid=5178 comm="syz.4.532" path="socket:[10173]" dev="sockfs" ino=10173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.034416][ T30] tipc: Subscription rejected, illegal request [ 111.065693][ T28] audit: type=1400 audit(1780419291.568:1091): avc: denied { write } for pid=5172 comm="syz.0.529" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.096634][ T28] audit: type=1400 audit(1780419291.598:1092): avc: denied { write } for pid=5178 comm="syz.4.532" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.239125][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.283710][ T5171] loop3: detected capacity change from 0 to 4096 [ 111.315305][ T28] audit: type=1400 audit(1780419291.818:1093): avc: denied { write } for pid=5172 comm="syz.0.529" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.345937][ T5171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.362741][ T5193] loop1: detected capacity change from 0 to 1024 [ 111.369741][ T5193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.420170][ T5193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 111.487931][ T5193] System zones: 0-1, 3-12 [ 111.496007][ T5193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.569382][ T5193] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.536: Abort forced by user [ 111.580549][ T5193] EXT4-fs (loop1): Remounting filesystem read-only [ 111.594547][ T5199] loop2: detected capacity change from 0 to 128 [ 111.602453][ T5193] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.615504][ T5199] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.632114][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.642150][ T5199] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.844552][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.865547][ T5215] syz.2.543 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.933785][ T5219] loop2: detected capacity change from 0 to 2048 [ 111.998323][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.023198][ T5219] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.544: inode has both inline data and extents flags [ 112.037084][ T5219] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 112.037233][ T5219] EXT4-fs (loop2): get root inode failed [ 112.052003][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 112.052025][ C0] EXT4-fs (loop2): initial error at time 1780419292: __ext4_fill_super:5596: inode 2 [ 112.052055][ C0] EXT4-fs (loop2): last error at time 1780419292: __ext4_fill_super:5596: inode 2 [ 112.106575][ T5219] EXT4-fs (loop2): mount failed [ 112.183559][ T5226] loop3: detected capacity change from 0 to 4096 [ 112.293283][ T5231] loop0: detected capacity change from 0 to 512 [ 112.361398][ T5226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.397969][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.419810][ T5231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.523853][ T5231] EXT4-fs (loop0): 1 truncate cleaned up [ 112.591226][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.634656][ T5236] loop1: detected capacity change from 0 to 2048 [ 112.775951][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.887202][ T5236] tipc: Started in network mode [ 112.892200][ T5236] tipc: Node identity 2007ff, cluster identity 4711 [ 112.915383][ T5236] tipc: Node number set to 2099199 [ 113.016888][ T5240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 113.025881][ T5240] netlink: 100 bytes leftover after parsing attributes in process `syz.0.548'. [ 113.037171][ T5240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.548'. [ 113.595545][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.618679][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.679876][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.727732][ T5258] FAULT_INJECTION: forcing a failure. [ 113.727732][ T5258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.764658][ T5258] CPU: 1 UID: 0 PID: 5258 Comm: syz.0.555 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.764693][ T5258] Tainted: [W]=WARN [ 113.764700][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.764714][ T5258] Call Trace: [ 113.764721][ T5258] [ 113.764730][ T5258] __dump_stack+0x1d/0x30 [ 113.764756][ T5258] dump_stack_lvl+0x95/0xd0 [ 113.764830][ T5258] dump_stack+0x15/0x1b [ 113.764891][ T5258] should_fail_ex+0x263/0x280 [ 113.764912][ T5258] should_fail+0xb/0x20 [ 113.764931][ T5258] should_fail_usercopy+0x1a/0x20 [ 113.764955][ T5258] _copy_from_user+0x1c/0xb0 [ 113.765045][ T5258] kstrtouint_from_user+0x69/0xf0 [ 113.765078][ T5258] ? 0xffffffff81000000 [ 113.765094][ T5258] ? selinux_file_permission+0x1e1/0x320 [ 113.765122][ T5258] proc_fail_nth_write+0x50/0x160 [ 113.765162][ T5258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 113.765199][ T5258] vfs_write+0x269/0x9f0 [ 113.765228][ T5258] ? __rcu_read_unlock+0x4e/0x70 [ 113.765330][ T5258] ? __fget_files+0x184/0x1c0 [ 113.765353][ T5258] ? mutex_lock+0x57/0x90 [ 113.765377][ T5258] ksys_write+0xdc/0x1a0 [ 113.765408][ T5258] __x64_sys_write+0x40/0x50 [ 113.765437][ T5258] x64_sys_call+0x27e1/0x3020 [ 113.765471][ T5258] do_syscall_64+0x12c/0x3b0 [ 113.765503][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.765602][ T5258] RIP: 0033:0x7f05bcb7d68e [ 113.765617][ T5258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.765635][ T5258] RSP: 002b:00007f05bb616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.765659][ T5258] RAX: ffffffffffffffda RBX: 00007f05bb6176c0 RCX: 00007f05bcb7d68e [ 113.765675][ T5258] RDX: 0000000000000001 RSI: 00007f05bb6170a0 RDI: 0000000000000003 [ 113.765693][ T5258] RBP: 00007f05bb617090 R08: 0000000000000000 R09: 0000000000000000 [ 113.765706][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.765720][ T5258] R13: 00007f05bce36038 R14: 00007f05bce35fa0 R15: 00007ffe92fb9608 [ 113.765782][ T5258] [ 113.830121][ T5254] loop4: detected capacity change from 0 to 512 [ 114.008930][ T5267] program syz.3.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.019004][ T5266] loop0: detected capacity change from 0 to 256 [ 114.029891][ T5266] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.040887][ T5254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.076901][ T5254] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.556: bad orphan inode 131083 [ 114.087653][ T5254] loop4: lost filesystem error report for type 5 error -117 [ 114.093482][ T5254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.197354][ T5254] usb usb9: usbfs: process 5254 (syz.4.556) did not claim interface 0 before use [ 114.234921][ T5271] loop1: detected capacity change from 0 to 2048 [ 114.260773][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.286690][ T5271] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.560: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 114.335260][ T5271] EXT4-fs (loop1): Remounting filesystem read-only [ 114.480038][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.583012][ T5281] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 114.711197][ T5275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.726728][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 114.726744][ T28] audit: type=1400 audit(1780419295.238:1183): avc: denied { ioctl } for pid=5249 comm="syz.4.556" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.766949][ T28] audit: type=1400 audit(1780419295.268:1184): avc: denied { write } for pid=5274 comm="syz.3.562" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.808430][ T28] audit: type=1400 audit(1780419295.278:1185): avc: denied { write } for pid=5274 comm="syz.3.562" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.095862][ T5292] Failed to initialize the IGMP autojoin socket (err -2) [ 115.125157][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.219350][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.233206][ T28] audit: type=1400 audit(1780419295.548:1186): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.291943][ T28] audit: type=1400 audit(1780419295.558:1187): avc: denied { write } for pid=3304 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.366248][ T28] audit: type=1400 audit(1780419295.558:1188): avc: denied { write } for pid=3304 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.391809][ T28] audit: type=1400 audit(1780419295.568:1189): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.414479][ T28] audit: type=1400 audit(1780419295.568:1190): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.436659][ T28] audit: type=1400 audit(1780419295.618:1191): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.459035][ T28] audit: type=1400 audit(1780419295.618:1192): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.544067][ T5296] syzkaller0: entered promiscuous mode [ 115.549868][ T5296] syzkaller0: entered allmulticast mode [ 115.679337][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 115.749673][ T5304] netlink: 100 bytes leftover after parsing attributes in process `syz.2.572'. [ 115.795750][ T5308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.843740][ T5306] bridge0: port 3(macsec1) entered blocking state [ 115.855201][ T5304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.876642][ T5308] EXT4-fs (loop4): 1 truncate cleaned up [ 115.887573][ T5306] bridge0: port 3(macsec1) entered disabled state [ 115.920074][ T5304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.936813][ T5308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.949361][ T5306] macsec1: entered allmulticast mode [ 115.968420][ T5306] bridge0: entered allmulticast mode [ 115.985060][ T5306] bridge0: entered promiscuous mode [ 116.000955][ T5306] macsec1: left allmulticast mode [ 116.013760][ T5306] bridge0: left allmulticast mode [ 116.038826][ T3399] bridge0: left promiscuous mode [ 116.156770][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 116.807061][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.899318][ T5322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'. [ 116.953362][ T5322] netlink: 100 bytes leftover after parsing attributes in process `syz.4.568'. [ 117.029700][ T5322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.568'. [ 117.104248][ T5339] Failed to initialize the IGMP autojoin socket (err -2) [ 117.208167][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.373595][ T5343] set_capacity_and_notify: 3 callbacks suppressed [ 117.373639][ T5343] loop0: detected capacity change from 0 to 1024 [ 117.498441][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.513396][ T5332] loop1: detected capacity change from 0 to 4096 [ 117.526787][ T5343] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.571375][ T5349] loop4: detected capacity change from 0 to 512 [ 117.580458][ T5332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.609150][ T5343] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.583: bg 0: block 112: padding at end of block bitmap is not set [ 117.638421][ T5349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.678126][ T5343] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 117.817685][ T5349] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.845517][ T5343] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.845517][ T5343] [ 117.903417][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.931186][ T5343] EXT4-fs (loop0): Total free blocks count 0 [ 117.938836][ T5343] EXT4-fs (loop0): Free/Dirty block details [ 117.963518][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.979321][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.152374][ T5343] EXT4-fs (loop0): free_blocks=0 [ 118.166861][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.166966][ T5343] EXT4-fs (loop0): dirty_blocks=16 [ 118.282660][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.296684][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.310673][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.325090][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.362108][ T5343] EXT4-fs (loop0): Block reservation details [ 118.430318][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.582136][ T5343] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 118.602793][ T5372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 118.644179][ T5343] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.740206][ T5342] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 119.100592][ T3301] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 119.154624][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.164639][ T5375] loop1: detected capacity change from 0 to 512 [ 119.202885][ T5375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.265400][ T5375] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.399776][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.537480][ T5386] loop1: detected capacity change from 0 to 2048 [ 119.554339][ T5388] loop0: detected capacity change from 0 to 128 [ 119.563806][ T5390] FAULT_INJECTION: forcing a failure. [ 119.563806][ T5390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.606945][ T5386] loop1: p3 < > p4 < > [ 119.611215][ T5386] loop1: partition table partially beyond EOD, truncated [ 119.637856][ T5386] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.646600][ T5390] CPU: 0 UID: 0 PID: 5390 Comm: syz.2.597 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 119.646666][ T5390] Tainted: [W]=WARN [ 119.646673][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.646755][ T5390] Call Trace: [ 119.646763][ T5390] [ 119.646773][ T5390] __dump_stack+0x1d/0x30 [ 119.646860][ T5390] dump_stack_lvl+0x95/0xd0 [ 119.646885][ T5390] dump_stack+0x15/0x1b [ 119.646905][ T5390] should_fail_ex+0x263/0x280 [ 119.646925][ T5390] should_fail+0xb/0x20 [ 119.646942][ T5390] should_fail_usercopy+0x1a/0x20 [ 119.646963][ T5390] _copy_from_user+0x1c/0xb0 [ 119.646987][ T5390] ___sys_recvmsg+0xaa/0x3b0 [ 119.647025][ T5390] do_recvmmsg+0x1ef/0x560 [ 119.647121][ T5390] ? fput+0x8f/0xc0 [ 119.647145][ T5390] __x64_sys_recvmmsg+0xe5/0x170 [ 119.647221][ T5390] x64_sys_call+0x80f/0x3020 [ 119.647247][ T5390] do_syscall_64+0x12c/0x3b0 [ 119.647281][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.647310][ T5390] RIP: 0033:0x7f3fbe2bce59 [ 119.647330][ T5390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.647390][ T5390] RSP: 002b:00007f3fbcd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 119.647414][ T5390] RAX: ffffffffffffffda RBX: 00007f3fbe535fa0 RCX: 00007f3fbe2bce59 [ 119.647432][ T5390] RDX: 0000000000000001 RSI: 00002000000058c0 RDI: 0000000000000004 [ 119.647446][ T5390] RBP: 00007f3fbcd17090 R08: 0000000000000000 R09: 0000000000000000 [ 119.647458][ T5390] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 119.647533][ T5390] R13: 00007f3fbe536038 R14: 00007f3fbe535fa0 R15: 00007ffdce3c0b88 [ 119.647550][ T5390] [ 120.795897][ T5396] loop4: detected capacity change from 0 to 4096 [ 120.872923][ T5396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.906059][ T5405] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 120.915104][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 120.915118][ T28] audit: type=1400 audit(1780419301.408:1217): avc: denied { mac_admin } for pid=5385 comm="syz.1.594" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.018154][ T28] audit: type=1400 audit(1780419301.498:1218): avc: denied { write } for pid=5394 comm="syz.4.599" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.236345][ T28] audit: type=1400 audit(1780419301.548:1219): avc: denied { relabelto } for pid=5385 comm="syz.1.594" name="bus" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 121.365359][ T28] audit: type=1400 audit(1780419301.558:1220): avc: denied { associate } for pid=5385 comm="syz.1.594" name="bus" dev="tmpfs" ino=637 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 121.483496][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.496996][ T28] audit: type=1400 audit(1780419301.578:1221): avc: denied { write } for pid=5394 comm="syz.4.599" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.575746][ T28] audit: type=1400 audit(1780419301.938:1222): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.662053][ T28] audit: type=1400 audit(1780419301.938:1223): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.736673][ T5403] loop0: detected capacity change from 0 to 4096 [ 121.747690][ T28] audit: type=1400 audit(1780419301.938:1224): avc: denied { write } for pid=3297 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.899542][ T28] audit: type=1400 audit(1780419301.938:1225): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.936726][ T28] audit: type=1400 audit(1780419301.948:1226): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.956382][ T5403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.109313][ T5420] loop4: detected capacity change from 0 to 512 [ 122.128608][ T5420] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.602: inode has both inline data and extents flags [ 122.142097][ T5420] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.142635][ T5420] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.602: couldn't read orphan inode 15 (err -117) [ 122.151927][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 122.151972][ C0] EXT4-fs (loop4): initial error at time 1780419302: ext4_orphan_get:1397: inode 15 [ 122.152041][ C0] EXT4-fs (loop4): last error at time 1780419302: ext4_orphan_get:1397: inode 15 [ 122.190666][ T5420] loop4: lost filesystem error report for type 5 error -117 [ 122.193437][ T5420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.260821][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.562459][ T5425] syz.2.605: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 122.576894][ T5425] CPU: 1 UID: 0 PID: 5425 Comm: syz.2.605 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 122.576944][ T5425] Tainted: [W]=WARN [ 122.576959][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.576974][ T5425] Call Trace: [ 122.576982][ T5425] [ 122.577033][ T5425] __dump_stack+0x1d/0x30 [ 122.577061][ T5425] dump_stack_lvl+0x95/0xd0 [ 122.577084][ T5425] dump_stack+0x15/0x1b [ 122.577130][ T5425] warn_alloc+0x145/0x1c0 [ 122.577156][ T5425] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 122.577188][ T5425] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 122.577219][ T5425] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 122.577256][ T5425] ? slow_avc_audit+0x14c/0x190 [ 122.577287][ T5425] ? should_fail_ex+0x30/0x280 [ 122.577312][ T5425] vmalloc_user_noprof+0x7d/0xb0 [ 122.577368][ T5425] ? xskq_create+0x80/0xe0 [ 122.577429][ T5425] xskq_create+0x80/0xe0 [ 122.577539][ T5425] xsk_init_queue+0x70/0xb0 [ 122.577569][ T5425] xsk_setsockopt+0x477/0x640 [ 122.577609][ T5425] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.577639][ T5425] __sys_setsockopt+0x184/0x200 [ 122.577739][ T5425] __x64_sys_setsockopt+0x64/0x80 [ 122.577766][ T5425] x64_sys_call+0x2327/0x3020 [ 122.577792][ T5425] do_syscall_64+0x12c/0x3b0 [ 122.577824][ T5425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.577870][ T5425] RIP: 0033:0x7f3fbe2bce59 [ 122.577889][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.577908][ T5425] RSP: 002b:00007f3fbcd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.578001][ T5425] RAX: ffffffffffffffda RBX: 00007f3fbe535fa0 RCX: 00007f3fbe2bce59 [ 122.578017][ T5425] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 122.578031][ T5425] RBP: 00007f3fbe352d6f R08: 0000000000000004 R09: 0000000000000000 [ 122.578045][ T5425] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 122.578061][ T5425] R13: 00007f3fbe536038 R14: 00007f3fbe535fa0 R15: 00007ffdce3c0b88 [ 122.578082][ T5425] [ 122.578090][ T5425] Mem-Info: [ 122.647687][ T5440] loop3: detected capacity change from 0 to 764 [ 122.651615][ T5425] active_anon:43270 inactive_anon:0 isolated_anon:0 [ 122.651615][ T5425] active_file:20554 inactive_file:2646 isolated_file:0 [ 122.651615][ T5425] unevictable:0 dirty:205 writeback:26 [ 122.651615][ T5425] slab_reclaimable:3293 slab_unreclaimable:16681 [ 122.651615][ T5425] mapped:32744 shmem:36065 pagetables:1237 [ 122.651615][ T5425] sec_pagetables:0 bounce:0 [ 122.651615][ T5425] kernel_misc_reclaimable:0 [ 122.651615][ T5425] free:1837052 free_pcp:15177 free_cma:0 [ 122.855656][ T5425] Node 0 active_anon:172724kB inactive_anon:0kB active_file:82216kB inactive_file:10636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131012kB dirty:852kB writeback:0kB shmem:144016kB kernel_stack:3584kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.889661][ T5425] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.932806][ T5425] lowmem_reserve[]: 0 2878 7857 7857 [ 122.938916][ T5425] Node 0 DMA32 free:2944356kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947984kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 122.982507][ T5425] lowmem_reserve[]: 0 0 4978 4978 [ 122.988604][ T5425] Node 0 Normal free:4381996kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:184208kB inactive_anon:0kB active_file:82216kB inactive_file:10636kB unevictable:0kB writepending:852kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:52336kB local_pcp:44016kB free_cma:0kB [ 123.023665][ T5425] lowmem_reserve[]: 0 0 0 0 [ 123.029446][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.033886][ T5425] Node 0 DMA: 0*4kB [ 123.135286][ T5448] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 123.259822][ T5451] loop0: detected capacity change from 0 to 512 [ 123.309802][ T5451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.360296][ T5451] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.617: bad orphan inode 131083 [ 123.401681][ T5451] loop0: lost filesystem error report for type 5 error -117 [ 123.404708][ T5451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.716001][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.840281][ T5453] loop1: detected capacity change from 0 to 4096 [ 123.872735][ T5453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.992343][ T5425] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.024402][ T5457] loop4: detected capacity change from 0 to 512 [ 124.030982][ T5425] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944356kB [ 124.078367][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.088731][ T5457] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 124.097088][ T5457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.104003][ T5457] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.616: Failed to acquire dquot type 1 [ 124.116346][ T5457] loop4: lost filesystem error report for type 5 error -5 [ 124.116414][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 124.130013][ C0] EXT4-fs (loop4): initial error at time 1780419304: ext4_acquire_dquot:7034 [ 124.138841][ C0] EXT4-fs (loop4): last error at time 1780419304: ext4_acquire_dquot:7034 [ 124.148945][ T5457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.616: bg 0: block 40: padding at end of block bitmap is not set [ 124.163242][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 124.163378][ T5457] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 124.179837][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 124.180125][ T5457] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.616: data will be lost [ 124.198742][ T5457] EXT4-fs (loop4): 1 truncate cleaned up [ 124.204857][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.710964][ T5425] Node 0 Normal: 395*4kB (UME) 348*8kB (UM) 71*16kB (UME) 85*32kB (UM) 175*64kB (UM) 177*128kB (UM) 147*256kB (UM) 127*512kB (UME) 99*1024kB (UM) 62*2048kB (UME) 983*4096kB (UM) = 4399452kB [ 124.730078][ T5425] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 124.739963][ T5425] 60005 total pagecache pages [ 124.744648][ T5425] 104 pages in swap cache [ 124.748996][ T5425] Free swap = 56784kB [ 124.753069][ T5425] Total swap = 124996kB [ 124.757254][ T5425] 2097051 pages RAM [ 124.761422][ T5425] 0 pages HighMem/MovableOnly [ 124.766109][ T5425] 81656 pages reserved [ 124.941302][ T5479] loop2: detected capacity change from 0 to 512 [ 124.962371][ T5479] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.627: inode has both inline data and extents flags [ 124.975455][ T5479] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.975657][ T5479] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.627: couldn't read orphan inode 15 (err -117) [ 124.999680][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 124.999715][ C1] EXT4-fs (loop2): initial error at time 1780419305: ext4_orphan_get:1397: inode 15 [ 124.999780][ C1] EXT4-fs (loop2): last error at time 1780419305: ext4_orphan_get:1397: inode 15 [ 125.047306][ T5476] netlink: 76 bytes leftover after parsing attributes in process `syz.3.626'. [ 125.081702][ T5476] netlink: 76 bytes leftover after parsing attributes in process `syz.3.626'. [ 125.095221][ T5483] batadv_slave_0: entered promiscuous mode [ 125.101825][ T5482] batadv_slave_0: left promiscuous mode [ 125.132273][ T5479] loop2: lost filesystem error report for type 5 error -117 [ 126.353604][ T5495] loop1: detected capacity change from 0 to 4096 [ 127.109309][ T5505] FAULT_INJECTION: forcing a failure. [ 127.109309][ T5505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.122405][ T5505] CPU: 1 UID: 0 PID: 5505 Comm: syz.3.635 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 127.122440][ T5505] Tainted: [W]=WARN [ 127.122447][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.122461][ T5505] Call Trace: [ 127.122532][ T5505] [ 127.122541][ T5505] __dump_stack+0x1d/0x30 [ 127.122567][ T5505] dump_stack_lvl+0x95/0xd0 [ 127.122589][ T5505] dump_stack+0x15/0x1b [ 127.122679][ T5505] should_fail_ex+0x263/0x280 [ 127.122744][ T5505] should_fail+0xb/0x20 [ 127.122763][ T5505] should_fail_usercopy+0x1a/0x20 [ 127.122804][ T5505] _copy_to_user+0x20/0xa0 [ 127.122837][ T5505] simple_read_from_buffer+0xb5/0x130 [ 127.122922][ T5505] proc_fail_nth_read+0x10e/0x150 [ 127.122948][ T5505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.122984][ T5505] vfs_read+0x1ab/0x7f0 [ 127.123012][ T5505] ? __rcu_read_unlock+0x4e/0x70 [ 127.123042][ T5505] ? __rcu_read_unlock+0x4e/0x70 [ 127.123063][ T5505] ? __fget_files+0x184/0x1c0 [ 127.123149][ T5505] ? mutex_lock+0x57/0x90 [ 127.123175][ T5505] ksys_read+0xdc/0x1a0 [ 127.123205][ T5505] __x64_sys_read+0x40/0x50 [ 127.123240][ T5505] x64_sys_call+0x2886/0x3020 [ 127.123325][ T5505] do_syscall_64+0x12c/0x3b0 [ 127.123396][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.123418][ T5505] RIP: 0033:0x7f48a9ccd68e [ 127.123437][ T5505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.123457][ T5505] RSP: 002b:00007f48a8766fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.123542][ T5505] RAX: ffffffffffffffda RBX: 00007f48a87676c0 RCX: 00007f48a9ccd68e [ 127.123558][ T5505] RDX: 000000000000000f RSI: 00007f48a87670a0 RDI: 0000000000000004 [ 127.123572][ T5505] RBP: 00007f48a8767090 R08: 0000000000000000 R09: 0000000000000000 [ 127.123586][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.123635][ T5505] R13: 00007f48a9f86038 R14: 00007f48a9f85fa0 R15: 00007ffff861cd18 [ 127.123654][ T5505] [ 127.475287][ T5512] loop0: detected capacity change from 0 to 512 [ 127.579921][ T5512] ext4: Unknown parameter 'fsmagic' [ 128.171655][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 128.171737][ T28] audit: type=1400 audit(1780419308.678:1264): avc: denied { read write } for pid=5538 comm="syz.3.646" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.397529][ T28] audit: type=1400 audit(1780419308.678:1265): avc: denied { open } for pid=5538 comm="syz.3.646" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.445413][ T5533] loop1: detected capacity change from 0 to 1024 [ 128.454960][ T5541] loop0: detected capacity change from 0 to 256 [ 128.463096][ T5539] loop3: detected capacity change from 0 to 512 [ 128.470700][ T5539] EXT4-fs: journaled quota format not specified [ 128.481893][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.492002][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.502191][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.512375][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.522563][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.532659][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.601162][ T5533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 128.609347][ T5533] System zones: 0-1, 3-36 [ 128.700783][ T5533] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.644: bad orphan inode 134217728 [ 128.714905][ T5533] loop1: lost filesystem error report for type 5 error -117 [ 128.716604][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 128.731564][ C1] EXT4-fs (loop1): initial error at time 1780419309: ext4_orphan_get:1423 [ 128.741112][ C1] EXT4-fs (loop1): last error at time 1780419309: ext4_orphan_get:1423 [ 128.772400][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.802387][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.835115][ T5533] EXT4-fs mount: 5 callbacks suppressed [ 128.835131][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.853911][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.864090][ T5541] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.003997][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.646'. [ 129.106382][ T28] audit: type=1400 audit(1780419309.598:1266): avc: denied { write } for pid=5532 comm="syz.1.644" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.206602][ T28] audit: type=1400 audit(1780419309.718:1267): avc: denied { bind } for pid=5545 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.226768][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 129.235656][ T5546] netem: invalid attributes len -17 [ 129.240855][ T5546] netem: change failed [ 129.326267][ T5548] loop4: detected capacity change from 0 to 4096 [ 129.380455][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.390882][ T3298] ================================================================== [ 129.398999][ T3298] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 129.406594][ T3298] [ 129.408937][ T3298] read-write to 0xffff888237d266e8 of 1 bytes by task 5541 on cpu 1: [ 129.417008][ T3298] folio_add_lru+0xaa/0x1f0 [ 129.421540][ T3298] shmem_get_folio_gfp+0x7b0/0xd60 [ 129.426664][ T3298] shmem_fault+0xf6/0x250 [ 129.431019][ T3298] handle_mm_fault+0x16cd/0x2e70 [ 129.435979][ T3298] __get_user_pages+0x1290/0x1f10 [ 129.441031][ T3298] __mm_populate+0x242/0x390 [ 129.445639][ T3298] vm_mmap_pgoff+0x23b/0x2d0 [ 129.450251][ T3298] ksys_mmap_pgoff+0x267/0x310 [ 129.455037][ T3298] x64_sys_call+0x14df/0x3020 [ 129.459733][ T3298] do_syscall_64+0x12c/0x3b0 [ 129.464355][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.470272][ T3298] [ 129.472607][ T3298] read to 0xffff888237d266e8 of 1 bytes by task 3298 on cpu 0: [ 129.480164][ T3298] __lru_add_drain_all+0x17e/0x450 [ 129.485290][ T3298] lru_add_drain_all+0x10/0x20 [ 129.490061][ T3298] invalidate_bdev+0x47/0x70 [ 129.494663][ T3298] ext4_put_super+0x610/0x7b0 [ 129.499384][ T3298] generic_shutdown_super+0xee/0x220 [ 129.504677][ T3298] kill_block_super+0x2a/0x70 [ 129.509366][ T3298] ext4_kill_sb+0x42/0x80 [ 129.513704][ T3298] deactivate_locked_super+0x75/0x1c0 [ 129.519083][ T3298] deactivate_super+0x97/0xa0 [ 129.523773][ T3298] cleanup_mnt+0x2bb/0x330 [ 129.528198][ T3298] __cleanup_mnt+0x19/0x20 [ 129.532624][ T3298] task_work_run+0x130/0x1a0 [ 129.537224][ T3298] exit_to_user_mode_loop+0x211/0x820 [ 129.542601][ T3298] do_syscall_64+0x232/0x3b0 [ 129.547225][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.553156][ T3298] [ 129.555480][ T3298] value changed: 0x0d -> 0x0e [ 129.560153][ T3298] [ 129.562478][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 129.568636][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 129.579665][ T3298] Tainted: [W]=WARN [ 129.583465][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.593525][ T3298] ================================================================== [ 129.604780][ T5548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.710869][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.782705][ T5550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5550 comm=syz.3.650