last executing test programs: 37.089480686s ago: executing program 3 (id=526): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x40000, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) 36.972819865s ago: executing program 3 (id=527): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) 36.16541982s ago: executing program 3 (id=528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x68, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d23000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 36.154510361s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210041, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") r3 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x3, 0x2, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x110}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x100000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1e8402, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x800, 0x3ff, 0x2, 0x7d1, 0xc0, 0x7, 0xf}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r6, 0xffffcc73}, &(0x7f0000000500)=0x8) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r7 = syz_open_pts(r5, 0x0) ioctl$TCSETAW(r7, 0x541e, 0x0) r8 = syz_io_uring_complete(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000100)={0x80, 0x2, 0x9, 0x7, 0x16, "956dd81be2769e73"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r9 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xf2d6, 0x800, 0x407, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 35.678090781s ago: executing program 3 (id=539): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) 34.748295197s ago: executing program 3 (id=547): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffd}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x0) 34.652556332s ago: executing program 32 (id=547): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffd}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x0) 8.580572617s ago: executing program 2 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x68, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d23000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 8.516936558s ago: executing program 2 (id=678): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r4, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001340)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 7.381150527s ago: executing program 2 (id=687): openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xb}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x12, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80002, 0x100) r2 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34b0f000) r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xd1, 0x0) mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x1000, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2000) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0xd, 0x80000000}, {0xac, 0x6c10}]}, 0xb, 0x3) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000100)={0x6, {0x3, 0x7, 0x3, 0x2, 0xfffffffffffffffe}}) openat2(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000019440)={0x48000, 0x104, 0x1}, 0x18) 6.635711542s ago: executing program 1 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 6.512981122s ago: executing program 1 (id=696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001180)={[{@dax_always}, {@barrier}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}, 0x7e, 0x587, &(0x7f0000000940)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r9, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r8}}) syz_io_uring_submit(0x0, r7, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000180), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x22}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) timer_create(0x4, &(0x7f00000000c0)={0x0, 0xd, 0x2, @tid=r2}, &(0x7f0000000100)) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.524078947s ago: executing program 0 (id=700): r0 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000380)="000000000000001bff6900000072f56594b80303f40000bfeacdd5a9007d16f6285496b049daf8406143a949c1a36f189fb7e29ec2e8a0b14c0cd1f7dc04f5df4a91483b791421cce921768306e3f000"/92, 0x5c, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x61, 0x33, 0x61, 0x0, 0x4df0e54c5cad315c, 0x37, 0x48, 0x36, 0x63, 0x37, 0x39, 0x65, 0x35, 0x32, 0x37, 0x36]}, &(0x7f0000000200)={0x0, "e98bec8faa69940bec84c545c633af12643ea7f10d153508b6ec98fba3afef48239431cf8bf95b0c6b754f39ac57e967827347b040c93602cc293ce4646e5d41", 0x29}, 0x48, r0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x6, 0x9, 0x81, 0x0, 0x8, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2c76, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x4800, 0x5, 0x66, 0x7, 0x76b, 0x7, 0x80, 0x0, 0x0, 0x0, 0x799}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x40da73471811d0d5, 0x80, 0x82, 0x5, 0xe, 0x7, 0x0, 0x5, 0x40431, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0xfff}, 0x0, 0x6, 0x8a63, 0x1, 0x2, 0xfffffffb, 0x8, 0x0, 0xaee, 0x0, 0x100}, r1, 0x10, r2, 0x0) 5.465072368s ago: executing program 0 (id=701): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x163}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56fa4337820ad06b22c31773b6b4c59c17d5cfc1ae909dc893879f78aa803e8a567e1d3dc8ed3fb03648e5e74", 0xca}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.141776701s ago: executing program 5 (id=707): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x4, &(0x7f0000000040)="03000000", 0x4) connect(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2}, 0x1c) getsockname$inet6(r1, 0x0, &(0x7f0000001c40)) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x39, 0x800, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x5e, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r3], 0x30}, 0x4) 4.618150879s ago: executing program 5 (id=708): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3ff, 0x64}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) (async) sync() (async) sync() (async, rerun: 32) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) (rerun: 32) preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x8800) sync() r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = gettid() (rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) rseq(0xfffffffffffffffe, 0x20, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x4, @tid=r2}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x80, 0x7, 0x101}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 4.617539859s ago: executing program 0 (id=709): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) stat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x2, 0x28c) msgget(0x2, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1f00) r3 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$pagemap(0x0, 0x0) syz_clone(0x40082200, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003f80), 0x2}, {0x7fffffffffffffff, &(0x7f0000003fc0)=0x3, 0x82}], 0xaaaaaaaaaaaac01, 0x0, 0x0, 0x1) sendmmsg(r0, 0x0, 0x0, 0x0) 4.616951709s ago: executing program 2 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x2f, 0x0, 0x452072cc, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3, 0x4}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x6, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00ff7f00"}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc01000000000000000000000000001307000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) 4.450481817s ago: executing program 4 (id=712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x2f, 0x0, 0x452072cc, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3, 0x4}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x6, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00ff7f00"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc01000000000000000000000000001307000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) 4.450205807s ago: executing program 5 (id=713): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.502765615s ago: executing program 1 (id=714): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x12001, 0x10001, 0xda, 0x5, 0x3, 0x20007, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x802, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @mcast1}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001180)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x2}, {0x0}, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/223, 0xdf}], 0x1, 0x4, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0xeb}, {0x0}, 0x0, 0x0, 0x4, 0x401}}], 0xd8}, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x5, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x7f, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x3, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x5, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0x939b, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x7, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x0, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x4, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.712977464s ago: executing program 0 (id=715): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x68, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d23000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.707180355s ago: executing program 2 (id=716): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r4, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001340)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 1.687222068s ago: executing program 4 (id=717): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900207010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000060000000000000000000000000000000a0001"]) 1.670919901s ago: executing program 0 (id=718): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)={[{@nogrpid}, {@nogrpid}, {@nobarrier}], [{@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x0, 0x50d, &(0x7f0000000ac0)="$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") mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402001a}, 0x0, 0x0, 0xffffffffffffffff, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x338) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 1.670485681s ago: executing program 1 (id=719): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x163}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56fa4337820ad06b22c31773b6b4c59c17d5cfc1ae909dc893879f78aa803e8a567e1d3dc8ed3fb03648e5e74", 0xca}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.613030641s ago: executing program 4 (id=720): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x278, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x8001, 0x7, 0x2, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x1}, {0x1, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x6}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 1.612417571s ago: executing program 4 (id=721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4300000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xc4}}, 0x20004804) 1.612245801s ago: executing program 4 (id=722): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.360720733s ago: executing program 5 (id=723): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.360102163s ago: executing program 4 (id=724): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001180)={[{@dax_always}, {@barrier}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}, 0x7e, 0x587, &(0x7f0000000940)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r9, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r8}}) syz_io_uring_submit(0x0, r7, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000180), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x22}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) timer_create(0x4, &(0x7f00000000c0)={0x0, 0xd, 0x2, @tid=r2}, &(0x7f0000000100)) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.246153672s ago: executing program 5 (id=725): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) ioprio_set$pid(0x1, r2, 0x2000) tkill(r2, 0x12) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@usrquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) pwritev2(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="a3", 0x1}], 0x1, 0x8, 0x0, 0x3) 1.128911272s ago: executing program 0 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x2f, 0x0, 0x452072cc, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3, 0x4}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x6, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'macvlan1\x00', @random="00ff7f00"}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc01000000000000000000000000001307000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) 1.08003854s ago: executing program 5 (id=727): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) (fail_nth: 9) 713.746921ms ago: executing program 1 (id=728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x68, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d23000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 557.028797ms ago: executing program 1 (id=729): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@nombcache}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x2000000, 0x3) 0s ago: executing program 2 (id=730): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x12001, 0x10001, 0xda, 0x5, 0x3, 0x20007, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x802, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @mcast1}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001180)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x2}, {0x0}, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/223, 0xdf}], 0x1, 0x4, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0xeb}, {0x0}, 0x0, 0x0, 0x4, 0x401}}], 0xd8}, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x5, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x7f, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x3, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x5, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0x939b, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x7, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x0, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x4, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): 0x1003 failed: -110 [ 72.237410][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 72.432569][ T4422] loop4: detected capacity change from 0 to 2048 [ 72.460920][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.474322][ T4422] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.519230][ T4425] loop1: detected capacity change from 0 to 512 [ 72.573083][ T4425] EXT4-fs (loop1): 1 orphan inode deleted [ 72.591594][ T4425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.610745][ T4425] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.671674][ T4425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4425 comm=syz.1.279 [ 72.687256][ T4425] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 72.699728][ T198] __quota_error: 37 callbacks suppressed [ 72.699749][ T198] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.716956][ T198] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 72.729710][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.790929][ T4431] netlink: 'syz.4.283': attribute type 32 has an invalid length. [ 72.799468][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 72.979535][ T4378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.216557][ T4448] loop2: detected capacity change from 0 to 512 [ 73.245688][ T4448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.286740][ T4448] EXT4-fs (loop2): 1 truncate cleaned up [ 73.292142][ T4447] loop3: detected capacity change from 0 to 512 [ 73.303829][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.349314][ T4447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.370292][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.386842][ T4447] EXT4-fs (loop3): 1 truncate cleaned up [ 73.413270][ T4447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.485171][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.924660][ T4465] loop0: detected capacity change from 0 to 128 [ 73.939667][ T4465] FAT-fs (loop0): bogus number of reserved sectors [ 73.962463][ T4465] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 73.987320][ T4465] FAT-fs (loop0): Can't find a valid FAT filesystem [ 74.490332][ T4481] loop3: detected capacity change from 0 to 1024 [ 74.499369][ T4481] EXT4-fs: dax option not supported [ 74.612085][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.798016][ T4487] loop3: detected capacity change from 0 to 512 [ 74.857201][ T4487] EXT4-fs (loop3): 1 orphan inode deleted [ 74.867515][ T360] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 74.882031][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.895651][ T360] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 74.907500][ T360] loop3: lost filesystem error report for type 5 error -117 [ 74.909286][ T4487] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.970716][ T4487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4487 comm=syz.3.299 [ 74.987510][ T4487] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.437314][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.722822][ T4499] loop1: detected capacity change from 0 to 128 [ 76.119574][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.211518][ T4502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.224701][ T4502] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.244446][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.427136][ T198] kworker/u8:5: attempt to access beyond end of device [ 76.427136][ T198] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 76.452439][ T28] audit: type=1326 audit(1776111476.470:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 76.479986][ T4514] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.487665][ T28] audit: type=1326 audit(1776111476.470:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 76.515937][ T4514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.525482][ T28] audit: type=1326 audit(1776111476.500:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 76.550781][ T28] audit: type=1326 audit(1776111476.500:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f509465c582 code=0x7ffc0000 [ 76.576012][ T4514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.588825][ T4514] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.599571][ T28] audit: type=1326 audit(1776111476.500:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 76.622969][ T28] audit: type=1326 audit(1776111476.500:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f509465c647 code=0x7ffc0000 [ 76.646716][ T28] audit: type=1326 audit(1776111476.500:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 76.647232][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.670553][ T28] audit: type=1326 audit(1776111476.500:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f509465c4ab code=0x7ffc0000 [ 76.713864][ T4519] netlink: 'syz.1.310': attribute type 32 has an invalid length. [ 76.722656][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 76.924042][ T4465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.957038][ T198] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.449510][ T4539] set_capacity_and_notify: 2 callbacks suppressed [ 77.449549][ T4539] loop2: detected capacity change from 0 to 2048 [ 77.453984][ T4534] cgroup: Name too long [ 77.509275][ T4544] loop1: detected capacity change from 0 to 512 [ 77.520482][ T4544] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.530448][ T4544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.550130][ T4539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.563078][ T4539] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.575450][ T4544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.588895][ T4544] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.611599][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.625345][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.636815][ T4548] loop3: detected capacity change from 0 to 128 [ 77.692367][ T4554] loop1: detected capacity change from 0 to 512 [ 77.717050][ T4554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.740838][ T4554] EXT4-fs (loop1): 1 truncate cleaned up [ 77.749718][ T4554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.783496][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.819540][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 77.819556][ T28] audit: type=1400 audit(1776111477.840:1415): avc: denied { ioctl } for pid=4561 comm="syz.1.325" path="socket:[8590]" dev="sockfs" ino=8590 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.849520][ T4564] netlink: 'syz.1.326': attribute type 5 has an invalid length. [ 77.880729][ T4568] loop4: detected capacity change from 0 to 128 [ 77.891232][ T4568] FAT-fs (loop4): bogus number of reserved sectors [ 77.904077][ T4568] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 77.914271][ T4568] FAT-fs (loop4): Can't find a valid FAT filesystem [ 78.343337][ T360] kworker/u8:7: attempt to access beyond end of device [ 78.343337][ T360] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 78.420596][ T4580] loop1: detected capacity change from 0 to 512 [ 78.420981][ T28] audit: type=1326 audit(1776111478.430:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 78.427959][ T4580] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.455661][ T28] audit: type=1326 audit(1776111478.440:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 78.482738][ T28] audit: type=1326 audit(1776111478.440:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f509465c582 code=0x7ffc0000 [ 78.506953][ T28] audit: type=1326 audit(1776111478.440:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 78.525337][ T4580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.530891][ T28] audit: type=1326 audit(1776111478.440:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f509465c647 code=0x7ffc0000 [ 78.562140][ T28] audit: type=1326 audit(1776111478.440:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 78.585841][ T28] audit: type=1326 audit(1776111478.440:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f509465c4ab code=0x7ffc0000 [ 78.609787][ T28] audit: type=1326 audit(1776111478.440:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 78.633880][ T28] audit: type=1326 audit(1776111478.440:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f509461d04e code=0x7ffc0000 [ 78.635138][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.670064][ T4580] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.748851][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.900920][ T4592] loop3: detected capacity change from 0 to 256 [ 79.030624][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.913328][ T4605] loop3: detected capacity change from 0 to 1024 [ 79.920767][ T4605] EXT4-fs: dax option not supported [ 79.953796][ T4606] FAULT_INJECTION: forcing a failure. [ 79.953796][ T4606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.001076][ T4606] CPU: 0 UID: 0 PID: 4606 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 80.001108][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 80.001130][ T4606] Call Trace: [ 80.001139][ T4606] [ 80.001147][ T4606] __dump_stack+0x1d/0x30 [ 80.001173][ T4606] dump_stack_lvl+0x95/0xd0 [ 80.001242][ T4606] dump_stack+0x15/0x1b [ 80.001269][ T4606] should_fail_ex+0x263/0x280 [ 80.001295][ T4606] should_fail+0xb/0x20 [ 80.001317][ T4606] should_fail_usercopy+0x1a/0x20 [ 80.001399][ T4606] _copy_to_user+0x20/0xa0 [ 80.001495][ T4606] simple_read_from_buffer+0xb5/0x130 [ 80.001520][ T4606] proc_fail_nth_read+0x10e/0x150 [ 80.001554][ T4606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.001642][ T4606] vfs_read+0x1ab/0x7f0 [ 80.001658][ T4606] ? do_tee+0x2ac/0x910 [ 80.001690][ T4606] ? putname+0x7c/0xc0 [ 80.001753][ T4606] ksys_read+0xdc/0x1a0 [ 80.001828][ T4606] __x64_sys_read+0x40/0x50 [ 80.001898][ T4606] x64_sys_call+0x2886/0x3020 [ 80.001962][ T4606] do_syscall_64+0x12c/0x370 [ 80.001990][ T4606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.002083][ T4606] RIP: 0033:0x7f717b6fd04e [ 80.002104][ T4606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.002122][ T4606] RSP: 002b:00007f717a175fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.002195][ T4606] RAX: ffffffffffffffda RBX: 00007f717a1766c0 RCX: 00007f717b6fd04e [ 80.002208][ T4606] RDX: 000000000000000f RSI: 00007f717a1760a0 RDI: 0000000000000007 [ 80.002220][ T4606] RBP: 00007f717a176090 R08: 0000000000000000 R09: 0000000000000000 [ 80.002233][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.002244][ T4606] R13: 00007f717b9b6128 R14: 00007f717b9b6090 R15: 00007ffd08141108 [ 80.002262][ T4606] [ 80.243498][ T4612] loop2: detected capacity change from 0 to 512 [ 80.258797][ T4612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.274400][ T4612] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.312021][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.332890][ T4620] loop2: detected capacity change from 0 to 1024 [ 80.340247][ T4620] EXT4-fs: dax option not supported [ 80.533384][ T4621] EXT4-fs (loop3): 1 orphan inode deleted [ 80.547660][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 80.549939][ T4621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.575146][ T12] loop3: lost filesystem error report for type 5 error -117 [ 80.589126][ T4621] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.731718][ T4621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4621 comm=syz.3.339 [ 80.774044][ T4621] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 80.914043][ T4568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.935600][ T4625] EXT4-fs (loop2): 1 orphan inode deleted [ 80.951767][ T198] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 81.000912][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.020534][ T198] loop2: lost filesystem error report for type 5 error -117 [ 81.042129][ T4625] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.178676][ T4625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4625 comm=syz.2.344 [ 81.248779][ T4636] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 81.322725][ T4632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.417431][ T4632] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.591751][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.403754][ T360] kworker/u8:7: attempt to access beyond end of device [ 82.403754][ T360] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 82.518271][ T4661] set_capacity_and_notify: 5 callbacks suppressed [ 82.518287][ T4661] loop1: detected capacity change from 0 to 128 [ 82.582784][ T4661] FAT-fs (loop1): bogus number of reserved sectors [ 82.597565][ T4661] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 82.631381][ T4661] FAT-fs (loop1): Can't find a valid FAT filesystem [ 82.803556][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.814034][ T4668] loop4: detected capacity change from 0 to 128 [ 83.048869][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.146347][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 83.146365][ T28] audit: type=1326 audit(1776111483.160:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 83.177595][ T4684] loop0: detected capacity change from 0 to 128 [ 83.177612][ T28] audit: type=1326 audit(1776111483.160:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 83.211072][ T28] audit: type=1326 audit(1776111483.160:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 83.235616][ T28] audit: type=1326 audit(1776111483.160:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 83.293161][ T28] audit: type=1326 audit(1776111483.230:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 83.317068][ T28] audit: type=1326 audit(1776111483.230:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3908c6c582 code=0x7ffc0000 [ 83.341807][ T28] audit: type=1326 audit(1776111483.230:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3908c6c617 code=0x7ffc0000 [ 83.367182][ T28] audit: type=1326 audit(1776111483.230:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3908c29511 code=0x7ffc0000 [ 83.391072][ T28] audit: type=1326 audit(1776111483.230:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3908c6d609 code=0x7ffc0000 [ 83.415017][ T28] audit: type=1326 audit(1776111483.230:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3908c2957b code=0x7ffc0000 [ 83.642284][ T4691] netlink: 84 bytes leftover after parsing attributes in process `syz.2.366'. [ 83.776118][ T4696] loop4: detected capacity change from 0 to 1024 [ 83.810982][ T4696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.869654][ T4696] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20002 [ 83.982779][ T61] kworker/u8:4: attempt to access beyond end of device [ 83.982779][ T61] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 84.056725][ T4703] loop3: detected capacity change from 0 to 128 [ 84.262902][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.286854][ T4717] loop4: detected capacity change from 0 to 1024 [ 84.298237][ T4717] EXT4-fs: dax option not supported [ 84.373299][ T4718] loop0: detected capacity change from 0 to 1024 [ 84.390083][ T4718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.550074][ T4722] loop4: detected capacity change from 0 to 512 [ 84.614105][ T4722] EXT4-fs (loop4): 1 orphan inode deleted [ 84.627572][ T61] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 84.658651][ T61] loop4: lost filesystem error report for type 5 error -117 [ 84.683016][ T4722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.714435][ T4726] loop2: detected capacity change from 0 to 2048 [ 84.781843][ T4722] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.940696][ T4722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4722 comm=syz.4.375 [ 84.978455][ T4722] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 85.509696][ T4661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.549598][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.618546][ T4745] 9p: Bad value for 'rfdno' [ 86.121187][ T4756] loop0: detected capacity change from 0 to 256 [ 86.666387][ T4756] FAT-fs (loop0): Directory bread(block 64) failed [ 86.666430][ T4756] FAT-fs (loop0): Directory bread(block 65) failed [ 86.666481][ T4756] FAT-fs (loop0): Directory bread(block 66) failed [ 86.666567][ T4756] FAT-fs (loop0): Directory bread(block 67) failed [ 86.666590][ T4756] FAT-fs (loop0): Directory bread(block 68) failed [ 86.666606][ T4756] FAT-fs (loop0): Directory bread(block 69) failed [ 86.666666][ T4756] FAT-fs (loop0): Directory bread(block 70) failed [ 86.666751][ T4756] FAT-fs (loop0): Directory bread(block 71) failed [ 86.666792][ T4756] FAT-fs (loop0): Directory bread(block 72) failed [ 86.666809][ T4756] FAT-fs (loop0): Directory bread(block 73) failed [ 86.878554][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.878638][ T4757] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.715812][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.776970][ T4776] set_capacity_and_notify: 1 callbacks suppressed [ 87.776992][ T4776] loop1: detected capacity change from 0 to 1024 [ 87.811298][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.899374][ T4776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.922506][ T4799] loop2: detected capacity change from 0 to 128 [ 87.937038][ T4799] FAT-fs (loop2): bogus number of reserved sectors [ 87.944325][ T4799] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.015170][ T4799] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.332473][ T4812] loop0: detected capacity change from 0 to 512 [ 88.345559][ T4812] EXT4-fs (loop0): 1 truncate cleaned up [ 88.352102][ T4812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.377533][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 88.377549][ T28] audit: type=1400 audit(1776111488.400:1618): avc: denied { getopt } for pid=4811 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.404191][ T4812] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 88.426975][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.580961][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.742418][ T28] audit: type=1400 audit(1776111488.760:1619): avc: denied { setopt } for pid=4820 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.867748][ T4822] loop1: detected capacity change from 0 to 512 [ 89.670834][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.712536][ T28] audit: type=1400 audit(1776111488.940:1620): avc: denied { mount } for pid=4817 comm="syz.1.395" name="/" dev="autofs" ino=8996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.716103][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.773925][ T4839] loop3: detected capacity change from 0 to 1024 [ 89.782974][ T4839] EXT4-fs: dax option not supported [ 89.788782][ T4826] loop4: detected capacity change from 0 to 2048 [ 89.931111][ T4826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.944122][ T4826] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.089750][ T4843] loop3: detected capacity change from 0 to 512 [ 90.220131][ T4843] EXT4-fs (loop3): 1 orphan inode deleted [ 90.234064][ T4843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.250083][ T4843] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.301345][ T4843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4843 comm=syz.3.404 [ 90.317542][ T4843] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 90.327774][ T2136] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.363894][ T2136] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 90.396107][ T4847] loop0: detected capacity change from 0 to 164 [ 90.558308][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.720521][ T28] audit: type=1400 audit(1776111490.730:1621): avc: denied { write } for pid=4857 comm="syz.4.410" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.766490][ T4853] loop0: detected capacity change from 0 to 1024 [ 90.787402][ T4853] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.824629][ T4853] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 90.845832][ T4853] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.408: inode #1: comm syz.0.408: iget: illegal inode # [ 90.869144][ T4860] loop4: detected capacity change from 0 to 128 [ 90.877804][ T4853] loop0: lost filesystem error report for type 5 error -117 [ 90.883723][ T4853] EXT4-fs (loop0): no journal found [ 90.891474][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 90.891623][ C1] EXT4-fs (loop0): initial error at time 1776111490: ext4_get_journal_inode:5888 [ 90.891745][ C1] EXT4-fs (loop0): last error at time 1776111490: ext4_get_journal_inode:5888 [ 90.922732][ T4799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.979257][ T4853] EXT4-fs (loop0): can't get journal size [ 90.996641][ T4853] EXT4-fs (loop0): failed to initialize system zone (-22) [ 91.005778][ T4853] EXT4-fs (loop0): mount failed [ 91.077562][ T4867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.111421][ T4867] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.152134][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.204504][ T28] audit: type=1400 audit(1776111491.220:1622): avc: denied { ioctl } for pid=4876 comm="syz.0.416" path="socket:[9134]" dev="sockfs" ino=9134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.231421][ T28] audit: type=1400 audit(1776111491.250:1623): avc: denied { module_request } for pid=4876 comm="syz.0.416" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.299648][ T28] audit: type=1400 audit(1776111491.320:1624): avc: denied { ioctl } for pid=4881 comm="syz.0.417" path="socket:[9141]" dev="sockfs" ino=9141 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.346607][ T28] audit: type=1400 audit(1776111491.340:1625): avc: denied { write } for pid=4881 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.372828][ T4884] bridge_slave_1: left allmulticast mode [ 91.378699][ T4884] bridge_slave_1: left promiscuous mode [ 91.384583][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.395016][ T28] audit: type=1400 audit(1776111491.340:1626): avc: denied { nlmsg_write } for pid=4881 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.422256][ T4884] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 91.518932][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 91.530265][ T4895] team0 (unregistering): Port device team_slave_0 removed [ 91.548256][ T4895] team0 (unregistering): Port device team_slave_1 removed [ 91.596776][ T4897] bond1: Removing last arp target with arp_interval on [ 91.614698][ T4897] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 91.639821][ T4897] bond1 (unregistering): Released all slaves [ 91.724426][ T4900] FAT-fs (loop0): bogus number of reserved sectors [ 91.744160][ T4900] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 91.774654][ T4900] FAT-fs (loop0): Can't find a valid FAT filesystem [ 91.823019][ T4907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.866072][ T4907] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.924765][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.997163][ T4915] process 'syz.2.426' launched './file1' with NULL argv: empty string added [ 92.455947][ T4925] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.471066][ T4925] ------------[ cut here ]------------ [ 92.478887][ T4925] EA inode 11 i_nlink=2 [ 92.479227][ T4925] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.428/4925 [ 92.495477][ T4925] Modules linked in: [ 92.500618][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 92.511045][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.523076][ T4925] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 92.532193][ T4925] Code: 84 2f 99 ff 4c 8d 2d 1d a1 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 03 de 03 66 66 66 66 66 66 2e [ 92.553447][ T4925] RSP: 0000:ffffc9001232f778 EFLAGS: 00010246 [ 92.560315][ T4925] RAX: ffff88810527cdc8 RBX: ffff88811a8b01a8 RCX: ffffffff81c02c68 [ 92.569088][ T4925] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd70 [ 92.577876][ T4925] RBP: 000000000000000b R08: 000188811a8b015b R09: 0000000000000000 [ 92.587305][ T4925] R10: ffffc9001232f6a8 R11: 0001c9001232f6a8 R12: ffff88811a8b0158 [ 92.595785][ T4925] R13: ffffffff871dcd70 R14: ffff88811a8b0110 R15: 0000000000000001 [ 92.604706][ T4925] FS: 00007f50930756c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 92.614527][ T4925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.622487][ T4925] CR2: 0000000034747865 CR3: 000000011b6c8000 CR4: 00000000003506f0 [ 92.631126][ T4925] Call Trace: [ 92.634996][ T4925] [ 92.638538][ T4925] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 92.645197][ T4925] ? errseq_check+0x2c/0x50 [ 92.650377][ T4925] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 92.656437][ T4925] ? ext4_truncate+0x92b/0xb00 [ 92.661867][ T4925] ext4_evict_inode+0xac1/0xe40 [ 92.667124][ T4925] ? __pfx_ext4_evict_inode+0x10/0x10 [ 92.673336][ T4925] evict+0x2af/0x510 [ 92.678195][ T4925] ? __pfx_ext4_drop_inode+0x10/0x10 [ 92.684127][ T4925] ? iput+0x1ea/0x580 [ 92.689237][ T4925] iput+0x41a/0x580 [ 92.693416][ T4925] ext4_process_orphan+0x1a9/0x1c0 [ 92.699406][ T4925] ext4_orphan_cleanup+0x6a8/0xa00 [ 92.705317][ T4925] ext4_fill_super+0x3414/0x37c0 [ 92.711227][ T4925] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.721652][ T4925] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.728835][ T4925] get_tree_bdev_flags+0x291/0x300 [ 92.734327][ T4925] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.740009][ T4925] get_tree_bdev+0x1f/0x30 [ 92.744675][ T4925] ext4_get_tree+0x1c/0x30 [ 92.749462][ T4925] vfs_get_tree+0x57/0x1d0 [ 92.754166][ T4925] do_new_mount+0x288/0x8d0 [ 92.759284][ T4925] path_mount+0x4d0/0xbc0 [ 92.764307][ T4925] __se_sys_mount+0x28c/0x2e0 [ 92.769504][ T4925] __x64_sys_mount+0x67/0x80 [ 92.774272][ T4925] x64_sys_call+0x2d61/0x3020 [ 92.779457][ T4925] do_syscall_64+0x12c/0x370 [ 92.779537][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.790887][ T4925] RIP: 0033:0x7f509465da8a [ 92.795836][ T4925] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.816055][ T4925] RSP: 002b:00007f5093074e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.824937][ T4925] RAX: ffffffffffffffda RBX: 00007f5093074ee0 RCX: 00007f509465da8a [ 92.833452][ T4925] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f5093074ea0 [ 92.841865][ T4925] RBP: 00002000000009c0 R08: 00007f5093074ee0 R09: 0000000000800718 [ 92.850313][ T4925] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 92.858766][ T4925] R13: 00007f5093074ea0 R14: 000000000000048d R15: 0000200000000200 [ 92.867197][ T4925] [ 92.870847][ T4925] ---[ end trace 0000000000000000 ]--- [ 92.877604][ T4925] EXT4-fs (loop1): 1 orphan inode deleted [ 92.880116][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.886905][ T4925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.965014][ T4929] set_capacity_and_notify: 4 callbacks suppressed [ 92.965064][ T4929] loop3: detected capacity change from 0 to 164 [ 93.039711][ T4933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.066311][ T4933] sctp: [Deprecated]: syz.3.432 (pid 4933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.066311][ T4933] Use struct sctp_sack_info instead [ 93.657940][ T4947] loop3: detected capacity change from 0 to 512 [ 93.689561][ T4947] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.729637][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 93.729733][ T28] audit: type=1400 audit(1776111493.750:1638): avc: denied { create } for pid=4950 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.765809][ T4951] loop3: detected capacity change from 0 to 2048 [ 94.714490][ T4900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.775261][ T28] audit: type=1326 audit(1776111494.790:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.800222][ T28] audit: type=1326 audit(1776111494.790:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.828417][ T28] audit: type=1326 audit(1776111494.790:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.853619][ T4964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.865313][ T28] audit: type=1326 audit(1776111494.790:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.889052][ T28] audit: type=1326 audit(1776111494.790:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.912931][ T28] audit: type=1326 audit(1776111494.790:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.936637][ T28] audit: type=1326 audit(1776111494.790:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.960577][ T28] audit: type=1326 audit(1776111494.790:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 94.985483][ T28] audit: type=1326 audit(1776111494.790:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18e11c819 code=0x7ffc0000 [ 95.011906][ T4964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.070639][ T4964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.089223][ T4970] loop1: detected capacity change from 0 to 164 [ 95.188661][ T4974] usb usb8: usbfs: process 4974 (syz.1.445) did not claim interface 0 before use [ 95.200653][ T4976] usb usb8: usbfs: process 4976 (syz.4.441) did not claim interface 0 before use [ 95.235825][ T4964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.273028][ T4983] FAULT_INJECTION: forcing a failure. [ 95.273028][ T4983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.286285][ T4983] CPU: 1 UID: 0 PID: 4983 Comm: syz.4.448 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.286333][ T4983] Tainted: [W]=WARN [ 95.286341][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.286353][ T4983] Call Trace: [ 95.286361][ T4983] [ 95.286368][ T4983] __dump_stack+0x1d/0x30 [ 95.286428][ T4983] dump_stack_lvl+0x95/0xd0 [ 95.286453][ T4983] dump_stack+0x15/0x1b [ 95.286536][ T4983] should_fail_ex+0x263/0x280 [ 95.286564][ T4983] should_fail+0xb/0x20 [ 95.286587][ T4983] should_fail_usercopy+0x1a/0x20 [ 95.286739][ T4983] _copy_from_user+0x1c/0xb0 [ 95.286764][ T4983] ___sys_sendmsg+0xc1/0x1e0 [ 95.286806][ T4983] __x64_sys_sendmsg+0xd4/0x160 [ 95.286873][ T4983] x64_sys_call+0x194c/0x3020 [ 95.286890][ T4983] do_syscall_64+0x12c/0x370 [ 95.286907][ T4983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.286921][ T4983] RIP: 0033:0x7fb04c56c819 [ 95.286932][ T4983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.287011][ T4983] RSP: 002b:00007fb04afbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.287058][ T4983] RAX: ffffffffffffffda RBX: 00007fb04c7e5fa0 RCX: 00007fb04c56c819 [ 95.287066][ T4983] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 95.287074][ T4983] RBP: 00007fb04afbf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.287114][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.287136][ T4983] R13: 00007fb04c7e6038 R14: 00007fb04c7e5fa0 R15: 00007ffcbf7fda28 [ 95.287147][ T4983] [ 95.528769][ T4986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.698956][ T4994] loop4: detected capacity change from 0 to 736 [ 96.369149][ T5009] FAULT_INJECTION: forcing a failure. [ 96.369149][ T5009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.383630][ T5009] CPU: 1 UID: 0 PID: 5009 Comm: syz.1.450 Tainted: G W syzkaller #0 PREEMPT(full) [ 96.383770][ T5009] Tainted: [W]=WARN [ 96.383778][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.383793][ T5009] Call Trace: [ 96.383800][ T5009] [ 96.383808][ T5009] __dump_stack+0x1d/0x30 [ 96.383840][ T5009] dump_stack_lvl+0x95/0xd0 [ 96.383867][ T5009] dump_stack+0x15/0x1b [ 96.383887][ T5009] should_fail_ex+0x263/0x280 [ 96.383916][ T5009] should_fail+0xb/0x20 [ 96.383997][ T5009] should_fail_usercopy+0x1a/0x20 [ 96.384060][ T5009] _copy_from_user+0x1c/0xb0 [ 96.384096][ T5009] ___sys_sendmsg+0xc1/0x1e0 [ 96.384196][ T5009] __x64_sys_sendmsg+0xd4/0x160 [ 96.384220][ T5009] x64_sys_call+0x194c/0x3020 [ 96.384250][ T5009] do_syscall_64+0x12c/0x370 [ 96.384307][ T5009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.384328][ T5009] RIP: 0033:0x7f509465c819 [ 96.384343][ T5009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.384359][ T5009] RSP: 002b:00007f50930b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.384381][ T5009] RAX: ffffffffffffffda RBX: 00007f50948d5fa0 RCX: 00007f509465c819 [ 96.384397][ T5009] RDX: 0000000060044084 RSI: 0000200000000040 RDI: 0000000000000008 [ 96.384480][ T5009] RBP: 00007f50930b7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.384495][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.384509][ T5009] R13: 00007f50948d6038 R14: 00007f50948d5fa0 R15: 00007ffe160eafd8 [ 96.384587][ T5009] [ 96.558619][ T4986] macvlan1: entered promiscuous mode [ 96.565023][ T4986] macvlan1: entered allmulticast mode [ 96.612947][ T4987] vxcan3: entered promiscuous mode [ 96.657721][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.670849][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711630][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.784819][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.796446][ T5016] loop4: detected capacity change from 0 to 512 [ 96.908086][ T5016] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.934414][ T5029] loop3: detected capacity change from 0 to 512 [ 96.975565][ T3319] EXT4-fs unmount: 6 callbacks suppressed [ 96.975585][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.990816][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 97.001961][ T5032] loop1: detected capacity change from 0 to 164 [ 97.009321][ T5029] vfat: Unknown parameter 'nnonumtail' [ 97.049939][ T5029] loop3: detected capacity change from 0 to 512 [ 97.093237][ T5029] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.456: invalid block [ 97.154748][ T5039] loop1: detected capacity change from 0 to 512 [ 97.188253][ T5029] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.195252][ T5029] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.456: invalid indirect mapped block 4294967295 (level 1) [ 97.204496][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.204518][ C0] EXT4-fs (loop3): initial error at time 1776111497: ext4_get_branch:178: inode 11: block 4294967295 [ 97.204553][ C0] EXT4-fs (loop3): last error at time 1776111497: ext4_get_branch:178: inode 11: block 4294967295 [ 97.262648][ T5039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.317773][ T5039] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.337513][ T5029] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.341493][ T5029] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.456: invalid indirect mapped block 4294967295 (level 1) [ 97.372354][ T5044] syzkaller0: entered promiscuous mode [ 97.378283][ T5044] syzkaller0: entered allmulticast mode [ 97.389718][ T5039] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 97.416256][ T5029] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.416719][ T5029] EXT4-fs (loop3): 2 truncates cleaned up [ 97.423200][ T5041] 9p: Could not find request transport: rdma¹a`Ã!Eîë½OQ¯Wbç(ŽbP‰ƒØ‰ÂUÜV [ 97.427143][ T5029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.465575][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.490172][ T5013] syz.0.451 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 97.502020][ T5013] CPU: 1 UID: 0 PID: 5013 Comm: syz.0.451 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.502060][ T5013] Tainted: [W]=WARN [ 97.502145][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 97.502157][ T5013] Call Trace: [ 97.502167][ T5013] [ 97.502175][ T5013] __dump_stack+0x1d/0x30 [ 97.502247][ T5013] dump_stack_lvl+0x95/0xd0 [ 97.502268][ T5013] dump_stack+0x15/0x1b [ 97.502288][ T5013] dump_header+0x80/0x240 [ 97.502355][ T5013] oom_kill_process+0x295/0x350 [ 97.502381][ T5013] out_of_memory+0x97d/0xb80 [ 97.502406][ T5013] try_charge_memcg+0x62e/0xa10 [ 97.502448][ T5013] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 97.502491][ T5013] __swap_cache_prepare_and_add+0x67/0x460 [ 97.502526][ T5013] ? alloc_pages_mpol+0x217/0x260 [ 97.502560][ T5013] swap_cache_alloc_folio+0xa2/0x120 [ 97.502699][ T5013] swap_cluster_readahead+0x26e/0x3d0 [ 97.502729][ T5013] swapin_readahead+0xde/0x840 [ 97.502796][ T5013] ? _raw_spin_unlock+0x9/0x30 [ 97.502825][ T5013] ? swap_put_entries_cluster+0x385/0x3a0 [ 97.502854][ T5013] ? swap_put_entries_cluster+0x111/0x3a0 [ 97.502900][ T5013] ? __rcu_read_unlock+0x4e/0x70 [ 97.502924][ T5013] ? swap_cache_get_folio+0x26f/0x280 [ 97.502980][ T5013] do_swap_page+0x2fe/0x21e0 [ 97.503053][ T5013] ? css_rstat_updated+0xbb/0x280 [ 97.503071][ T5013] ? __rcu_read_lock+0x36/0x50 [ 97.503098][ T5013] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 97.503127][ T5013] handle_mm_fault+0xb46/0x3020 [ 97.503175][ T5013] ? vma_start_read+0x1c7/0x2c0 [ 97.503204][ T5013] do_user_addr_fault+0x62f/0x1050 [ 97.503235][ T5013] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 97.503267][ T5013] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 97.503304][ T5013] ? trace_page_fault_user+0x1f/0xe0 [ 97.503422][ T5013] exc_page_fault+0x62/0xa0 [ 97.503445][ T5013] asm_exc_page_fault+0x26/0x30 [ 97.503537][ T5013] RIP: 0033:0x7f717b60a190 [ 97.503557][ T5013] Code: c4 4c 0f 42 e0 83 3d 3a dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d fe b4 ed 00 e8 03 00 00 48 8d 1d ff bd 3a 00 e8 8a 31 13 00 [ 97.503578][ T5013] RSP: 002b:00007ffd08141270 EFLAGS: 00010202 [ 97.503596][ T5013] RAX: 0000000000017ca9 RBX: 00007f717b9b7da0 RCX: 0000000000017ae8 [ 97.503611][ T5013] RDX: 00000000000001c1 RSI: 00007ffd08141250 RDI: 0000000000000001 [ 97.503677][ T5013] RBP: 00007f717b9b7da0 R08: 000000001acf5fa0 R09: 7fffffffffffffff [ 97.503693][ T5013] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000017cfb [ 97.503706][ T5013] R13: 00007f717b9b609c R14: 0000000000017ba4 R15: 00007f717b9b6090 [ 97.503818][ T5013] [ 97.503883][ T5013] memory: usage 290040kB, limit 307200kB, failcnt 633 [ 97.776543][ T5013] memory+swap: usage 135088kB, limit 9007199254740988kB, failcnt 0 [ 97.784648][ T5013] kmem: usage 129236kB, limit 9007199254740988kB, failcnt 0 [ 97.792224][ T5013] Memory cgroup stats for /syz0: [ 97.792438][ T5013] cache 0 [ 97.800442][ T5013] rss 4096 [ 97.803627][ T5013] shmem 0 [ 97.806820][ T5013] mapped_file 0 [ 97.810443][ T5013] dirty 0 [ 97.813466][ T5013] writeback 4096 [ 97.817049][ T5013] workingset_refault_anon 26 [ 97.821839][ T5013] workingset_refault_file 0 [ 97.826342][ T5013] swap 540672 [ 97.829855][ T5013] swapcached 663552 [ 97.833761][ T5013] pgpgin 71668 [ 97.837375][ T5013] pgpgout 71663 [ 97.840835][ T5013] pgfault 82158 [ 97.844293][ T5013] pgmajfault 15 [ 97.847903][ T5013] inactive_anon 12288 [ 97.852051][ T5013] active_anon 8192 [ 97.855847][ T5013] inactive_file 0 [ 97.859524][ T5013] active_file 0 [ 97.862981][ T5013] unevictable 0 [ 97.866527][ T5013] hierarchical_memory_limit 314572800 [ 97.872193][ T5013] hierarchical_memsw_limit 9223372036854771712 [ 97.878775][ T5013] total_cache 0 [ 97.882341][ T5013] total_rss 4096 [ 97.885888][ T5013] total_shmem 0 [ 97.889439][ T5013] total_mapped_file 0 [ 97.893412][ T5013] total_dirty 0 [ 97.896934][ T5013] total_writeback 4096 [ 97.901053][ T5013] total_workingset_refault_anon 26 [ 97.906277][ T5013] total_workingset_refault_file 0 [ 97.911509][ T5013] total_swap 540672 [ 97.915311][ T5013] total_swapcached 663552 [ 97.919802][ T5013] total_pgpgin 71668 [ 97.923779][ T5013] total_pgpgout 71663 [ 97.927891][ T5013] total_pgfault 82158 [ 97.931863][ T5013] total_pgmajfault 15 [ 97.935987][ T5013] total_inactive_anon 12288 [ 97.940807][ T5013] total_active_anon 8192 [ 97.945165][ T5013] total_inactive_file 0 [ 97.949521][ T5013] total_active_file 0 [ 97.953748][ T5013] total_unevictable 0 [ 97.958440][ T5013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.451,pid=5013,uid=0 [ 97.973825][ T5013] Memory cgroup out of memory: Killed process 5013 (syz.0.451) total-vm:159832kB, anon-rss:1224kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 98.208136][ T5064] FAULT_INJECTION: forcing a failure. [ 98.208136][ T5064] name failslab, interval 1, probability 0, space 0, times 1 [ 98.221283][ T5064] CPU: 1 UID: 0 PID: 5064 Comm: syz.0.463 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.221320][ T5064] Tainted: [W]=WARN [ 98.221327][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.221339][ T5064] Call Trace: [ 98.221345][ T5064] [ 98.221354][ T5064] __dump_stack+0x1d/0x30 [ 98.221386][ T5064] dump_stack_lvl+0x95/0xd0 [ 98.221455][ T5064] dump_stack+0x15/0x1b [ 98.221558][ T5064] should_fail_ex+0x263/0x280 [ 98.221593][ T5064] should_failslab+0x8c/0xb0 [ 98.221665][ T5064] __kvmalloc_node_noprof+0x155/0x650 [ 98.221755][ T5064] ? vmemdup_user+0x2b/0xd0 [ 98.221778][ T5064] ? cred_has_capability+0x224/0x2a0 [ 98.221808][ T5064] vmemdup_user+0x2b/0xd0 [ 98.221832][ T5064] con_set_unimap+0x3f/0x700 [ 98.221856][ T5064] ? selinux_capable+0x31/0x40 [ 98.221930][ T5064] ? should_fail_ex+0xd9/0x280 [ 98.221973][ T5064] vt_ioctl+0xfe4/0x18d0 [ 98.221998][ T5064] ? tty_jobctrl_ioctl+0x29c/0x810 [ 98.222090][ T5064] tty_ioctl+0x7d7/0xb80 [ 98.222120][ T5064] ? __pfx_tty_ioctl+0x10/0x10 [ 98.222149][ T5064] __se_sys_ioctl+0xce/0x140 [ 98.222172][ T5064] __x64_sys_ioctl+0x43/0x50 [ 98.222250][ T5064] x64_sys_call+0x1563/0x3020 [ 98.222288][ T5064] do_syscall_64+0x12c/0x370 [ 98.222318][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.222342][ T5064] RIP: 0033:0x7f717b73c819 [ 98.222359][ T5064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.222494][ T5064] RSP: 002b:00007f717a176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.222575][ T5064] RAX: ffffffffffffffda RBX: 00007f717b9b6090 RCX: 00007f717b73c819 [ 98.222589][ T5064] RDX: 0000200000000180 RSI: 0000000000004b67 RDI: 0000000000000009 [ 98.222603][ T5064] RBP: 00007f717a176090 R08: 0000000000000000 R09: 0000000000000000 [ 98.222615][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.222626][ T5064] R13: 00007f717b9b6128 R14: 00007f717b9b6090 R15: 00007ffd08141108 [ 98.222643][ T5064] [ 98.533420][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.599220][ T5068] capability: warning: `syz.2.464' uses deprecated v2 capabilities in a way that may be insecure [ 98.645293][ T5071] set_capacity_and_notify: 1 callbacks suppressed [ 98.645311][ T5071] loop3: detected capacity change from 0 to 512 [ 98.690319][ T5071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.713690][ T5071] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.770884][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 98.770904][ T28] audit: type=1400 audit(1776111498.780:1827): avc: denied { ioctl } for pid=5077 comm="syz.2.467" path="socket:[11430]" dev="sockfs" ino=11430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.846453][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.856088][ T5084] loop0: detected capacity change from 0 to 164 [ 98.866589][ T5076] loop1: detected capacity change from 0 to 2048 [ 98.911567][ T5076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.937445][ T5076] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.940196][ T28] audit: type=1400 audit(1776111498.960:1828): avc: denied { read } for pid=5087 comm="syz.2.471" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.995009][ T28] audit: type=1400 audit(1776111499.000:1829): avc: denied { open } for pid=5087 comm="syz.2.471" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.018908][ T28] audit: type=1400 audit(1776111499.000:1830): avc: denied { ioctl } for pid=5087 comm="syz.2.471" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.102571][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.150133][ T28] audit: type=1400 audit(1776111499.170:1831): avc: denied { create } for pid=5096 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.155127][ T5097] tipc: Started in network mode [ 99.185090][ T5102] loop1: detected capacity change from 0 to 1024 [ 99.192161][ T5102] EXT4-fs: dax option not supported [ 99.195791][ T5097] tipc: Node identity 4, cluster identity 4711 [ 99.202627][ T28] audit: type=1400 audit(1776111499.170:1832): avc: denied { setopt } for pid=5096 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.204678][ T5097] tipc: Node number set to 4 [ 99.238328][ T5105] loop2: detected capacity change from 0 to 512 [ 99.288122][ T5107] loop4: detected capacity change from 0 to 128 [ 99.330459][ T5105] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.477: inode has both inline data and extents flags [ 99.357646][ T5105] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.357974][ T5105] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.477: couldn't read orphan inode 15 (err -117) [ 99.367510][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.367538][ C0] EXT4-fs (loop2): initial error at time 1776111499: ext4_orphan_get:1397: inode 15 [ 99.367572][ C0] EXT4-fs (loop2): last error at time 1776111499: ext4_orphan_get:1397: inode 15 [ 99.514829][ T5110] loop1: detected capacity change from 0 to 512 [ 99.767963][ T5105] loop2: lost filesystem error report for type 5 error -117 [ 99.862365][ T5110] EXT4-fs (loop1): 1 orphan inode deleted [ 99.879341][ T198] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 100.278140][ T5105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.815358][ T198] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 100.827398][ T198] loop1: lost filesystem error report for type 5 error -117 [ 100.861310][ T28] audit: type=1400 audit(1776111500.870:1833): avc: denied { read write open } for pid=5104 comm="syz.2.477" path="/100/bus/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.346639][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.706150][ T5110] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.779470][ T28] audit: type=1326 audit(1776111502.690:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7fc00000 [ 102.834909][ T28] audit: type=1400 audit(1776111502.830:1835): avc: denied { listen } for pid=5119 comm="syz.0.480" lport=59115 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.883469][ T5121] loop3: detected capacity change from 0 to 128 [ 102.901352][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.965006][ T5125] loop4: detected capacity change from 0 to 164 [ 102.989894][ T5123] loop2: detected capacity change from 0 to 512 [ 103.000152][ T5127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.042803][ T5123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.058751][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.072606][ T5127] EXT4-fs (loop0): 1 truncate cleaned up [ 103.079176][ T5123] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.101092][ T5127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.193730][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.234836][ T5135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.262927][ T5135] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.275042][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.290745][ T41] kworker/u8:2: attempt to access beyond end of device [ 103.290745][ T41] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 103.328283][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.338386][ T5145] EXT4-fs: dax option not supported [ 103.351373][ T5146] EXT4-fs: dax option not supported [ 103.521716][ T5151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.569577][ T5151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 103.593235][ T5151] System zones: 1-12 [ 103.598000][ T5151] EXT4-fs (loop0): 1 truncate cleaned up [ 103.640103][ T5152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'. [ 103.652889][ T5157] set_capacity_and_notify: 5 callbacks suppressed [ 103.653088][ T5157] loop2: detected capacity change from 0 to 512 [ 103.656312][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.745536][ T5151] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.804719][ T5163] loop3: detected capacity change from 0 to 512 [ 103.822564][ T5157] EXT4-fs (loop2): 1 orphan inode deleted [ 103.829132][ T198] __quota_error: 11 callbacks suppressed [ 103.829146][ T198] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.851781][ T198] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 103.863492][ T198] loop2: lost filesystem error report for type 5 error -117 [ 103.932593][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.013442][ T5163] EXT4-fs (loop3): 1 orphan inode deleted [ 104.027404][ T198] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.051147][ T5157] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.063059][ T198] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 104.092137][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.105600][ T198] loop3: lost filesystem error report for type 5 error -117 [ 104.168890][ T5163] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.255475][ T5169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5169 comm=syz.2.489 [ 104.293445][ T5169] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.360749][ T5163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5163 comm=syz.3.490 [ 104.436612][ T5163] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.446987][ T5173] loop4: detected capacity change from 0 to 1024 [ 104.476329][ T5174] loop1: detected capacity change from 0 to 164 [ 104.488707][ T5173] EXT4-fs: dax option not supported [ 104.699059][ T28] audit: type=1326 audit(1776111504.700:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 104.739329][ T5179] loop4: detected capacity change from 0 to 512 [ 104.814239][ T5179] EXT4-fs (loop4): 1 orphan inode deleted [ 104.828425][ T5179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.844308][ T5179] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.919360][ T5179] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.947688][ T28] audit: type=1326 audit(1776111504.700:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.027454][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.042658][ T28] audit: type=1326 audit(1776111504.700:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.076485][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 105.094214][ T5183] FAULT_INJECTION: forcing a failure. [ 105.094214][ T5183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.218874][ T28] audit: type=1326 audit(1776111504.700:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.240146][ T5183] CPU: 1 UID: 0 PID: 5183 Comm: syz.0.497 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.240233][ T5183] Tainted: [W]=WARN [ 105.240240][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.240258][ T5183] Call Trace: [ 105.240265][ T5183] [ 105.240273][ T5183] __dump_stack+0x1d/0x30 [ 105.240302][ T5183] dump_stack_lvl+0x95/0xd0 [ 105.240327][ T5183] dump_stack+0x15/0x1b [ 105.240368][ T5183] should_fail_ex+0x263/0x280 [ 105.240398][ T5183] should_fail+0xb/0x20 [ 105.240424][ T5183] should_fail_usercopy+0x1a/0x20 [ 105.240469][ T5183] _copy_from_user+0x1c/0xb0 [ 105.240504][ T5183] __sys_bpf+0x183/0x7e0 [ 105.240533][ T5183] __x64_sys_bpf+0x41/0x50 [ 105.240566][ T5183] x64_sys_call+0x10cb/0x3020 [ 105.240593][ T5183] do_syscall_64+0x12c/0x370 [ 105.240623][ T5183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.240649][ T5183] RIP: 0033:0x7f717b73c819 [ 105.240666][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.240771][ T5183] RSP: 002b:00007f717a197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.240791][ T5183] RAX: ffffffffffffffda RBX: 00007f717b9b5fa0 RCX: 00007f717b73c819 [ 105.240806][ T5183] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 105.240820][ T5183] RBP: 00007f717a197090 R08: 0000000000000000 R09: 0000000000000000 [ 105.240833][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.240847][ T5183] R13: 00007f717b9b6038 R14: 00007f717b9b5fa0 R15: 00007ffd08141108 [ 105.240938][ T5183] [ 105.388376][ T5185] loop0: detected capacity change from 0 to 512 [ 105.396299][ T28] audit: type=1326 audit(1776111504.700:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.438107][ T28] audit: type=1326 audit(1776111504.700:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.461957][ T28] audit: type=1326 audit(1776111504.700:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509465c819 code=0x7ffc0000 [ 105.529794][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.590273][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 105.609991][ T5185] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.638127][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.717158][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.331408][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.416005][ T5197] x_tables: duplicate underflow at hook 3 [ 106.430225][ T5195] syzkaller0: entered promiscuous mode [ 106.435761][ T5195] syzkaller0: entered allmulticast mode [ 106.629245][ T5201] loop1: detected capacity change from 0 to 128 [ 106.705367][ T5205] loop4: detected capacity change from 0 to 164 [ 106.755861][ T5207] loop4: detected capacity change from 0 to 512 [ 106.776236][ T5207] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.804752][ T5207] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.811693][ T5207] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.843846][ T5207] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 106.858559][ T5207] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.877329][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 106.883886][ C0] EXT4-fs (loop4): initial error at time 1776111506: mb_free_blocks:2049: inode 12: block 14 [ 106.894263][ C0] EXT4-fs (loop4): last error at time 1776111506: mb_free_blocks:2049: inode 12: block 14 [ 106.905307][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.507: corrupted inode contents [ 106.917237][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 106.917581][ T5207] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #12: comm syz.4.507: mark_inode_dirty error [ 106.953781][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 106.954020][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.507: corrupted inode contents [ 106.997366][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 106.997571][ T5207] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.507: mark_inode_dirty error [ 107.027334][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.028569][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.507: corrupted inode contents [ 107.068089][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.077783][ T5207] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 107.108419][ T198] kworker/u8:5: attempt to access beyond end of device [ 107.108419][ T198] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 107.117323][ T5207] loop4: lost filesystem error report for type 5 error -117 [ 107.131527][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.507: corrupted inode contents [ 107.179585][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.180563][ T5207] EXT4-fs error (device loop4): ext4_truncate:4602: inode #12: comm syz.4.507: mark_inode_dirty error [ 107.205087][ T5213] FAULT_INJECTION: forcing a failure. [ 107.205087][ T5213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.227389][ T5207] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.227554][ T5207] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 107.231345][ T5213] CPU: 0 UID: 0 PID: 5213 Comm: syz.1.509 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.231378][ T5213] Tainted: [W]=WARN [ 107.231385][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.231405][ T5213] Call Trace: [ 107.231413][ T5213] [ 107.231421][ T5213] __dump_stack+0x1d/0x30 [ 107.231511][ T5213] dump_stack_lvl+0x95/0xd0 [ 107.231535][ T5213] dump_stack+0x15/0x1b [ 107.231558][ T5213] should_fail_ex+0x263/0x280 [ 107.231587][ T5213] should_fail+0xb/0x20 [ 107.231679][ T5213] should_fail_usercopy+0x1a/0x20 [ 107.231708][ T5213] _copy_to_user+0x20/0xa0 [ 107.231740][ T5213] simple_read_from_buffer+0xb5/0x130 [ 107.231775][ T5213] proc_fail_nth_read+0x10e/0x150 [ 107.231823][ T5213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.231854][ T5213] vfs_read+0x1ab/0x7f0 [ 107.231873][ T5213] ? __rcu_read_unlock+0x4e/0x70 [ 107.231902][ T5213] ? __fget_files+0x184/0x1c0 [ 107.231929][ T5213] ? mutex_lock+0x57/0x90 [ 107.231952][ T5213] ksys_read+0xdc/0x1a0 [ 107.231999][ T5213] __x64_sys_read+0x40/0x50 [ 107.232018][ T5213] x64_sys_call+0x2886/0x3020 [ 107.232111][ T5213] do_syscall_64+0x12c/0x370 [ 107.232139][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.232163][ T5213] RIP: 0033:0x7f509461d04e [ 107.232179][ T5213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.232196][ T5213] RSP: 002b:00007f50930b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.232239][ T5213] RAX: ffffffffffffffda RBX: 00007f50930b76c0 RCX: 00007f509461d04e [ 107.232260][ T5213] RDX: 000000000000000f RSI: 00007f50930b70a0 RDI: 0000000000000004 [ 107.232273][ T5213] RBP: 00007f50930b7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.232287][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.232299][ T5213] R13: 00007f50948d6038 R14: 00007f50948d5fa0 R15: 00007ffe160eafd8 [ 107.232318][ T5213] [ 107.447991][ T5207] loop4: lost filesystem error report for type 5 error -117 [ 107.463824][ T5207] EXT4-fs (loop4): 1 truncate cleaned up [ 107.477683][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.576663][ T5207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.618656][ T5207] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 107.648177][ T5207] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.851064][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.883683][ T5220] loop0: detected capacity change from 0 to 8192 [ 107.915372][ T5220] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.936001][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 107.958709][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.958734][ T5220] FAT-fs (loop0): Filesystem has been set read-only [ 107.976134][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.005128][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.014225][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.023305][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.032291][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.041745][ T5228] FAT-fs (loop2): bogus number of reserved sectors [ 108.049338][ T5228] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 108.051547][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.059194][ T5228] FAT-fs (loop2): Can't find a valid FAT filesystem [ 108.071088][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.083688][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.101260][ T5220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 108.239801][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.987568][ T5253] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.988550][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 108.988563][ T28] audit: type=1400 audit(1776111509.000:1924): avc: denied { mac_admin } for pid=5250 comm="syz.3.521" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.109996][ T28] audit: type=1400 audit(1776111509.010:1925): avc: denied { getopt } for pid=5250 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.688010][ T5258] netlink: 'syz.3.523': attribute type 21 has an invalid length. [ 109.695971][ T5258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.523'. [ 109.749910][ T28] audit: type=1400 audit(1776111509.770:1926): avc: denied { mount } for pid=5259 comm="syz.3.524" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 111.029800][ T5228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.082503][ T5276] set_capacity_and_notify: 1 callbacks suppressed [ 111.082549][ T5276] loop3: detected capacity change from 0 to 1024 [ 111.153561][ T5276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.430545][ T5278] 8021q: VLANs not supported on ip6tnl0 [ 111.528058][ T5316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.543702][ T5315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'. [ 111.828568][ T5296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.872175][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.930622][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.990567][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.070891][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.385131][ T12] bridge_slave_1: left allmulticast mode [ 112.417474][ T12] bridge_slave_1: left promiscuous mode [ 112.441900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.481485][ T12] bridge_slave_0: left allmulticast mode [ 112.510620][ T12] bridge_slave_0: left promiscuous mode [ 112.516382][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.548101][ T5350] netlink: 'syz.2.550': attribute type 21 has an invalid length. [ 113.067328][ T5354] loop4: detected capacity change from 0 to 512 [ 113.182571][ T28] audit: type=1400 audit(1776111513.180:1927): avc: denied { append } for pid=5348 comm="syz.2.550" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.232091][ T5358] loop1: detected capacity change from 0 to 1024 [ 113.261434][ T5358] EXT4-fs: dax option not supported [ 113.271183][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.446352][ T28] audit: type=1400 audit(1776111513.180:1928): avc: denied { module_load } for pid=5348 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 113.707686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.191239][ T5363] loop1: detected capacity change from 0 to 512 [ 114.466599][ T12] bond0 (unregistering): Released all slaves [ 114.800312][ T5350] netlink: 'syz.2.550': attribute type 6 has an invalid length. [ 114.817323][ T5350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.550'. [ 115.538688][ T12] tipc: Left network mode [ 115.678333][ T5363] EXT4-fs (loop1): 1 orphan inode deleted [ 115.685422][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.700867][ T5363] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.713943][ T28] audit: type=1400 audit(1776111515.730:1929): avc: denied { getopt } for pid=5371 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.737451][ T2176] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.762362][ T2176] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 115.780497][ T5362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5362 comm=syz.1.552 [ 115.788512][ T5379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.554'. [ 115.805204][ T5372] tipc: Enabling of bearer rejected, failed to enable media [ 115.820762][ T12] hsr_slave_0: left promiscuous mode [ 115.831780][ T12] hsr_slave_1: left promiscuous mode [ 115.844969][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.852504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.870726][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.884812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.983757][ T12] veth1_macvtap: left promiscuous mode [ 115.990441][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.992671][ T12] veth0_macvtap: left promiscuous mode [ 116.005726][ T12] veth1_vlan: left promiscuous mode [ 116.011430][ T12] veth0_vlan: left promiscuous mode [ 116.025157][ T5398] loop2: detected capacity change from 0 to 1024 [ 116.083006][ T5398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.101357][ T5398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 116.140422][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.150991][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.238258][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.360369][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 116.540634][ T12] IPVS: stop unused estimator thread 0... [ 116.663203][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.671280][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.678892][ T5355] bridge_slave_0: entered allmulticast mode [ 116.686716][ T5355] bridge_slave_0: entered promiscuous mode [ 116.788729][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.834108][ T5441] loop2: detected capacity change from 0 to 128 [ 116.848847][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.937444][ T5355] bridge_slave_1: entered allmulticast mode [ 116.994645][ T5355] bridge_slave_1: entered promiscuous mode [ 117.014700][ T28] audit: type=1400 audit(1776111517.030:1930): avc: denied { create } for pid=5446 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.052620][ T28] audit: type=1400 audit(1776111517.050:1931): avc: denied { connect } for pid=5446 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.057521][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.084221][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.148965][ T5355] team0: Port device team_slave_0 added [ 117.155841][ T5458] loop0: detected capacity change from 0 to 1024 [ 117.163275][ T5355] team0: Port device team_slave_1 added [ 117.209779][ T5458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.218218][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.229149][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.255591][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.268043][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.275148][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.301481][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.341425][ T5355] hsr_slave_0: entered promiscuous mode [ 117.348010][ T5355] hsr_slave_1: entered promiscuous mode [ 117.354144][ T5355] debugfs: 'hsr0' already exists in 'hsr' [ 117.360320][ T5355] Cannot create hsr debugfs directory [ 117.415801][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 117.428646][ T198] kworker/u8:5: attempt to access beyond end of device [ 117.428646][ T198] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 117.449206][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.564586][ T5355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.591691][ T5491] loop0: detected capacity change from 0 to 1024 [ 117.591708][ T5493] loop4: detected capacity change from 0 to 512 [ 117.592032][ T5355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.617022][ T5491] EXT4-fs: Ignoring removed bh option [ 117.641782][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.657127][ T5355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.664064][ T5493] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.677696][ T5491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.708320][ T5355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.715022][ T28] audit: type=1400 audit(1776111517.730:1932): avc: denied { append } for pid=5490 comm="syz.0.573" path="/119/file1/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.742105][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.806612][ T28] audit: type=1400 audit(1776111517.820:1933): avc: denied { create } for pid=5490 comm="syz.0.573" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.816414][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.853165][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.896091][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.903281][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.924587][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.931796][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.956298][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.063791][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.187526][ T5529] loop1: detected capacity change from 0 to 128 [ 118.213420][ T5355] veth0_vlan: entered promiscuous mode [ 118.227827][ T5355] veth1_vlan: entered promiscuous mode [ 118.243821][ T5355] veth0_macvtap: entered promiscuous mode [ 118.251617][ T5355] veth1_macvtap: entered promiscuous mode [ 118.262434][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.273849][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.285257][ T2176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.294368][ T2176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.305402][ T2176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.314895][ T2176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.329794][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.340287][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.357624][ T5524] loop0: detected capacity change from 0 to 2048 [ 118.364562][ T5524] EXT4-fs: dax option not supported [ 118.381822][ T28] audit: type=1400 audit(1776111518.400:1934): avc: denied { bind } for pid=5523 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.408703][ T28] audit: type=1400 audit(1776111518.430:1935): avc: denied { name_bind } for pid=5540 comm="syz.5.549" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 118.409192][ T5541] FAULT_INJECTION: forcing a failure. [ 118.409192][ T5541] name failslab, interval 1, probability 0, space 0, times 0 [ 118.432951][ T28] audit: type=1400 audit(1776111518.430:1936): avc: denied { node_bind } for pid=5540 comm="syz.5.549" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 118.443338][ T5541] CPU: 1 UID: 0 PID: 5541 Comm: syz.5.549 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.443429][ T5541] Tainted: [W]=WARN [ 118.443437][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.443450][ T5541] Call Trace: [ 118.443460][ T5541] [ 118.443469][ T5541] __dump_stack+0x1d/0x30 [ 118.443552][ T5541] dump_stack_lvl+0x95/0xd0 [ 118.443577][ T5541] dump_stack+0x15/0x1b [ 118.443599][ T5541] should_fail_ex+0x263/0x280 [ 118.443665][ T5541] should_failslab+0x8c/0xb0 [ 118.443690][ T5541] kmem_cache_alloc_noprof+0x66/0x400 [ 118.443717][ T5541] ? alloc_empty_file+0x76/0x200 [ 118.443885][ T5541] alloc_empty_file+0x76/0x200 [ 118.443913][ T5541] alloc_file_pseudo+0xf6/0x190 [ 118.443943][ T5541] __shmem_file_setup+0x1dd/0x210 [ 118.444017][ T5541] shmem_file_setup+0x3b/0x50 [ 118.444044][ T5541] memfd_alloc_file+0x4e/0x300 [ 118.444089][ T5541] __se_sys_memfd_create+0x2e1/0x3b0 [ 118.444124][ T5541] __x64_sys_memfd_create+0x31/0x40 [ 118.444216][ T5541] x64_sys_call+0x1f22/0x3020 [ 118.444245][ T5541] do_syscall_64+0x12c/0x370 [ 118.444381][ T5541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.444427][ T5541] RIP: 0033:0x7f883092c819 [ 118.444445][ T5541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.444464][ T5541] RSP: 002b:00007f882f386e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 118.444486][ T5541] RAX: ffffffffffffffda RBX: 0000000000000bb2 RCX: 00007f883092c819 [ 118.444501][ T5541] RDX: 00007f882f386ee0 RSI: 0000000000000000 RDI: 00007f88309c2e71 [ 118.444536][ T5541] RBP: 0000200000002700 R08: 00000000ffffffff R09: 0000000000000000 [ 118.444550][ T5541] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000bc0 [ 118.444564][ T5541] R13: 00007f882f386ee0 R14: 00007f882f386ea0 R15: 0000200000000340 [ 118.444582][ T5541] [ 118.665739][ T5543] loop4: detected capacity change from 0 to 512 [ 118.682881][ T5543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.683366][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 118.705912][ T5543] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.754978][ T5550] bridge0: port 3(batadv1) entered blocking state [ 118.761675][ T28] audit: type=1400 audit(1776111518.750:1937): avc: denied { add_name } for pid=5542 comm="syz.4.580" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.764304][ T5548] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.582'. [ 118.783296][ T5550] bridge0: port 3(batadv1) entered disabled state [ 118.797395][ T5548] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.582'. [ 118.801384][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.816188][ T5550] batadv1: entered allmulticast mode [ 118.822702][ T5550] batadv1: entered promiscuous mode [ 118.896345][ T5557] loop4: detected capacity change from 0 to 512 [ 118.909336][ T41] kworker/u8:2: attempt to access beyond end of device [ 118.909336][ T41] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 118.953820][ T5557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.995296][ T5557] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.142959][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.183157][ T5574] capability: warning: `syz.4.592' uses 32-bit capabilities (legacy support in use) [ 120.145406][ T41] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 120.154814][ T41] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 120.346759][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 120.525031][ T5580] loop2: detected capacity change from 0 to 512 [ 120.710229][ T5579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.301154][ T5590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.318076][ T5592] bridge_slave_0: left allmulticast mode [ 122.324413][ T5592] bridge_slave_0: left promiscuous mode [ 122.347826][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.379472][ T5592] bridge_slave_1: left allmulticast mode [ 122.386181][ T5592] bridge_slave_1: left promiscuous mode [ 122.427496][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.452439][ T5592] bond0: (slave bond_slave_0): Releasing backup interface [ 122.467939][ T5592] bond0: (slave bond_slave_1): Releasing backup interface [ 122.486262][ T5592] team0: Port device team_slave_0 removed [ 122.493422][ T5592] team0: Port device team_slave_1 removed [ 122.500024][ T5592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.508331][ T5592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.516305][ T5592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.550080][ T5593] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.596'. [ 122.559954][ T5593] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 122.582285][ T5600] loop2: detected capacity change from 0 to 128 [ 122.637712][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 122.637729][ T28] audit: type=1400 audit(1776111522.660:1943): avc: denied { name_bind } for pid=5610 comm="syz.1.603" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 122.674745][ T360] kworker/u8:7: attempt to access beyond end of device [ 122.674745][ T360] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 122.716634][ T5613] loop2: detected capacity change from 0 to 512 [ 122.756329][ T5613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.770539][ T5613] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.795071][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.984558][ T5626] loop4: detected capacity change from 0 to 512 [ 123.063995][ T5626] EXT4-fs (loop4): 1 orphan inode deleted [ 123.078112][ T5626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.094042][ T5626] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.209584][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5626 comm=syz.4.604 [ 123.229107][ T5626] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 123.242515][ T2136] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 123.281432][ T2136] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 123.698119][ T28] audit: type=1400 audit(1776111523.720:1944): avc: denied { bind } for pid=5635 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.851112][ T28] audit: type=1400 audit(1776111523.720:1945): avc: denied { listen } for pid=5635 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.505759][ T5640] loop1: detected capacity change from 0 to 512 [ 124.870281][ T5644] loop2: detected capacity change from 0 to 128 [ 125.036854][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.289985][ T5651] loop2: detected capacity change from 0 to 128 [ 125.519761][ T5655] loop2: detected capacity change from 0 to 512 [ 125.580224][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.620942][ T5655] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.667956][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.943337][ T5667] syzkaller0: entered promiscuous mode [ 125.949102][ T5667] syzkaller0: entered allmulticast mode [ 125.957492][ T28] audit: type=1326 audit(1776111525.970:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 125.985079][ T28] audit: type=1326 audit(1776111525.970:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 126.008495][ T28] audit: type=1326 audit(1776111525.970:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 126.037481][ T28] audit: type=1326 audit(1776111525.970:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 126.062084][ T28] audit: type=1326 audit(1776111525.970:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 126.089095][ T28] audit: type=1326 audit(1776111525.980:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 126.176285][ T5681] loop2: detected capacity change from 0 to 128 [ 126.231748][ T5685] loop2: detected capacity change from 0 to 512 [ 126.249325][ T5685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.262415][ T5685] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.282459][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.316102][ T5691] loop2: detected capacity change from 0 to 512 [ 126.369097][ T5691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.382301][ T5691] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.428898][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.644660][ T5701] netlink: 156 bytes leftover after parsing attributes in process `syz.0.630'. [ 128.384285][ T5706] set_capacity_and_notify: 2 callbacks suppressed [ 128.384370][ T5706] loop4: detected capacity change from 0 to 512 [ 128.979248][ T28] kauditd_printk_skb: 320 callbacks suppressed [ 128.979264][ T28] audit: type=1400 audit(1776111529.000:2272): avc: denied { getattr } for pid=5718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.950940][ T5699] EXT4-fs: error -4 creating inode table initialization thread [ 129.962767][ T5699] EXT4-fs (loop1): mount failed [ 130.138114][ T28] audit: type=1400 audit(1776111530.160:2273): avc: denied { read } for pid=5722 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.568948][ T5724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.752299][ T5590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.870103][ T5733] loop1: detected capacity change from 0 to 512 [ 130.983548][ T5724] macvlan1: entered promiscuous mode [ 130.988998][ T5724] macvlan1: entered allmulticast mode [ 131.023546][ T5590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.089753][ T5733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.110272][ T5590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.111747][ T28] audit: type=1400 audit(1776111530.160:2274): avc: denied { open } for pid=5722 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.121265][ T5733] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.147198][ T28] audit: type=1400 audit(1776111531.070:2275): avc: denied { create } for pid=5714 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.179380][ T28] audit: type=1400 audit(1776111531.070:2276): avc: denied { write } for pid=5714 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=6618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.205992][ T28] audit: type=1400 audit(1776111531.070:2277): avc: denied { append } for pid=5714 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=6618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.232447][ T28] audit: type=1400 audit(1776111531.090:2278): avc: denied { unlink } for pid=5741 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=6618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.266742][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.610593][ T360] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.630883][ T2176] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.639605][ T2176] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.648418][ T2176] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.828620][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 131.895396][ T28] audit: type=1326 audit(1776111531.910:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 131.927581][ T28] audit: type=1326 audit(1776111531.910:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 131.952083][ T28] audit: type=1326 audit(1776111531.910:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c56c819 code=0x7ffc0000 [ 131.989326][ T5809] loop2: detected capacity change from 0 to 1024 [ 132.006241][ T5809] EXT4-fs: dax option not supported [ 132.043245][ T5810] loop0: detected capacity change from 0 to 128 [ 132.184686][ T360] kworker/u8:7: attempt to access beyond end of device [ 132.184686][ T360] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 132.261173][ T5814] loop2: detected capacity change from 0 to 512 [ 133.552668][ T5818] loop5: detected capacity change from 0 to 512 [ 133.592788][ T5813] loop0: detected capacity change from 0 to 128 [ 133.668076][ T5814] EXT4-fs (loop2): 1 orphan inode deleted [ 133.680702][ T5814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.696645][ T5814] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.837883][ T5811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5811 comm=syz.2.645 [ 133.851224][ T5811] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 133.859766][ T41] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 134.019695][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.083590][ T5830] Cannot find del_set index 1 as target [ 134.175612][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'. [ 134.204997][ T2136] kworker/u8:8: attempt to access beyond end of device [ 134.204997][ T2136] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 134.205822][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.266663][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 134.266681][ T28] audit: type=1326 audit(1776111534.280:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.325175][ T5837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.364631][ T28] audit: type=1326 audit(1776111534.320:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.395430][ T28] audit: type=1326 audit(1776111534.320:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.428951][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 134.442023][ T5837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.456369][ T28] audit: type=1326 audit(1776111534.330:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.483498][ T28] audit: type=1326 audit(1776111534.330:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.551972][ T5837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.569992][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'. [ 134.581475][ T5846] loop0: detected capacity change from 0 to 1024 [ 134.612182][ T28] audit: type=1326 audit(1776111534.330:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.670637][ T5837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.684622][ T5846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.707052][ T28] audit: type=1326 audit(1776111534.330:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.754219][ T28] audit: type=1326 audit(1776111534.330:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.780242][ T28] audit: type=1326 audit(1776111534.330:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.804178][ T28] audit: type=1326 audit(1776111534.330:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 134.831657][ T2176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.875764][ T2176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.902899][ T2136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.922303][ T2136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.930950][ T5861] loop5: detected capacity change from 0 to 1024 [ 134.940590][ T5861] EXT4-fs: dax option not supported [ 134.948034][ T5863] loop4: detected capacity change from 0 to 1024 [ 134.964961][ T5863] EXT4-fs: dax option not supported [ 135.299380][ T5871] loop2: detected capacity change from 0 to 128 [ 135.583560][ T5870] loop4: detected capacity change from 0 to 512 [ 135.603285][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.752059][ T5873] loop5: detected capacity change from 0 to 512 [ 136.209458][ T5870] EXT4-fs (loop4): 1 orphan inode deleted [ 136.209596][ T5873] EXT4-fs (loop5): 1 orphan inode deleted [ 136.255261][ T5873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.300962][ T2136] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 136.317814][ T5870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.345847][ T2136] loop4: lost filesystem error report for type 5 error -117 [ 136.357678][ T2136] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 136.379424][ T5873] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.403118][ T5870] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.484027][ T5888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5888 comm=syz.5.660 [ 136.612919][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 136.649094][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 136.660464][ T5872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5872 comm=syz.4.661 [ 136.673466][ T5896] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 136.673564][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 136.686893][ T1034] IPVS: starting estimator thread 0... [ 136.782843][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 136.793955][ T5891] netlink: 'syz.2.666': attribute type 14 has an invalid length. [ 136.802121][ T5891] netlink: 'syz.2.666': attribute type 12 has an invalid length. [ 136.844595][ T5901] loop0: detected capacity change from 0 to 164 [ 136.855205][ T5870] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 136.867375][ T5897] IPVS: using max 2304 ests per chain, 115200 per kthread [ 136.951630][ T5902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.981218][ T5901] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 137.028434][ T5893] netlink: 'syz.2.666': attribute type 14 has an invalid length. [ 137.114140][ T5893] netlink: 'syz.2.666': attribute type 12 has an invalid length. [ 137.887630][ T5901] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 137.940439][ T5908] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.965883][ T5908] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 138.484340][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 139.214989][ T5932] syzkaller0: entered promiscuous mode [ 139.220629][ T5932] syzkaller0: entered allmulticast mode [ 139.267413][ T28] kauditd_printk_skb: 944 callbacks suppressed [ 139.267427][ T28] audit: type=1326 audit(1776111539.290:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.317786][ T28] audit: type=1326 audit(1776111539.330:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.397325][ T28] audit: type=1326 audit(1776111539.330:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.446426][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.456243][ T28] audit: type=1326 audit(1776111539.330:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.502997][ T5934] loop4: detected capacity change from 0 to 128 [ 139.507812][ T28] audit: type=1326 audit(1776111539.330:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.539913][ T5934] FAT-fs (loop4): bogus number of reserved sectors [ 139.549702][ T28] audit: type=1326 audit(1776111539.330:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.556732][ T5934] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 139.601730][ T28] audit: type=1326 audit(1776111539.330:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.625762][ T5934] FAT-fs (loop4): Can't find a valid FAT filesystem [ 139.652670][ T28] audit: type=1326 audit(1776111539.330:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.681875][ T28] audit: type=1326 audit(1776111539.330:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.706373][ T5355] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.717504][ T28] audit: type=1326 audit(1776111539.330:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3908c2d04e code=0x7ffc0000 [ 139.749098][ T5947] netlink: 47 bytes leftover after parsing attributes in process `syz.5.685'. [ 139.842452][ T5958] loop2: detected capacity change from 0 to 164 [ 139.849696][ T5958] iso9660: Unknown parameter './file0' [ 140.171888][ T5974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.715188][ T5978] loop1: detected capacity change from 0 to 1024 [ 140.727246][ T5978] EXT4-fs: dax option not supported [ 141.176210][ T5985] loop1: detected capacity change from 0 to 512 [ 141.285798][ T5985] EXT4-fs (loop1): 1 orphan inode deleted [ 141.297711][ T2176] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 141.317725][ T2176] loop1: lost filesystem error report for type 5 error -117 [ 141.328100][ T5985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.381774][ T5985] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.505617][ T5985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5985 comm=syz.1.696 [ 141.538080][ T5985] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 142.499690][ T5934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.690788][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.5.713'. [ 142.811417][ T6029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.728481][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.877469][ T6034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.134400][ T6035] macvlan1: entered promiscuous mode [ 145.140044][ T6035] macvlan1: entered allmulticast mode [ 145.513551][ T28] kauditd_printk_skb: 633 callbacks suppressed [ 145.513608][ T28] audit: type=1326 audit(1776111545.530:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.542012][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 145.554932][ T6048] loop0: detected capacity change from 0 to 512 [ 145.570384][ T6048] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 145.580476][ T28] audit: type=1326 audit(1776111545.560:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.639869][ T28] audit: type=1326 audit(1776111545.560:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.691282][ T28] audit: type=1326 audit(1776111545.560:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.715066][ T28] audit: type=1326 audit(1776111545.560:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.739172][ T28] audit: type=1326 audit(1776111545.560:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.796311][ T28] audit: type=1326 audit(1776111545.560:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.820133][ T28] audit: type=1326 audit(1776111545.560:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.843881][ T28] audit: type=1326 audit(1776111545.560:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.851419][ T6061] loop4: detected capacity change from 0 to 1024 [ 145.868955][ T28] audit: type=1326 audit(1776111545.560:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3908c6c819 code=0x7ffc0000 [ 145.891690][ T6061] EXT4-fs: dax option not supported [ 145.944920][ T6064] loop5: detected capacity change from 0 to 4096 [ 145.985424][ T6064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.027174][ T5355] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 146.091692][ T5355] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 146.228538][ T6072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.454279][ T6073] loop4: detected capacity change from 0 to 512 [ 146.500641][ T5355] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.526382][ T2136] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.611291][ T6077] loop1: detected capacity change from 0 to 1024 [ 146.640592][ T2136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.681919][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.760562][ T2136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.818920][ T6073] EXT4-fs (loop4): 1 orphan inode deleted [ 146.879008][ T2136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.933513][ T6073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.042582][ T2136] batadv1: left allmulticast mode [ 147.059619][ T6073] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.073710][ T2136] batadv1: left promiscuous mode [ 147.087649][ T2136] bridge0: port 3(batadv1) entered disabled state [ 147.137503][ T41] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 147.159578][ T2136] bridge_slave_1: left allmulticast mode [ 147.165298][ T2136] bridge_slave_1: left promiscuous mode [ 147.208353][ T5355] ================================================================== [ 147.216564][ T5355] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 147.224212][ T5355] [ 147.226543][ T5355] read-write to 0xffff888237c26668 of 1 bytes by task 6092 on cpu 0: [ 147.234685][ T5355] folio_add_lru+0xa4/0x1e0 [ 147.239277][ T5355] folio_add_lru_vma+0x49/0x70 [ 147.244051][ T5355] do_wp_page+0x15b3/0x2590 [ 147.248557][ T5355] handle_mm_fault+0x8cb/0x3020 [ 147.253428][ T5355] do_user_addr_fault+0x62f/0x1050 [ 147.258547][ T5355] exc_page_fault+0x62/0xa0 [ 147.263154][ T5355] asm_exc_page_fault+0x26/0x30 [ 147.268017][ T5355] [ 147.270351][ T5355] read to 0xffff888237c26668 of 1 bytes by task 5355 on cpu 1: [ 147.277990][ T5355] __lru_add_drain_all+0x17e/0x450 [ 147.283130][ T5355] lru_add_drain_all+0x10/0x20 [ 147.288082][ T5355] invalidate_bdev+0x47/0x70 [ 147.292680][ T5355] ext4_put_super+0x610/0x7b0 [ 147.297368][ T5355] generic_shutdown_super+0xee/0x220 [ 147.302665][ T5355] kill_block_super+0x2a/0x70 [ 147.307335][ T5355] ext4_kill_sb+0x42/0x80 [ 147.311657][ T5355] deactivate_locked_super+0x75/0x1c0 [ 147.317025][ T5355] deactivate_super+0x97/0xa0 [ 147.321743][ T5355] cleanup_mnt+0x2bb/0x330 [ 147.326448][ T5355] __cleanup_mnt+0x19/0x20 [ 147.330871][ T5355] task_work_run+0x130/0x1a0 [ 147.335465][ T5355] do_exit+0x4ae/0x1600 [ 147.339642][ T5355] do_group_exit+0x138/0x140 [ 147.344232][ T5355] __x64_sys_exit_group+0x1f/0x20 [ 147.349267][ T5355] x64_sys_call+0x3008/0x3020 [ 147.353959][ T5355] do_syscall_64+0x12c/0x370 [ 147.358659][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.364555][ T5355] [ 147.366876][ T5355] value changed: 0x01 -> 0x02 [ 147.371534][ T5355] [ 147.374426][ T5355] Reported by Kernel Concurrency Sanitizer on: [ 147.380687][ T5355] CPU: 1 UID: 0 PID: 5355 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 147.391905][ T5355] Tainted: [W]=WARN [ 147.395708][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 147.405895][ T5355] ================================================================== [ 147.417453][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.646876][ T2136] bridge_slave_0: left allmulticast mode [ 147.652798][ T2136] bridge_slave_0: left promiscuous mode [ 147.659128][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.737120][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6100 comm=syz.4.724 [ 147.750829][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.782322][ T6073] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 147.869634][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.880356][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.890434][ T2136] bond0 (unregistering): Released all slaves [ 147.971707][ T2136] hsr_slave_0: left promiscuous mode [ 147.978883][ T2136] hsr_slave_1: left promiscuous mode [ 147.984591][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.000481][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.008369][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.016414][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.044494][ T2136] veth1_macvtap: left promiscuous mode [ 148.050187][ T2136] veth0_macvtap: left promiscuous mode [ 148.074321][ T2136] veth1_vlan: left promiscuous mode [ 148.080266][ T2136] veth0_vlan: left promiscuous mode [ 148.149334][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 148.159471][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 148.430054][ T2136] IPVS: stop unused estimator thread 0... [ 148.869989][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.