last executing test programs: 2m27.498772103s ago: executing program 2 (id=533): r0 = socket(0x10, 0x80002, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a0000000d000000018000000000010000080100", @ANYRESOCT, @ANYBLOB="150d00"/18, @ANYRES32], 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000410010000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0xc0, &(0x7f0000000480)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 2m27.027484215s ago: executing program 2 (id=537): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x2040400) readahead(r3, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0x10001, @private0={0xfc, 0x0, '\x00', 0x4}, 0x1}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fcntl$dupfd(r1, 0x406, r4) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 2m26.116945738s ago: executing program 2 (id=546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000004c0)=0x479, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x4e, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m25.684902857s ago: executing program 2 (id=547): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000001d000000000000008100000018110000", @ANYRES32=r0, @ANYBLOB="00208000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085ffffff306560810000009500"/72], &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x403, &(0x7f0000000ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc534, 0xc000, 0x8, 0x2200c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000840)=0x4020, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2d}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10001}, @TCA_CODEL_TARGET={0x8, 0x1, 0x13}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x3ff, 0xffffffff, 0x0, 0x4, 0x7fff}}, {0x4}}]}]}, 0x80}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'x'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}]}, 0x80}, 0x1, 0x7}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x8, 0x0) r8 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000140)) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) getpeername$packet(r2, &(0x7f0000000200), &(0x7f0000000240)=0x14) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r10) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r12 = dup(r11) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m25.125658006s ago: executing program 2 (id=553): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x9, 0xfffffffffffffffe}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x9c8a, 0x0, 0x18000000000000}, 0x0, 0x0, 0x0) 2m24.229020487s ago: executing program 2 (id=564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x84, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x19, 0x6, "2369c29d6ac649e7ec16e3fef7c407241b754bab49"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x48, 0x1, [@m_ctinfo={0x44, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x5, 0x6, "c0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048855}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m23.964044135s ago: executing program 32 (id=564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x84, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x19, 0x6, "2369c29d6ac649e7ec16e3fef7c407241b754bab49"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x48, 0x1, [@m_ctinfo={0x44, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x5, 0x6, "c0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048855}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m11.477176139s ago: executing program 4 (id=653): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0xc5) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x58) 2m8.715185339s ago: executing program 4 (id=676): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m8.614961585s ago: executing program 4 (id=678): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x20803) setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="414c211b2dc8", 0x0, 0x100004, 0x10026, 0xffffffffffffffff, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x1000, 0x0, 0x131c, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 2m8.594941357s ago: executing program 4 (id=679): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x573, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000200)='bridge0\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0xe9, 0x4, 0x12, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x10, 0xce, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40448c9}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 2m8.431043258s ago: executing program 4 (id=683): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001c40)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001c40)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x4004020) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x4004020) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x10, 0x70bd27, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x14, 0x7, @l2={'eth', 0x3a, 'pim6reg0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x2dba38589ff746e4) 2m7.625304993s ago: executing program 4 (id=688): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000940)=""/101, 0x65}], 0x1) write$evdev(r0, 0x0, 0x0) 2m7.513178371s ago: executing program 33 (id=688): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000940)=""/101, 0x65}], 0x1) write$evdev(r0, 0x0, 0x0) 27.672368416s ago: executing program 3 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x11, 0x3, 0x0) bind$tipc(r10, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 23.102849338s ago: executing program 3 (id=1358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 22.073048348s ago: executing program 3 (id=1362): syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x20000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000010}) ioctl$TCFLSH(r0, 0x540b, 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") modify_ldt$write2(0x11, &(0x7f0000000100)={0x1, 0x1000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000ffc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x7101}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x400, 0x800}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@gettaction={0xc8, 0x32, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) pselect6(0x47, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x6, 0x81, 0x9, 0x2, 0x0, 0x7ffffffe, 0x1002}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='_)u!=0||!') r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0xe3e, 0x7, 0x9, 0x9, 0xf, "53dec324600b1060bf459cbae123c12fb1ee7e"}) 21.46501504s ago: executing program 3 (id=1369): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000000c0)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x25f, &(0x7f0000000380)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file1/file0\x00'}, 0x6e) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000001600), 0x0}, 0x20) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000140)={0x5, 0x400000000210, 0x7c}) ioctl$TCXONC(r0, 0x540a, 0x1) 20.241104054s ago: executing program 3 (id=1373): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x646240, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 20.091133544s ago: executing program 3 (id=1375): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x814c18, &(0x7f0000000000)=ANY=[], 0x63, 0x7ea, &(0x7f0000000d00)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0xc000000) 20.043542527s ago: executing program 34 (id=1375): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x814c18, &(0x7f0000000000)=ANY=[], 0x63, 0x7ea, &(0x7f0000000d00)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0xc000000) 16.424275845s ago: executing program 1 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r2) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x98}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x1, 0x214, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0xcc, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4005041}, 0xd0) 15.225055107s ago: executing program 1 (id=1404): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c00000000006113520000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001600fdff0fff52e84407000009300000240600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac191c74"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, r1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xffff6779, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="ad3acb8e5bac357e4d77525db48d3a6110a188562a35fc5844075f1e68ba6b5a588d805b039cf39d33f1538cf580e55eecd92d769fad271294be1b76ef1bae148496868d8035565732fda6656c8e45492c6eaf399c4ba0637caf25ab6ab22932741b6142e8754f", @ANYRES16, @ANYRES32=r1], 0x18}}], 0x1, 0x8854) r4 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0xffffffffffffffff, @ANYRES32=r4, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000001c0001002cbd7000fddbdf2502000000", @ANYRES64=r5, @ANYBLOB="000000000c3acbb3cb34f4213968"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x8000, 0x10000, 0x8008, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r8, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000001880)={[{@sb={'sb', 0x3d, 0x5d3a}}, {@nogrpid}, {@noload}, {@nobh}, {@oldalloc}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$key(0xf, 0x3, 0x2) 11.802309652s ago: executing program 1 (id=1426): readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1) 11.589029736s ago: executing program 1 (id=1428): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0xc5) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x58) 6.404229251s ago: executing program 0 (id=1455): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 6.144788939s ago: executing program 0 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x53b, &(0x7f0000000600)="$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") fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x1, 0xfff, 0x6}) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xa00000000000000}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) 5.532595611s ago: executing program 0 (id=1463): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x2, 0x80000000, 0x3, 0xbb08, 0x2, 0x7fffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000002000)=""/4096, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000280)="10a85e693f00dffaedf69136508388384c2053427c4ea18e9780b4d129359deab5aaabb1e2c629a7efaf74947d4251fd899f4335fc34625ecb7ebde4b0e90e45232754c5893b5f6fbd6536df245575f88bea9422deaa32f9f4b48cb5b1b0c4e15ce0a609afa39b7c44292fee3e6e917e3ec8788365d288caa6e6b29879b41adcfe8b35d1c65e99a117f578a16d8cb85dcfe814a68fe2c2b162a3fb273cea7c8b86261da633014c", 0xa7, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r3, 0x8, 0x0, 0x10000) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x2, 0x1) 5.147855447s ago: executing program 5 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x24, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x11, 0x3, 0x0) bind$tipc(r10, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r9, 0x0, 0x0) 3.927656881s ago: executing program 6 (id=1473): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005db000/0x4000)=nil, &(0x7f0000a1a000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ca9000/0x2000)=nil, &(0x7f0000166000/0x3000)=nil, &(0x7f0000455000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000156000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8429, 0xc000, 0xa, 0x40c1}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050022bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="800800000311000014001a8010"], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) (fail_nth: 5) 3.396115147s ago: executing program 6 (id=1474): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "1d6ace8f8ca9"}]}}}}}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1220000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) socket(0x5, 0x1, 0x3) pselect6(0x40, &(0x7f0000000100)={0x4, 0x401, 0x20000000000, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) 3.312813802s ago: executing program 0 (id=1475): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x2002054, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYBLOB="99e65a851aec73f215500465769cd48f337d164eb2efc476b1772040ea798a3823596590a9ee5e4f658e681603fffaeb0b1d222b575b2fbbb28758840ab8c23fd926a6b4dc0092bc492b61673f9da1ce5b0e2208c151473c71700c39633252950f2a97da0176ab1f4f3f0b0bfa772c0a80c4089517f6316926bf083329b4f2bc6c8a5fd2e551b59604a240774de5f6048fa972edf7ae18acb9bc8da5001241d13730827d9525b3d29c29d7bb1f0893632a3bd6eeea90b80a", @ANYRESDEC=r0, @ANYBLOB="3c5e9fe39e768e95bb0b1e30467cee134df7255a7b0b9e112d05ff6624381cb813d7f955ede40306bd126dfa480614142c4a56bc7d94e041ca", @ANYRESHEX=r0, @ANYRES64=r0], 0x1, 0x2df, &(0x7f0000000ac0)="$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") (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000300)={0x10, {0x0, 0x6, 0x2, 0x8, 0x3}}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) inotify_init() (async) r5 = socket$inet6(0xa, 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f00000003c0)="493e832fb1366598e7266013d1287fa5d8a5826260b9eb1a4aca43c8fd7596ad26ddbe3f32898a727691b7c6c45199ed49ab658e7cd276a63afe958c3e59841157e919da224d67347bed7f539a63b91accb50ca53286c273ae0bcfa206857014f5c6cf4ee0950dc6f737ca6e5fab753b67f8cded0a6841c25ec5826c5b48084e40a9f60ba668fc06d00514ee527ede00b717508811fcc0d8eadd16b0079b254843f7be59ed13f2d0c000cb", 0xab}, {&(0x7f0000000580)="bb064d78c75c38e5ae3571ba8605f1dbc91ef29481df617843ea074efb5c99a36c9a6deb247301fb888eff712b7d99363aaec0b7f3196885065d5d36ca1318ddea0dcb57bfa32eaae4b2547b47e5d5aaafc5b544aa74e41fc3ef67dd44273f92f095fda14e24f62bbcfd6dfeba2a07a6f2d3f37c164a7b5e6ad3846e029fbc5987b38662049e657e1e4e20c1d06fe30b9e19eaf522ea602c3161b263a0", 0x9d}, {&(0x7f0000000640)="af2d1089992cb0e776b3b75f43769f73b531b17ede744ea3d37a89f59f8a0fadc2105bcf56706b9a60644bb35f91dd9a86e55b1d0e47945ecdd67d06b9261a3e4ad18d142bb0b7473127dedb78e3f3950c9a6c3810731c4be9b9ca4fd59fc0ae7ac9ae71e1a13c0e0e174c30b4c27c44ee5ea7236ffa19ccf3f2e9ef139308b3d924a84eaba22c19fa802b66d8baadf08c3a89f1ee91f1dface232901e1fae204fa2ac03bd52ada6f9a105f3ef0e391d70ec6a30657c8b8e23c61cde8677a025da052c2477e8329a609decd155f1f342e80e2b9befd6b411e3193a76eb", 0xdd}], 0x3) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151700000700000008000a00", @ANYRES32=r8, @ANYBLOB="140012800c0001006d616376746170000200028008000500", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) (async) setreuid(0x0, 0xee01) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000080)="ff02040000ffff000000003ea68d771895d71ecd650e6262d4b1614326608169e1dd5923a28653b5f0e8d2b6fcf0bd26bd67798e17056cd9a04f53d078166af9c5d13fad06bdc55b", 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000008000000c60001002500000085100000010000009500000000001e001840000002000000000000000000000095000000000000000ab2e0fff0ffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 3.179245482s ago: executing program 7 (id=1476): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x10040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2a62b372, @mcast2, 0x1009}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file2\x00', &(0x7f0000000340), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x48804) 3.013924153s ago: executing program 5 (id=1477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x3ff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.489087939s ago: executing program 5 (id=1478): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x2c, 0x2e, 0x1, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x8}, {0xc, 0xffff}, {0x7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) 2.378298537s ago: executing program 5 (id=1479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000040)='H', 0x1}], 0x1}}], 0x1, 0x4040801) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0x6, 0x8, 0x62}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x8, 0x407, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0xfa, 0x48, &(0x7f0000000840)="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", &(0x7f0000000940)=""/72, 0xfffffffb, 0x0, 0x7d, 0x25, &(0x7f0000000b00)="e47acc261ed82b0fd09a753d4ce641928488de0ca64b7a5533432052e1dce4a8bef8756b7ffa39e441bbef5ae2322e445635e13bb6fe012777e92dc2020f68e1459ce3c9cd2d5419eed24d2b8b93ad3e913886d167b83c2d39625e10c189a2754425d68b956238d0e1543de077dffb975789206c2c5c9c7768a9f6b347", &(0x7f0000000800)="fd71e24b6fc8090b214c63afba862fd88ccb629d1087cb50b0a303c14393be3ec636093845", 0x8, 0x0, 0x10001}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000780)={0x1, 0x1, 0x1000, 0x33, &(0x7f00000005c0)="36ab434cc7578db7d2a64e9b583fc4d913cb5143aebf308b3bfbebb01b0151221a1c7b8b38f7d7af8cd036647851ec1eb35314", 0xf8, 0x0, &(0x7f0000000600)="906471028e4f663df3e1a1b644227533222d6dc7d047aa878a8b97e65a9d79c51b27d197fd22b2211dc04ac95ed75c6d27d2272f063392a5349c46f871707405719c8090f9ea172b1119ba1a367b0b1e38e8e60c886d4286d3f9361cf1c3b4fa107d5cb920c304361e2e0351d92537c7531e4e8147d35c335f66df15afc608b75f1ba02b16685b3bc51eeb7bb6889a716d0b17ed406547d2101e21408cc3c5676a5a13ce7bf926434013d676bbb4c685d49071e030a098780087e5216f26ebd86d8f6992ce67edb1f80a48c776ffd044a649e042ce6f28a5b65a27e8a4c303a1051598536a33621767ead8a505b2cfadd5d4652f83a7895b"}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={{}, 0xffffffff, 0x7, 0x6}) r11 = syz_clone(0x20044000, &(0x7f0000000140)="b9b1dd7a82044d0790bec8f43e16b603b9719e36ebf20f74a289cdb83b905afdb6d9391b", 0x24, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="52a46c43e29f349e63f7de71bd5f89e6b3ea7847c0cfab1c368557f0556917db02bcad0253719b7ada8147e4fd6756fed502e98c2169e6c348a3681e949b452009ad8ab34457b75ce173c8d43461e5d159207e3f47ec59111cd0de19fae17bef2e3d536d52d0") r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2801, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x24, 0x4, 0x8, 0x0, 0x0, 0x5, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp, 0x1044c2, 0x7, 0x2, 0x1, 0x9, 0x8, 0xeb04, 0x0, 0x4}, r11, 0xffffffffffffffff, r12, 0x9) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001009e0bc3ff4200000000000000000000000a20000000000a01030000000000000000010000080900010073797a31000000002c000000030a010200000000000000000100ffff0c00024000000000000000020900010073797a3100000000140000001100010000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 2.343563619s ago: executing program 6 (id=1480): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 2.123495194s ago: executing program 7 (id=1481): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xb, 0x4}, {0x0, 0xfff3}, {0xfff3, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40) r1 = socket$key(0xf, 0x3, 0x2) clock_adjtime(0xa00, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x4040001) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, r3, 0x0) 2.073372448s ago: executing program 0 (id=1482): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x500}]}, 0x10) 2.04152132s ago: executing program 6 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x7a, 0x0, 0x9, {0xfffe, 0x1}, {0x4, 0xffff}, @cond=[{0x5, 0x108, 0x7, 0x85c, 0xf2f, 0x5}, {0x6, 0x1400, 0x1, 0xb831, 0x78a6, 0x1}]}) r1 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x20, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0xe000200f}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xdfe6, 0x2}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@delqdisc={0x24, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xfff1, 0xc}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008881) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe63, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00"], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x20008184) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) setresuid(0x0, 0xee01, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x40, 0x300}}}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2db, &(0x7f0000000480)="$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") 1.971138295s ago: executing program 0 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x100035ab, 0x4) 1.582881941s ago: executing program 1 (id=1485): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000480)={r5, 0x961c, 0x2}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x8, 0x4) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000480)={r5, 0xe9, 0x5}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xffffffff, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x240, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x1000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x629}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x19f}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x7c0dff7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x35b509f1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x87b}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8bb}, {0x8, 0x13, 0x10000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x24}, {0x5, 0x14, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x840}, 0x4000884) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r9, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r8, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 1.582125061s ago: executing program 7 (id=1486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "f68f8ba16df3"}, 0x11) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x3, 0x20000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1.421253032s ago: executing program 7 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207825000000000020202007010000f8ffffffb702000008000000b7030000050000008500000006000000181100001c6fd0055dc5f4fbca6323fee44cfd5be76cf744b51003dfe45d5f3793821af24bf50d5f3be18dd919c24f6e44dc168aa6662212c8d24fb2555c93df56ae67a3aaaa6f67f7b96d645f294206203a8eecc3ed4c68e294ce58fa2d3da668fa9e1c1100e4ac3d19c088594e3bf12ec7aaa6ca8d621c1e4c0c4ab961bca90728", @ANYRES32=r0, @ANYBLOB="25ef83a7b93291a592ef8f0354296169ed221b56b3f81c16103ae263b4d84fa1756370ef57bbb209ee3845b616ee51bc724b99d4f537d9807169af303ff4a0f14c4d5f4380bf4ddef195c939b81f8c824068ac0d5d077b7152882dd8bd5b1e0a6b6b90fd6d608b160e2de84a67b43f53f250c73417e9593c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) r4 = socket$kcm(0xa, 0x3, 0x106) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = geteuid() setuid(r6) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x2, {0x1, 0x0, 0x4, 0x0, 0xc, 0x80, 0x9}}}]}, 0x34}}, 0x4040) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) 1.420960242s ago: executing program 5 (id=1488): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x1, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xc, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0xd, 0x4}, {0x2, 0x1, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x28020480) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff7fc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x7bf1, &(0x7f0000000040)={0x0, 0xd515, 0x20, 0x3, 0xef, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x60008047) 1.335908358s ago: executing program 7 (id=1489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x2c, 0x2e, 0x1, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x8}, {0xc, 0xffff}, {0x7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) 1.222876436s ago: executing program 5 (id=1490): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x6, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x2, 0x0, 0x10ffe, 0x0, 0x1, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x2, 0x0, 0x10ffe, 0x0, 0x1, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=@getqdisc={0x28, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xe}, {0xc, 0xfff0}}, [{0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=@getqdisc={0x28, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xe}, {0xc, 0xfff0}}, [{0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xb, 0xb}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4400d8a1}, 0x4010) 1.217299006s ago: executing program 7 (id=1491): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x10040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2a62b372, @mcast2, 0x1009}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file2\x00', &(0x7f0000000340), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x48804) 1.032198719s ago: executing program 6 (id=1492): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.267959ms ago: executing program 6 (id=1493): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 0s ago: executing program 1 (id=1494): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xf3, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) kernel console output (not intermixed with test programs): ate_block_bitmap:441: comm syz.0.1088: bg 0: block 361: padding at end of block bitmap is not set [ 205.926845][ T7376] loop0: lost filesystem error report for type 5 error -117 [ 205.932625][ T7376] EXT4-fs (loop0): Remounting filesystem read-only [ 205.941396][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 205.941445][ C0] EXT4-fs (loop0): initial error at time 1775630981: ext4_validate_block_bitmap:441 [ 205.941547][ C0] EXT4-fs (loop0): last error at time 1775630981: ext4_validate_block_bitmap:441 [ 205.983660][ T7376] EXT4-fs (loop0): 1 truncate cleaned up [ 206.000976][ T7376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 206.785689][ T7394] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 206.871596][ T7391] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 206.934111][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 206.975377][ T10] lo speed is unknown, defaulting to 1000 [ 206.993695][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 207.049234][ T7398] syzkaller0: entered promiscuous mode [ 207.081070][ T7398] syzkaller0: entered allmulticast mode [ 207.098179][ T3396] lo speed is unknown, defaulting to 1000 [ 207.112733][ T3396] lyz2: Port: 1 Link DOWN [ 207.227268][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.351908][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 207.433862][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.494295][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.616559][ T7419] loop0: detected capacity change from 0 to 8192 [ 207.650000][ T7391] ip6erspan0: left promiscuous mode [ 207.752993][ T9] lo speed is unknown, defaulting to 1000 [ 207.780298][ T1846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.799884][ T1846] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.811358][ T3396] lo speed is unknown, defaulting to 1000 [ 207.817558][ T1846] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.841213][ T1846] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.878513][ T28] kauditd_printk_skb: 831 callbacks suppressed [ 207.878529][ T28] audit: type=1326 audit(1775630983.038:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 207.923400][ T28] audit: type=1326 audit(1775630983.038:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 207.969111][ T7431] xt_policy: output policy not valid in PREROUTING and INPUT [ 207.983603][ T28] audit: type=1326 audit(1775630983.038:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.053382][ T28] audit: type=1326 audit(1775630983.038:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.119266][ T28] audit: type=1326 audit(1775630983.038:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.156188][ T7429] syzkaller0: entered promiscuous mode [ 208.178422][ T7429] syzkaller0: entered allmulticast mode [ 208.184704][ T28] audit: type=1326 audit(1775630983.038:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.210771][ T28] audit: type=1326 audit(1775630983.038:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.235480][ T28] audit: type=1326 audit(1775630983.038:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.262494][ T28] audit: type=1326 audit(1775630983.038:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.287103][ T28] audit: type=1326 audit(1775630983.038:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 208.470680][ T7440] loop0: detected capacity change from 0 to 2048 [ 208.644297][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.723405][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.905277][ T7459] loop0: detected capacity change from 0 to 256 [ 208.938343][ T7459] FAT-fs (loop0): Directory bread(block 64) failed [ 208.945503][ T7459] FAT-fs (loop0): Directory bread(block 65) failed [ 208.980511][ T7459] FAT-fs (loop0): Directory bread(block 66) failed [ 209.264990][ T7460] loop5: detected capacity change from 0 to 512 [ 209.280261][ T7460] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.310988][ T7459] FAT-fs (loop0): Directory bread(block 67) failed [ 209.319473][ T7459] FAT-fs (loop0): Directory bread(block 68) failed [ 209.328599][ T7459] FAT-fs (loop0): Directory bread(block 69) failed [ 209.354429][ T7460] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 209.402448][ T7460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 209.413731][ T7460] EXT4-fs (loop5): orphan cleanup on readonly fs [ 209.424175][ T7460] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1106: bg 0: block 361: padding at end of block bitmap is not set [ 209.439663][ T7460] loop5: lost filesystem error report for type 5 error -117 [ 209.448111][ T7460] EXT4-fs (loop5): Remounting filesystem read-only [ 209.456398][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 209.456538][ C0] EXT4-fs (loop5): initial error at time 1775630984: ext4_validate_block_bitmap:441 [ 209.456687][ C0] EXT4-fs (loop5): last error at time 1775630984: ext4_validate_block_bitmap:441 [ 209.517789][ T7460] EXT4-fs (loop5): 1 truncate cleaned up [ 209.536473][ T7460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 209.614970][ T7459] FAT-fs (loop0): Directory bread(block 70) failed [ 209.714966][ T7459] FAT-fs (loop0): Directory bread(block 71) failed [ 209.744444][ T7459] FAT-fs (loop0): Directory bread(block 72) failed [ 209.769510][ T7459] FAT-fs (loop0): Directory bread(block 73) failed [ 210.921083][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 211.230712][ T7472] loop1: detected capacity change from 0 to 512 [ 211.244992][ T7472] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.291635][ T7472] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 211.320863][ T7472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 211.331128][ T7472] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.348067][ T7472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1111: bg 0: block 361: padding at end of block bitmap is not set [ 211.364012][ T7472] loop1: lost filesystem error report for type 5 error -117 [ 211.367503][ T7472] EXT4-fs (loop1): Remounting filesystem read-only [ 211.375171][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 211.375441][ C0] EXT4-fs (loop1): initial error at time 1775630986: ext4_validate_block_bitmap:441 [ 211.375672][ C0] EXT4-fs (loop1): last error at time 1775630986: ext4_validate_block_bitmap:441 [ 211.417748][ T7472] EXT4-fs (loop1): 1 truncate cleaned up [ 211.435170][ T7472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 212.163386][ T7487] lo speed is unknown, defaulting to 1000 [ 212.184333][ T7489] netlink: 'syz.3.1117': attribute type 11 has an invalid length. [ 212.210097][ T7489] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1117'. [ 212.243756][ T7489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1117'. [ 212.275257][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 212.304183][ T7489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1117'. [ 212.333220][ T7489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1117'. [ 212.725481][ T7502] syzkaller0: entered promiscuous mode [ 212.750365][ T7502] syzkaller0: entered allmulticast mode [ 212.777056][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 212.939410][ T7487] dvmrp0: entered allmulticast mode [ 212.946067][ T7487] dvmrp0: left allmulticast mode [ 212.979826][ T7514] loop0: detected capacity change from 0 to 736 [ 212.994591][ T7513] netlink: 'syz.6.1125': attribute type 1 has an invalid length. [ 213.297731][ T7515] loop1: detected capacity change from 0 to 512 [ 213.312944][ T7515] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.327484][ T7515] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 213.397982][ T7515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 213.408896][ T7515] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.423234][ T7515] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1122: bg 0: block 361: padding at end of block bitmap is not set [ 213.438158][ T7515] loop1: lost filesystem error report for type 5 error -117 [ 213.440262][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 213.454133][ C1] EXT4-fs (loop1): initial error at time 1775630988: ext4_validate_block_bitmap:441 [ 213.463940][ C1] EXT4-fs (loop1): last error at time 1775630988: ext4_validate_block_bitmap:441 [ 213.496026][ T7515] EXT4-fs (loop1): Remounting filesystem read-only [ 213.507108][ T7515] EXT4-fs (loop1): 1 truncate cleaned up [ 213.523736][ T7515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 213.610668][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 213.610694][ T28] audit: type=1400 audit(1775630988.768:7210): avc: denied { cpu } for pid=7506 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.728439][ T7514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7514 comm=syz.0.1123 [ 213.855035][ T28] audit: type=1400 audit(1775630988.828:7211): avc: denied { read } for pid=7506 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.971553][ T28] audit: type=1326 audit(1775630989.078:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.052494][ T28] audit: type=1326 audit(1775630989.078:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.130574][ T28] audit: type=1326 audit(1775630989.078:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.196442][ T28] audit: type=1326 audit(1775630989.078:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.245773][ T28] audit: type=1326 audit(1775630989.078:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.323306][ T28] audit: type=1326 audit(1775630989.088:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.397159][ T28] audit: type=1326 audit(1775630989.088:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.480955][ T28] audit: type=1326 audit(1775630989.088:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 214.808035][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 214.935205][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1131'. [ 215.017087][ T7538] lo speed is unknown, defaulting to 1000 [ 215.086707][ T7526] futex_wake_op: syz.3.1136 tries to shift op by 144; fix this program [ 215.244360][ T7550] loop5: detected capacity change from 0 to 512 [ 215.314269][ T7550] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.986459][ T7553] loop6: detected capacity change from 0 to 512 [ 216.085231][ T7553] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 216.121640][ T7550] EXT4-fs (loop5): 1 truncate cleaned up [ 216.128471][ T7550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.222779][ T7553] EXT4-fs (loop6): 1 truncate cleaned up [ 216.229538][ T7553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.413097][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.516693][ T7566] program syz.5.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.586062][ T7571] lo speed is unknown, defaulting to 1000 [ 216.675737][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.953266][ T7578] loop0: detected capacity change from 0 to 512 [ 216.967542][ T7578] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.984236][ T7578] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 217.004911][ T7578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 217.016813][ T7578] EXT4-fs (loop0): orphan cleanup on readonly fs [ 217.030920][ T7578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1140: bg 0: block 361: padding at end of block bitmap is not set [ 217.046907][ T7578] loop0: lost filesystem error report for type 5 error -117 [ 217.049215][ T7578] EXT4-fs (loop0): Remounting filesystem read-only [ 217.057560][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 217.057823][ C0] EXT4-fs (loop0): initial error at time 1775630992: ext4_validate_block_bitmap:441 [ 217.057967][ C0] EXT4-fs (loop0): last error at time 1775630992: ext4_validate_block_bitmap:441 [ 217.103803][ T7578] EXT4-fs (loop0): 1 truncate cleaned up [ 217.122223][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 217.489573][ T7587] loop1: detected capacity change from 0 to 512 [ 217.563889][ T7587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.386472][ T7587] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.415954][ T7595] loop3: detected capacity change from 0 to 512 [ 218.424342][ T7595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.446955][ T7595] EXT4-fs (loop3): 1 truncate cleaned up [ 218.453842][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.541041][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1145'. [ 218.581357][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 218.668638][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 218.668653][ T28] audit: type=1326 audit(1775630993.828:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 218.759087][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.770944][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 218.804351][ T28] audit: type=1326 audit(1775630993.858:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 218.809490][ T7587] lo speed is unknown, defaulting to 1000 [ 218.844807][ T28] audit: type=1326 audit(1775630993.858:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 218.884448][ T28] audit: type=1326 audit(1775630993.858:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 218.909566][ T7598] loop5: detected capacity change from 0 to 8192 [ 218.932813][ T28] audit: type=1326 audit(1775630993.858:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 218.959715][ T28] audit: type=1326 audit(1775630993.858:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 219.030026][ T28] audit: type=1326 audit(1775630993.868:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 219.062201][ T7611] FAULT_INJECTION: forcing a failure. [ 219.062201][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 219.097305][ T28] audit: type=1326 audit(1775630993.868:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 219.124000][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.3.1153 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.124044][ T7611] Tainted: [W]=WARN [ 219.124127][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.124141][ T7611] Call Trace: [ 219.124148][ T7611] [ 219.124158][ T7611] __dump_stack+0x1d/0x30 [ 219.124192][ T7611] dump_stack_lvl+0x95/0xd0 [ 219.124297][ T7611] dump_stack+0x15/0x1b [ 219.124327][ T7611] should_fail_ex+0x263/0x280 [ 219.124366][ T7611] should_failslab+0x8c/0xb0 [ 219.124441][ T7611] __kvmalloc_node_noprof+0x155/0x650 [ 219.124482][ T7611] ? __se_sys_setgroups+0xd4/0x310 [ 219.124514][ T7611] __se_sys_setgroups+0xd4/0x310 [ 219.124617][ T7611] __x64_sys_setgroups+0x31/0x40 [ 219.124646][ T7611] x64_sys_call+0x2c38/0x3020 [ 219.124675][ T7611] do_syscall_64+0x12c/0x370 [ 219.124770][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.124794][ T7611] RIP: 0033:0x7f412f51c819 [ 219.124814][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.124837][ T7611] RSP: 002b:00007f412df77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 219.124860][ T7611] RAX: ffffffffffffffda RBX: 00007f412f795fa0 RCX: 00007f412f51c819 [ 219.124874][ T7611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.124918][ T7611] RBP: 00007f412df77090 R08: 0000000000000000 R09: 0000000000000000 [ 219.124930][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.124946][ T7611] R13: 00007f412f796038 R14: 00007f412f795fa0 R15: 00007ffc59bc70c8 [ 219.124966][ T7611] [ 219.129109][ T28] audit: type=1326 audit(1775630993.868:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 219.331532][ T28] audit: type=1326 audit(1775630993.868:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1ecc819 code=0x7ffc0000 [ 219.450013][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.502057][ T7620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1157'. [ 219.511336][ T7620] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1157'. [ 219.530154][ T7620] netlink: 'syz.0.1157': attribute type 5 has an invalid length. [ 219.538524][ T7620] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1157'. [ 220.094645][ T7635] loop3: detected capacity change from 0 to 512 [ 220.106704][ T7635] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.161101][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 222.339524][ T7654] veth1_to_bridge: entered allmulticast mode [ 222.364508][ T7654] veth1_to_bridge: left allmulticast mode [ 222.745155][ T7660] loop0: detected capacity change from 0 to 256 [ 222.796105][ T7635] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.810776][ T7635] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 222.811816][ T7635] EXT4-fs: failed to create workqueue [ 222.829013][ T7635] EXT4-fs (loop3): mount failed [ 223.132311][ T7667] lo speed is unknown, defaulting to 1000 [ 223.147079][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1171'. [ 223.174368][ T7671] loop3: detected capacity change from 0 to 128 [ 223.298888][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.334109][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 223.338574][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.359920][ T7674] loop5: detected capacity change from 0 to 512 [ 223.372195][ T7676] 9p: Bad value for 'wfdno' [ 223.458312][ T7674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.543360][ T7674] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1172: invalid block [ 223.570249][ T7674] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.572387][ T7674] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1172: invalid indirect mapped block 4294967295 (level 1) [ 223.581726][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 223.581753][ C0] EXT4-fs (loop5): initial error at time 1775630998: ext4_get_branch:178: inode 11: block 4294967295 [ 223.581788][ C0] EXT4-fs (loop5): last error at time 1775630998: ext4_get_branch:178: inode 11: block 4294967295 [ 223.625602][ T7674] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.625909][ T7674] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1172: invalid indirect mapped block 4294967295 (level 1) [ 223.649623][ T7674] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.650000][ T7674] EXT4-fs (loop5): 2 truncates cleaned up [ 223.666272][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.892305][ T28] kauditd_printk_skb: 302 callbacks suppressed [ 223.892345][ T28] audit: type=1326 audit(1775630999.028:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f889ca0d04e code=0x7ffc0000 [ 223.897130][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.932120][ T28] audit: type=1326 audit(1775630999.028:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f889ca4ac57 code=0x7ffc0000 [ 223.958311][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.978802][ T7695] loop6: detected capacity change from 0 to 512 [ 223.995521][ T28] audit: type=1326 audit(1775630999.028:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f889ca0d04e code=0x7ffc0000 [ 224.029630][ T7695] EXT4-fs: dax option not supported [ 224.037755][ T7697] 9p: Bad value for 'rfdno' [ 224.091206][ T28] audit: type=1326 audit(1775630999.028:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 224.160421][ T28] audit: type=1326 audit(1775630999.028:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 224.195671][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.213900][ T7700] loop3: detected capacity change from 0 to 8192 [ 224.330396][ T28] audit: type=1326 audit(1775630999.048:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 224.430252][ T28] audit: type=1326 audit(1775630999.088:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f889ca4c819 code=0x7ffc0000 [ 224.455506][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.467467][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 224.475648][ T3314] FAT-fs (loop3): Filesystem has been set read-only [ 224.511684][ T28] audit: type=1326 audit(1775630999.088:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f889ca4c582 code=0x7ffc0000 [ 224.563287][ T7706] loop1: detected capacity change from 0 to 512 [ 224.580260][ T28] audit: type=1326 audit(1775630999.088:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f889ca0d04e code=0x7ffc0000 [ 224.630145][ T7706] EXT4-fs (loop1): 1 truncate cleaned up [ 224.649098][ T7706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.679545][ T28] audit: type=1326 audit(1775630999.088:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.5.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f889ca4c647 code=0x7ffc0000 [ 224.738474][ T7706] lo speed is unknown, defaulting to 1000 [ 224.789930][ T7716] x_tables: duplicate entry at hook 2 [ 224.796629][ T7716] 9p: Bad value for 'rfdno' [ 225.049687][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.189119][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1193'. [ 225.199911][ T7731] loop0: detected capacity change from 0 to 1024 [ 225.225854][ T7731] EXT4-fs: Invalid want_extra_isize 0 [ 225.259919][ T7736] nfs: Unknown parameter 'appraise' [ 225.419362][ T7738] FAULT_INJECTION: forcing a failure. [ 225.419362][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 225.433374][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.0.1195 Tainted: G W syzkaller #0 PREEMPT(full) [ 225.433416][ T7738] Tainted: [W]=WARN [ 225.433426][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.433443][ T7738] Call Trace: [ 225.433449][ T7738] [ 225.433456][ T7738] __dump_stack+0x1d/0x30 [ 225.433483][ T7738] dump_stack_lvl+0x95/0xd0 [ 225.433508][ T7738] dump_stack+0x15/0x1b [ 225.433530][ T7738] should_fail_ex+0x263/0x280 [ 225.433561][ T7738] should_failslab+0x8c/0xb0 [ 225.433589][ T7738] kmem_cache_alloc_noprof+0x66/0x400 [ 225.433620][ T7738] ? mas_alloc_nodes+0x1a2/0x210 [ 225.433654][ T7738] mas_alloc_nodes+0x1a2/0x210 [ 225.433681][ T7738] mas_preallocate+0x2ca/0x510 [ 225.433709][ T7738] __split_vma+0x240/0x640 [ 225.433731][ T7738] ? vma_modify+0x115/0xd00 [ 225.433771][ T7738] vma_modify+0xb2e/0xd00 [ 225.433817][ T7738] vma_modify_policy+0x177/0x1b0 [ 225.433867][ T7738] mbind_range+0x1b8/0x430 [ 225.433902][ T7738] ? mas_find+0x5d5/0x700 [ 225.433928][ T7738] __se_sys_mbind+0x8b1/0xdd0 [ 225.433967][ T7738] __x64_sys_mbind+0x78/0x90 [ 225.434002][ T7738] x64_sys_call+0x2b72/0x3020 [ 225.434037][ T7738] do_syscall_64+0x12c/0x370 [ 225.434065][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.434089][ T7738] RIP: 0033:0x7fac19dec819 [ 225.434108][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.434127][ T7738] RSP: 002b:00007fac18847028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 225.434152][ T7738] RAX: ffffffffffffffda RBX: 00007fac1a065fa0 RCX: 00007fac19dec819 [ 225.434170][ T7738] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 225.434187][ T7738] RBP: 00007fac18847090 R08: 0000000000000000 R09: 0000000000000002 [ 225.434205][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.434220][ T7738] R13: 00007fac1a066038 R14: 00007fac1a065fa0 R15: 00007ffd6a194698 [ 225.434246][ T7738] [ 225.689005][ T7745] loop5: detected capacity change from 0 to 512 [ 225.749327][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.764064][ T7745] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.838544][ T7752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 225.850851][ T7751] EXT4-fs (loop5): shut down requested (0) [ 225.991594][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.295920][ T7759] loop1: detected capacity change from 0 to 512 [ 226.309350][ T7759] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.322423][ T4427] Bluetooth: hci0: command 0x1003 tx timeout [ 226.329051][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.400636][ T7759] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.432455][ T7759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 226.444297][ T7759] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.454726][ T7759] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1201: bg 0: block 361: padding at end of block bitmap is not set [ 226.471257][ T7759] loop1: lost filesystem error report for type 5 error -117 [ 226.473258][ T7759] EXT4-fs (loop1): Remounting filesystem read-only [ 226.481454][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 226.481505][ C1] EXT4-fs (loop1): initial error at time 1775631001: ext4_validate_block_bitmap:441 [ 226.481603][ C1] EXT4-fs (loop1): last error at time 1775631001: ext4_validate_block_bitmap:441 [ 226.524069][ T7759] EXT4-fs (loop1): 1 truncate cleaned up [ 226.540627][ T7759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 226.762824][ T7765] loop3: detected capacity change from 0 to 128 [ 226.803182][ T7765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.886496][ T7765] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.960749][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 227.812792][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 228.249747][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 228.282857][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.299475][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 228.329431][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.357360][ T7805] syzkaller0: entered promiscuous mode [ 228.387536][ T7805] syzkaller0: entered allmulticast mode [ 229.158344][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 229.178627][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1221'. [ 229.483737][ T7828] loop5: detected capacity change from 0 to 512 [ 229.499446][ T7828] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.564337][ T7828] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 229.580601][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.583930][ T7828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 229.606670][ T7828] EXT4-fs (loop5): orphan cleanup on readonly fs [ 229.619281][ T7828] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1222: bg 0: block 361: padding at end of block bitmap is not set [ 229.634370][ T7828] loop5: lost filesystem error report for type 5 error -117 [ 229.640221][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 229.654494][ C0] EXT4-fs (loop5): initial error at time 1775631004: ext4_validate_block_bitmap:441 [ 229.664331][ C0] EXT4-fs (loop5): last error at time 1775631004: ext4_validate_block_bitmap:441 [ 229.674160][ T7828] EXT4-fs (loop5): Remounting filesystem read-only [ 229.703547][ T7828] EXT4-fs (loop5): 1 truncate cleaned up [ 229.718011][ T7828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 229.780983][ T7834] loop3: detected capacity change from 0 to 128 [ 229.902883][ T7840] loop0: detected capacity change from 0 to 512 [ 229.927255][ T7840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.940520][ T7840] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.972625][ T7840] lo speed is unknown, defaulting to 1000 [ 230.091515][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 230.105589][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 230.213287][ T7855] loop5: detected capacity change from 0 to 1024 [ 230.289448][ T7855] EXT4-fs: Ignoring removed bh option [ 230.335663][ T7859] loop1: detected capacity change from 0 to 2048 [ 230.367085][ T7855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.426272][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.472333][ T7855] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1230'. [ 230.535674][ T7859] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 230.553546][ T28] kauditd_printk_skb: 175 callbacks suppressed [ 230.553646][ T28] audit: type=1400 audit(1775631005.688:7796): avc: denied { ioctl } for pid=7858 comm="syz.1.1231" path="/228/file0/file1" dev="loop1" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.593578][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1230'. [ 230.665907][ T7859] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 230.710652][ T28] audit: type=1400 audit(1775631005.698:7797): avc: denied { execute } for pid=7858 comm="syz.1.1231" path="/228/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.734883][ T7859] EXT4-fs (loop1): This should not happen!! Data will be lost [ 230.734883][ T7859] [ 230.744907][ T7859] EXT4-fs (loop1): Total free blocks count 0 [ 230.751607][ T7859] EXT4-fs (loop1): Free/Dirty block details [ 230.761438][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.768160][ T7859] EXT4-fs (loop1): free_blocks=66060288 [ 230.776279][ T7859] EXT4-fs (loop1): dirty_blocks=16 [ 230.781561][ T7859] EXT4-fs (loop1): Block reservation details [ 230.788162][ T7859] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 230.794691][ T7867] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 230.812595][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.822363][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 230.860352][ T7859] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1231'. [ 230.883015][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 230.947707][ T7881] loop5: detected capacity change from 0 to 512 [ 230.969411][ T7881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.969418][ T28] audit: type=1326 audit(1775631006.128:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.013678][ T7886] loop0: detected capacity change from 0 to 512 [ 231.013714][ T7882] loop3: detected capacity change from 0 to 2048 [ 231.027733][ T7881] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1232: invalid indirect mapped block 83886080 (level 1) [ 231.032487][ T7886] EXT4-fs: Ignoring removed orlov option [ 231.061438][ T28] audit: type=1326 audit(1775631006.128:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.085956][ T28] audit: type=1326 audit(1775631006.128:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.090603][ T7881] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 231.109627][ T28] audit: type=1326 audit(1775631006.128:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.145711][ T28] audit: type=1326 audit(1775631006.128:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.157884][ T3315] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 231.181452][ T7886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.196665][ T7881] EXT4-fs (loop5): Remounting filesystem read-only [ 231.199428][ T7891] loop6: detected capacity change from 0 to 512 [ 231.203454][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 231.203478][ C0] EXT4-fs (loop5): initial error at time 1775631006: ext4_free_branches:1023: inode 16 [ 231.203507][ C0] EXT4-fs (loop5): last error at time 1775631006: ext4_free_branches:1023: inode 16 [ 231.204828][ T7881] EXT4-fs (loop5): 1 orphan inode deleted [ 231.222484][ T7886] EXT4-fs (loop0): 1 orphan inode deleted [ 231.227909][ T7881] EXT4-fs (loop5): 1 truncate cleaned up [ 231.254129][ T7882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.259418][ T28] audit: type=1326 audit(1775631006.128:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.268798][ T7886] EXT4-fs (loop0): 1 truncate cleaned up [ 231.303822][ T28] audit: type=1326 audit(1775631006.128:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.309975][ T7881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.334342][ T28] audit: type=1326 audit(1775631006.128:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7878 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 231.367178][ T7886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.387704][ T7886] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.1234: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 231.396942][ T7891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.411654][ T7886] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.1234: path /255/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=128 fake=0 [ 231.442514][ T7891] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.480077][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.489385][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.507049][ T7902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 231.523644][ T7902] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 231.525625][ T7903] EXT4-fs (loop6): shut down requested (0) [ 231.536292][ T7902] EXT4-fs (loop3): This should not happen!! Data will be lost [ 231.536292][ T7902] [ 231.551758][ T7902] EXT4-fs (loop3): Total free blocks count 0 [ 231.558051][ T7902] EXT4-fs (loop3): Free/Dirty block details [ 231.580960][ T7902] EXT4-fs (loop3): free_blocks=66060288 [ 231.587157][ T7902] EXT4-fs (loop3): dirty_blocks=16 [ 231.594119][ T7902] EXT4-fs (loop3): Block reservation details [ 231.600899][ T7902] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 231.621710][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.702977][ T7909] bridge1: entered promiscuous mode [ 231.736917][ T7911] loop6: detected capacity change from 0 to 256 [ 231.761886][ T7911] FAT-fs (loop6): Directory bread(block 64) failed [ 231.768588][ T7911] FAT-fs (loop6): Directory bread(block 65) failed [ 231.775450][ T7911] FAT-fs (loop6): Directory bread(block 66) failed [ 231.782161][ T7911] FAT-fs (loop6): Directory bread(block 67) failed [ 231.788945][ T7911] FAT-fs (loop6): Directory bread(block 68) failed [ 231.800311][ T7911] FAT-fs (loop6): Directory bread(block 69) failed [ 231.807473][ T7911] FAT-fs (loop6): Directory bread(block 70) failed [ 231.814655][ T7911] FAT-fs (loop6): Directory bread(block 71) failed [ 231.824614][ T7911] FAT-fs (loop6): Directory bread(block 72) failed [ 231.831854][ T7911] FAT-fs (loop6): Directory bread(block 73) failed [ 231.832032][ T2174] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 231.852515][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.858337][ T3314] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 231.895505][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.959041][ T7915] FAT-fs (loop3): codepage cp852 not found [ 232.074821][ T7922] EXT4-fs: test_dummy_encryption option not supported [ 233.072101][ T7931] EXT4-fs (loop6): 1 orphan inode deleted [ 233.079382][ T7931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.092799][ T30] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 233.110251][ T30] loop6: lost filesystem error report for type 5 error -117 [ 233.110775][ T7931] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.153860][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.205585][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 234.265282][ T7949] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1253'. [ 234.276357][ T7950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.336141][ T7950] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 234.369963][ T7965] EXT4-fs: Ignoring removed orlov option [ 234.412594][ T7965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.430441][ T7950] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 234.452269][ T7965] EXT4-fs (loop5): 1 orphan inode deleted [ 234.458078][ T7965] EXT4-fs (loop5): 1 truncate cleaned up [ 234.475488][ T7950] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.475488][ T7950] [ 234.505100][ T7965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.521758][ T7950] EXT4-fs (loop3): Total free blocks count 0 [ 234.540296][ T7950] EXT4-fs (loop3): Free/Dirty block details [ 234.546464][ T7950] EXT4-fs (loop3): free_blocks=2415919504 [ 234.552530][ T7950] EXT4-fs (loop3): dirty_blocks=32 [ 234.561464][ T7965] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1257: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 234.588083][ T7950] EXT4-fs (loop3): Block reservation details [ 234.600300][ T7950] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 234.610452][ T7950] EXT4-fs error (device loop3) in ext4_setattr:6028: error 28 [ 234.636776][ T7972] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.1257: path /123/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=128 fake=0 [ 234.716021][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 234.729202][ T3314] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 234.803355][ T7974] set_capacity_and_notify: 6 callbacks suppressed [ 234.803377][ T7974] loop3: detected capacity change from 0 to 2048 [ 234.842285][ T7974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.012300][ T7978] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 235.050295][ T7978] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 235.062581][ T7978] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.062581][ T7978] [ 235.072610][ T7978] EXT4-fs (loop3): Total free blocks count 0 [ 235.078655][ T7978] EXT4-fs (loop3): Free/Dirty block details [ 235.100257][ T7978] EXT4-fs (loop3): free_blocks=66060288 [ 235.105961][ T7978] EXT4-fs (loop3): dirty_blocks=16 [ 235.113938][ T7978] EXT4-fs (loop3): Block reservation details [ 235.123439][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1262'. [ 235.140253][ T7978] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 235.157548][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.445987][ T7990] loop5: detected capacity change from 0 to 512 [ 235.530676][ T7990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.563935][ T7990] EXT4-fs (loop5): 1 truncate cleaned up [ 235.570499][ T7990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.650278][ T28] kauditd_printk_skb: 567 callbacks suppressed [ 235.650296][ T28] audit: type=1400 audit(1775631010.758:8372): avc: denied { create } for pid=7982 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.761495][ T7993] loop6: detected capacity change from 0 to 1024 [ 235.804905][ T2174] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 235.852337][ T28] audit: type=1400 audit(1775631010.758:8373): avc: denied { bind } for pid=7982 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.900242][ T28] audit: type=1400 audit(1775631010.758:8374): avc: denied { name_bind } for pid=7982 comm="syz.5.1263" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 235.921086][ T28] audit: type=1400 audit(1775631010.758:8375): avc: denied { node_bind } for pid=7982 comm="syz.5.1263" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 235.941792][ T28] audit: type=1400 audit(1775631010.758:8376): avc: denied { connect } for pid=7982 comm="syz.5.1263" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.962232][ T28] audit: type=1400 audit(1775631010.768:8377): avc: denied { setattr } for pid=7982 comm="syz.5.1263" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.985123][ T3314] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 236.006718][ T28] audit: type=1400 audit(1775631010.998:8378): avc: denied { remount } for pid=7991 comm="syz.6.1265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.074986][ T7995] loop6: detected capacity change from 0 to 512 [ 236.081390][ T28] audit: type=1400 audit(1775631011.228:8379): avc: denied { read write } for pid=7994 comm="syz.6.1267" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.148148][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.188052][ T7995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.201393][ T7995] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.212293][ T28] audit: type=1400 audit(1775631011.228:8380): avc: denied { open } for pid=7994 comm="syz.6.1267" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.277963][ T28] audit: type=1400 audit(1775631011.438:8381): avc: denied { write open } for pid=7994 comm="syz.6.1267" path="/115/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 236.344056][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.354725][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.520399][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.529378][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.547174][ T8004] syzkaller1: entered promiscuous mode [ 236.980732][ T8015] loop5: detected capacity change from 0 to 512 [ 236.997401][ T8015] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.012284][ T8015] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 237.026020][ T8004] syzkaller1: entered allmulticast mode [ 237.066508][ T8015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 237.077714][ T8015] EXT4-fs (loop5): orphan cleanup on readonly fs [ 237.091932][ T8015] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1268: bg 0: block 361: padding at end of block bitmap is not set [ 237.107591][ T8015] loop5: lost filesystem error report for type 5 error -117 [ 237.109970][ T8015] EXT4-fs (loop5): Remounting filesystem read-only [ 237.125397][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 237.125500][ C0] EXT4-fs (loop5): initial error at time 1775631012: ext4_validate_block_bitmap:441 [ 237.125760][ C0] EXT4-fs (loop5): last error at time 1775631012: ext4_validate_block_bitmap:441 [ 237.159724][ T8015] EXT4-fs (loop5): 1 truncate cleaned up [ 237.178426][ T8015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 237.275817][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.612987][ T8019] loop6: detected capacity change from 0 to 512 [ 237.656136][ T8019] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 237.703475][ T8019] EXT4-fs (loop6): 1 truncate cleaned up [ 237.741411][ T8019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.862360][ T8019] EXT4-fs (loop6): shut down requested (2) [ 237.889437][ T8019] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 237.909250][ T8019] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 237.938108][ T8019] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 238.334708][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 238.384369][ T8032] netlink: 'syz.5.1277': attribute type 8 has an invalid length. [ 238.429673][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.445688][ T8032] loop5: detected capacity change from 0 to 128 [ 238.636051][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 238.651303][ T8049] loop6: detected capacity change from 0 to 512 [ 238.662465][ T8046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 238.698189][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1283: corrupted inode contents [ 238.698666][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 238.742867][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1287'. [ 238.773352][ T8058] loop5: detected capacity change from 0 to 2048 [ 238.906693][ T8049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 238.906897][ T8049] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #3: comm syz.6.1283: mark_inode_dirty error [ 238.916333][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 238.916358][ C1] EXT4-fs (loop6): initial error at time 1775631014: ext4_do_update_inode:5602: inode 3 [ 238.916389][ C1] EXT4-fs (loop6): last error at time 1775631014: ext4_do_update_inode:5602: inode 3 [ 238.955091][ T8058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.983016][ T8049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 238.983958][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1283: corrupted inode contents [ 239.221524][ T8062] loop3: detected capacity change from 0 to 512 [ 239.254336][ T8062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.380249][ T8062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.396394][ T8062] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.532639][ T8066] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 239.780657][ T8049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 239.781125][ T8049] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1283: mark_inode_dirty error [ 239.804885][ T8066] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 239.836984][ T8068] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 239.854921][ T8066] EXT4-fs (loop5): This should not happen!! Data will be lost [ 239.854921][ T8066] [ 239.867612][ T8049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 239.868019][ T8049] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1283: Failed to acquire dquot type 0 [ 239.903742][ T8068] EXT4-fs (loop1): 1 truncate cleaned up [ 239.913609][ T8066] EXT4-fs (loop5): Total free blocks count 0 [ 239.920492][ T8068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.940484][ T8066] EXT4-fs (loop5): Free/Dirty block details [ 239.950609][ T8066] EXT4-fs (loop5): free_blocks=66060288 [ 239.956708][ T8066] EXT4-fs (loop5): dirty_blocks=16 [ 239.966955][ T8049] loop6: lost filesystem error report for type 5 error -117 [ 239.977057][ T8066] EXT4-fs (loop5): Block reservation details [ 239.993155][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1283: corrupted inode contents [ 240.007613][ T8066] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 240.017396][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.017719][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.037411][ T8049] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #16: comm syz.6.1283: mark_inode_dirty error [ 240.066342][ T8074] EXT4-fs (loop1): shut down requested (2) [ 240.076576][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.077245][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1283: corrupted inode contents [ 240.101970][ T8074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.106789][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.111431][ T8049] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1283: mark_inode_dirty error [ 240.128147][ T8074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.146383][ T8074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 240.147073][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.160463][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1283: corrupted inode contents [ 240.184671][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.184861][ T8049] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 240.240720][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 240.254200][ T5382] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 240.260723][ T8049] loop6: lost filesystem error report for type 5 error -117 [ 240.266203][ T8049] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1283: corrupted inode contents [ 240.302319][ T8049] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.302629][ T8049] EXT4-fs error (device loop6): ext4_truncate:4602: inode #16: comm syz.6.1283: mark_inode_dirty error [ 240.334020][ T8049] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 240.343789][ T8049] loop6: lost filesystem error report for type 5 error -117 [ 240.344289][ T8049] EXT4-fs (loop6): 1 truncate cleaned up [ 240.382866][ T8049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.405277][ T8089] FAULT_INJECTION: forcing a failure. [ 240.405277][ T8089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.425795][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.3.1297 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.425878][ T8089] Tainted: [W]=WARN [ 240.425888][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.425901][ T8089] Call Trace: [ 240.425908][ T8089] [ 240.425984][ T8089] __dump_stack+0x1d/0x30 [ 240.426027][ T8089] dump_stack_lvl+0x95/0xd0 [ 240.426059][ T8089] dump_stack+0x15/0x1b [ 240.426086][ T8089] should_fail_ex+0x263/0x280 [ 240.426183][ T8089] should_fail+0xb/0x20 [ 240.426259][ T8089] should_fail_usercopy+0x1a/0x20 [ 240.426300][ T8089] _copy_from_iter+0xcf/0xea0 [ 240.426338][ T8089] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 240.426438][ T8089] ? __build_skb+0x43/0x220 [ 240.426474][ T8089] ? __build_skb+0x1b3/0x220 [ 240.426511][ T8089] ? is_vmalloc_addr+0x37/0x90 [ 240.426599][ T8089] netlink_sendmsg+0x4ae/0x6f0 [ 240.426631][ T8089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.426658][ T8089] ____sys_sendmsg+0x563/0x5b0 [ 240.426689][ T8089] ___sys_sendmsg+0x195/0x1e0 [ 240.426798][ T8089] __x64_sys_sendmsg+0xd4/0x160 [ 240.426831][ T8089] x64_sys_call+0x194c/0x3020 [ 240.426939][ T8089] do_syscall_64+0x12c/0x370 [ 240.426978][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.427007][ T8089] RIP: 0033:0x7f412f51c819 [ 240.427031][ T8089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.427134][ T8089] RSP: 002b:00007f412df77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.427161][ T8089] RAX: ffffffffffffffda RBX: 00007f412f795fa0 RCX: 00007f412f51c819 [ 240.427181][ T8089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 240.427195][ T8089] RBP: 00007f412df77090 R08: 0000000000000000 R09: 0000000000000000 [ 240.427211][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.427264][ T8089] R13: 00007f412f796038 R14: 00007f412f795fa0 R15: 00007ffc59bc70c8 [ 240.427292][ T8089] [ 240.429431][ T8049] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.677856][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 240.677899][ T28] audit: type=1326 audit(1775631015.838:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 240.684876][ T8049] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #3: comm syz.6.1283: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 240.684876][ T8049] [ 240.721640][ T28] audit: type=1400 audit(1775631015.858:8507): avc: denied { create } for pid=8048 comm="syz.6.1283" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.777788][ T28] audit: type=1326 audit(1775631015.938:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac19dec819 code=0x7ffc0000 [ 240.795217][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.826842][ T8094] set_capacity_and_notify: 1 callbacks suppressed [ 240.826861][ T8094] loop1: detected capacity change from 0 to 164 [ 240.843163][ T28] audit: type=1400 audit(1775631016.008:8509): avc: denied { mount } for pid=8093 comm="syz.1.1298" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 240.844484][ T8094] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 240.890990][ T8049] syz.6.1283 (8049) used greatest stack depth: 8760 bytes left [ 240.902222][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.935639][ T28] audit: type=1400 audit(1775631016.098:8510): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 240.955073][ T8096] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1299'. [ 241.031498][ T28] audit: type=1400 audit(1775631016.198:8511): avc: denied { create } for pid=8097 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.053286][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 241.080346][ T28] audit: type=1400 audit(1775631016.218:8512): avc: denied { connect } for pid=8097 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.101811][ T28] audit: type=1400 audit(1775631016.228:8513): avc: denied { setopt } for pid=8097 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.241772][ T8116] netlink: 'syz.3.1306': attribute type 8 has an invalid length. [ 241.291325][ T8116] loop3: detected capacity change from 0 to 128 [ 241.307608][ T28] audit: type=1400 audit(1775631016.468:8514): avc: denied { ioctl } for pid=8117 comm="syz.6.1308" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.347802][ T8105] loop1: detected capacity change from 0 to 32768 [ 241.386255][ T28] audit: type=1400 audit(1775631016.498:8515): avc: denied { mounton } for pid=8097 comm="syz.1.1301" path="/proc/685/task" dev="proc" ino=20727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 241.444422][ T3306] loop1: p1 p3 < > [ 241.465345][ T8105] loop1: p1 p3 < > [ 241.530785][ T8134] bridge_slave_0: left allmulticast mode [ 241.536501][ T8134] bridge_slave_0: left promiscuous mode [ 241.560998][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.583823][ T8134] bridge_slave_1: left allmulticast mode [ 241.589669][ T8134] bridge_slave_1: left promiscuous mode [ 241.598575][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.621827][ T8134] bond0: (slave bond_slave_0): Releasing backup interface [ 241.636217][ T8134] bond0: (slave bond_slave_1): Releasing backup interface [ 241.641620][ T8140] loop1: detected capacity change from 0 to 256 [ 241.664187][ T8134] team0: Port device team_slave_0 removed [ 241.665417][ T8140] FAT-fs (loop1): codepage cp852 not found [ 241.683066][ T8134] team0: Port device team_slave_1 removed [ 241.700093][ T8134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.721453][ T8134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.736318][ T8134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.775563][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 241.787150][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 241.872378][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 241.884931][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 241.906699][ T8146] loop5: detected capacity change from 0 to 512 [ 241.922732][ T8146] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.946471][ T8146] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 241.956000][ T8146] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 241.972764][ T8146] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 241.981304][ T8146] System zones: 0-2, 18-18, 34-35 [ 241.987677][ T8146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.054051][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.414463][ T8153] vlan2: entered promiscuous mode [ 242.448825][ T8153] team0: entered promiscuous mode [ 242.588409][ T8171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8171 comm=syz.3.1324 [ 242.649689][ T8180] loop5: detected capacity change from 0 to 2048 [ 242.683450][ T8185] loop1: detected capacity change from 0 to 736 [ 242.694100][ T8180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.813504][ T8197] netlink: 'syz.3.1333': attribute type 1 has an invalid length. [ 242.821621][ T8197] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1333'. [ 242.844378][ T8197] lo speed is unknown, defaulting to 1000 [ 242.846222][ T8198] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 242.865424][ T8198] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 242.878088][ T8198] EXT4-fs (loop5): This should not happen!! Data will be lost [ 242.878088][ T8198] [ 242.888394][ T8198] EXT4-fs (loop5): Total free blocks count 0 [ 242.894744][ T8198] EXT4-fs (loop5): Free/Dirty block details [ 242.901313][ T8198] EXT4-fs (loop5): free_blocks=66060288 [ 242.907124][ T8198] EXT4-fs (loop5): dirty_blocks=16 [ 242.912783][ T8198] EXT4-fs (loop5): Block reservation details [ 242.918866][ T8198] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 243.019434][ T8205] loop3: detected capacity change from 0 to 2048 [ 243.043556][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.165421][ T8209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 243.180624][ T8209] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 243.193170][ T8209] EXT4-fs (loop3): This should not happen!! Data will be lost [ 243.193170][ T8209] [ 243.203169][ T8209] EXT4-fs (loop3): Total free blocks count 0 [ 243.209383][ T8209] EXT4-fs (loop3): Free/Dirty block details [ 243.215645][ T8209] EXT4-fs (loop3): free_blocks=66060288 [ 243.222064][ T8209] EXT4-fs (loop3): dirty_blocks=16 [ 243.227371][ T8209] EXT4-fs (loop3): Block reservation details [ 243.233542][ T8209] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 243.541114][ T8216] loop6: detected capacity change from 0 to 128 [ 243.548208][ T8216] vfat: Unknown parameter '^' [ 243.613913][ T8215] loop1: detected capacity change from 0 to 1024 [ 243.627849][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 243.655584][ T8215] EXT4-fs: Ignoring removed bh option [ 243.669013][ T8215] ext4: Unknown parameter 'uid<00000000000000000000' [ 243.678228][ T5382] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 243.989337][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 244.010043][ T3314] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 244.017951][ T8221] lo speed is unknown, defaulting to 1000 [ 244.057142][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1341'. [ 244.117591][ T8228] IPVS: set_ctl: invalid protocol: 1 172.30.0.6:20003 [ 244.209545][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.241071][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.257129][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.326357][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.495354][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 246.495382][ T28] audit: type=1400 audit(1775631021.658:8553): avc: denied { write } for pid=8265 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 246.697903][ T8259] set_capacity_and_notify: 1 callbacks suppressed [ 246.698384][ T8259] loop3: detected capacity change from 0 to 512 [ 246.730453][ T8259] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.041335][ T8259] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 247.511156][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.511388][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.532990][ T28] audit: type=1400 audit(1775631022.688:8554): avc: denied { create } for pid=8271 comm="syz.6.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.533111][ T28] audit: type=1400 audit(1775631022.688:8555): avc: denied { listen } for pid=8271 comm="syz.6.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.676647][ T8259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 247.686455][ T8259] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.696415][ T8259] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1351: bg 0: block 361: padding at end of block bitmap is not set [ 247.712144][ T8259] loop3: lost filesystem error report for type 5 error -117 [ 247.720214][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 247.734271][ C1] EXT4-fs (loop3): initial error at time 1775631022: ext4_validate_block_bitmap:441 [ 247.743986][ C1] EXT4-fs (loop3): last error at time 1775631022: ext4_validate_block_bitmap:441 [ 248.471304][ T8262] loop0: detected capacity change from 0 to 512 [ 248.484819][ T8262] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.520101][ T28] audit: type=1400 audit(1775631023.668:8556): avc: denied { ioctl } for pid=8271 comm="syz.6.1356" path="socket:[21687]" dev="sockfs" ino=21687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.546610][ T8259] EXT4-fs (loop3): Remounting filesystem read-only [ 248.555461][ T8262] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 248.583175][ T8259] EXT4-fs (loop3): 1 truncate cleaned up [ 248.599910][ T8259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 248.785394][ T8262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 248.796139][ T8262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 248.806971][ T8262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1353: bg 0: block 361: padding at end of block bitmap is not set [ 248.822150][ T8262] loop0: lost filesystem error report for type 5 error -117 [ 248.830209][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 248.845206][ C1] EXT4-fs (loop0): initial error at time 1775631023: ext4_validate_block_bitmap:441 [ 248.855146][ C1] EXT4-fs (loop0): last error at time 1775631023: ext4_validate_block_bitmap:441 [ 248.907705][ T28] audit: type=1400 audit(1775631023.738:8557): avc: denied { ioctl } for pid=8271 comm="syz.6.1356" path="socket:[21692]" dev="sockfs" ino=21692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.015018][ T8262] EXT4-fs (loop0): Remounting filesystem read-only [ 249.029663][ T8262] EXT4-fs (loop0): 1 truncate cleaned up [ 249.048873][ T8262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 249.363287][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 249.890459][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 249.940899][ T8371] loop3: detected capacity change from 0 to 256 [ 249.982746][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'. [ 250.012688][ T8371] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.030023][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 250.068421][ T8380] loop5: detected capacity change from 0 to 512 [ 250.069301][ T8371] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.086519][ T8380] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.102822][ T28] audit: type=1400 audit(1775631025.268:8558): avc: denied { connect } for pid=8376 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.137774][ T8382] loop1: detected capacity change from 0 to 2048 [ 250.182455][ T28] audit: type=1400 audit(1775631025.348:8559): avc: denied { create } for pid=8383 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.186025][ T8377] loop0: detected capacity change from 0 to 512 [ 250.213392][ T8384] loop6: detected capacity change from 0 to 512 [ 250.241257][ T8370] coredump: 813(syz.3.1362): Core dump to core aborted: cannot preserve file permissions [ 250.254067][ T8377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.268686][ T8382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.287324][ T8384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.303693][ T8380] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 250.318614][ T8380] Quota error (device loop5): write_blk: dquota write failed [ 250.326153][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 250.326178][ C0] EXT4-fs (loop5): initial error at time 1775631025: ext4_mb_generate_buddy:1317 [ 250.326209][ C0] EXT4-fs (loop5): last error at time 1775631025: ext4_mb_generate_buddy:1317 [ 250.339527][ T8384] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.366573][ T8380] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 250.378361][ T8380] Quota error (device loop5): write_blk: dquota write failed [ 250.386288][ T8380] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1365: Failed to acquire dquot type 1 [ 250.386833][ T8377] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1364: corrupted inode contents [ 250.397905][ T8380] loop5: lost filesystem error report for type 5 error -28 [ 250.412151][ T8377] fserror_report: 1 callbacks suppressed [ 250.412225][ T8380] EXT4-fs (loop5): 1 truncate cleaned up [ 250.412235][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.446317][ T8394] lo speed is unknown, defaulting to 1000 [ 250.448118][ T8377] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 250.456103][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 250.456232][ C0] EXT4-fs (loop0): initial error at time 1775631025: ext4_do_update_inode:5602: inode 15 [ 250.456461][ C0] EXT4-fs (loop0): last error at time 1775631025: ext4_do_update_inode:5602: inode 15 [ 250.501888][ T8377] loop0: lost filesystem error report for type 5 error -117 [ 250.504048][ T8395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 250.531496][ T8377] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1364: corrupted inode contents [ 250.546893][ T8395] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 250.551292][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.561585][ T8395] EXT4-fs (loop1): This should not happen!! Data will be lost [ 250.561585][ T8395] [ 250.583823][ T8395] EXT4-fs (loop1): Total free blocks count 0 [ 250.589886][ T8395] EXT4-fs (loop1): Free/Dirty block details [ 250.601226][ T8395] EXT4-fs (loop1): free_blocks=66060288 [ 250.607024][ T8395] EXT4-fs (loop1): dirty_blocks=16 [ 250.612469][ T8395] EXT4-fs (loop1): Block reservation details [ 250.618824][ T8395] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 250.626622][ T8377] EXT4-fs error (device loop0): ext4_evict_inode:313: inode #15: comm syz.0.1364: mark_inode_dirty error [ 250.641768][ T8377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.642908][ T8377] EXT4-fs (loop0): 1 orphan inode deleted [ 250.731417][ T8400] loop3: detected capacity change from 0 to 128 [ 250.765658][ T8400] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.157195][ T8404] loop5: detected capacity change from 0 to 512 [ 251.173569][ T8404] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.206931][ T8404] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 251.271687][ T8404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 251.284975][ T8404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.293775][ T8404] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1368: bg 0: block 361: padding at end of block bitmap is not set [ 251.309054][ T8404] loop5: lost filesystem error report for type 5 error -117 [ 251.310207][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 251.324332][ C0] EXT4-fs (loop5): initial error at time 1775631026: ext4_validate_block_bitmap:441 [ 251.334036][ C0] EXT4-fs (loop5): last error at time 1775631026: ext4_validate_block_bitmap:441 [ 251.345640][ T8404] EXT4-fs (loop5): Remounting filesystem read-only [ 251.359035][ T8404] EXT4-fs (loop5): 1 truncate cleaned up [ 251.546952][ T8352] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 251.564129][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 251.564146][ T28] audit: type=1400 audit(1775631026.698:8564): avc: denied { mounton } for pid=8399 comm="syz.3.1369" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 251.624709][ T3315] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 251.714305][ T28] audit: type=1400 audit(1775631026.878:8565): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 251.863639][ T28] audit: type=1400 audit(1775631026.938:8566): avc: denied { setattr } for pid=8410 comm="syz.0.1370" name="RAWv6" dev="sockfs" ino=21145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.921711][ T8411] loop0: detected capacity change from 0 to 8192 [ 251.928372][ T28] audit: type=1326 audit(1775631027.008:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.1.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x0 [ 251.952748][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 251.976677][ T8411] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.053969][ T8419] loop6: detected capacity change from 0 to 512 [ 252.070904][ T8419] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 252.122983][ T8419] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 252.150618][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 252.157190][ C0] EXT4-fs (loop6): initial error at time 1775631027: ext4_mb_generate_buddy:1317 [ 252.166583][ C0] EXT4-fs (loop6): last error at time 1775631027: ext4_mb_generate_buddy:1317 [ 252.181508][ T8419] EXT4-fs (loop6): 1 truncate cleaned up [ 252.193689][ T28] audit: type=1400 audit(1775631027.348:8568): avc: denied { mounton } for pid=8422 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 252.272998][ T28] audit: type=1400 audit(1775631027.398:8569): avc: denied { read } for pid=8418 comm="syz.6.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 252.422774][ T8422] lo speed is unknown, defaulting to 1000 [ 252.661040][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.675642][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.755376][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 252.799960][ T8448] xt_connbytes: Forcing CT accounting to be enabled [ 252.818760][ T28] audit: type=1400 audit(1775631027.948:8570): avc: denied { write } for pid=8447 comm="syz.1.1383" lport=47989 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.881906][ T8448] program syz.1.1383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.911485][ T28] audit: type=1400 audit(1775631027.958:8571): avc: denied { getopt } for pid=8447 comm="syz.1.1383" lport=47989 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.949803][ T28] audit: type=1400 audit(1775631027.958:8572): avc: denied { ioctl } for pid=8447 comm="syz.1.1383" path="socket:[21250]" dev="sockfs" ino=21250 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.990029][ T8457] loop6: detected capacity change from 0 to 512 [ 253.029489][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.040135][ T8461] loop1: detected capacity change from 0 to 512 [ 253.050514][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.057178][ T8457] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.057723][ T28] audit: type=1400 audit(1775631027.958:8573): avc: denied { connect } for pid=8447 comm="syz.1.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.088265][ T8422] bridge_slave_0: entered allmulticast mode [ 253.095241][ T8422] bridge_slave_0: entered promiscuous mode [ 253.102204][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.109419][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.116793][ T8422] bridge_slave_1: entered allmulticast mode [ 253.123793][ T8422] bridge_slave_1: entered promiscuous mode [ 253.143469][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.154802][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.175975][ T8422] team0: Port device team_slave_0 added [ 253.182899][ T8422] team0: Port device team_slave_1 added [ 253.199216][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.206300][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.235192][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.247188][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.254294][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.282747][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.304274][ T8461] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.327527][ T8457] lo speed is unknown, defaulting to 1000 [ 253.337359][ T8422] hsr_slave_0: entered promiscuous mode [ 253.343757][ T8422] hsr_slave_1: entered promiscuous mode [ 253.349983][ T8422] debugfs: 'hsr0' already exists in 'hsr' [ 253.349983][ T8461] netlink: 'syz.1.1386': attribute type 21 has an invalid length. [ 253.350011][ T8461] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1386'. [ 253.356281][ T8422] Cannot create hsr debugfs directory [ 253.372348][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1385'. [ 253.486094][ T7412] kernel read not supported for file /vcs (pid: 7412 comm: kworker/0:19) [ 253.535481][ T8473] loop0: detected capacity change from 0 to 128 [ 253.549050][ T8473] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 253.557881][ T8473] FAT-fs (loop0): Filesystem has been set read-only [ 253.596821][ T8422] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 253.646878][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 253.660494][ T8422] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.677592][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1390'. [ 253.688310][ T8481] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 253.703897][ T8422] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.734866][ T8481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.763171][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 253.769130][ T8422] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.773106][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1390'. [ 253.799275][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.812656][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.164346][ T8489] loop1: detected capacity change from 0 to 512 [ 254.179510][ T8489] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.203318][ T8489] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 254.300194][ T8489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 254.311732][ T8489] EXT4-fs (loop1): orphan cleanup on readonly fs [ 254.323162][ T8489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1389: bg 0: block 361: padding at end of block bitmap is not set [ 254.338726][ T8489] loop1: lost filesystem error report for type 5 error -117 [ 254.350202][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 254.364259][ C0] EXT4-fs (loop1): initial error at time 1775631029: ext4_validate_block_bitmap:441 [ 254.374147][ C0] EXT4-fs (loop1): last error at time 1775631029: ext4_validate_block_bitmap:441 [ 254.385988][ T8489] EXT4-fs (loop1): Remounting filesystem read-only [ 254.397270][ T8489] EXT4-fs (loop1): 1 truncate cleaned up [ 254.415180][ T8489] EXT4-fs mount: 16 callbacks suppressed [ 254.415344][ T8489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 254.468492][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.626647][ T8494] loop6: detected capacity change from 0 to 736 [ 254.713832][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.836115][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.869979][ T8510] loop0: detected capacity change from 0 to 512 [ 254.876914][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.887456][ T8504] lo speed is unknown, defaulting to 1000 [ 254.929012][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.945058][ T8510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.960436][ T8511] xt_hashlimit: size too large, truncated to 1048576 [ 254.983249][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.003536][ T8510] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.036285][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.043722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.064364][ T8510] netlink: 'syz.0.1398': attribute type 21 has an invalid length. [ 255.084040][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1398'. [ 255.095153][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.102367][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.193159][ T8515] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 255.274032][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.395989][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.583068][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 255.605455][ T8533] loop0: detected capacity change from 0 to 512 [ 255.649738][ T8533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 255.670373][ T8538] loop1: detected capacity change from 0 to 512 [ 255.711739][ T8422] veth0_vlan: entered promiscuous mode [ 255.721337][ T8538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.742828][ T8533] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 255.759815][ T8422] veth1_vlan: entered promiscuous mode [ 255.770213][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 255.771598][ T8533] EXT4-fs (loop0): 1 truncate cleaned up [ 255.776780][ C1] EXT4-fs (loop0): initial error at time 1775631030: ext4_mb_generate_buddy:1317 [ 255.791664][ C1] EXT4-fs (loop0): last error at time 1775631030: ext4_mb_generate_buddy:1317 [ 255.800582][ T8538] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.810049][ T8422] veth0_macvtap: entered promiscuous mode [ 255.821592][ T8533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.838854][ T8422] veth1_macvtap: entered promiscuous mode [ 255.890633][ T8538] lo speed is unknown, defaulting to 1000 [ 255.899249][ T8545] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1402'. [ 255.903631][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.922072][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.989143][ T2174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.008035][ T2174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.019582][ T8547] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1401'. [ 256.030971][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 256.080415][ T2174] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.099478][ T2174] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.445779][ T8555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.507834][ T8555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.522911][ T8555] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.669731][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.999202][ T8560] syzkaller0: entered promiscuous mode [ 257.006468][ T8560] syzkaller0: entered allmulticast mode [ 257.071362][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.104542][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.202519][ T8570] set_capacity_and_notify: 1 callbacks suppressed [ 257.202539][ T8570] loop5: detected capacity change from 0 to 736 [ 257.215595][ T8566] loop1: detected capacity change from 0 to 8192 [ 257.236078][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 257.250697][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.266235][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 257.266254][ T28] audit: type=1326 audit(1775631032.428:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.309764][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 257.318944][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1404'. [ 257.322506][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.349401][ T8568] xt_TCPMSS: Only works on TCP SYN packets [ 257.406202][ T28] audit: type=1326 audit(1775631032.468:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.505319][ T28] audit: type=1326 audit(1775631032.468:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.577506][ T28] audit: type=1326 audit(1775631032.468:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.612097][ T28] audit: type=1326 audit(1775631032.468:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.685786][ T28] audit: type=1326 audit(1775631032.468:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.722651][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.734822][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.756233][ T28] audit: type=1326 audit(1775631032.468:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.823005][ T28] audit: type=1326 audit(1775631032.468:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.874214][ T28] audit: type=1326 audit(1775631032.468:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 257.909029][ T28] audit: type=1326 audit(1775631032.468:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1806f7c819 code=0x7ffc0000 [ 258.031760][ T8620] loop5: detected capacity change from 0 to 512 [ 258.092889][ T8620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.107900][ T8620] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.146455][ T8630] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1414'. [ 258.163127][ T8620] lo speed is unknown, defaulting to 1000 [ 258.191065][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1413'. [ 258.279697][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.444763][ T8651] loop5: detected capacity change from 0 to 128 [ 258.459277][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1417'. [ 258.743163][ T8668] loop5: detected capacity change from 0 to 736 [ 258.948526][ T8669] loop6: detected capacity change from 0 to 512 [ 258.981367][ T8669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.032598][ T8669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.047717][ T8669] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.631485][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.011715][ T8722] loop0: detected capacity change from 0 to 512 [ 260.069992][ T8722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.088345][ T8722] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.139749][ T8722] lo speed is unknown, defaulting to 1000 [ 260.223071][ T8751] __nla_validate_parse: 2 callbacks suppressed [ 260.223092][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 260.626877][ T8771] FAULT_INJECTION: forcing a failure. [ 260.626877][ T8771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.627857][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.671055][ T8770] loop7: detected capacity change from 0 to 736 [ 260.689766][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.5.1431 Tainted: G W syzkaller #0 PREEMPT(full) [ 260.689847][ T8771] Tainted: [W]=WARN [ 260.689854][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.689867][ T8771] Call Trace: [ 260.689874][ T8771] [ 260.689882][ T8771] __dump_stack+0x1d/0x30 [ 260.689977][ T8771] dump_stack_lvl+0x95/0xd0 [ 260.690010][ T8771] dump_stack+0x15/0x1b [ 260.690038][ T8771] should_fail_ex+0x263/0x280 [ 260.690143][ T8771] should_fail+0xb/0x20 [ 260.690215][ T8771] should_fail_usercopy+0x1a/0x20 [ 260.690254][ T8771] _copy_from_iter+0xcf/0xea0 [ 260.690311][ T8771] ? __alloc_skb+0x4f6/0x690 [ 260.690348][ T8771] ? __alloc_skb+0x200/0x690 [ 260.690421][ T8771] netlink_sendmsg+0x4ae/0x6f0 [ 260.690451][ T8771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.690477][ T8771] ____sys_sendmsg+0x563/0x5b0 [ 260.690508][ T8771] ___sys_sendmsg+0x195/0x1e0 [ 260.690594][ T8771] __x64_sys_sendmsg+0xd4/0x160 [ 260.690617][ T8771] x64_sys_call+0x194c/0x3020 [ 260.690662][ T8771] do_syscall_64+0x12c/0x370 [ 260.690710][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.690737][ T8771] RIP: 0033:0x7f889ca4c819 [ 260.690753][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.690835][ T8771] RSP: 002b:00007f889b4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.690856][ T8771] RAX: ffffffffffffffda RBX: 00007f889ccc5fa0 RCX: 00007f889ca4c819 [ 260.690872][ T8771] RDX: 000000000000c000 RSI: 0000200000000300 RDI: 0000000000000003 [ 260.690889][ T8771] RBP: 00007f889b4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.690907][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.690923][ T8771] R13: 00007f889ccc6038 R14: 00007f889ccc5fa0 R15: 00007ffc2c125328 [ 260.690996][ T8771] [ 261.016852][ T8782] loop6: detected capacity change from 0 to 512 [ 261.039332][ T8784] netlink: 388 bytes leftover after parsing attributes in process `syz.7.1433'. [ 261.223865][ T8785] loop5: detected capacity change from 0 to 8192 [ 261.261729][ T8785] loop5: p1 < > p2 p4 < p5 > [ 261.266669][ T8785] loop5: partition table partially beyond EOD, truncated [ 261.274354][ T8785] loop5: p1 start 134217728 is beyond EOD, truncated [ 261.281176][ T8785] loop5: p2 size 591360 extends beyond EOD, truncated [ 261.304721][ T8785] loop5: p5 size 591360 extends beyond EOD, truncated [ 261.671972][ T8782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.759915][ T8795] xt_hashlimit: size too large, truncated to 1048576 [ 261.779498][ T8782] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.848369][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 261.868971][ T7242] udevd[7242]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 261.882454][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 261.963386][ T8802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.039554][ T8802] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.197289][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.209186][ T8802] lo speed is unknown, defaulting to 1000 [ 262.230348][ T8809] set_capacity_and_notify: 1 callbacks suppressed [ 262.230368][ T8809] loop5: detected capacity change from 0 to 512 [ 262.264911][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1439'. [ 262.340237][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 262.340258][ T28] audit: type=1400 audit(1775631037.488:8638): avc: denied { getopt } for pid=8808 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 262.617859][ T28] audit: type=1400 audit(1775631037.688:8639): avc: denied { watch } for pid=8811 comm="syz.0.1443" path="/283" dev="tmpfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.759193][ T8821] loop6: detected capacity change from 0 to 736 [ 262.824168][ T8422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.925612][ T28] audit: type=1400 audit(1775631037.698:8640): avc: denied { remount } for pid=8808 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 263.183093][ T8823] loop5: detected capacity change from 0 to 2048 [ 263.199680][ T28] audit: type=1400 audit(1775631038.358:8641): avc: denied { getopt } for pid=8825 comm="syz.6.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.264014][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.330621][ T8823] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 263.364245][ T8836] FAULT_INJECTION: forcing a failure. [ 263.364245][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.420307][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.6.1449 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.420349][ T8836] Tainted: [W]=WARN [ 263.420358][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.420450][ T8836] Call Trace: [ 263.420459][ T8836] [ 263.420467][ T8836] __dump_stack+0x1d/0x30 [ 263.420495][ T8836] dump_stack_lvl+0x95/0xd0 [ 263.420522][ T8836] dump_stack+0x15/0x1b [ 263.420575][ T8836] should_fail_ex+0x263/0x280 [ 263.420614][ T8836] should_fail+0xb/0x20 [ 263.420643][ T8836] should_fail_usercopy+0x1a/0x20 [ 263.420701][ T8836] _copy_from_user+0x1c/0xb0 [ 263.420745][ T8836] do_sock_getsockopt+0xf1/0x210 [ 263.420795][ T8836] __x64_sys_getsockopt+0x11d/0x1a0 [ 263.420859][ T8836] x64_sys_call+0x2dcf/0x3020 [ 263.421013][ T8836] do_syscall_64+0x12c/0x370 [ 263.421052][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.421111][ T8836] RIP: 0033:0x7f9bb1ecc819 [ 263.421132][ T8836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.421152][ T8836] RSP: 002b:00007f9bb0927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 263.421179][ T8836] RAX: ffffffffffffffda RBX: 00007f9bb2145fa0 RCX: 00007f9bb1ecc819 [ 263.421198][ T8836] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000003 [ 263.421261][ T8836] RBP: 00007f9bb0927090 R08: 00002000000000c0 R09: 0000000000000000 [ 263.421280][ T8836] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 263.421295][ T8836] R13: 00007f9bb2146038 R14: 00007f9bb2145fa0 R15: 00007ffd92735c98 [ 263.421341][ T8836] [ 263.647422][ T8826] loop7: detected capacity change from 0 to 128 [ 263.692289][ T8826] FAT-fs (loop7): Directory bread(block 524322) failed [ 263.700964][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.722083][ T8826] FAT-fs (loop7): Directory bread(block 524323) failed [ 263.730085][ T8826] FAT-fs (loop7): Directory bread(block 524324) failed [ 263.738083][ T8826] FAT-fs (loop7): Directory bread(block 524325) failed [ 263.751156][ T8826] FAT-fs (loop7): Directory bread(block 524326) failed [ 263.852807][ T8826] FAT-fs (loop7): Directory bread(block 524327) failed [ 263.869798][ T8826] FAT-fs (loop7): Directory bread(block 524328) failed [ 263.886241][ T8826] FAT-fs (loop7): Directory bread(block 524329) failed [ 264.834465][ T8844] loop7: detected capacity change from 0 to 512 [ 264.889773][ T8844] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.902602][ T8844] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 264.930905][ T8844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 264.940757][ T8844] EXT4-fs (loop7): orphan cleanup on readonly fs [ 264.959911][ T8844] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1452: bg 0: block 361: padding at end of block bitmap is not set [ 264.976503][ T8844] loop7: lost filesystem error report for type 5 error -117 [ 264.980224][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 264.994370][ C0] EXT4-fs (loop7): initial error at time 1775631040: ext4_validate_block_bitmap:441 [ 265.003879][ C0] EXT4-fs (loop7): last error at time 1775631040: ext4_validate_block_bitmap:441 [ 265.036818][ T8844] EXT4-fs (loop7): Remounting filesystem read-only [ 265.050765][ T8844] EXT4-fs (loop7): 1 truncate cleaned up [ 265.074871][ T8844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 265.440449][ T28] audit: type=1400 audit(1775631040.548:8642): avc: denied { getopt } for pid=8846 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.493136][ T8852] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1450'. [ 265.645037][ T8857] loop6: detected capacity change from 0 to 4096 [ 265.711488][ T8857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.770090][ T8857] netlink: 'syz.6.1456': attribute type 3 has an invalid length. [ 265.795340][ T8857] netlink: 'syz.6.1456': attribute type 8 has an invalid length. [ 265.824713][ T8857] netlink: 199720 bytes leftover after parsing attributes in process `syz.6.1456'. [ 265.896260][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.978614][ T8866] loop0: detected capacity change from 0 to 2048 [ 266.037776][ T28] audit: type=1400 audit(1775631041.198:8643): avc: denied { mount } for pid=8867 comm="syz.5.1459" name="/" dev="configfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 266.131589][ T28] audit: type=1400 audit(1775631041.228:8644): avc: denied { search } for pid=8867 comm="syz.5.1459" name="/" dev="configfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.240482][ T28] audit: type=1400 audit(1775631041.228:8645): avc: denied { setattr } for pid=8867 comm="syz.5.1459" name="/" dev="configfs" ino=2037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.378068][ T28] audit: type=1400 audit(1775631041.538:8646): avc: denied { create } for pid=8873 comm="syz.6.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.473650][ T8422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 266.527966][ T28] audit: type=1400 audit(1775631041.568:8647): avc: denied { bind } for pid=8873 comm="syz.6.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.643541][ T8888] loop0: detected capacity change from 0 to 2048 [ 266.724563][ T8888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.787107][ T8903] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1469'. [ 266.994630][ T8910] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 267.010245][ T8910] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 267.022858][ T8910] EXT4-fs (loop0): This should not happen!! Data will be lost [ 267.022858][ T8910] [ 267.033229][ T8910] EXT4-fs (loop0): Total free blocks count 0 [ 267.440285][ T8912] loop5: detected capacity change from 0 to 512 [ 267.454863][ T8912] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.532833][ T8910] EXT4-fs (loop0): Free/Dirty block details [ 267.545982][ T8912] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 267.565323][ T8912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 267.576411][ T8912] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.588928][ T8912] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1471: bg 0: block 361: padding at end of block bitmap is not set [ 267.604857][ T8912] loop5: lost filesystem error report for type 5 error -117 [ 267.610195][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 267.624278][ C1] EXT4-fs (loop5): initial error at time 1775631042: ext4_validate_block_bitmap:441 [ 267.633800][ C1] EXT4-fs (loop5): last error at time 1775631042: ext4_validate_block_bitmap:441 [ 267.643637][ T8912] EXT4-fs (loop5): Remounting filesystem read-only [ 267.657689][ T8912] EXT4-fs (loop5): 1 truncate cleaned up [ 267.674186][ T8912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 267.810140][ T8910] EXT4-fs (loop0): free_blocks=66060288 [ 268.050340][ T8910] EXT4-fs (loop0): dirty_blocks=16 [ 268.085025][ T8910] EXT4-fs (loop0): Block reservation details [ 268.100234][ T8910] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 268.141206][ T8921] FAULT_INJECTION: forcing a failure. [ 268.141206][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 268.154106][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.6.1473 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.154197][ T8921] Tainted: [W]=WARN [ 268.154207][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 268.154301][ T8921] Call Trace: [ 268.154310][ T8921] [ 268.154320][ T8921] __dump_stack+0x1d/0x30 [ 268.154356][ T8921] dump_stack_lvl+0x95/0xd0 [ 268.154385][ T8921] dump_stack+0x15/0x1b [ 268.154410][ T8921] should_fail_ex+0x263/0x280 [ 268.154500][ T8921] should_failslab+0x8c/0xb0 [ 268.154526][ T8921] kmem_cache_alloc_noprof+0x66/0x400 [ 268.154573][ T8921] ? skb_clone+0x151/0x1f0 [ 268.154598][ T8921] skb_clone+0x151/0x1f0 [ 268.154623][ T8921] __netlink_deliver_tap+0x2c9/0x500 [ 268.154687][ T8921] netlink_unicast+0x66b/0x690 [ 268.154731][ T8921] netlink_sendmsg+0x5c8/0x6f0 [ 268.154759][ T8921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.154818][ T8921] ____sys_sendmsg+0x563/0x5b0 [ 268.154841][ T8921] ___sys_sendmsg+0x195/0x1e0 [ 268.154901][ T8921] __x64_sys_sendmsg+0xd4/0x160 [ 268.154931][ T8921] x64_sys_call+0x194c/0x3020 [ 268.154964][ T8921] do_syscall_64+0x12c/0x370 [ 268.154993][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.155061][ T8921] RIP: 0033:0x7f9bb1ecc819 [ 268.155080][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.155106][ T8921] RSP: 002b:00007f9bb0927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.155126][ T8921] RAX: ffffffffffffffda RBX: 00007f9bb2145fa0 RCX: 00007f9bb1ecc819 [ 268.155145][ T8921] RDX: 0000000020000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 268.155158][ T8921] RBP: 00007f9bb0927090 R08: 0000000000000000 R09: 0000000000000000 [ 268.155180][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.155193][ T8921] R13: 00007f9bb2146038 R14: 00007f9bb2145fa0 R15: 00007ffd92735c98 [ 268.155292][ T8921] [ 268.572120][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 268.572135][ T28] audit: type=1400 audit(1775631043.738:8649): avc: denied { create } for pid=8923 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.681045][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 268.713097][ T28] audit: type=1400 audit(1775631043.778:8650): avc: denied { setopt } for pid=8923 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.773847][ T3318] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 268.824540][ T28] audit: type=1400 audit(1775631043.818:8651): avc: denied { create } for pid=8916 comm="syz.7.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 268.980879][ T5382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 269.014227][ T28] audit: type=1400 audit(1775631044.178:8652): avc: denied { bind } for pid=8923 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 269.081314][ T8930] loop7: detected capacity change from 0 to 512 [ 269.142642][ T8930] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 269.166722][ T8930] EXT4-fs (loop7): 1 truncate cleaned up [ 269.173929][ T8930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.546071][ T28] audit: type=1400 audit(1775631044.178:8653): avc: denied { create } for pid=8923 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 269.566337][ T28] audit: type=1400 audit(1775631044.318:8654): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 269.660217][ T8944] loop0: detected capacity change from 0 to 128 [ 269.670208][ T28] audit: type=1400 audit(1775631044.378:8655): avc: denied { firmware_load } for pid=8925 comm="syz.7.1476" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 269.737058][ T28] audit: type=1400 audit(1775631044.438:8656): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.761562][ T28] audit: type=1400 audit(1775631044.438:8657): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.783757][ T28] audit: type=1400 audit(1775631044.438:8658): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.826221][ T8940] syzkaller0: entered promiscuous mode [ 269.860366][ T8940] syzkaller0: entered allmulticast mode [ 269.902910][ T8422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.994193][ T8964] FAULT_INJECTION: forcing a failure. [ 269.994193][ T8964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.035255][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.7.1481 Tainted: G W syzkaller #0 PREEMPT(full) [ 270.035289][ T8964] Tainted: [W]=WARN [ 270.035295][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.035309][ T8964] Call Trace: [ 270.035316][ T8964] [ 270.035326][ T8964] __dump_stack+0x1d/0x30 [ 270.035362][ T8964] dump_stack_lvl+0x95/0xd0 [ 270.035478][ T8964] dump_stack+0x15/0x1b [ 270.035509][ T8964] should_fail_ex+0x263/0x280 [ 270.035547][ T8964] should_fail+0xb/0x20 [ 270.035581][ T8964] should_fail_usercopy+0x1a/0x20 [ 270.035646][ T8964] _copy_from_user+0x1c/0xb0 [ 270.035762][ T8964] ___sys_sendmsg+0xc1/0x1e0 [ 270.035795][ T8964] __x64_sys_sendmsg+0xd4/0x160 [ 270.035819][ T8964] x64_sys_call+0x194c/0x3020 [ 270.035894][ T8964] do_syscall_64+0x12c/0x370 [ 270.035925][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.036007][ T8964] RIP: 0033:0x7f1c8d2ac819 [ 270.036027][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.036052][ T8964] RSP: 002b:00007f1c8bcff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.036107][ T8964] RAX: ffffffffffffffda RBX: 00007f1c8d525fa0 RCX: 00007f1c8d2ac819 [ 270.036128][ T8964] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 270.036144][ T8964] RBP: 00007f1c8bcff090 R08: 0000000000000000 R09: 0000000000000000 [ 270.036178][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.036237][ T8964] R13: 00007f1c8d526038 R14: 00007f1c8d525fa0 R15: 00007ffcab48b6b8 [ 270.036262][ T8964] [ 270.211651][ T8972] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1483'. [ 270.667033][ T8983] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 270.677567][ T8983] SELinux: failed to load policy [ 270.971131][ T9006] random: crng reseeded on system resumption [ 271.823815][ T9007] loop7: detected capacity change from 0 to 512 [ 272.000236][ T9007] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 272.285609][ T9007] EXT4-fs (loop7): 1 truncate cleaned up [ 272.442237][ T9007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.863216][ T8971] ================================================================== [ 272.871654][ T8971] BUG: KCSAN: data-race in pipe_lock / pipe_release [ 272.878383][ T8971] [ 272.880746][ T8971] read-write to 0xffff88811a863bac of 4 bytes by task 8969 on cpu 1: [ 272.889105][ T8971] pipe_release+0x16a/0x1d0 [ 272.893733][ T8971] __fput+0x29b/0x650 [ 272.897843][ T8971] ____fput+0x1c/0x30 [ 272.901919][ T8971] task_work_run+0x130/0x1a0 [ 272.907097][ T8971] exit_to_user_mode_loop+0x1f4/0x6f0 [ 272.912682][ T8971] do_syscall_64+0x249/0x370 [ 272.917400][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.923502][ T8971] [ 272.925845][ T8971] read to 0xffff88811a863bac of 4 bytes by task 8971 on cpu 0: [ 272.933868][ T8971] pipe_lock+0x17/0x50 [ 272.937963][ T8971] splice_to_socket+0x7d/0xa80 [ 272.942763][ T8971] do_splice+0x970/0x10b0 [ 272.947127][ T8971] __se_sys_splice+0x26c/0x3a0 [ 272.952154][ T8971] __x64_sys_splice+0x78/0x90 [ 272.956967][ T8971] x64_sys_call+0x16ef/0x3020 [ 272.961710][ T8971] do_syscall_64+0x12c/0x370 [ 272.966335][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.972252][ T8971] [ 272.974605][ T8971] value changed: 0x00000002 -> 0x00000001 [ 272.980337][ T8971] [ 272.982678][ T8971] Reported by Kernel Concurrency Sanitizer on: [ 272.989080][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.0.1484 Tainted: G W syzkaller #0 PREEMPT(full) [ 273.000330][ T8971] Tainted: [W]=WARN [ 273.004194][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.014369][ T8971] ================================================================== [ 273.417013][ T8422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.