last executing test programs: 1m42.286342609s ago: executing program 1 (id=63): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x1, 0x3}) 1m42.094459346s ago: executing program 1 (id=66): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 1m42.011750987s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x20040014) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r5, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x684800, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000180008e100000000000202000000050015000400000000000000000000000000b24e6b6d1feea317d504fe0300a297d04500f691fd8263d3d0fa53f229717c69673d9cdda85a10494492ccdc3e0f307e6b9ceb1befefbc5946ca4247ae4beb59d629a5ab6d003cf73eaf3527915bd6278d65fa3887bc731e0a9bf8920b981d84a87e9cffb154c10b851993987f3b96b01c823107e2aca8810585ad7e12d1783167b3558d7fba76086ac3685eb794d7bccb4099074420683ff3abb136ef49c9f448b5073e53d3290f8f000000f4094b35a5f78adaacebfe56d7f2dfcf63448dbd81db9754a2b723e97f782d4125617f2b347ab80f5d71f3fdf017a97640c8ee"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='proc\x00', 0x8000, 0x0) 1m40.731392796s ago: executing program 1 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xbc}}, 0x0) close(0x3) socket$inet6(0xa, 0x5, 0x0) r3 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f0016000600040050000600200003400300000000000000c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d48fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x8000) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) truncate(&(0x7f00000001c0)='./file1\x00', 0x401) 1m39.837025042s ago: executing program 1 (id=78): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=local']) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x1, [0x40]}, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000380)) 1m39.429762239s ago: executing program 1 (id=83): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078000011d25119506bfc918be2892f8472893b8fc3d52a6af3ffaaea53a0d919a02491e2b76c1cb802d90e314c624c9941bafa57bc0fba0965083fbf7b5fb6fd7acf0f0cdfcce45457fdfedf45d1186e63f29694c286768493a051e75bf882995c981b170cff945e54fb9ad2cf9875da7a2b0eb3707aa9c9b7feed920f3be767d461366ea67a7fb2b7cb0c754e48d877b9eaec6907326648fa435a06a6e9918bb0fa8d6b544a4baa029170509fff4763bd21b3c6c967f237dedaf6dee3d4"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) ppoll(&(0x7f0000000640)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000004500)={0xa, {"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", 0x1000}}, 0x1006) 1m38.932178966s ago: executing program 32 (id=83): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078000011d25119506bfc918be2892f8472893b8fc3d52a6af3ffaaea53a0d919a02491e2b76c1cb802d90e314c624c9941bafa57bc0fba0965083fbf7b5fb6fd7acf0f0cdfcce45457fdfedf45d1186e63f29694c286768493a051e75bf882995c981b170cff945e54fb9ad2cf9875da7a2b0eb3707aa9c9b7feed920f3be767d461366ea67a7fb2b7cb0c754e48d877b9eaec6907326648fa435a06a6e9918bb0fa8d6b544a4baa029170509fff4763bd21b3c6c967f237dedaf6dee3d4"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) ppoll(&(0x7f0000000640)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000004500)={0xa, {"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", 0x1000}}, 0x1006) 5.925171918s ago: executing program 5 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x3, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x28) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffb1, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x84acf52d3d43e60f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008091}, 0x24000840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4886) 5.215156237s ago: executing program 2 (id=645): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0400000000000000000000020000000000000c02000000000000000000"], 0x0, 0x38}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000013c0)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x2}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsv1}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}], [{@measure}, {@dont_appraise}]}, 0x9b, 0x4f0, &(0x7f0000000a40)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 5.006918819s ago: executing program 4 (id=646): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x2c) sendfile(r0, r0, 0x0, 0x252c000000000000) 4.986181545s ago: executing program 5 (id=647): io_setup(0x2, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10400, &(0x7f0000000480)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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") r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) io_submit(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x96) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000d00)=0xe8) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {}, [{0x2, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x1, r2}, {0x2, 0x6, r3}, {0x2, 0x0, r5}, {0x2, 0x4, r6}], {0x4, 0x2}, [{0x8, 0x0, 0xee01}], {}, {0x20, 0x4}}, 0x64, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) 4.959766719s ago: executing program 0 (id=648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4.83414673s ago: executing program 0 (id=649): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x533, &(0x7f0000000880)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oC6GKso43bVT1AOWEKlQJ0SNIqbE3VpTdrJVdl9pEwj1zRaISJzjyB3DuiTsXBDcu5YDEDwtUI3EYNLNjZ2Pv2k7j9Vq7n4802vfmjef7Xpx5b+btel8AE+tKRGxHxExEvB8RC+X+pNzi7e6WH/fZzsOV3Z2HK0lk2Xv/TIryfF/0/EzuUnnOuYj4wXcjfpwcjtve3Lq33GjUH5T5xU5zfbG9uXX9bnN5rb5Wv1+r3Vq6dePNm2/UnqA1c0eWvtScKVNf/fQP26/9NK/WfLmntx2nqdv0yn6c3HREfG8YwUZgqmzPzKgrwueSRsTzEfFycf0vxFTx2zzOO6+dQdUAgCHJsoXIFnrzAMC4S4s5sCStlnMB85Gm1Wp3Du+FuJg2Wu3OtTutjfur3bmyy1FJ79xt1G+Uc4WXo5Lk+aUi/ShfO5C/GRHPRcQvZi8U+epKq7E6yhsfAJhglw6M//+Z7Y7/AMCYO/pjMwDAODL+A8DkMf4DwOQx/gPA5OmO/xee9MeyLPvZMKoDAJwBz/8AMHmM/wAwUb7/7rv5lu2W33+9+sHmxr3WB9dX6+171ebGSnWl9WC9utZqrRXf2dM87nyNVmt96fXY+PDyt9bbncX25tbtZmvjfud28b3et+uV4qjtM2gZADDIcy998uckH5HfulBs0bOWQ2WkNQOGLR11BYCRmRp1BYCR6a721WeBPmDsPXrGf+IPAZgegDFx3B3AXL8/EMqyLBtelYAhu/ol8/8wqcr5/2mfAobJc9z8f7E2sDcJYSxNH13sEQDGWJYlJ13zP056IABwvh1xg3/5LO9DgNEZ8P7/8+Xrb8s3B360evCIj4dZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjf9tb/rZbL/M5HmlarEc8UCwBVkjt3G/UbEfFsRPxptjKb55dGXGcA4Gmlf0vK9b+uLrw6/1jRi5f2kzMR8ZNfvffLD5c7nQd/jJhJ/jW7t7/zcbm/dmywuWG0AAA42t44Xbz2PMh/tvNwZW87y/r8/Tvdu4I87u7OTOzux5+O6eJ1LioRcfHfSZnvSnrmLp7G9kcR8cV+7U9ivpgD6d6yHIyfx37mlOJPnSh++lj8tFygOS3/Lb5wCnWBSfNJ3v+83e/6S+NK8dr/+p8reqinV/Z/+alWdos+8FH8vf5vakD/d+WkMV7//Tvd1IXDZR9FfHk6Yi/2bk//sxc/GRD/1RPG/8tXXnx5UFn264ir0T9+b6zFTnN9sb25df1uc3mtvla/X6vdWrp1482bb9QWiznqxcGjwT/euvbsoLK8/RcHxJ87pv1fH3TSA0+5v/nf+z/82hHxv/lKv/hpvHBE/HxM/MbAFj9u+eLvBj535/FXD7c/Ocnv/9oJ43/6161Dy4YDAKPT3ty6t9xo1B9ISJz/RP5f9hxUo2/i22cVayb6F/38le41faAoyz5XrEE9xmnMugHnwf5FHxH/HXVlAAAAAAAAAAAAAACAvs7iL5ZG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADG1/8DAAD//4wA1F8=") r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x613}, &(0x7f0000000080)=0x8) fchown(r3, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) fchown(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) stat(&(0x7f00000034c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.78992876s ago: executing program 3 (id=650): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47b2, 0xb73e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x61f5, 0xf7, 0x0}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 4.567691779s ago: executing program 4 (id=651): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x3}, 0x4, 0x0, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in=@private=0xa010100, 0x1, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0x3f}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) io_uring_enter(r1, 0x7b1d, 0x693c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x3}, 0x7) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200", @ANYRESHEX=r6], 0x70}, 0x1, 0x7}, 0x4002) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000040)) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000030060000000122884ff81e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400010126bd7000f8fbdf250ab878ff", @ANYRES32=r8, @ANYRES64=r8], 0x48}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) 3.343655381s ago: executing program 3 (id=652): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3.335037939s ago: executing program 0 (id=653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.334033109s ago: executing program 2 (id=654): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(r2, r3) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, r5, 0x0, 0x0, r6, 0x2, 0x1}, 0x0, 0x0, 0x7ff, 0xe34, 0x4eb, 0xffffffffffffffff, 0x5, 0x10, 0x1, 0x800}) setreuid(r2, r5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvfrom(r7, &(0x7f0000000000)=""/215, 0xd7, 0x40002001, 0x0, 0x0) 3.203715069s ago: executing program 2 (id=655): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_enter(r0, 0x1d16, 0x3305, 0x11, &(0x7f0000000100)={[0x101]}, 0x8) r1 = socket$caif_stream(0x25, 0x1, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 3.203400909s ago: executing program 3 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 3.135932493s ago: executing program 3 (id=657): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x7, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.092686954s ago: executing program 2 (id=658): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000100)) 3.092447123s ago: executing program 3 (id=659): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x6}]}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300ea000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "54ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) pipe(&(0x7f00000007c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffd40a00002000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) close_range(r0, 0xffffffffffffffff, 0x3e) 2.880333095s ago: executing program 2 (id=660): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$eJzs3M1vG0UbAPBn7aR9+5m8VfloWiBQEBEfSZOW0gMXEEgcQEKCQzmGJK1C3QY1RqJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYWT0drexHbsNHGdLNS/n7TtzO44M493x57ZySaAvjWa/pNE7I+I3yJiqJZtLjBa++/2ytLMXytLM0lUKm/+mVTL3VpZmsmKZq/bl2UGIgqfJnG0Tb2LV65emC6V5i7X8xPli+9NLF65+uz8xenzc+fnLk2dOXPq5OTzp6ee60mcaVy3Rj5cOHbk1bevvz5z9vo7P32TZPG3xNEjoxsdfKJS6XF1+TrQkE4GcmwIW1KsddMYrPb/oSjG2skbilc+aShaPphLC4HtUqlUKvd3PrxcAe5hSeTdAiAf2Rd9Ov/Ntogo7NDwI3c3X6xNgNK4b9e32pGB1TdhsGV+20ujEXF2+e8v0y225z4EAECT79LxzzPrxn/VIWDjfaGD9TWU4Yj4f0QciojTEXE4Iu6LqJZ9ICIe3GL9rYsk68c/hRtdBbZJ6fjvhfraVvP4b3UIPFys5w5U4x9Mzs2X5k7U35OxGNyd5ic3qOP7l3/9vNOxxvFfuqX1Z2PBejtuDOxufs3sdHn6bmJudPPjiJGBdvEnqysBSUQciYiRLuuYf+rrY52O3Tn+DfRgnanyVcSTtfO/HC3xZ5KN1ycn/heluRMT2VWx3s+/XHujU/13FX8PpOd/b9vrfzX+4aRxvXZx63Vc+/2zjnOabq//XclbTfs+mC6XL09G7EpeqzW6cf9US7mptfJp/GPH2/f/Q7H2ThyNiPQifigiHo6IR+ptfzQiHouI4xvE/+NLj7/bffzbK41/dkvnfy2xK1r3tE8UL/zwbVOlw1uJPz3/p6qpsfqezXz+baZd3V3NAAAA8N9TiIj9kRTGV9OFwvh47Xf4D8feQmlhsfz0uYX3L83WnhEYjsFCdqdrqOF+6GR9Wp/lp1ryJ+v3jb8o7qnmx2cWSrN5Bw99bl+H/p/6o5h364Bt53kt6F/6P/Qv/R/6l/4P/atN/9+TRzuAndfu+/+jHNoB7LyW/m/ZD/qI+T/0r276f9/8hSC4x/n+h760uCfu/JC8hMS6RBT+Fc2QSBPZcLyHPznvTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//Fmvj5w==") r2 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) sched_setscheduler(0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000480)={0x10c000000, 0x0, &(0x7f0000000100), &(0x7f0000000180), {0x13}, &(0x7f0000000200)=""/188, 0xbc, &(0x7f0000000380)=""/114, &(0x7f00000002c0), 0x0, {r2}}, 0x58) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 2.610599564s ago: executing program 4 (id=661): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000fefffeb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd7000ffdbdf250a00004000000007feffffff07000d0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x24048820}, 0x0) pipe(&(0x7f0000000180)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 2.189183228s ago: executing program 0 (id=662): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 1.292238604s ago: executing program 0 (id=663): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000008980)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffffff6a, 0xfffffff8, 0x80000001, 0x220, r0, 0x7, '\x00', 0x0, r0, 0x1, 0x5, 0x4}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000000000a000018111800", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x40) syz_emit_ethernet(0x370, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x33a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x1, 0xd, "0ff2c508dc793af0edaa7c31cdc3fca02812670c3cb49f14f08933cae0beef39298f82cbe14339a8659e1beff8c2d7e8667237cd379c55d83797771503f40d727119a876616aea7c497ab6cd6de5becd9ceeefe92b4bda39e93a2730fa8b10faffacc2e8945410"}, {0x18, 0xb, "8971d9d03dfd0c4684803e90a8d0c9757c3cf1e4b5ce53fc6ef6edf44312fd2a7e14d94b300f3f003d970cc82dfe230cc34b7df917d66156a86529d42c6f6f0b2c2d4aa7e1e5307b2c95212cf05ff62440e0699ba9111f"}, {0x22, 0x18, "00951420c5abcc912b7cb6d2fe65bf7c7ea4a6c15ca571a104c71ee90f0afd344ca4ddede49583e01bb8cee25184dc1519838bc675ad3975afaffef30f029020432692f4bfe4677d1c77a5d64678582a9559586ab9a7584c5ae34de9e360bc75d8d49061daab6eb535cd8c0c1be93dfcfc5747637caeec6ed2c600e020a498d584d218b2157570cbaecc2e0c2b54968d2880e0baf5f200056d261d0b32901e2309111e092bbba401215cfc878eae61c6131e10510e273211a0002d12b2d4add2cfaa168dfe"}, {0x22, 0xd, "0853e7bf2aa1b962f653cb6e4644b746b6f81160b8be392ffadd4e84a31bacdc513488136cd9adb3bd047ea594c0675364ff08ec97604343bd0048a9be23b54d547ed5c07d0e1450a7ba1ae991fd4d684f534c3c62a870e9fa3c2af185bd2f6faaf8c7666252a0cacf"}, {0x3, 0x2, "9cf88d9f649a9992993858a83a7fef"}, {0x22, 0x10, "574b61a9239692f38b9835a6b408efad1a0b969b222cd8379cc11b154116e3f28ba20f149c97be59b18aa929cb10d69f729a78f961c483743be7672d3a95f2ca737957a1fd19256735d38a4669fd18ff13bef543dd5a1d046811a9dabc20231a51eeeacf0d43544b26cc03a0362ff44d7db50ce0e73a75996adfd89c82eae96b25e7"}, {0x18, 0x4, "b054439954859c6276f70e9e20c4f0ba5d306f0221f0e24b87e8b9c43ff5dcfa478cb0"}, {0x2, 0xf, "fa30372497d5bca2a006ecd4a290b1bc60d6c080afe5fd7812202343417319d27b39936481064bf9d0fd8a005b1b793a85b53335783542c7e613d8d4d3ccf4d6d15ecdf819e4cdbd8c383c311ab98fc391bdd379a1f4514b9efec7772b0c3083ec5f816fce63231f084f08a41ac86b2cbeb157f7c89d"}]}}}}}}, 0x0) fallocate(r3, 0x3, 0x4100, 0x8000c62) open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) r4 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x7fffffff, 0x80000000000, 0x3, 0x9, 0x9, 0x1}) 1.212954296s ago: executing program 4 (id=664): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x200000000000000, 0x4000000000004}) 1.048571938s ago: executing program 4 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x3, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x28) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffb1, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x84acf52d3d43e60f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008091}, 0x24000840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.028213394s ago: executing program 2 (id=666): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0400000000000000000000020000000000000c02000000000000000000"], 0x0, 0x38}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000013c0)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x2}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsv1}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}], [{@measure}, {@dont_appraise}]}, 0x9b, 0x4f0, &(0x7f0000000a40)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 399.740681ms ago: executing program 5 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 205.887826ms ago: executing program 5 (id=668): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000001c40)="b9ff03076804268c989e14f088", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 170.643499ms ago: executing program 5 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x9}, 0x5}}, 0x0, 0x0, 0x42, 0x0, "dedf2e3c20956e770008c07b4c65006b75df7b1467fc715d42efd35f802d90c180de0cacf0d5d8fb99bcbf788c6379b29193f703ddca22cf222767023fe1737a7f76b33cb4dac8cd895272e5cf2c4b33"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @empty, 0x6}, 0x1c) 169.739058ms ago: executing program 4 (id=670): bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5038, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 130.71959ms ago: executing program 5 (id=671): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000140)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6e}}, {@nodioread_nolock}], [{@permit_directio}, {@dont_measure}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000f80)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020c0c00180000002dbd7000fbdbdf25010014000500000005001a00fc020000000000000000000000000000ac1414260000000000000000000000002b000010090000000002000057f221bc8df170118249402c2869924266d98ea2a023bfc0d03ee3908b394797ae879f3173958e29f9ae1a0d3583437e8ac9a6b6298a21469d998864cc2a641d070019000000000002004e21ac14142000000000000000000a004e2000000009fe8000000000000000000000000000400180000000000000e5dc7e544cdedf7d00f04ee1c10fb5aaa46464d183a522f26268fd6691feb6581ae7b3723247ed25be3d2537928b"], 0xc0}}, 0x20048000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x6010, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, 0x0, 0xfffffd5f) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000240)) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 316.68µs ago: executing program 0 (id=672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 0s ago: executing program 3 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000100b300090000004c0003"], 0x60}, 0x1, 0x0, 0x2000000, 0x48c1}, 0x40040) kernel console output (not intermixed with test programs): ck+0x15/0x1b [ 88.690603][ T4448] should_fail_ex+0x263/0x280 [ 88.690650][ T4448] should_failslab+0x8c/0xb0 [ 88.690673][ T4448] __kmalloc_noprof+0xb8/0x4e0 [ 88.690697][ T4448] ? io_cache_alloc_new+0x2a/0xb0 [ 88.690725][ T4448] io_cache_alloc_new+0x2a/0xb0 [ 88.690794][ T4448] io_msg_alloc_async+0xf9/0x190 [ 88.690821][ T4448] io_recvmsg_prep+0x493/0x880 [ 88.690848][ T4448] ? io_sendrecv_fail+0x6d/0xc0 [ 88.690962][ T4448] ? __pfx_io_sendrecv_fail+0x10/0x10 [ 88.690990][ T4448] io_submit_sqes+0x75a/0x1270 [ 88.691029][ T4448] __se_sys_io_uring_enter+0x1c9/0xf50 [ 88.691082][ T4448] ? __fget_files+0x184/0x1c0 [ 88.691108][ T4448] ? mutex_unlock+0x4e/0x90 [ 88.691173][ T4448] ? fput+0x8f/0xc0 [ 88.691242][ T4448] __x64_sys_io_uring_enter+0x78/0x90 [ 88.691340][ T4448] x64_sys_call+0x1e16/0x3020 [ 88.691379][ T4448] do_syscall_64+0x12c/0x370 [ 88.691411][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.691497][ T4448] RIP: 0033:0x7f120059c799 [ 88.691516][ T4448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.691570][ T4448] RSP: 002b:00007f11feff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.691591][ T4448] RAX: ffffffffffffffda RBX: 00007f1200815fa0 RCX: 00007f120059c799 [ 88.691606][ T4448] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 88.691618][ T4448] RBP: 00007f11feff7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.691645][ T4448] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 88.691740][ T4448] R13: 00007f1200816038 R14: 00007f1200815fa0 R15: 00007ffe7647f3b8 [ 88.691767][ T4448] [ 88.968675][ T4458] netlink: 216 bytes leftover after parsing attributes in process `syz.4.207'. [ 88.980421][ T4458] netlink: 216 bytes leftover after parsing attributes in process `syz.4.207'. [ 88.993034][ T4444] loop3: detected capacity change from 0 to 512 [ 89.024400][ T4444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.131884][ T4444] EXT4-fs (loop3): 1 truncate cleaned up [ 89.241184][ T4462] loop0: detected capacity change from 0 to 512 [ 89.278356][ T4462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.319286][ T4462] EXT4-fs (loop0): 1 truncate cleaned up [ 89.323079][ T4444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.335099][ T4462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.411489][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 89.411512][ T29] audit: type=1400 audit(1772467920.801:279): avc: denied { add_name } for pid=4461 comm="syz.0.208" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.482471][ T4475] netlink: 152 bytes leftover after parsing attributes in process `syz.4.209'. [ 89.905823][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.954937][ T4488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.014870][ T4490] loop5: detected capacity change from 0 to 512 [ 90.034508][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.046966][ T4490] EXT4-fs: quotafile must be on filesystem root [ 90.133843][ T4488] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.370180][ T4495] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 90.380312][ T4495] veth1_vlan: left allmulticast mode [ 90.656501][ T29] audit: type=1400 audit(1772467922.041:280): avc: denied { create } for pid=4499 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.757479][ T29] audit: type=1400 audit(1772467922.061:281): avc: denied { read } for pid=4499 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.817916][ T4505] loop4: detected capacity change from 0 to 256 [ 90.826871][ T4505] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.233359][ T29] audit: type=1400 audit(1772467922.621:282): avc: denied { append } for pid=4506 comm="syz.4.219" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.289830][ T29] audit: type=1400 audit(1772467922.621:283): avc: denied { open } for pid=4506 comm="syz.4.219" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.364293][ T29] audit: type=1400 audit(1772467922.621:284): avc: denied { create } for pid=4506 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.403215][ T29] audit: type=1400 audit(1772467922.621:285): avc: denied { setopt } for pid=4506 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.425324][ T29] audit: type=1400 audit(1772467922.711:286): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.459300][ T29] audit: type=1400 audit(1772467922.711:287): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.488630][ T29] audit: type=1400 audit(1772467922.711:288): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.633166][ T4525] netlink: 'syz.3.225': attribute type 3 has an invalid length. [ 91.751212][ T4526] loop3: detected capacity change from 0 to 512 [ 91.754732][ T4526] EXT4-fs: Ignoring removed nobh option [ 91.854319][ T4526] ------------[ cut here ]------------ [ 91.854361][ T4526] EA inode 11 i_nlink=1026 [ 91.854549][ T4526] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.225/4526 [ 91.854691][ T4526] Modules linked in: [ 91.855078][ T4526] CPU: 1 UID: 0 PID: 4526 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) [ 91.855218][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.855379][ T4526] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 91.855500][ T4526] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 91.855730][ T4526] RSP: 0018:ffffc900012fb5a8 EFLAGS: 00010246 [ 91.855982][ T4526] RAX: ffff888104e8ef38 RBX: ffff88811ac93a88 RCX: ffffffff81bffae8 [ 91.856058][ T4526] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de510 [ 91.856101][ T4526] RBP: 000000000000000b R08: 000188811ac93a3b R09: 0000000000000000 [ 91.856230][ T4526] R10: ffffc900012fb4d8 R11: 0001c900012fb4d8 R12: ffff88811ac93a38 [ 91.856300][ T4526] R13: ffffffff871de510 R14: ffff88811ac939f0 R15: 0000000000000001 [ 91.856429][ T4526] FS: 00007f306ec2e6c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 91.856481][ T4526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.856598][ T4526] CR2: 0000000034747865 CR3: 000000013ac40000 CR4: 00000000003506f0 [ 91.856761][ T4526] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.856860][ T4526] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 91.856941][ T4526] Call Trace: [ 91.857098][ T4526] [ 91.857231][ T4526] ext4_xattr_set_entry+0x77c/0x1010 [ 91.857391][ T4526] ext4_xattr_ibody_set+0x184/0x3c0 [ 91.857569][ T4526] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 91.857894][ T4526] __ext4_expand_extra_isize+0x246/0x280 [ 91.858118][ T4526] __ext4_mark_inode_dirty+0x29b/0x400 [ 91.858517][ T4526] ext4_evict_inode+0x7c3/0xd60 [ 91.858701][ T4526] ? __pfx_ext4_evict_inode+0x10/0x10 [ 91.858759][ T4526] evict+0x2af/0x510 [ 91.858831][ T4526] ? __pfx_ext4_drop_inode+0x10/0x10 [ 91.859019][ T4526] iput+0x41a/0x580 [ 91.859411][ T4526] ext4_process_orphan+0x1a9/0x1c0 [ 91.859628][ T4526] ext4_orphan_cleanup+0x6a8/0xa00 [ 91.859851][ T4526] ext4_fill_super+0x3408/0x37c0 [ 91.860071][ T4526] ? set_blocksize+0x14c/0x270 [ 91.860310][ T4526] ? setup_bdev_super+0x30e/0x370 [ 91.860489][ T4526] ? __pfx_ext4_fill_super+0x10/0x10 [ 91.860598][ T4526] get_tree_bdev_flags+0x291/0x300 [ 91.860791][ T4526] ? __pfx_ext4_fill_super+0x10/0x10 [ 91.860939][ T4526] get_tree_bdev+0x1f/0x30 [ 91.861169][ T4526] ext4_get_tree+0x1c/0x30 [ 91.861240][ T4526] vfs_get_tree+0x57/0x1d0 [ 91.861369][ T4526] do_new_mount+0x288/0x8d0 [ 91.861400][ T4526] path_mount+0x4d0/0xbc0 [ 91.861529][ T4526] __se_sys_mount+0x28c/0x2e0 [ 91.861819][ T4526] __x64_sys_mount+0x67/0x80 [ 91.862100][ T4526] x64_sys_call+0x2d61/0x3020 [ 91.862349][ T4526] do_syscall_64+0x12c/0x370 [ 91.862431][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.862570][ T4526] RIP: 0033:0x7f30701fda0a [ 91.862709][ T4526] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.862790][ T4526] RSP: 002b:00007f306ec2de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.863038][ T4526] RAX: ffffffffffffffda RBX: 00007f306ec2dee0 RCX: 00007f30701fda0a [ 91.863318][ T4526] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f306ec2dea0 [ 91.863431][ T4526] RBP: 0000200000000180 R08: 00007f306ec2dee0 R09: 0000000000800718 [ 91.863599][ T4526] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 91.863761][ T4526] R13: 00007f306ec2dea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 91.863900][ T4526] [ 91.864034][ T4526] ---[ end trace 0000000000000000 ]--- [ 91.877652][ T4526] EXT4-fs (loop3): 1 orphan inode deleted [ 91.887497][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.975518][ T4517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.026568][ T4517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.026715][ T4517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.111053][ T4534] loop0: detected capacity change from 0 to 512 [ 92.111972][ T4534] EXT4-fs: quotafile must be on filesystem root [ 92.167341][ T4515] loop5: detected capacity change from 0 to 512 [ 92.194558][ T4515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.195331][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.221179][ T4515] EXT4-fs (loop5): 1 truncate cleaned up [ 92.394142][ T4515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.413373][ T4540] loop3: detected capacity change from 0 to 512 [ 92.519713][ T4542] tmpfs: Bad value for 'mpol' [ 93.084765][ T4540] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 93.085338][ T3573] udevd[3573]: incorrect ext4 checksum on /dev/loop3 [ 93.361814][ T4547] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 93.429308][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.931234][ T4556] tmpfs: Bad value for 'mpol' [ 94.099205][ T4558] loop5: detected capacity change from 0 to 512 [ 94.595821][ T4569] loop3: detected capacity change from 0 to 736 [ 94.693499][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 94.693518][ T29] audit: type=1400 audit(1772467926.081:338): avc: denied { mount } for pid=4568 comm="syz.3.240" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.697303][ T4569] FAULT_INJECTION: forcing a failure. [ 94.697303][ T4569] name failslab, interval 1, probability 0, space 0, times 0 [ 94.821053][ T4571] loop2: detected capacity change from 0 to 512 [ 94.841161][ T4569] CPU: 0 UID: 0 PID: 4569 Comm: syz.3.240 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.841273][ T4569] Tainted: [W]=WARN [ 94.841287][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.841332][ T4569] Call Trace: [ 94.841364][ T4569] [ 94.841395][ T4569] __dump_stack+0x1d/0x30 [ 94.841804][ T4569] dump_stack_lvl+0x95/0xd0 [ 94.841887][ T4569] dump_stack+0x15/0x1b [ 94.841979][ T4569] should_fail_ex+0x263/0x280 [ 94.842085][ T4569] should_failslab+0x8c/0xb0 [ 94.842160][ T4569] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 94.842265][ T4569] ? __d_alloc+0x37/0x340 [ 94.842444][ T4569] __d_alloc+0x37/0x340 [ 94.842538][ T4569] d_alloc_parallel+0x54/0xce0 [ 94.842582][ T4569] ? __d_lookup_rcu_op_compare+0x23b/0x270 [ 94.842891][ T4569] ? avc_has_perm_noaudit+0xab/0x130 [ 94.843054][ T4569] ? lockref_get_not_dead+0x120/0x1c0 [ 94.843179][ T4569] ? selinux_inode_permission+0x6d1/0x7d0 [ 94.843250][ T4569] ? __rcu_read_unlock+0x4e/0x70 [ 94.843683][ T4569] ? try_to_unlazy+0x39d/0x580 [ 94.843817][ T4569] __lookup_slow+0x96/0x260 [ 94.843944][ T4569] lookup_slow+0x3c/0x60 [ 94.844032][ T4569] link_path_walk+0x946/0xe30 [ 94.844168][ T4569] __filename_parentat+0x1a4/0x450 [ 94.844250][ T4569] filename_create+0x78/0x220 [ 94.844287][ T4569] filename_mkdirat+0x81/0x300 [ 94.844377][ T4569] __se_sys_mkdirat+0x32/0xf0 [ 94.844441][ T4569] __x64_sys_mkdirat+0x43/0x50 [ 94.844516][ T4569] x64_sys_call+0x2c4e/0x3020 [ 94.844611][ T4569] do_syscall_64+0x12c/0x370 [ 94.844693][ T4569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.844841][ T4569] RIP: 0033:0x7f30701fc799 [ 94.844896][ T4569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.844952][ T4569] RSP: 002b:00007f306ec4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.845018][ T4569] RAX: ffffffffffffffda RBX: 00007f3070475fa0 RCX: 00007f30701fc799 [ 94.845069][ T4569] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 94.845112][ T4569] RBP: 00007f306ec4f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.845154][ T4569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.845195][ T4569] R13: 00007f3070476038 R14: 00007f3070475fa0 R15: 00007ffe8bed36c8 [ 94.845297][ T4569] [ 94.997154][ T29] audit: type=1400 audit(1772467926.381:339): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 95.012110][ T4571] EXT4-fs: quotafile must be on filesystem root [ 95.201595][ T29] audit: type=1400 audit(1772467926.591:340): avc: denied { allowed } for pid=4573 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.438275][ T29] audit: type=1400 audit(1772467926.681:341): avc: denied { create } for pid=4573 comm="syz.5.243" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.438344][ T29] audit: type=1400 audit(1772467926.681:342): avc: denied { map } for pid=4573 comm="syz.5.243" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.438370][ T29] audit: type=1400 audit(1772467926.681:343): avc: denied { read write } for pid=4573 comm="syz.5.243" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.438397][ T29] audit: type=1400 audit(1772467926.701:344): avc: denied { name_bind } for pid=4573 comm="syz.5.243" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 95.618830][ T29] audit: type=1400 audit(1772467927.001:345): avc: denied { read } for pid=4581 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.642998][ T29] audit: type=1400 audit(1772467927.031:346): avc: denied { accept } for pid=4581 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.681266][ T29] audit: type=1400 audit(1772467927.031:347): avc: denied { write } for pid=4581 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.709092][ T4589] ŞŞŞŞŞŞ: renamed from wg2 (while UP) [ 95.736498][ T4589] netlink: 148 bytes leftover after parsing attributes in process `syz.4.246'. [ 95.773293][ T4589] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 95.849040][ T4580] loop3: detected capacity change from 0 to 512 [ 95.920032][ T4594] loop4: detected capacity change from 0 to 4096 [ 95.930512][ T4580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.947912][ T4594] EXT4-fs: Ignoring removed bh option [ 95.975335][ T4580] EXT4-fs (loop3): 1 truncate cleaned up [ 95.995665][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.024696][ T4580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.068849][ T4598] loop2: detected capacity change from 0 to 512 [ 96.089428][ T4598] EXT4-fs: quotafile must be on filesystem root [ 96.272743][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.466800][ T4608] tmpfs: Bad value for 'mpol' [ 96.702863][ T4610] loop4: detected capacity change from 0 to 128 [ 97.225181][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.273396][ T4618] loop5: detected capacity change from 0 to 512 [ 97.344047][ T4618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.375386][ T4618] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.667504][ T4641] netlink: 'syz.5.255': attribute type 13 has an invalid length. [ 98.047671][ T4639] loop0: detected capacity change from 0 to 4096 [ 98.158135][ T4639] EXT4-fs: Ignoring removed bh option [ 98.220664][ T4639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.240584][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.402531][ T4656] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 98.418567][ T4656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.567829][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.676048][ T4647] loop2: detected capacity change from 0 to 512 [ 98.837668][ T4647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.919068][ T4647] EXT4-fs (loop2): 1 truncate cleaned up [ 98.964947][ T4690] FAULT_INJECTION: forcing a failure. [ 98.964947][ T4690] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.015766][ T4690] CPU: 0 UID: 0 PID: 4690 Comm: syz.4.272 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.015894][ T4690] Tainted: [W]=WARN [ 99.015960][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.015975][ T4690] Call Trace: [ 99.015983][ T4690] [ 99.015993][ T4690] __dump_stack+0x1d/0x30 [ 99.016027][ T4690] dump_stack_lvl+0x95/0xd0 [ 99.016051][ T4690] dump_stack+0x15/0x1b [ 99.016075][ T4690] should_fail_ex+0x263/0x280 [ 99.016162][ T4690] should_fail_alloc_page+0xf2/0x100 [ 99.016201][ T4690] __alloc_frozen_pages_noprof+0x108/0x360 [ 99.016243][ T4690] alloc_pages_mpol+0xb3/0x260 [ 99.016549][ T4690] alloc_pages_noprof+0x8f/0x130 [ 99.016597][ T4690] alloc_skb_with_frags+0x193/0x470 [ 99.016638][ T4690] sock_alloc_send_pskb+0x44d/0x500 [ 99.016685][ T4690] tun_get_user+0x62b/0x27c0 [ 99.016783][ T4690] ? ref_tracker_alloc+0x1eb/0x2f0 [ 99.016821][ T4690] tun_chr_write_iter+0x15e/0x210 [ 99.016849][ T4690] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 99.016909][ T4690] vfs_write+0x5a6/0x9f0 [ 99.016957][ T4690] ksys_write+0xdc/0x1a0 [ 99.017015][ T4690] __x64_sys_write+0x40/0x50 [ 99.017037][ T4690] x64_sys_call+0x27e1/0x3020 [ 99.017074][ T4690] do_syscall_64+0x12c/0x370 [ 99.017944][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.018005][ T4690] RIP: 0033:0x7f120059c799 [ 99.018027][ T4690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.018047][ T4690] RSP: 002b:00007f11feff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.018072][ T4690] RAX: ffffffffffffffda RBX: 00007f1200815fa0 RCX: 00007f120059c799 [ 99.018087][ T4690] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 000000000000000a [ 99.018143][ T4690] RBP: 00007f11feff7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.018157][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.018516][ T4690] R13: 00007f1200816038 R14: 00007f1200815fa0 R15: 00007ffe7647f3b8 [ 99.018546][ T4690] [ 99.303901][ T4696] loop3: detected capacity change from 0 to 512 [ 99.314080][ T4673] loop5: detected capacity change from 0 to 1024 [ 99.320208][ T4696] EXT4-fs: Ignoring removed nobh option [ 99.361675][ T4647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.492953][ T4696] EXT4-fs (loop3): 1 orphan inode deleted [ 99.500508][ T4696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.581120][ T4673] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.751316][ T4708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 99.781109][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 99.865647][ T4673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.883858][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 99.918940][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.930062][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 99.950763][ T4673] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.990310][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 99.991282][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 100.026976][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 100.027017][ T29] audit: type=1400 audit(1772467931.411:434): avc: denied { getopt } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.064021][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 100.149749][ T29] audit: type=1400 audit(1772467931.411:435): avc: denied { connect } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.152588][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 100.219778][ T29] audit: type=1400 audit(1772467931.411:436): avc: denied { name_connect } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.257039][ T4721] netlink: 256 bytes leftover after parsing attributes in process `syz.2.275'. [ 100.267635][ T4721] netlink: 72 bytes leftover after parsing attributes in process `syz.2.275'. [ 100.270114][ T4708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4708 comm=syz.4.274 [ 100.301310][ T4721] bond1: (slave bond_slave_1): Device is not our slave [ 100.308795][ T4721] bond1: option active_slave: invalid value (bond_slave_1) [ 100.328792][ T29] audit: type=1400 audit(1772467931.431:437): avc: denied { read write } for pid=4672 comm="syz.5.268" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.362884][ T29] audit: type=1400 audit(1772467931.431:438): avc: denied { open } for pid=4672 comm="syz.5.268" path="/21/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.366598][ T4721] bond1 (unregistering): Released all slaves [ 100.392680][ T29] audit: type=1400 audit(1772467931.591:440): avc: denied { setopt } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.427518][ T29] audit: type=1400 audit(1772467931.591:441): avc: denied { write } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.456026][ T29] audit: type=1400 audit(1772467931.591:442): avc: denied { read } for pid=4714 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.482996][ T29] audit: type=1400 audit(1772467931.521:439): avc: denied { read append } for pid=4672 comm="syz.5.268" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.539820][ T29] audit: type=1400 audit(1772467931.591:443): avc: denied { open } for pid=4672 comm="syz.5.268" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.635040][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.709576][ T4727] loop4: detected capacity change from 0 to 2048 [ 100.728513][ T4727] EXT4-fs: Ignoring removed i_version option [ 100.890796][ T4727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.939919][ T4727] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.039815][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.058319][ T4734] loop2: detected capacity change from 0 to 4096 [ 101.074489][ T4738] loop0: detected capacity change from 0 to 512 [ 101.087195][ T4734] EXT4-fs: Ignoring removed bh option [ 101.140170][ T4738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.183822][ T4734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.186383][ T4738] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.493931][ T4752] netlink: 'syz.0.281': attribute type 13 has an invalid length. [ 102.105569][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.129357][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.257549][ T4756] loop3: detected capacity change from 0 to 512 [ 102.269207][ T4756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.303377][ T4756] EXT4-fs (loop3): 1 truncate cleaned up [ 102.317510][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.330861][ T4756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.391587][ T4767] loop2: detected capacity change from 0 to 512 [ 102.417256][ T4767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.438337][ T4767] EXT4-fs (loop2): 1 truncate cleaned up [ 102.462661][ T4767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.560710][ T4772] loop4: detected capacity change from 0 to 512 [ 102.628683][ T4772] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.290: Unrecognised inode hash code 255 [ 102.644977][ T4772] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.290: Corrupt directory, running e2fsck is recommended [ 102.675257][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.767528][ T4772] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 102.819969][ T4772] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.290: corrupted in-inode xattr: invalid ea_ino [ 102.923115][ T4772] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.923374][ T4772] EXT4-fs (loop4): Remounting filesystem read-only [ 102.934453][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 102.934485][ C0] EXT4-fs (loop4): initial error at time 1772467934: ext4_iget_extra_inode:5025: inode 15 [ 102.934516][ C0] EXT4-fs (loop4): last error at time 1772467934: ext4_iget_extra_inode:5025: inode 15 [ 102.990475][ T4772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.061010][ T4772] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.290: Unrecognised inode hash code 255 [ 103.109769][ T4772] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.290: Corrupt directory, running e2fsck is recommended [ 103.325478][ T4792] hub 8-0:1.0: USB hub found [ 103.331463][ T4792] hub 8-0:1.0: 8 ports detected [ 103.368672][ T4791] tmpfs: Bad value for 'mpol' [ 103.757124][ T4772] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.290: Unrecognised inode hash code 255 [ 103.810676][ T4772] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.290: Corrupt directory, running e2fsck is recommended [ 104.435829][ T4796] loop5: detected capacity change from 0 to 512 [ 104.483376][ T4796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.483531][ T4796] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.514245][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 104.785726][ T4804] netlink: 'syz.5.297': attribute type 13 has an invalid length. [ 105.300054][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.479461][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.516983][ T4812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 105.524922][ T4812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.544080][ T4802] loop3: detected capacity change from 0 to 1024 [ 105.596539][ T4812] vhci_hcd vhci_hcd.0: Device attached [ 105.643040][ T4802] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.737129][ T4802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.842521][ T4819] vhci_hcd: connection closed [ 105.846344][ T3685] vhci_hcd vhci_hcd.4: stop threads [ 105.875243][ T3685] vhci_hcd vhci_hcd.4: release socket [ 105.890795][ T1032] usb 10-1: SetAddress Request (2) to port 0 [ 105.892102][ T4802] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.897566][ T1032] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 105.904374][ T3685] vhci_hcd vhci_hcd.4: disconnect device [ 106.118443][ T4836] loop0: detected capacity change from 0 to 2048 [ 106.247529][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.261748][ T4836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.343423][ T4842] tmpfs: Bad value for 'mpol' [ 106.447066][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 106.447096][ T29] audit: type=1400 audit(1772467937.831:468): avc: denied { append } for pid=4835 comm="syz.0.308" path="/68/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.808327][ T29] audit: type=1400 audit(1772467938.091:469): avc: denied { create } for pid=4835 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.809342][ T29] audit: type=1400 audit(1772467938.121:470): avc: denied { connect } for pid=4835 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.812388][ T29] audit: type=1400 audit(1772467938.131:471): avc: denied { map } for pid=4835 comm="syz.0.308" path="/68/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.978266][ T29] audit: type=1400 audit(1772467938.361:472): avc: denied { create } for pid=4849 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.985447][ T29] audit: type=1400 audit(1772467938.371:473): avc: denied { write } for pid=4849 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.022221][ T4850] Illegal XDP return value 4291424256 on prog (id 79) dev N/A, expect packet loss! [ 107.057036][ T4856] loop5: detected capacity change from 0 to 164 [ 107.057934][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.067528][ T4856] ISOFS: unable to read i-node block [ 107.067548][ T4856] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.092380][ T29] audit: type=1400 audit(1772467938.451:474): avc: denied { mount } for pid=4855 comm="syz.5.314" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 107.332079][ T4866] loop2: detected capacity change from 0 to 512 [ 107.340150][ T4866] EXT4-fs: Ignoring removed nobh option [ 107.379559][ T29] audit: type=1400 audit(1772467938.761:475): avc: denied { create } for pid=4863 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.450825][ T4866] EXT4-fs (loop2): 1 orphan inode deleted [ 107.567153][ T29] audit: type=1400 audit(1772467938.951:476): avc: denied { read } for pid=4863 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.665227][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.770685][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.807633][ T29] audit: type=1400 audit(1772467939.081:477): avc: denied { mount } for pid=4863 comm="syz.0.318" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.472276][ T4904] loop4: detected capacity change from 0 to 512 [ 108.494754][ T4906] loop3: detected capacity change from 0 to 512 [ 108.520894][ T4904] EXT4-fs: quotafile must be on filesystem root [ 108.592291][ T4906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.631151][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.334'. [ 108.671229][ T4906] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.876151][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.441423][ T4924] netlink: 'syz.2.339': attribute type 3 has an invalid length. [ 109.533594][ T4928] loop5: detected capacity change from 0 to 512 [ 109.546399][ T4930] tipc: Started in network mode [ 109.558103][ T4928] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 109.570302][ T4928] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 109.578509][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.615356][ T4928] EXT4-fs (loop5): 1 truncate cleaned up [ 109.630412][ T4928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.648150][ T4930] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 109.704816][ T4930] tipc: Enabled bearer , priority 10 [ 109.801012][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.847618][ T4945] FAULT_INJECTION: forcing a failure. [ 109.847618][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.910767][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.0.346 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.910811][ T4945] Tainted: [W]=WARN [ 109.910820][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.910837][ T4945] Call Trace: [ 109.910845][ T4945] [ 109.910933][ T4945] __dump_stack+0x1d/0x30 [ 109.910980][ T4945] dump_stack_lvl+0x95/0xd0 [ 109.911016][ T4945] dump_stack+0x15/0x1b [ 109.911116][ T4945] should_fail_ex+0x263/0x280 [ 109.911150][ T4945] should_fail+0xb/0x20 [ 109.911177][ T4945] should_fail_usercopy+0x1a/0x20 [ 109.911211][ T4945] _copy_from_iter+0xcf/0xea0 [ 109.911329][ T4945] ? __alloc_skb+0x4f6/0x690 [ 109.911375][ T4945] ? __alloc_skb+0x200/0x690 [ 109.911408][ T4945] netlink_sendmsg+0x4ae/0x6f0 [ 109.911508][ T4945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.911963][ T4945] ____sys_sendmsg+0x5af/0x600 [ 109.912100][ T4945] ___sys_sendmsg+0x195/0x1e0 [ 109.912157][ T4945] __x64_sys_sendmsg+0xd4/0x160 [ 109.912246][ T4945] x64_sys_call+0x194c/0x3020 [ 109.912282][ T4945] do_syscall_64+0x12c/0x370 [ 109.912401][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.912430][ T4945] RIP: 0033:0x7fed2d86c799 [ 109.912487][ T4945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.912583][ T4945] RSP: 002b:00007fed2c2c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.912617][ T4945] RAX: ffffffffffffffda RBX: 00007fed2dae5fa0 RCX: 00007fed2d86c799 [ 109.912635][ T4945] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 109.912652][ T4945] RBP: 00007fed2c2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.912716][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.912733][ T4945] R13: 00007fed2dae6038 R14: 00007fed2dae5fa0 R15: 00007ffe75ebf538 [ 109.912820][ T4945] [ 110.178668][ T4947] loop5: detected capacity change from 0 to 512 [ 110.229065][ T4947] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.252621][ T4947] EXT4-fs (loop5): 1 truncate cleaned up [ 110.259995][ T4947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.290882][ T4952] FAULT_INJECTION: forcing a failure. [ 110.290882][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.319528][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: syz.4.350 Tainted: G W syzkaller #0 PREEMPT(full) [ 110.319628][ T4952] Tainted: [W]=WARN [ 110.319635][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.319652][ T4952] Call Trace: [ 110.319659][ T4952] [ 110.319666][ T4952] __dump_stack+0x1d/0x30 [ 110.319714][ T4952] dump_stack_lvl+0x95/0xd0 [ 110.319779][ T4952] dump_stack+0x15/0x1b [ 110.319804][ T4952] should_fail_ex+0x263/0x280 [ 110.319905][ T4952] should_fail+0xb/0x20 [ 110.319925][ T4952] should_fail_usercopy+0x1a/0x20 [ 110.319977][ T4952] _copy_from_user+0x1c/0xb0 [ 110.320009][ T4952] sock_do_ioctl+0xe5/0x230 [ 110.320048][ T4952] sock_ioctl+0x41b/0x610 [ 110.320132][ T4952] ? mutex_lock+0x57/0x90 [ 110.320702][ T4952] ? __pfx_sock_ioctl+0x10/0x10 [ 110.320738][ T4952] __se_sys_ioctl+0xce/0x140 [ 110.320831][ T4952] __x64_sys_ioctl+0x43/0x50 [ 110.320870][ T4952] x64_sys_call+0x1563/0x3020 [ 110.320952][ T4952] do_syscall_64+0x12c/0x370 [ 110.320978][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.321003][ T4952] RIP: 0033:0x7f120059c799 [ 110.321022][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.321042][ T4952] RSP: 002b:00007f11feff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.321323][ T4952] RAX: ffffffffffffffda RBX: 00007f1200815fa0 RCX: 00007f120059c799 [ 110.321340][ T4952] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 110.321417][ T4952] RBP: 00007f11feff7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.321431][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.321445][ T4952] R13: 00007f1200816038 R14: 00007f1200815fa0 R15: 00007ffe7647f3b8 [ 110.321552][ T4952] [ 110.564856][ T4956] netlink: 'syz.0.351': attribute type 3 has an invalid length. [ 110.676231][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.348'. [ 110.709749][ T3426] tipc: Node number set to 10070698 [ 110.751033][ T4963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.352'. [ 110.784529][ T4947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.348'. [ 110.812119][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.823196][ T4963] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.912189][ T4975] loop3: detected capacity change from 0 to 128 [ 110.948045][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 110.961715][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 110.971736][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.999802][ T1032] usb 10-1: device descriptor read/8, error -110 [ 111.011251][ T4977] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 111.122459][ T1032] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 111.179801][ T1032] usb 10-1: enqueue for inactive port 0 [ 111.188367][ T1032] usb 10-1: enqueue for inactive port 0 [ 111.199433][ T4989] loop5: detected capacity change from 0 to 512 [ 111.217167][ T4992] loop2: detected capacity change from 0 to 512 [ 111.224222][ T1032] usb 10-1: enqueue for inactive port 0 [ 111.247801][ T4989] loop5: detected capacity change from 0 to 128 [ 111.265611][ T4992] ext2: Unknown parameter 'smackfsfloor' [ 111.355981][ T4989] syz.5.366: attempt to access beyond end of device [ 111.355981][ T4989] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 111.421453][ T4989] syz.5.366: attempt to access beyond end of device [ 111.421453][ T4989] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 111.452159][ T4989] syz.5.366: attempt to access beyond end of device [ 111.452159][ T4989] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 111.459766][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 111.459839][ T29] audit: type=1400 audit(1772467942.801:571): avc: denied { node_bind } for pid=4996 comm="syz.4.368" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.482710][ T4989] syz.5.366: attempt to access beyond end of device [ 111.482710][ T4989] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 111.559864][ T4989] syz.5.366: attempt to access beyond end of device [ 111.559864][ T4989] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 111.636714][ T4989] syz.5.366: attempt to access beyond end of device [ 111.636714][ T4989] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 111.695685][ T4989] syz.5.366: attempt to access beyond end of device [ 111.695685][ T4989] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 111.770459][ T4989] syz.5.366: attempt to access beyond end of device [ 111.770459][ T4989] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 111.819020][ T5009] netlink: 'syz.4.371': attribute type 3 has an invalid length. [ 111.859948][ T4989] syz.5.366: attempt to access beyond end of device [ 111.859948][ T4989] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 111.935758][ T5010] loop4: detected capacity change from 0 to 512 [ 111.951950][ T5010] EXT4-fs: Ignoring removed nobh option [ 112.049949][ T4989] syz.5.366: attempt to access beyond end of device [ 112.049949][ T4989] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 112.118933][ T5010] EXT4-fs (loop4): 1 orphan inode deleted [ 112.135796][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.290475][ T1032] usb usb10-port1: attempt power cycle [ 112.400969][ T29] audit: type=1400 audit(1772467943.781:572): avc: denied { unmount } for pid=3888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.420559][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.502148][ T5019] netlink: 'syz.5.375': attribute type 3 has an invalid length. [ 112.524880][ T5023] netlink: 'syz.4.374': attribute type 3 has an invalid length. [ 112.593510][ T5019] loop5: detected capacity change from 0 to 512 [ 112.605505][ T5019] EXT4-fs: Ignoring removed nobh option [ 112.685807][ T5019] EXT4-fs (loop5): 1 orphan inode deleted [ 112.705540][ T5019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.778530][ T5029] loop3: detected capacity change from 0 to 512 [ 112.824364][ T5029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.887443][ T5033] loop4: detected capacity change from 0 to 512 [ 112.901621][ T5029] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.953224][ T5033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.125752][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.148550][ T5033] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.292474][ T29] audit: type=1400 audit(1772467944.681:573): avc: denied { name_bind } for pid=5041 comm="syz.5.381" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 113.320118][ T5043] netlink: 'syz.3.378': attribute type 13 has an invalid length. [ 113.366460][ T29] audit: type=1400 audit(1772467944.721:574): avc: denied { create } for pid=5027 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.925786][ T29] audit: type=1400 audit(1772467944.721:575): avc: denied { bind } for pid=5027 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.090551][ T29] audit: type=1400 audit(1772467944.721:576): avc: denied { read } for pid=5027 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.213622][ T29] audit: type=1400 audit(1772467944.721:577): avc: denied { node_bind } for pid=5041 comm="syz.5.381" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.272724][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.297086][ T29] audit: type=1400 audit(1772467944.781:578): avc: denied { write } for pid=5027 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.326003][ T29] audit: type=1400 audit(1772467944.951:579): avc: denied { module_request } for pid=5041 comm="syz.5.381" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 114.462958][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.465931][ T29] audit: type=1400 audit(1772467945.791:580): avc: denied { block_suspend } for pid=5051 comm="syz.5.384" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.525333][ T5060] netlink: 'syz.2.385': attribute type 3 has an invalid length. [ 114.621282][ T5062] loop2: detected capacity change from 0 to 512 [ 114.638494][ T5062] EXT4-fs: Ignoring removed nobh option [ 114.735763][ T5062] EXT4-fs (loop2): 1 orphan inode deleted [ 114.755225][ T5062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.883600][ T5068] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 114.902193][ T5066] loop4: detected capacity change from 0 to 512 [ 114.956896][ T5066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.015564][ T5066] EXT4-fs (loop4): 1 truncate cleaned up [ 115.070244][ T5066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.086942][ T1032] usb usb10-port1: unable to enumerate USB device [ 115.099100][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.223529][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 115.575243][ T5085] loop3: detected capacity change from 0 to 512 [ 115.628490][ T5085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.643503][ T5085] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.901031][ T5092] netlink: 'syz.3.393': attribute type 13 has an invalid length. [ 115.914601][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.072544][ T5089] netlink: 'syz.5.394': attribute type 10 has an invalid length. [ 116.152993][ T5098] loop4: detected capacity change from 0 to 512 [ 116.225141][ T5098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.266553][ T5089] team0: Port device dummy0 added [ 116.287518][ T5098] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.500768][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.904632][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 116.904694][ T29] audit: type=1400 audit(1772467948.281:587): avc: denied { ioctl } for pid=5109 comm="syz.0.400" path="socket:[9876]" dev="sockfs" ino=9876 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.006558][ T5113] loop0: detected capacity change from 0 to 256 [ 117.024760][ T5104] loop2: detected capacity change from 0 to 512 [ 117.091171][ T5113] FAT-fs (loop0): Directory bread(block 64) failed [ 117.098501][ T5113] FAT-fs (loop0): Directory bread(block 65) failed [ 117.140382][ T29] audit: type=1400 audit(1772467948.391:588): avc: denied { bind } for pid=5109 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.188807][ T5113] FAT-fs (loop0): Directory bread(block 66) failed [ 117.221915][ T5104] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.247038][ T5113] FAT-fs (loop0): Directory bread(block 67) failed [ 117.259820][ T5113] FAT-fs (loop0): Directory bread(block 68) failed [ 117.268071][ T29] audit: type=1400 audit(1772467948.441:589): avc: denied { create } for pid=5114 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.304650][ T5113] FAT-fs (loop0): Directory bread(block 69) failed [ 117.320736][ T5113] FAT-fs (loop0): Directory bread(block 70) failed [ 117.339070][ T29] audit: type=1400 audit(1772467948.441:590): avc: denied { write } for pid=5114 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.365118][ T5113] FAT-fs (loop0): Directory bread(block 71) failed [ 117.373086][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.374894][ T5113] FAT-fs (loop0): Directory bread(block 72) failed [ 117.393971][ T5113] FAT-fs (loop0): Directory bread(block 73) failed [ 117.398096][ T5104] EXT4-fs (loop2): 1 truncate cleaned up [ 117.493314][ T5132] loop5: detected capacity change from 0 to 512 [ 117.526155][ T5104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.568752][ T5132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.597891][ T29] audit: type=1400 audit(1772467948.981:591): avc: denied { setopt } for pid=5133 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.660266][ T5132] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.404: bad orphan inode 131083 [ 117.752925][ T29] audit: type=1400 audit(1772467949.141:592): avc: denied { create } for pid=5103 comm="syz.2.398" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.771211][ T5132] loop5: lost filesystem error report for type 5 error -117 [ 117.777763][ T5132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.875242][ T29] audit: type=1400 audit(1772467949.251:593): avc: denied { read write open } for pid=5103 comm="syz.2.398" path="/80/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.915906][ T5132] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.404: bg 0: block 321: padding at end of block bitmap is not set [ 117.940422][ T29] audit: type=1400 audit(1772467949.301:594): avc: denied { read write } for pid=5131 comm="syz.5.404" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.984306][ T29] audit: type=1400 audit(1772467949.301:595): avc: denied { open } for pid=5131 comm="syz.5.404" path="/47/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.995934][ T5144] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.027146][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 118.069939][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.076053][ T29] audit: type=1400 audit(1772467949.451:596): avc: denied { lock } for pid=5131 comm="syz.5.404" path="/47/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.098904][ T5143] random: crng reseeded on system resumption [ 118.153726][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.172752][ T5143] loop0: detected capacity change from 0 to 512 [ 118.301655][ T5143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.342803][ T5143] Restarting kernel threads ... [ 118.351483][ T5143] Done restarting kernel threads. [ 118.361804][ T5149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.411'. [ 118.447295][ T5157] loop4: detected capacity change from 0 to 512 [ 118.458222][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.548336][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.610245][ T5157] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.711256][ T5167] loop0: detected capacity change from 0 to 512 [ 118.746559][ T5173] netlink: 'syz.5.417': attribute type 3 has an invalid length. [ 118.872713][ T5175] netlink: 'syz.3.419': attribute type 3 has an invalid length. [ 119.709953][ T5167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.955077][ T5175] loop3: detected capacity change from 0 to 512 [ 119.972794][ T5175] EXT4-fs: Ignoring removed nobh option [ 120.035438][ T5173] loop5: detected capacity change from 0 to 512 [ 120.056554][ T5173] EXT4-fs: Ignoring removed nobh option [ 120.076032][ T5167] EXT4-fs (loop0): 1 truncate cleaned up [ 120.091215][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.129563][ T5167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.167951][ T5175] EXT4-fs (loop3): 1 orphan inode deleted [ 120.196118][ T5175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.198830][ T5173] EXT4-fs (loop5): 1 orphan inode deleted [ 120.240036][ T5173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.283582][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.299208][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.315687][ T5183] loop2: detected capacity change from 0 to 512 [ 120.343209][ T5183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.360723][ T5183] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.398041][ T5185] loop3: detected capacity change from 0 to 1024 [ 120.507010][ T5183] SELinux: failed to load policy [ 120.531744][ T5185] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.423: Failed to acquire dquot type 0 [ 120.547078][ T5185] loop3: lost filesystem error report for type 5 error -5 [ 120.549938][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 120.568369][ C0] EXT4-fs (loop3): initial error at time 1772467951: ext4_acquire_dquot:7001 [ 120.580788][ C0] EXT4-fs (loop3): last error at time 1772467951: ext4_acquire_dquot:7001 [ 120.591705][ T5185] EXT4-fs (loop3): 1 truncate cleaned up [ 120.599409][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.630202][ T5185] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.423: Failed to acquire dquot type 0 [ 120.701962][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.713940][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.727241][ T5199] loop5: detected capacity change from 0 to 512 [ 120.736167][ T5199] EXT4-fs: quotafile must be on filesystem root [ 120.780545][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.876453][ T5203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 120.925568][ T5206] loop3: detected capacity change from 0 to 256 [ 121.009853][ T5204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.483684][ T5213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 121.553366][ T5213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 121.670752][ T5216] netlink: 'syz.4.433': attribute type 3 has an invalid length. [ 122.252519][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 122.252569][ T29] audit: type=1326 audit(1772467953.641:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30701fc799 code=0x7ffc0000 [ 122.303113][ T29] audit: type=1326 audit(1772467953.641:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30701fc799 code=0x7ffc0000 [ 122.383739][ T5216] loop4: detected capacity change from 0 to 512 [ 122.403053][ T5216] EXT4-fs: Ignoring removed nobh option [ 122.484784][ T5216] EXT4-fs (loop4): 1 orphan inode deleted [ 122.502056][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.507847][ T29] audit: type=1400 audit(1772467953.891:642): avc: denied { bpf } for pid=5219 comm="syz.0.434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.566047][ T29] audit: type=1400 audit(1772467953.911:643): avc: denied { mount } for pid=5215 comm="syz.4.433" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.600713][ T29] audit: type=1400 audit(1772467953.921:644): avc: denied { read write } for pid=5215 comm="syz.4.433" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.641415][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.652462][ T29] audit: type=1400 audit(1772467953.921:645): avc: denied { open } for pid=5215 comm="syz.4.433" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.683484][ T29] audit: type=1400 audit(1772467953.931:646): avc: denied { prog_run } for pid=5219 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.744330][ T29] audit: type=1400 audit(1772467954.021:647): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.771801][ T29] audit: type=1400 audit(1772467954.071:648): avc: denied { open } for pid=5219 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 122.783918][ T5226] loop3: detected capacity change from 0 to 512 [ 122.805238][ T29] audit: type=1400 audit(1772467954.071:649): avc: denied { perfmon } for pid=5219 comm="syz.0.434" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.937122][ T5226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.961975][ T5232] loop4: detected capacity change from 0 to 128 [ 123.005006][ T5232] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.022424][ T5226] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.036852][ T5232] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.148298][ T5220] loop0: detected capacity change from 0 to 1024 [ 123.230201][ T5226] netlink: 'syz.3.435': attribute type 13 has an invalid length. [ 123.252942][ T5220] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.355038][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.486505][ T5248] hub 8-0:1.0: USB hub found [ 123.493040][ T5248] hub 8-0:1.0: 8 ports detected [ 123.627347][ T5220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.682277][ T5220] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.822174][ T5253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 123.866044][ T5252] EXT4-fs: Ignoring removed bh option [ 124.079049][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.237185][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.385601][ T5265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.445'. [ 124.668324][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.692342][ T5263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.798872][ T5263] EXT4-fs (loop0): 1 truncate cleaned up [ 124.829481][ T5263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.883602][ T5278] EXT4-fs: Ignoring removed bh option [ 124.988296][ T5278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.460026][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.537241][ T5288] set_capacity_and_notify: 3 callbacks suppressed [ 125.537293][ T5288] loop5: detected capacity change from 0 to 1024 [ 125.601005][ T5288] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.740813][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.785382][ T5288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.903653][ T5288] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.622637][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.697397][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 126.820632][ T5310] loop5: detected capacity change from 0 to 1024 [ 126.864056][ T5310] EXT4-fs: dax option not supported [ 127.069073][ T5316] loop0: detected capacity change from 0 to 2048 [ 127.132017][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.168376][ T5307] loop2: detected capacity change from 0 to 1024 [ 127.225400][ T5307] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.260930][ T5324] loop3: detected capacity change from 0 to 512 [ 127.298360][ T5324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.329840][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 127.329919][ T29] audit: type=1400 audit(1772467958.711:710): avc: denied { append } for pid=5313 comm="syz.0.459" path="/87/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.391935][ T5324] EXT4-fs (loop3): 1 truncate cleaned up [ 127.402078][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.412652][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.418510][ T5307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.503350][ T5307] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.796084][ T5337] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 127.806979][ T29] audit: type=1400 audit(1772467959.171:711): avc: denied { setopt } for pid=5333 comm="syz.0.464" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.023345][ T29] audit: type=1400 audit(1772467959.181:712): avc: denied { ioctl } for pid=5333 comm="syz.0.464" path="socket:[10167]" dev="sockfs" ino=10167 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.375250][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.404110][ T29] audit: type=1400 audit(1772467959.791:713): avc: denied { read } for pid=5338 comm="syz.5.465" dev="nsfs" ino=4026533383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.480689][ T29] audit: type=1400 audit(1772467959.791:714): avc: denied { open } for pid=5338 comm="syz.5.465" path="net:[4026533383]" dev="nsfs" ino=4026533383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 128.538717][ T29] audit: type=1400 audit(1772467959.791:715): avc: denied { create } for pid=5338 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.598155][ T5343] loop3: detected capacity change from 0 to 512 [ 128.617200][ T29] audit: type=1326 audit(1772467959.901:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.5.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac69dc799 code=0x7ffc0000 [ 128.660690][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.688297][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.731028][ T5343] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.740247][ T29] audit: type=1326 audit(1772467959.901:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.5.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6ac69dc799 code=0x7ffc0000 [ 128.785780][ T5339] netlink: 48 bytes leftover after parsing attributes in process `syz.5.465'. [ 128.866151][ T5350] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.880902][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 128.913155][ T29] audit: type=1326 audit(1772467959.901:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.5.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ac69dc502 code=0x7ffc0000 [ 128.967488][ T5343] netlink: 'syz.3.466': attribute type 13 has an invalid length. [ 128.980751][ T29] audit: type=1326 audit(1772467959.901:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.5.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ac69dc502 code=0x7ffc0000 [ 129.019706][ T5339] loop5: detected capacity change from 0 to 512 [ 129.027403][ T5339] ext4: Unknown parameter 'noacl' [ 129.095368][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.309964][ T5366] hub 8-0:1.0: USB hub found [ 129.316387][ T5366] hub 8-0:1.0: 8 ports detected [ 130.218197][ T5363] loop3: detected capacity change from 0 to 1024 [ 130.280902][ T5363] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.362317][ T5363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.408913][ T5363] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.436365][ T5380] capability: warning: `syz.5.474' uses deprecated v2 capabilities in a way that may be insecure [ 130.969090][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.013850][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.067625][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 131.113642][ T5386] unsupported nlmsg_type 40 [ 131.204129][ T5396] loop0: detected capacity change from 0 to 512 [ 131.324464][ T5396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.428284][ T5404] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 131.478071][ T5396] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.837409][ T5396] netlink: 'syz.0.480': attribute type 13 has an invalid length. [ 132.240829][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.359687][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 132.359708][ T29] audit: type=1400 audit(1772467963.741:858): avc: denied { name_bind } for pid=5412 comm="syz.2.483" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 132.400027][ T29] audit: type=1400 audit(1772467963.741:859): avc: denied { node_bind } for pid=5412 comm="syz.2.483" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 132.427115][ T29] audit: type=1400 audit(1772467963.781:860): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.610028][ T5421] hub 8-0:1.0: USB hub found [ 132.616465][ T5421] hub 8-0:1.0: 8 ports detected [ 132.778452][ T5423] tmpfs: Bad value for 'mpol' [ 132.802141][ T5423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 133.474947][ T5430] loop5: detected capacity change from 0 to 512 [ 133.490605][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 133.583343][ T5429] program syz.3.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.610023][ T5430] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.487: bad orphan inode 15 [ 133.633175][ T29] audit: type=1400 audit(1772467964.971:861): avc: denied { create } for pid=5427 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.679826][ T5430] loop5: lost filesystem error report for type 5 error -117 [ 133.682074][ T5430] ext4_test_bit(bit=14, block=5) = 0 [ 133.692168][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 133.692193][ C0] EXT4-fs (loop5): initial error at time 1772467965: ext4_orphan_get:1417 [ 133.692227][ C0] EXT4-fs (loop5): last error at time 1772467965: ext4_orphan_get:1417 [ 133.774374][ T29] audit: type=1400 audit(1772467964.971:862): avc: denied { read write } for pid=5427 comm="syz.3.488" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.956991][ T29] audit: type=1400 audit(1772467964.971:863): avc: denied { open } for pid=5427 comm="syz.3.488" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.964422][ T5430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.019380][ T29] audit: type=1400 audit(1772467964.971:864): avc: denied { write } for pid=5427 comm="syz.3.488" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.053643][ T5430] FAULT_INJECTION: forcing a failure. [ 134.053643][ T5430] name failslab, interval 1, probability 0, space 0, times 0 [ 134.084321][ T5430] CPU: 1 UID: 0 PID: 5430 Comm: syz.5.487 Tainted: G W syzkaller #0 PREEMPT(full) [ 134.084359][ T5430] Tainted: [W]=WARN [ 134.084377][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.084406][ T5430] Call Trace: [ 134.084417][ T5430] [ 134.084429][ T5430] __dump_stack+0x1d/0x30 [ 134.084472][ T5430] dump_stack_lvl+0x95/0xd0 [ 134.084574][ T5430] dump_stack+0x15/0x1b [ 134.084602][ T5430] should_fail_ex+0x263/0x280 [ 134.084635][ T5430] should_failslab+0x8c/0xb0 [ 134.084659][ T5430] __kmalloc_noprof+0xb8/0x4e0 [ 134.084683][ T5430] ? unix_bind+0x1d2/0xb90 [ 134.084840][ T5430] unix_bind+0x1d2/0xb90 [ 134.084915][ T5430] __sys_bind+0x1d0/0x290 [ 134.084961][ T5430] __x64_sys_bind+0x3f/0x50 [ 134.084984][ T5430] x64_sys_call+0x2b30/0x3020 [ 134.085020][ T5430] do_syscall_64+0x12c/0x370 [ 134.085051][ T5430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.085086][ T5430] RIP: 0033:0x7f6ac69dc799 [ 134.085130][ T5430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.085147][ T5430] RSP: 002b:00007f6ac5437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 134.085169][ T5430] RAX: ffffffffffffffda RBX: 00007f6ac6c55fa0 RCX: 00007f6ac69dc799 [ 134.085257][ T5430] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 134.085270][ T5430] RBP: 00007f6ac5437090 R08: 0000000000000000 R09: 0000000000000000 [ 134.085283][ T5430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.085295][ T5430] R13: 00007f6ac6c56038 R14: 00007f6ac6c55fa0 R15: 00007fff20e85638 [ 134.085315][ T5430] [ 134.323972][ T29] audit: type=1400 audit(1772467964.971:865): avc: denied { open } for pid=5427 comm="syz.3.488" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.390996][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.564198][ T5453] loop2: detected capacity change from 0 to 512 [ 134.588157][ T29] audit: type=1400 audit(1772467965.121:866): avc: denied { ioctl } for pid=5427 comm="syz.3.488" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 134.625289][ T29] audit: type=1400 audit(1772467965.121:867): avc: denied { create } for pid=5427 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.683952][ T5453] EXT4-fs: quotafile must be on filesystem root [ 134.711408][ T5455] loop3: detected capacity change from 0 to 512 [ 134.761210][ T5462] loop5: detected capacity change from 0 to 256 [ 134.775994][ T5455] EXT4-fs: Ignoring removed nobh option [ 135.044353][ T5455] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.151300][ T5455] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.497: EA inode hash validation failed [ 135.173414][ T5455] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.428963][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents [ 135.495708][ T5469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.504707][ T5469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.580983][ T5455] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.583730][ T5455] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.497: mark_inode_dirty error [ 135.596483][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 135.596536][ C0] EXT4-fs (loop3): initial error at time 1772467966: ext4_do_update_inode:5569: inode 15 [ 135.596782][ C0] EXT4-fs (loop3): last error at time 1772467966: ext4_do_update_inode:5569: inode 15 [ 135.849381][ T5455] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.856675][ T5455] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents [ 135.968909][ T5455] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.038634][ T5455] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.497: mark_inode_dirty error [ 136.103103][ T5455] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.105674][ T5455] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.497: mark inode dirty (error -117) [ 136.161473][ T5455] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.163680][ T5455] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 136.212895][ T5455] EXT4-fs (loop3): 1 orphan inode deleted [ 136.323942][ T5487] tmpfs: Bad value for 'mpol' [ 136.367744][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 136.901153][ T5491] ip6erspan0: entered promiscuous mode [ 136.925985][ T5499] loop5: detected capacity change from 0 to 256 [ 136.936917][ T5495] loop4: detected capacity change from 0 to 512 [ 136.984166][ T5502] loop0: detected capacity change from 0 to 128 [ 137.035131][ T5495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.508: bg 0: block 5: invalid block bitmap [ 137.087690][ T5495] loop4: lost filesystem error report for type 5 error -117 [ 137.089777][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 137.106214][ C1] EXT4-fs (loop4): initial error at time 1772467968: ext4_validate_block_bitmap:432 [ 137.119659][ C1] EXT4-fs (loop4): last error at time 1772467968: ext4_validate_block_bitmap:432 [ 137.134083][ T5495] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 137.148400][ T5495] loop4: lost filesystem error report for type 5 error -117 [ 137.148908][ T5495] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.508: invalid indirect mapped block 3 (level 2) [ 137.275677][ T5495] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.306128][ T5495] EXT4-fs (loop4): 1 orphan inode deleted [ 137.342684][ T5510] syz.0.514 (5510): /proc/5509/oom_adj is deprecated, please use /proc/5509/oom_score_adj instead. [ 137.357743][ T5495] EXT4-fs (loop4): 1 truncate cleaned up [ 137.365927][ T5510] loop0: detected capacity change from 0 to 256 [ 137.508443][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 137.508528][ T29] audit: type=1400 audit(1772467968.841:975): avc: denied { write } for pid=5497 comm="syz.5.510" name="netlink" dev="proc" ino=4026533387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.626658][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 137.659553][ T5510] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 138.011292][ T29] audit: type=1400 audit(1772467969.291:976): avc: denied { connect } for pid=5514 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.077922][ T29] audit: type=1400 audit(1772467969.291:977): avc: denied { read } for pid=5514 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.134692][ T29] audit: type=1400 audit(1772467969.341:978): avc: denied { write } for pid=5514 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.189463][ T5526] FAULT_INJECTION: forcing a failure. [ 138.189463][ T5526] name failslab, interval 1, probability 0, space 0, times 0 [ 138.214110][ T29] audit: type=1400 audit(1772467969.341:979): avc: denied { setopt } for pid=5514 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.263425][ T5526] CPU: 1 UID: 0 PID: 5526 Comm: syz.0.519 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.263541][ T5526] Tainted: [W]=WARN [ 138.263550][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.263597][ T5526] Call Trace: [ 138.263608][ T5526] [ 138.263621][ T5526] __dump_stack+0x1d/0x30 [ 138.263679][ T5526] dump_stack_lvl+0x95/0xd0 [ 138.263710][ T5526] dump_stack+0x15/0x1b [ 138.263745][ T5526] should_fail_ex+0x263/0x280 [ 138.263776][ T5526] should_failslab+0x8c/0xb0 [ 138.263804][ T5526] kmem_cache_alloc_noprof+0x66/0x400 [ 138.263906][ T5526] ? alloc_empty_file+0x76/0x200 [ 138.263979][ T5526] alloc_empty_file+0x76/0x200 [ 138.264010][ T5526] path_openat+0x65/0x2050 [ 138.264055][ T5526] ? _parse_integer_limit+0x170/0x190 [ 138.264158][ T5526] ? _parse_integer+0x27/0x40 [ 138.264182][ T5526] ? kstrtoull+0x111/0x140 [ 138.264205][ T5526] ? kstrtouint+0x76/0xc0 [ 138.264229][ T5526] do_file_open+0x16c/0x290 [ 138.264315][ T5526] do_sys_openat2+0x94/0x130 [ 138.264377][ T5526] __x64_sys_openat+0xf2/0x120 [ 138.264415][ T5526] x64_sys_call+0x1e39/0x3020 [ 138.264450][ T5526] do_syscall_64+0x12c/0x370 [ 138.264509][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.264533][ T5526] RIP: 0033:0x7fed2d82cfce [ 138.264572][ T5526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.264596][ T5526] RSP: 002b:00007fed2c2c6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.264624][ T5526] RAX: ffffffffffffffda RBX: 00007fed2c2c76c0 RCX: 00007fed2d82cfce [ 138.264642][ T5526] RDX: 0000000000000002 RSI: 00007fed2c2c6f90 RDI: ffffffffffffff9c [ 138.264660][ T5526] RBP: 00007fed2c2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.264734][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.264750][ T5526] R13: 00007fed2dae6038 R14: 00007fed2dae5fa0 R15: 00007ffe75ebf538 [ 138.264776][ T5526] [ 138.303928][ T29] audit: type=1400 audit(1772467969.371:980): avc: denied { create } for pid=5509 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.613933][ T29] audit: type=1400 audit(1772467969.371:981): avc: denied { getopt } for pid=5509 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.613986][ T29] audit: type=1400 audit(1772467969.391:982): avc: denied { create } for pid=5509 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.614022][ T29] audit: type=1400 audit(1772467969.431:983): avc: denied { write } for pid=5509 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.614679][ T29] audit: type=1400 audit(1772467969.441:984): avc: denied { create } for pid=5520 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.846390][ T5541] tmpfs: Bad value for 'mpol' [ 138.855469][ T5541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 139.651160][ T5554] netlink: 'syz.3.526': attribute type 3 has an invalid length. [ 139.749787][ T5558] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 139.759823][ T5558] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.784803][ T5558] vhci_hcd vhci_hcd.0: Device attached [ 139.796996][ T5559] vhci_hcd: connection closed [ 139.797150][ T3697] vhci_hcd vhci_hcd.3: stop threads [ 139.811625][ T3697] vhci_hcd vhci_hcd.3: release socket [ 139.820908][ T3697] vhci_hcd vhci_hcd.3: disconnect device [ 139.855554][ T5550] loop2: detected capacity change from 0 to 1024 [ 139.865777][ T5565] loop0: detected capacity change from 0 to 256 [ 139.909050][ T5567] netlink: 88 bytes leftover after parsing attributes in process `syz.4.531'. [ 139.941472][ T5550] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.072787][ T5550] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.613029][ T5576] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.826992][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.916060][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.990609][ T5585] tmpfs: Bad value for 'mpol' [ 141.003607][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.534'. [ 141.436679][ T5594] usb usb7: usbfs: process 5594 (syz.2.538) did not claim interface 63 before use [ 141.456020][ T5587] loop0: detected capacity change from 0 to 1024 [ 141.477787][ T5587] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.562281][ T5587] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.888464][ T5610] loop2: detected capacity change from 0 to 2048 [ 141.898018][ T5615] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 141.905286][ T5615] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 142.067338][ T5622] loop2: detected capacity change from 0 to 512 [ 142.114570][ T5622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.139123][ T5622] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.139274][ T5622] EXT4-fs (loop2): 1 truncate cleaned up [ 142.139765][ T5622] EXT4-fs mount: 10 callbacks suppressed [ 142.139781][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.357410][ T5619] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.426400][ T5631] loop4: detected capacity change from 0 to 512 [ 142.521728][ T5631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.580205][ T5631] EXT4-fs (loop4): 1 truncate cleaned up [ 142.616322][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.720491][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 142.720525][ T29] audit: type=1400 audit(1772467974.031:1063): avc: denied { read write open } for pid=5621 comm="syz.4.549" path="/111/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.875668][ T5642] tmpfs: Bad value for 'mpol' [ 142.888452][ T5642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.551'. [ 143.343388][ T29] audit: type=1400 audit(1772467974.731:1064): avc: denied { create } for pid=5644 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 143.512569][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.680923][ T5665] netlink: 'syz.0.560': attribute type 2 has an invalid length. [ 143.696764][ T29] audit: type=1400 audit(1772467975.081:1065): avc: denied { execute } for pid=5654 comm="syz.4.555" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.726628][ T5660] loop5: detected capacity change from 0 to 4096 [ 143.737657][ T5660] EXT4-fs: Ignoring removed bh option [ 143.743632][ T5665] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 143.767449][ T5660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.784047][ T29] audit: type=1400 audit(1772467975.081:1066): avc: denied { execute_no_trans } for pid=5654 comm="syz.4.555" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.851857][ T29] audit: type=1400 audit(1772467975.211:1067): avc: denied { allowed } for pid=5663 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.910099][ T29] audit: type=1400 audit(1772467975.291:1068): avc: denied { create } for pid=5663 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.931453][ T29] audit: type=1400 audit(1772467975.291:1069): avc: denied { bind } for pid=5663 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.931512][ T29] audit: type=1400 audit(1772467975.301:1070): avc: denied { create } for pid=5663 comm="syz.0.560" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.943303][ T5667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.944308][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.944454][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.118286][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.139177][ T29] audit: type=1400 audit(1772467975.521:1071): avc: denied { name_bind } for pid=5674 comm="syz.4.562" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 144.139278][ T29] audit: type=1400 audit(1772467975.521:1072): avc: denied { node_bind } for pid=5674 comm="syz.4.562" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 144.557079][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.953530][ T5681] tmpfs: Bad value for 'mpol' [ 144.960262][ T5681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 145.244611][ T5685] loop4: detected capacity change from 0 to 512 [ 145.267449][ T5688] loop5: detected capacity change from 0 to 512 [ 145.301523][ T5685] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.566: Unrecognised inode hash code 255 [ 145.301596][ T5685] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.566: Corrupt directory, running e2fsck is recommended [ 145.364772][ T5688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.364899][ T5688] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.547181][ T5685] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 145.547251][ T5685] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.566: corrupted in-inode xattr: invalid ea_ino [ 145.547288][ T5685] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.549681][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 145.549715][ C0] EXT4-fs (loop4): initial error at time 1772467976: ext4_iget_extra_inode:5025: inode 15 [ 145.549766][ C0] EXT4-fs (loop4): last error at time 1772467976: ext4_iget_extra_inode:5025: inode 15 [ 145.563968][ T5685] EXT4-fs (loop4): Remounting filesystem read-only [ 145.564516][ T5685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.596248][ T5685] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.566: Unrecognised inode hash code 255 [ 145.596338][ T5685] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.566: Corrupt directory, running e2fsck is recommended [ 145.697604][ T5696] syzkaller0: entered promiscuous mode [ 145.697633][ T5696] syzkaller0: entered allmulticast mode [ 145.711382][ T5694] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.566: Unrecognised inode hash code 255 [ 145.999963][ T5694] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.566: Corrupt directory, running e2fsck is recommended [ 146.039527][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.471205][ T5700] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 146.479399][ T5700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.019972][ T5700] vhci_hcd vhci_hcd.0: Device attached [ 147.249159][ T5726] loop3: detected capacity change from 0 to 512 [ 147.272315][ T5726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.289764][ T10] usb 10-1: SetAddress Request (6) to port 0 [ 147.309037][ T5714] vhci_hcd: connection closed [ 147.312047][ T2133] vhci_hcd vhci_hcd.4: stop threads [ 147.324989][ T10] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 147.356200][ T2133] vhci_hcd vhci_hcd.4: release socket [ 147.376624][ T2133] vhci_hcd vhci_hcd.4: disconnect device [ 147.536644][ T5726] EXT4-fs (loop3): 1 truncate cleaned up [ 147.549182][ T5731] netlink: 'syz.2.574': attribute type 5 has an invalid length. [ 147.561067][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.762788][ T5736] loop2: detected capacity change from 0 to 512 [ 147.805264][ T5736] EXT4-fs: quotafile must be on filesystem root [ 147.885290][ T5740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.885423][ T5740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.321215][ T5745] tmpfs: Bad value for 'mpol' [ 148.345138][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 148.503139][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.082038][ T5749] loop4: detected capacity change from 0 to 1764 [ 149.094151][ T5749] iso9660: Unknown parameter '' [ 149.744912][ T5753] loop5: detected capacity change from 0 to 2048 [ 149.815865][ T5757] loop0: detected capacity change from 0 to 512 [ 149.940621][ T5757] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 149.970155][ T5753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.005804][ T5757] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 150.060213][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.095378][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.145977][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 150.145999][ T29] audit: type=1400 audit(1772467981.531:1083): avc: denied { mount } for pid=5750 comm="syz.0.579" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.230180][ T5755] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.579: Unimplemented hash flags: 0x0001 [ 150.276214][ T29] audit: type=1400 audit(1772467981.531:1084): avc: denied { read write } for pid=5750 comm="syz.0.579" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.313633][ T5755] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.579: Corrupt directory, running e2fsck is recommended [ 150.436574][ T29] audit: type=1400 audit(1772467981.531:1085): avc: denied { open } for pid=5750 comm="syz.0.579" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.510132][ T5755] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.579: Unimplemented hash flags: 0x0001 [ 150.595795][ T29] audit: type=1400 audit(1772467981.621:1086): avc: denied { add_name } for pid=5750 comm="syz.0.579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.636792][ T5755] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.579: Corrupt directory, running e2fsck is recommended [ 150.721181][ T29] audit: type=1400 audit(1772467981.621:1087): avc: denied { create } for pid=5750 comm="syz.0.579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.762060][ T5755] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.579: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 150.878890][ T5765] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.579: path /113/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 150.955458][ T29] audit: type=1400 audit(1772467981.741:1088): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.023353][ T5757] binfmt_misc: register: failed to install interpreter file ./file0 [ 151.171979][ T29] audit: type=1400 audit(1772467981.811:1089): avc: denied { create } for pid=5763 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.329348][ T29] audit: type=1400 audit(1772467981.821:1090): avc: denied { write } for pid=5763 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.355556][ T29] audit: type=1400 audit(1772467981.861:1091): avc: denied { prog_load } for pid=5750 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.378622][ T29] audit: type=1400 audit(1772467981.861:1092): avc: denied { bpf } for pid=5750 comm="syz.0.579" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.512261][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.557222][ T5787] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 151.601970][ T5789] loop3: detected capacity change from 0 to 128 [ 151.653470][ T5790] loop2: detected capacity change from 0 to 512 [ 151.673098][ T5790] EXT4-fs: Ignoring removed nobh option [ 151.825804][ T5790] EXT4-fs (loop2): 1 orphan inode deleted [ 151.848215][ T5790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.898292][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.096036][ T5795] rtc_cmos 00:00: Alarms can be up to one day in the future [ 152.142532][ T5794] rtc_cmos 00:00: Alarms can be up to one day in the future [ 152.234756][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.310298][ T5801] loop2: detected capacity change from 0 to 512 [ 152.331744][ T5801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.617078][ T3499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 152.667008][ T5785] loop4: detected capacity change from 0 to 1024 [ 152.780470][ T5785] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.965208][ T10] usb 10-1: device descriptor read/8, error -110 [ 152.974662][ T3499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 152.984088][ T3499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 153.003686][ T5801] EXT4-fs (loop2): 1 truncate cleaned up [ 153.021119][ T5801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.082100][ T10] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 153.086516][ T5785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.113847][ T5785] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.152106][ T3499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 153.163466][ T3499] rtc rtc0: __rtc_set_alarm: err=-22 [ 153.211254][ T5816] loop5: detected capacity change from 0 to 128 [ 153.314684][ T10] usb 10-1: enqueue for inactive port 0 [ 153.321797][ T10] usb 10-1: enqueue for inactive port 0 [ 153.328889][ T10] usb 10-1: enqueue for inactive port 0 [ 153.433608][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 153.548090][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.572974][ T5828] loop0: detected capacity change from 0 to 512 [ 153.603311][ T5828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.642449][ T5828] EXT4-fs (loop0): 1 truncate cleaned up [ 153.670133][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.764660][ T5834] loop5: detected capacity change from 0 to 164 [ 153.997770][ T5834] ISOFS: unable to read i-node block [ 154.000625][ T5833] 8021q: VLANs not supported on gre0 [ 154.029386][ T5834] isofs_fill_super: get root inode failed [ 154.274661][ T5844] loop3: detected capacity change from 0 to 4096 [ 154.314173][ T5844] EXT4-fs: Ignoring removed bh option [ 154.337925][ T5845] loop4: detected capacity change from 0 to 512 [ 154.350082][ T10] usb usb10-port1: attempt power cycle [ 154.373745][ T5844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.419942][ T5845] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 154.499631][ T5845] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 154.560429][ T5845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.684616][ T5845] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.601: Unimplemented hash flags: 0x0001 [ 154.730775][ T5845] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.601: Corrupt directory, running e2fsck is recommended [ 154.848643][ T5845] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.601: Unimplemented hash flags: 0x0001 [ 154.864826][ T5855] loop5: detected capacity change from 0 to 128 [ 154.955052][ T5845] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.601: Corrupt directory, running e2fsck is recommended [ 154.993225][ T5845] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.601: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 155.079381][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.124836][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.164283][ T5859] loop5: detected capacity change from 0 to 512 [ 155.224534][ T5859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.252717][ T5859] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.270792][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.300909][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 155.300930][ T29] audit: type=1400 audit(1772467986.691:1143): avc: denied { write } for pid=5865 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.473939][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.507889][ T29] audit: type=1400 audit(1772467986.801:1144): avc: denied { read append } for pid=5868 comm="syz.2.611" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.541354][ T29] audit: type=1400 audit(1772467986.801:1145): avc: denied { open } for pid=5868 comm="syz.2.611" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.569839][ T29] audit: type=1400 audit(1772467986.811:1146): avc: denied { ioctl } for pid=5868 comm="syz.2.611" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.646723][ T5871] netlink: 'syz.5.609': attribute type 13 has an invalid length. [ 155.855813][ T29] audit: type=1400 audit(1772467987.051:1147): avc: denied { create } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.062060][ T29] audit: type=1400 audit(1772467987.051:1148): avc: denied { bind } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.200299][ T29] audit: type=1400 audit(1772467987.051:1149): avc: denied { bind } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.311226][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.337514][ T29] audit: type=1400 audit(1772467987.051:1150): avc: denied { read } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.388413][ T29] audit: type=1400 audit(1772467987.111:1151): avc: denied { write } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.448761][ T5900] FAULT_INJECTION: forcing a failure. [ 156.448761][ T5900] name failslab, interval 1, probability 0, space 0, times 0 [ 156.454928][ T29] audit: type=1400 audit(1772467987.111:1152): avc: denied { write } for pid=5858 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.497418][ T5901] loop3: detected capacity change from 0 to 512 [ 156.518644][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: syz.5.622 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.518686][ T5900] Tainted: [W]=WARN [ 156.518694][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.518758][ T5900] Call Trace: [ 156.518765][ T5900] [ 156.518773][ T5900] __dump_stack+0x1d/0x30 [ 156.518829][ T5900] dump_stack_lvl+0x95/0xd0 [ 156.518859][ T5900] dump_stack+0x15/0x1b [ 156.518960][ T5900] should_fail_ex+0x263/0x280 [ 156.518988][ T5900] should_failslab+0x8c/0xb0 [ 156.519063][ T5900] kmem_cache_alloc_noprof+0x66/0x400 [ 156.519131][ T5900] ? fcntl_setlk+0x53/0x960 [ 156.519171][ T5900] ? __rcu_read_unlock+0x4e/0x70 [ 156.519195][ T5900] fcntl_setlk+0x53/0x960 [ 156.519226][ T5900] ? avc_has_perm+0x101/0x190 [ 156.519263][ T5900] ? should_fail_ex+0xd9/0x280 [ 156.519291][ T5900] do_fcntl+0x6a1/0xf80 [ 156.519406][ T5900] __se_sys_fcntl+0xb1/0x120 [ 156.519445][ T5900] __x64_sys_fcntl+0x43/0x50 [ 156.519519][ T5900] x64_sys_call+0x2844/0x3020 [ 156.519681][ T5900] do_syscall_64+0x12c/0x370 [ 156.519766][ T5900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.519852][ T5900] RIP: 0033:0x7f6ac69dc799 [ 156.519871][ T5900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.519899][ T5900] RSP: 002b:00007f6ac5437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 156.519926][ T5900] RAX: ffffffffffffffda RBX: 00007f6ac6c55fa0 RCX: 00007f6ac69dc799 [ 156.520016][ T5900] RDX: 0000200000000000 RSI: 0000000000000025 RDI: 0000000000000003 [ 156.520058][ T5900] RBP: 00007f6ac5437090 R08: 0000000000000000 R09: 0000000000000000 [ 156.520075][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.520092][ T5900] R13: 00007f6ac6c56038 R14: 00007f6ac6c55fa0 R15: 00007fff20e85638 [ 156.520156][ T5900] [ 156.799752][ T5901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.811320][ T10] usb usb10-port1: unable to enumerate USB device [ 156.870360][ T5901] EXT4-fs (loop3): 1 truncate cleaned up [ 156.894782][ T5907] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 156.921281][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.992806][ T5907] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 157.010334][ T5907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.106476][ T5907] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.621: Unimplemented hash flags: 0x0001 [ 157.121839][ T5907] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.621: Corrupt directory, running e2fsck is recommended [ 157.139865][ T5921] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.204455][ T5907] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.621: Unimplemented hash flags: 0x0001 [ 157.323692][ T5907] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.621: Corrupt directory, running e2fsck is recommended [ 157.340425][ T5921] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.631: Directory hole found for htree leaf block 0 [ 157.372510][ T5907] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.621: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 157.600029][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.294221][ T5949] set_capacity_and_notify: 3 callbacks suppressed [ 158.294252][ T5949] loop4: detected capacity change from 0 to 1024 [ 158.372896][ T5949] EXT4-fs: Ignoring removed i_version option [ 158.387440][ T5954] hub 8-0:1.0: USB hub found [ 158.392965][ T5954] hub 8-0:1.0: 8 ports detected [ 158.432530][ T5949] EXT4-fs: Ignoring removed bh option [ 158.531477][ T3315] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 158.593989][ T5949] EXT4-fs: inline encryption not supported [ 158.626208][ T5949] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.686681][ T5949] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.636: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.738944][ T5949] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.740051][ T5949] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.636: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.753475][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 158.753507][ C1] EXT4-fs (loop4): initial error at time 1772467990: ext4_map_blocks:776: inode 3: block 2 [ 158.753568][ C1] EXT4-fs (loop4): last error at time 1772467990: ext4_map_blocks:776: inode 3: block 2 [ 158.972904][ T5949] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.975497][ T5949] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.636: Failed to acquire dquot type 0 [ 159.055391][ T5949] loop4: lost filesystem error report for type 5 error -117 [ 159.059259][ T5949] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 159.083134][ T5949] loop4: lost filesystem error report for type 5 error -117 [ 159.091091][ T5949] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.636: mark_inode_dirty error [ 159.152295][ T5949] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.155402][ T5949] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 159.189941][ T5949] EXT4-fs (loop4): 1 orphan inode deleted [ 159.211085][ T70] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.235432][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.253423][ T70] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.257777][ T70] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 159.372630][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.476908][ T5970] hub 8-0:1.0: USB hub found [ 159.483050][ T5970] hub 8-0:1.0: 8 ports detected [ 159.505686][ T3320] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.528172][ T3320] loop4: lost filesystem error report for type 5 error -117 [ 159.528399][ T3320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 159.575989][ T3320] loop4: lost filesystem error report for type 5 error -117 [ 159.576300][ T3320] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 159.709297][ T3320] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.255482][ T5974] loop2: detected capacity change from 0 to 512 [ 160.304190][ T5974] EXT4-fs: quotafile must be on filesystem root [ 160.341260][ T5977] loop5: detected capacity change from 0 to 512 [ 160.390887][ T5978] loop4: detected capacity change from 0 to 2048 [ 160.413839][ T5977] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.647: Unrecognised inode hash code 255 [ 160.445855][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.470280][ T5977] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.647: Corrupt directory, running e2fsck is recommended [ 160.501119][ T5982] loop0: detected capacity change from 0 to 512 [ 160.509441][ T5978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.596210][ T5977] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 160.621735][ T5977] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.647: corrupted in-inode xattr: invalid ea_ino [ 160.624298][ T5982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.665548][ T5977] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.667672][ T5982] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.668292][ T5977] EXT4-fs (loop5): Remounting filesystem read-only [ 160.680525][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 160.680586][ C0] EXT4-fs (loop5): initial error at time 1772467992: ext4_iget_extra_inode:5025: inode 15 [ 160.680635][ C0] EXT4-fs (loop5): last error at time 1772467992: ext4_iget_extra_inode:5025: inode 15 [ 160.712489][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.747920][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 160.747946][ T29] audit: type=1400 audit(1772467992.131:1205): avc: denied { getopt } for pid=5981 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.760664][ T5977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.922701][ T5977] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.647: Unrecognised inode hash code 255 [ 160.939576][ T5977] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.647: Corrupt directory, running e2fsck is recommended [ 161.012052][ T29] audit: type=1400 audit(1772467992.131:1206): avc: denied { setattr } for pid=5981 comm="syz.0.649" name=".log" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.045556][ T5997] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 161.557008][ T29] audit: type=1400 audit(1772467992.771:1207): avc: denied { prog_load } for pid=5998 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 161.584278][ T29] audit: type=1400 audit(1772467992.771:1208): avc: denied { bpf } for pid=5998 comm="syz.4.651" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.613407][ T29] audit: type=1400 audit(1772467992.781:1209): avc: denied { allowed } for pid=5998 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.638695][ T29] audit: type=1400 audit(1772467992.801:1210): avc: denied { create } for pid=5998 comm="syz.4.651" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.689813][ T29] audit: type=1400 audit(1772467992.811:1211): avc: denied { map } for pid=5998 comm="syz.4.651" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.729803][ T29] audit: type=1400 audit(1772467992.811:1212): avc: denied { read write } for pid=5998 comm="syz.4.651" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.772012][ T29] audit: type=1400 audit(1772467993.071:1213): avc: denied { open } for pid=5998 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.801757][ T29] audit: type=1400 audit(1772467993.071:1214): avc: denied { perfmon } for pid=5998 comm="syz.4.651" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.840329][ T6000] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.647: Unrecognised inode hash code 255 [ 161.933121][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.949926][ T6000] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.647: Corrupt directory, running e2fsck is recommended [ 162.264869][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.292219][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.377246][ T6027] loop2: detected capacity change from 0 to 512 [ 162.398879][ T6027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.436539][ T6027] EXT4-fs (loop2): 1 truncate cleaned up [ 162.445058][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.671248][ T6031] loop4: detected capacity change from 0 to 512 [ 162.842303][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.880830][ T6031] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.117413][ T6038] loop0: detected capacity change from 0 to 512 [ 163.206842][ T6038] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 163.244707][ T6038] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 163.274293][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.380278][ T6038] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.662: Unimplemented hash flags: 0x0001 [ 163.413159][ T6038] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.662: Corrupt directory, running e2fsck is recommended [ 163.481054][ T6041] netlink: 'syz.4.661': attribute type 13 has an invalid length. [ 163.710815][ T6038] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.662: Unimplemented hash flags: 0x0001 [ 163.759095][ T6038] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.662: Corrupt directory, running e2fsck is recommended [ 163.820884][ T6038] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.662: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 163.973186][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.021782][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.092689][ T6044] loop0: detected capacity change from 0 to 512 [ 164.123446][ T6044] EXT4-fs (loop0): 1 truncate cleaned up [ 164.155447][ T6044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.208923][ T6044] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.663: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 164.209575][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.273551][ T6052] loop2: detected capacity change from 0 to 512 [ 164.282839][ T6052] EXT4-fs: quotafile must be on filesystem root [ 164.394854][ T6054] hub 8-0:1.0: USB hub found [ 164.400310][ T6054] hub 8-0:1.0: 8 ports detected [ 164.841760][ T3888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.970631][ T6057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.663: bg 0: block 465: padding at end of block bitmap is not set [ 165.125058][ T6074] loop5: detected capacity change from 0 to 512 [ 165.154482][ T6074] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 165.244827][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.271157][ T3315] ================================================================== [ 165.281244][ T3315] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 165.289904][ T3315] [ 165.292468][ T3315] read-write to 0xffff888237d26668 of 1 bytes by task 6074 on cpu 1: [ 165.303136][ T3315] folio_add_lru+0xa4/0x1e0 [ 165.309701][ T3315] folio_add_lru_vma+0x49/0x70 [ 165.316563][ T3315] handle_mm_fault+0x2c3f/0x3020 [ 165.321932][ T3315] __get_user_pages+0x1023/0x1ea0 [ 165.328380][ T3315] __gup_longterm_locked+0x8d7/0xe30 [ 165.336530][ T3315] pin_user_pages_remote+0x7e/0xb0 [ 165.345405][ T3315] process_vm_rw+0x49b/0x9c0 [ 165.351202][ T3315] __x64_sys_process_vm_writev+0x78/0x90 [ 165.358898][ T3315] x64_sys_call+0x1592/0x3020 [ 165.365693][ T3315] do_syscall_64+0x12c/0x370 [ 165.371213][ T6074] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.372190][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.394743][ T3315] [ 165.397546][ T3315] read to 0xffff888237d26668 of 1 bytes by task 3315 on cpu 0: [ 165.408885][ T3315] __lru_add_drain_all+0x17e/0x450 [ 165.414326][ T3315] lru_add_drain_all+0x10/0x20 [ 165.421479][ T3315] invalidate_bdev+0x47/0x70 [ 165.426910][ T3315] ext4_put_super+0x624/0x7d0 [ 165.434218][ T3315] generic_shutdown_super+0xee/0x220 [ 165.440718][ T3315] kill_block_super+0x2a/0x70 [ 165.447403][ T3315] ext4_kill_sb+0x42/0x80 [ 165.454861][ T3315] deactivate_locked_super+0x75/0x1c0 [ 165.461438][ T3315] deactivate_super+0x97/0xa0 [ 165.467410][ T3315] cleanup_mnt+0x2bb/0x330 [ 165.474721][ T3315] __cleanup_mnt+0x19/0x20 [ 165.480413][ T3315] task_work_run+0x130/0x1a0 [ 165.485662][ T3315] exit_to_user_mode_loop+0x1f4/0x6f0 [ 165.493099][ T3315] do_syscall_64+0x249/0x370 [ 165.499656][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.507624][ T3315] [ 165.510304][ T3315] value changed: 0x1a -> 0x1f [ 165.518697][ T3315] [ 165.521740][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 165.529624][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 165.543686][ T3315] Tainted: [W]=WARN [ 165.547801][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.563063][ T3315] ==================================================================