last executing test programs: 1m50.517657827s ago: executing program 1 (id=256): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e7a6373f25bcb91200f6a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = memfd_secret(0x80000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0000000000000000003b00000062f922efc4bb9500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) r8 = syz_open_dev$vcsn(&(0x7f0000000400), 0x7, 0x20800) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001000000000000000100000018430000ffffff", @ANYRES32=r2, @ANYBLOB="0000000001000000184900000200000000000000000000009500000000000000186900000e000000000000000500000018250000", @ANYRES32=r2, @ANYBLOB="00000000ffff000085000000480000009500000000000000"], 0x0, 0x10000, 0xe5, &(0x7f0000000840)=""/229, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, r4, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x6, 0x3}, 0x10, r7, r8, 0xa, &(0x7f0000000580)=[r2, r2, r2, r2, r3, r2, r2, r2], &(0x7f0000000940)=[{0x0, 0x4, 0x7, 0xb}, {0x3, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x6, 0xa}, {0x2, 0x3, 0x6, 0x7}, {0x3, 0x4, 0x2, 0xc}, {0x1, 0x1, 0x9, 0x6}, {0x3, 0x3, 0x3, 0x2}, {0x5, 0x4, 0xa, 0x5}, {0x1, 0x1, 0x10, 0x5}, {0x1, 0x1, 0xa, 0x5}], 0x10, 0x1ff}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r10, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xfffffffe, 0x1) 1m50.414239025s ago: executing program 1 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) 1m50.347012331s ago: executing program 1 (id=260): keyctl$set_timeout(0xf, 0x0, 0x3) r0 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="945a4684829259b01b764ef94d7ba96227ccca5ed97cb15023d679724358b6038902a558dc1228f9269fbfa01b54f45d26939cc780c5baf238cc1fad59a6b78f775776902c300eddced0ff5cf3aedf77c20a2a19", 0x54, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '\'[}}@\'(&', 0x20, 0x1}, 0x30, r1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='trusted\x00', &(0x7f0000000280)='.dead\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getnetconf={0x34, 0x52, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x401}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x34}}, 0x80) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x7, 0x0, @void}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000000940)={0x9, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/48, 0x30}, {&(0x7f0000000800)=""/53, 0x35}], &(0x7f00000008c0)=[0x40, 0x7ff, 0xf69, 0x2, 0x0, 0x1, 0x8b67, 0x1, 0x9], 0x7}, 0x20) getdents(0xffffffffffffff9c, &(0x7f0000000980)=""/230, 0xe6) close(r7) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000a80)='totmaps\x00') sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x4}, {0x2, 0x5}, {0xb, 0x7}, {0x4, 0x5}, {0x5, 0x1}, {0x42, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x9, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x11, 0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x6}, {0x8, 0x6}, {0x6, 0x3}], "36b24b642aa62d03"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7f, 0x1}, {0x28, 0x4}, {0xd, 0x6}, {0x5, 0x5}, {0x1, 0x7}], "6a8790e2641cacb3"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xfe, 0x4}, {0x3, 0x4}, {0x3, 0x6}], "5551c4dd125d1542"}}]}, 0x78}, 0x1, 0x0, 0x0, 0xd0}, 0x20004800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/diskstats\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f00000011c0)={0x6, 0x0, &(0x7f0000001100)=[{&(0x7f0000000c40)=""/202, 0xca}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000e00)=""/70, 0x46}, {&(0x7f0000000e80)=""/130, 0x82}, {&(0x7f0000000f40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/68, 0x44}, {&(0x7f0000001040)=""/58, 0x3a}, {&(0x7f0000001080)=""/108, 0x6c}], &(0x7f0000001180)=[0x5, 0x5, 0x8000000000000000, 0x1, 0xb1c, 0x19], 0x8}, 0x20) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000001200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001240)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x3, 0x7, 0x3, 0x20602, 0xffffffffffffffff, 0xff, '\x00', r10, r6, 0x5, 0x1, 0x4, 0x3}, 0x50) sendfile(r4, r5, &(0x7f0000001300), 0x7) sendmsg$inet(r6, &(0x7f0000001540)={&(0x7f0000001340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001380)="1b7ec3f89fa806072cde35fdad818bbc15bad5eff1f3c0819eb35f9e54567fbb331cbe0aa4a679bd46f0dc7533562f94ec4374082578f15ca1b20ae30c6635eb146615781cfae8613e4ccb7cf0bb1dc46b660f9c98e33a860b934466bd675d8ab9dd", 0x62}, {&(0x7f0000001400)="955f4e701377dc943827478860c72aa9bb0c845f3717286ca0377feb56b2e9128a0723f85da21991dbf979260f44f394af1c67f5c1e69fed3b8c9277730114451d64d0fa5917349180ebabfc47d140ce24ba0363be7c1110c37c1a3b48318bfe554fe6e4b5719ff71fcee48974a90b70a779c4d3790c98053b44b94f273bec0ca3c16a9bf7b5c84f7eb45a3f541caaf4a9cc8c0b5fcd58bac43dab95cbeab0e8210d2aa7594b5d7795b6", 0xaa}], 0x2, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2}}}], 0x20}, 0x4004800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6d}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000085) 1m50.111479132s ago: executing program 1 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) set_robust_list(0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}, {0x0}], 0x2) r3 = syz_clone3(&(0x7f0000000680)={0x80000000, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440), {0x2d}, &(0x7f0000000580)=""/253, 0xfd, &(0x7f0000000480)=""/58, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7, {r2}}, 0x58) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x5) r7 = syz_clone(0x2008000, &(0x7f0000000500)="f7103399c28825", 0x7, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="c7cb10b6f45564fc900c8467b197383f578b130efde4147e4802ef9b1280cda720b4bfcca136976bd6c29d4c5a3b487984e28b8278ef765d2f8a2c2bbf78229c521b989974cc22a764e783f78cb4e5273b202badfd2e2b76047232cf8c36113123f29d66a52d49adc964227b198b18fcb377268d5ecf466435f2d8d650cfe07cbdeaf4889a619bb6b0fdecb5b6e6e3222678eaf239f54611a69fcfb9695609475f1f44c8ddfee9b564d1a9b5cfc80b1478ffe101b3d5e9cb258e320d7492b04568b4f51784d58bdcf6d1199d8885266acb0bf1cc2bded7d6e096ef5d16a11a9b519ac330cbc62979cdd801132ea00c52fbce") syz_clone3(&(0x7f0000000980)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x2d}, &(0x7f0000000300)=""/251, 0xfb, &(0x7f00000001c0)=""/81, &(0x7f0000000940)=[r3, r4, 0x0, r6, r7], 0x5, {r2}}, 0x58) setuid(0xee01) shmctl$IPC_RMID(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0xa7ff, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380004000000010000000000000000000900020073797a300000000008004100736977001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 1m49.413513073s ago: executing program 1 (id=277): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x804) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/69, 0x45}], 0x1}, 0x9}], 0x1, 0x40000007, 0x0) 1m48.869393571s ago: executing program 1 (id=286): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00aaaaaa230180c20000020800450000b000000000001190780a010102ffffe10a7a314e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c709f28bd135c4a99ad0c1bffcf37a6ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fstatfs(r5, &(0x7f0000001340)=""/4096) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r7) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r7) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000000)="66d4692a0a1b30", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') syz_open_dev$tty1(0xc, 0x4, 0x2) 1m48.832695823s ago: executing program 32 (id=286): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00aaaaaa230180c20000020800450000b000000000001190780a010102ffffe10a7a314e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c709f28bd135c4a99ad0c1bffcf37a6ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fstatfs(r5, &(0x7f0000001340)=""/4096) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r7) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r7) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000000)="66d4692a0a1b30", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') syz_open_dev$tty1(0xc, 0x4, 0x2) 6.086168226s ago: executing program 2 (id=1022): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 5.477926909s ago: executing program 4 (id=1023): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r3, r3, 0x0, 0xe3aa6ea) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x3) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x4}}, 0x24) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x8c0, 0x105) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r8, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x4, 0x7d, 0x3, 0x3e, 0xfffffffb, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x7c, 0x5, 0x9}, [{0x6474e551, 0xbae, 0xc8c8, 0x6, 0x1, 0x81, 0x0, 0x6}]}, 0x78) close(r8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000580), &(0x7f0000000680)='%pB \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 4.277420775s ago: executing program 2 (id=1026): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) epoll_create1(0x80000) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.024517207s ago: executing program 0 (id=1027): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x8028451f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00aaaaaa230180c20000020800450000b000000000001190780a010102ffffe10a7a314e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c709f28bd135c4a99ad0c1bffcf37a6ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fstatfs(r6, &(0x7f0000001340)=""/4096) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r8) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000000)="66d4692a0a1b30", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') syz_open_dev$tty1(0xc, 0x4, 0x2) 4.020755077s ago: executing program 3 (id=1028): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x11af, &(0x7f00000002c0)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0xe, 0x11a1, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@end, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xc5, [@broadcast, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x27, 0x1, [], "56d4d7f762e30c9f4c5da104033172eb9e74a9e48faeb227a2fd558decd52c404ecb076348d587"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xb033, 0x55a, 0xfff6], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2ba, 0x6, 0x8b], "f3c5f0fee78e2f811bb3a0d2b1b7ba99aa5bde97b4421bf85e203eba96e0f8b1dfeff568e19f464eabf9dd1a7c552a1b0e3b470c415ff1d3d57238e28bc0fe5f3e4b5a003499b852a939a7e5e4005a710dc265c726e9aa8b17de76bbf55497457010256cb5a0b07ab8fe275c438fe8a43d5175ffa548df42c14911bc21e907a0ae281116c15220c1aad9c1aaa7dd13db392074580fb86beaa533f910d648ea04800b28ad3347"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0xe1, 0x0, 0x1, 0x1, 0x2, 0x9}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x2e}, 0x2, {0xee6, 0x2, 0x1, 0x5, 0x1}}}, {0x8, 0x6558, 0x2, "e414348b161e4899c3196a6c7aed92bc701b51ba6df677011216b9edfb9ada2ceacfcedc7f6026e810016e6b036f313ef16c1e1293197269206ea29e57ba8bc8b285c7e7184c60d2f7abd86ff95872dfbbfda3a0ca1f4b2d95878c8c"}}}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x40, "1c5f87", "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"}}, 0x110) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 3.999009729s ago: executing program 4 (id=1029): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x1, 0x0, 0x0, 0x1) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xcfca, 0x1042, 0xfffffffe, 0x2a6}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) getpgrp(0x0) 3.970753592s ago: executing program 3 (id=1031): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 3.270952313s ago: executing program 3 (id=1033): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e7a6373f25bcb91200f6a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = memfd_secret(0x80000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0000000000000000003b00000062f922efc4bb9500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) r8 = syz_open_dev$vcsn(&(0x7f0000000400), 0x7, 0x20800) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001000000000000000100000018430000ffffff", @ANYRES32=r2, @ANYBLOB="0000000001000000184900000200000000000000000000009500000000000000186900000e000000000000000500000018250000", @ANYRES32=r2, @ANYBLOB="00000000ffff000085000000480000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x10000, 0xe5, &(0x7f0000000840)=""/229, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, r4, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x6, 0x3}, 0x10, r7, r8, 0x9, &(0x7f0000000580)=[r2, r2, r2, r2, r3, r2, r2, r2], &(0x7f0000000940)=[{0x0, 0x4, 0x7, 0xb}, {0x3, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x6, 0xa}, {0x2, 0x3, 0x6, 0x7}, {0x3, 0x4, 0x2, 0xc}, {0x1, 0x1, 0x9, 0x6}, {0x3, 0x3, 0x3, 0x2}, {0x1, 0x1, 0x10, 0x5}, {0x1, 0x1, 0xa, 0x5}], 0x10, 0x1ff}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r10 = syz_open_procfs(0x0, 0x0) preadv(r10, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xfffffffe, 0x1) 3.255015074s ago: executing program 0 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x7, 0x180) semtimedop(r1, &(0x7f0000000080)=[{0x1, 0xffff, 0x2000}], 0x5b, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x4, 0x1800}, {0x1, 0x7, 0x1000}, {0x1, 0x9, 0x1000}, {0x1, 0x7, 0x1000}, {0x2, 0x0, 0x1800}], 0x5) semctl$GETNCNT(r1, 0x1, 0xe, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000180)) setuid(0xee01) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0xea60}}, 0x100) 3.168798402s ago: executing program 5 (id=1035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000140)={[{@check_relaxed}, {@map_off}, {@hide}, {@map_normal}, {@cruft}, {@hide}, {@dmode={'dmode', 0x3d, 0x800}}, {@session={'session', 0x3d, 0x54}}, {@check_relaxed}]}, 0x1, 0x557, &(0x7f0000000580)="$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") setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0xb8}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) 3.103183368s ago: executing program 5 (id=1036): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r3, r3, 0x0, 0xe3aa6ea) 3.102535117s ago: executing program 3 (id=1037): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@usrquota}, {@resgid}, {@data_err_ignore}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@nouid32}]}, 0x1, 0x788, &(0x7f0000002800)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x4000423) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESHEX], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.062073071s ago: executing program 2 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000ac0)={{}, "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"}) sendmsg$nl_generic(r0, 0x0, 0x2404c002) 3.056491142s ago: executing program 4 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) socket$kcm(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12163) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r2, &(0x7f0000000000)=""/212, 0xd4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r5 = syz_io_uring_setup(0xe42, &(0x7f0000000180)={0x0, 0x7f7, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1482, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r5, 0x6f58, 0x0, 0x0, 0x0, 0x0) 2.894560206s ago: executing program 2 (id=1040): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = semget$private(0x0, 0x6, 0x40d) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000100)=""/111) semop(r3, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast2, 0x4e21, 0xfff9, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1d}, {0x401, 0x8, 0x2f042152, 0x8, 0x5, 0x49b5ed5d, 0x2, 0x8}, {0x2, 0x2, 0x6, 0x8}, 0x52, 0x6e6bba, 0x2, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3502, 0x1, 0x0, 0x7, 0x7fff, 0x81, 0x81}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.874471318s ago: executing program 5 (id=1041): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0xc000000b}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) timer_delete(0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.376040571s ago: executing program 0 (id=1042): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1, 0x30e, &(0x7f0000000680)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=0xffff7fff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000955593598269f816352d333f0a0d0bcc81328a8f1288595626d764c20a34f1fcd2d717e208c259fb7e0c9b415693c6627228259bba72b8"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 2.371332182s ago: executing program 2 (id=1043): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@usrquota}, {@resgid}, {@data_err_ignore}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@nouid32}]}, 0x1, 0x788, &(0x7f0000002800)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTJt2Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEw/tX9yLYH2U9DBm4DnkAQBAd/l5/oHmuVkhinGg21maEzgAAAB4KdUH6736s+eRAAAAwAsmiR4Hju5xIgAAAMAe2f4/gO17e/fqPthOfn49IobbxR9o3EMccSgKEXFkM9lx+0GyNQ2eyfqNiLg90ebz18sdzd2N3m8e3p0jsttu5+vPRLv1J22tP9Fm/RnY/u6EZ9R5/bsf/0CH9e9ijzG+/uz/hY7xb1RX3j/WLn7Sip90iP92j/Fvbnxwq9Nz9S8iTrb9+5PsiNXl+yFGZuaydr9arXTv/HXqbuf6I448Ej9JGlGT7vVf6bH+dzd/m1/vEv/U8e7v/1b8wR3z8s/Eh8080oi41XzM+xs7QwweX/j+m0cjJ+vb8ac7vP7t3/83W/V/3mP9P345uNLjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhII2IokrTUaqdpqRRxNCL+G0fSrFKtnZ6pLC9O589FDEchnZnLyqMRUdzqJ3l/rNG+3z/7UH88Iv7zw+GtoHNZuTRVyab7XTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtRyNiKJK0FBFpRPxeTNNSqd9ZAQAAALtuuN8JAAAAAHvO9T8AAADsf097/Z/sch4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvnbxwoV8q2/euzaV96evri7PV66emS5X50sLy1OlqcrSldJspTKblUtTlYXHHS+NiLHzsbwyUitXayPV1bXLC5XlxdrluYXJ2fLlcuG5VAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTGmpsSVqKiLTRTtNSKeJfETEchWRmLiuPRsS/I+JusTCY98f6nTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7rrq6Nj+ZZeWll7tR31/l9NyIJOIFSKND45Pmu9JtTLIe0fdU02aiz3KciCeZdf0xL0u/G6/0aT0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKC/qqtr85NZVl6q9jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+iv9KYmIfDtZPDH08LMHkz+KjceIeOfTSx+tTNZqS2P5/l9b+2sfN/effWDi9edZAwAAAOx7rz3J4O3r9O3reAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF5VV9fmJ7OsvLSHjbjR7yoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICn8XcAAAD//4vfuQk=") r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESHEX], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.053223s ago: executing program 4 (id=1044): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x8028451f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00aaaaaa230180c20000020800450000b000000000001190780a010102ffffe10a7a314e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c709f28bd135c4a99ad0c1bffcf37a6ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fstatfs(r6, &(0x7f0000001340)=""/4096) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r8) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000000)="66d4692a0a1b30", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') syz_open_dev$tty1(0xc, 0x4, 0x2) 1.187144665s ago: executing program 0 (id=1045): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xc000000b}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) timer_delete(0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.150568989s ago: executing program 5 (id=1046): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 1.121876791s ago: executing program 4 (id=1047): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x44, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="96ec4d7fe2910296a72f74d0acb6bea98933078eededbd4ab57172f88bed6ee6c7b4860374ec3ae10c59619f9170262af1580050fb6c7482b79ac628ee89ad7d9703f8cd", 0x0, 0x10001, 0x10, 0x2, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace(0x10, r5) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000300)) 1.080264035s ago: executing program 3 (id=1048): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@usrquota}, {@resgid}, {@data_err_ignore}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@nouid32}]}, 0x1, 0x788, &(0x7f0000002800)="$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") r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESHEX], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 939.298587ms ago: executing program 0 (id=1049): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x407, &(0x7f0000000080)={[], [], 0x3d}, 0x1, 0x517, &(0x7f0000000d00)="$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") socket(0x10, 0x4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="66210000c8f40d5e61114c000000000085ee0000640000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r2 = msgget$private(0x0, 0x7ac) msgrcv(r2, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) 699.802668ms ago: executing program 5 (id=1050): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r3, r3, 0x0, 0xe3aa6ea) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x3) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x4}}, 0x24) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x8c0, 0x105) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r8, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x4, 0x7d, 0x3, 0x3e, 0xfffffffb, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x7c, 0x5, 0x9}, [{0x6474e551, 0xbae, 0xc8c8, 0x6, 0x1, 0x81, 0x0, 0x6}]}, 0x78) close(r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x401}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 284.941475ms ago: executing program 5 (id=1051): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x44, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="96ec4d7fe2910296a72f74d0acb6bea98933078eededbd4ab57172f88bed6ee6c7b4860374ec3ae10c59619f9170262af1580050fb6c7482b79ac628ee89ad7d9703f8cd", 0x0, 0x10001, 0x10, 0x2, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace(0x10, r5) socket$xdp(0x2c, 0x3, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000080), 0xffffffffffffffd) 243.219418ms ago: executing program 4 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x7, 0x180) semtimedop(r1, &(0x7f0000000080)=[{0x1, 0xffff, 0x2000}], 0x5b, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x4, 0x1800}, {0x1, 0x7, 0x1000}, {0x1, 0x9, 0x1000}, {0x1, 0x7, 0x1000}, {0x2, 0x0, 0x1800}], 0x5) semctl$GETNCNT(r1, 0x1, 0xe, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setuid(0xee01) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0xea60}}, 0x100) 228.31364ms ago: executing program 2 (id=1053): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r3, r3, 0x0, 0xe3aa6ea) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x3) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x4}}, 0x24) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x8c0, 0x105) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r8, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x4, 0x7d, 0x3, 0x3e, 0xfffffffb, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x7c, 0x5, 0x9}, [{0x6474e551, 0xbae, 0xc8c8, 0x6, 0x1, 0x81, 0x0, 0x6}]}, 0x78) close(r8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000580), &(0x7f0000000680)='%pB \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 72.082963ms ago: executing program 3 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) socket$kcm(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12163) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r2, &(0x7f0000000000)=""/212, 0xd4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0xe42, &(0x7f0000000180)={0x0, 0x7f7, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1482, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r5, 0x6f58, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1055): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1, 0x30e, &(0x7f0000000680)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=0xffff7fff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000955593598269f816352d333f0a0d0bcc81328a8f1288595626d764c20a34f1fcd2d717e208c259fb7e0c9b415693c6627228259bba72b8"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) kernel console output (not intermixed with test programs): 000e128, mo2=0002] [ 87.860178][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 87.979546][ T5210] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.988484][ T5210] __quota_error: 249 callbacks suppressed [ 87.988526][ T5210] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 88.006763][ T5210] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.036037][ T5210] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.036995][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 88.052211][ T5210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.466: bg 0: block 40: padding at end of block bitmap is not set [ 88.067307][ T5210] loop4: lost filesystem error report for type 5 error -117 [ 88.074700][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 88.088925][ C1] EXT4-fs (loop4): initial error at time 1771621875: ext4_validate_block_bitmap:441 [ 88.099187][ C1] EXT4-fs (loop4): last error at time 1771621875: ext4_validate_block_bitmap:441 [ 88.116134][ T5210] EXT4-fs (loop4): Remounting filesystem read-only [ 88.130528][ T5210] EXT4-fs (loop4): 1 truncate cleaned up [ 88.155308][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.244949][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 88.302852][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.317425][ T5228] loop0: detected capacity change from 0 to 128 [ 88.819180][ T5242] loop2: detected capacity change from 0 to 1024 [ 88.831474][ T5242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 88.841826][ T5242] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.869606][ T5242] EXT4-fs error (device loop2): ext4_get_journal_inode:5865: comm syz.2.475: inode #4294967295: comm syz.2.475: iget: illegal inode # [ 88.902295][ T5242] loop2: lost filesystem error report for type 5 error -117 [ 88.902475][ T5242] EXT4-fs (loop2): no journal found [ 88.910027][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 88.910062][ C1] EXT4-fs (loop2): initial error at time 1771621876: ext4_get_journal_inode:5865 [ 88.910083][ C1] EXT4-fs (loop2): last error at time 1771621876: ext4_get_journal_inode:5865 [ 88.987281][ T5242] EXT4-fs (loop2): can't get journal size [ 89.005057][ T5242] EXT4-fs (loop2): failed to initialize system zone (-22) [ 89.012496][ T5242] EXT4-fs (loop2): mount failed [ 89.684805][ T5258] loop4: detected capacity change from 0 to 128 [ 89.699021][ T28] audit: type=1326 audit(1771621876.957:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 89.773655][ T5265] loop3: detected capacity change from 0 to 2048 [ 89.798297][ T28] audit: type=1326 audit(1771621876.957:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 89.830322][ T28] audit: type=1326 audit(1771621876.986:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 89.857634][ T28] audit: type=1326 audit(1771621876.986:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 89.886245][ T28] audit: type=1326 audit(1771621877.016:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 90.002851][ T28] audit: type=1326 audit(1771621877.016:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 90.080718][ T28] audit: type=1326 audit(1771621877.016:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 90.203807][ T28] audit: type=1326 audit(1771621877.016:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 90.205695][ T5265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.233206][ T28] audit: type=1326 audit(1771621877.016:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 90.293536][ T5278] loop2: detected capacity change from 0 to 2048 [ 90.302693][ T5265] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.350204][ T5278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.366822][ T5278] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.671958][ T5289] loop0: detected capacity change from 0 to 1024 [ 90.702932][ T5289] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 90.740496][ T5289] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.767042][ T5289] EXT4-fs error (device loop0): ext4_get_journal_inode:5865: comm syz.0.490: inode #4294967295: comm syz.0.490: iget: illegal inode # [ 90.800348][ T5289] loop0: lost filesystem error report for type 5 error -117 [ 90.800475][ T5289] EXT4-fs (loop0): no journal found [ 90.807866][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 90.807907][ C1] EXT4-fs (loop0): initial error at time 1771621878: ext4_get_journal_inode:5865 [ 90.807934][ C1] EXT4-fs (loop0): last error at time 1771621878: ext4_get_journal_inode:5865 [ 90.857169][ T5289] EXT4-fs (loop0): can't get journal size [ 90.863448][ T5289] EXT4-fs (loop0): failed to initialize system zone (-22) [ 90.877608][ T4478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 90.888175][ T5289] EXT4-fs (loop0): mount failed [ 90.908173][ T4478] EXT4-fs (loop3): Remounting filesystem read-only [ 90.914923][ T30] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 90.951295][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.338554][ T5295] loop3: detected capacity change from 0 to 128 [ 91.417759][ T5297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.455922][ T5297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.459168][ T4478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 91.520840][ T5297] EXT4-fs (loop0): 1 truncate cleaned up [ 91.521755][ T4478] EXT4-fs (loop2): Remounting filesystem read-only [ 91.527570][ T5297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.584532][ T4472] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 91.732669][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.963007][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 91.971867][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 92.007364][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 92.007357][ T4472] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.007406][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 92.022482][ T4472] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.074044][ T4472] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.098314][ T5334] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.141915][ T4472] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.247941][ T5336] set_capacity_and_notify: 1 callbacks suppressed [ 92.247963][ T5336] loop2: detected capacity change from 0 to 256 [ 92.274273][ T5336] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000' [ 92.644405][ T5297] syz.0.493 (5297) used greatest stack depth: 8968 bytes left [ 92.653890][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.861325][ T5345] loop3: detected capacity change from 0 to 128 [ 92.891804][ T5347] loop2: detected capacity change from 0 to 2048 [ 92.906997][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 92.925376][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 92.968280][ T5347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.028133][ T5347] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.116656][ T28] kauditd_printk_skb: 372 callbacks suppressed [ 93.116678][ T28] audit: type=1326 audit(1771621880.309:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.190616][ T28] audit: type=1326 audit(1771621880.359:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.214986][ T28] audit: type=1326 audit(1771621880.359:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.289964][ T28] audit: type=1326 audit(1771621880.359:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.656747][ T28] audit: type=1326 audit(1771621880.378:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.680383][ T28] audit: type=1326 audit(1771621880.378:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.705312][ T28] audit: type=1326 audit(1771621880.378:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.730026][ T28] audit: type=1326 audit(1771621880.378:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.764699][ T28] audit: type=1326 audit(1771621880.378:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.796383][ T28] audit: type=1326 audit(1771621880.378:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddd5cfcece code=0x7ffc0000 [ 93.825806][ T5372] syzkaller0: entered promiscuous mode [ 93.831559][ T5372] syzkaller0: entered allmulticast mode [ 93.870047][ T1388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 93.909027][ T1388] EXT4-fs (loop2): Remounting filesystem read-only [ 93.924125][ T4472] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 93.989948][ T5376] FAULT_INJECTION: forcing a failure. [ 93.989948][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 94.066208][ T5376] CPU: 0 UID: 0 PID: 5376 Comm: syz.4.513 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.066247][ T5376] Tainted: [W]=WARN [ 94.066317][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.066329][ T5376] Call Trace: [ 94.066335][ T5376] [ 94.066342][ T5376] __dump_stack+0x1d/0x30 [ 94.066375][ T5376] dump_stack_lvl+0x95/0xd0 [ 94.066405][ T5376] dump_stack+0x15/0x1b [ 94.066476][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.066493][ T5376] should_fail_ex+0x263/0x280 [ 94.066519][ T5376] ? tcp_sendmsg_fastopen+0x172/0x520 [ 94.066681][ T5376] should_failslab+0x8c/0xb0 [ 94.066756][ T5376] __kmalloc_cache_noprof+0x5f/0x410 [ 94.066871][ T5376] tcp_sendmsg_fastopen+0x172/0x520 [ 94.066981][ T5376] tcp_sendmsg_locked+0x2939/0x2de0 [ 94.067104][ T5376] ? __rcu_read_unlock+0x4e/0x70 [ 94.067170][ T5376] ? avc_has_perm_noaudit+0xab/0x130 [ 94.067247][ T5376] ? avc_has_perm+0x101/0x190 [ 94.067367][ T5376] ? _raw_spin_lock_bh+0x56/0xb0 [ 94.067454][ T5376] ? __pfx_tcp_sendmsg+0x10/0x10 [ 94.067509][ T5376] tcp_sendmsg+0x2f/0x50 [ 94.067548][ T5376] inet6_sendmsg+0x76/0xd0 [ 94.067602][ T5376] ____sys_sendmsg+0x3c4/0x600 [ 94.067816][ T5376] ___sys_sendmsg+0x195/0x1e0 [ 94.067892][ T5376] ? path_openat+0x1b01/0x2050 [ 94.068037][ T5376] __sys_sendmmsg+0x185/0x320 [ 94.068182][ T5376] __x64_sys_sendmmsg+0x57/0x70 [ 94.068289][ T5376] x64_sys_call+0x27aa/0x3020 [ 94.068375][ T5376] do_syscall_64+0x12c/0x370 [ 94.068481][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.068624][ T5376] RIP: 0033:0x7fac58d9c629 [ 94.068678][ T5376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.068732][ T5376] RSP: 002b:00007fac577ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.068828][ T5376] RAX: ffffffffffffffda RBX: 00007fac59015fa0 RCX: 00007fac58d9c629 [ 94.068871][ T5376] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 94.068906][ T5376] RBP: 00007fac577ef090 R08: 0000000000000000 R09: 0000000000000000 [ 94.068947][ T5376] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 94.069041][ T5376] R13: 00007fac59016038 R14: 00007fac59015fa0 R15: 00007ffe72d655f8 [ 94.069098][ T5376] [ 94.646134][ T5386] loop4: detected capacity change from 0 to 128 [ 94.677550][ T3530] IPVS: starting estimator thread 0... [ 94.693787][ T5386] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.709302][ T5386] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.737094][ T4486] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.750298][ T4486] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.839002][ T5389] IPVS: using max 2304 ests per chain, 115200 per kthread [ 94.985818][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 95.084529][ T5399] syzkaller0: entered promiscuous mode [ 95.090166][ T5399] syzkaller0: entered allmulticast mode [ 95.943475][ T5408] loop5: detected capacity change from 0 to 2048 [ 95.990473][ T5408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.006467][ T5408] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.737288][ T3607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.055178][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.082206][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 97.104612][ T1388] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 97.120139][ T1388] EXT4-fs (loop5): Remounting filesystem read-only [ 97.126969][ T4472] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 97.174455][ T5427] syzkaller0: entered promiscuous mode [ 97.179991][ T5427] syzkaller0: entered allmulticast mode [ 97.292827][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.378253][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 97.393801][ T5438] bridge_slave_1: left allmulticast mode [ 97.399808][ T5438] bridge_slave_1: left promiscuous mode [ 97.405920][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.415399][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 97.415441][ T5438] bridge_slave_0: left allmulticast mode [ 97.447119][ T5438] bridge_slave_0: left promiscuous mode [ 97.452930][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.960313][ T5461] loop5: detected capacity change from 0 to 2048 [ 98.076360][ T5461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.118999][ T5461] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.214402][ T28] kauditd_printk_skb: 461 callbacks suppressed [ 98.214526][ T28] audit: type=1326 audit(1771621885.332:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.294321][ T28] audit: type=1326 audit(1771621885.382:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.354093][ T28] audit: type=1326 audit(1771621885.382:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.463687][ T28] audit: type=1326 audit(1771621885.391:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.541670][ T28] audit: type=1326 audit(1771621885.391:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.622706][ T28] audit: type=1326 audit(1771621885.391:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.836957][ T28] audit: type=1326 audit(1771621885.391:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.860775][ T28] audit: type=1326 audit(1771621885.391:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.887466][ T28] audit: type=1326 audit(1771621885.401:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 98.958077][ T28] audit: type=1326 audit(1771621885.401:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bff1bcece code=0x7ffc0000 [ 99.028100][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 99.057051][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 99.081672][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 99.137844][ T4478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 99.173074][ T4478] EXT4-fs (loop5): Remounting filesystem read-only [ 99.183342][ T4486] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 99.297296][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.634821][ T5526] loop0: detected capacity change from 0 to 2048 [ 100.677539][ T5526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.677616][ T5526] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.535079][ T4478] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 101.551961][ T4478] EXT4-fs (loop0): Remounting filesystem read-only [ 101.558856][ T1388] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 101.620422][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.806806][ T5554] loop2: detected capacity change from 0 to 128 [ 102.687132][ T5581] loop3: detected capacity change from 0 to 2048 [ 102.746484][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.790273][ T5581] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.953363][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.996387][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.045301][ T5566] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 103.371460][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 103.371475][ T28] audit: type=1326 audit(1771621890.365:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.432857][ T28] audit: type=1326 audit(1771621890.365:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.473914][ T28] audit: type=1326 audit(1771621890.365:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.516526][ T28] audit: type=1326 audit(1771621890.365:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.564691][ T28] audit: type=1326 audit(1771621890.365:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.623493][ T28] audit: type=1326 audit(1771621890.375:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 103.832728][ T5603] syzkaller0: entered promiscuous mode [ 103.851054][ T5603] syzkaller0: entered allmulticast mode [ 103.857700][ T4486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 345: padding at end of block bitmap is not set [ 103.899356][ T4486] EXT4-fs (loop3): Remounting filesystem read-only [ 103.919609][ T4478] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 104.007670][ T28] audit: type=1326 audit(1771621890.375:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 104.048718][ T28] audit: type=1326 audit(1771621890.375:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 104.108585][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.117792][ T28] audit: type=1326 audit(1771621890.375:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 104.162930][ T28] audit: type=1326 audit(1771621890.394:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b17f3cece code=0x7ffc0000 [ 104.814177][ T5622] tc_dump_action: action bad kind [ 104.909131][ T5633] loop2: detected capacity change from 0 to 128 [ 105.114760][ T5643] loop0: detected capacity change from 0 to 2048 [ 105.160772][ T5643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.192685][ T5643] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.925257][ T5656] loop3: detected capacity change from 0 to 128 [ 106.457768][ T4478] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 106.474145][ T4478] EXT4-fs (loop0): Remounting filesystem read-only [ 106.481023][ T4486] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 106.486161][ T5662] loop5: detected capacity change from 0 to 128 [ 106.634783][ T5675] loop3: detected capacity change from 0 to 128 [ 106.657835][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.665921][ T5675] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.720760][ T5675] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.763466][ T5675] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 106.785488][ T5675] FAT-fs (loop3): Filesystem has been set read-only [ 106.821617][ T5672] loop4: detected capacity change from 0 to 512 [ 106.867582][ T5672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.908582][ T5685] loop3: detected capacity change from 0 to 1024 [ 106.948145][ T5685] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 106.964293][ T5672] EXT4-fs (loop4): 1 truncate cleaned up [ 106.990166][ T5685] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 107.041112][ T5685] EXT4-fs error (device loop3): ext4_get_journal_inode:5865: comm syz.3.605: inode #4294967295: comm syz.3.605: iget: illegal inode # [ 107.093874][ T5685] loop3: lost filesystem error report for type 5 error -117 [ 107.094349][ T5687] loop5: detected capacity change from 0 to 128 [ 107.103146][ T5685] EXT4-fs (loop3): no journal found [ 107.103163][ T5685] EXT4-fs (loop3): can't get journal size [ 107.105871][ T5672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.107883][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 107.141826][ C0] EXT4-fs (loop3): initial error at time 1771621894: ext4_get_journal_inode:5865 [ 107.152688][ C0] EXT4-fs (loop3): last error at time 1771621894: ext4_get_journal_inode:5865 [ 107.164167][ T5685] EXT4-fs (loop3): failed to initialize system zone (-22) [ 107.189900][ T5685] EXT4-fs (loop3): mount failed [ 107.528200][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.762555][ T5702] loop0: detected capacity change from 0 to 2048 [ 107.776675][ T5706] syzkaller0: entered promiscuous mode [ 107.801461][ T5702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.805353][ T5706] syzkaller0: entered allmulticast mode [ 107.819782][ T5702] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.317221][ T5721] netlink: 264 bytes leftover after parsing attributes in process `syz.5.616'. [ 108.381413][ T5724] loop5: detected capacity change from 0 to 512 [ 108.405312][ T5724] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 108.435648][ T5725] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 108.456270][ T5724] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 108.464243][ T5724] EXT4-fs (loop5): failed to initialize system zone (-117) [ 108.492845][ T5725] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.525562][ T5724] EXT4-fs (loop5): mount failed [ 108.539441][ T28] kauditd_printk_skb: 732 callbacks suppressed [ 108.539458][ T28] audit: type=1326 audit(1771621895.420:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f943039cece code=0x7ffc0000 [ 108.577492][ T5725] EXT4-fs error (device loop2): ext4_get_journal_inode:5865: comm syz.2.617: inode #4294967295: comm syz.2.617: iget: illegal inode # [ 108.591990][ T28] audit: type=1326 audit(1771621895.430:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f943039cece code=0x7ffc0000 [ 108.606400][ T5725] loop2: lost filesystem error report for type 5 error -117 [ 108.637602][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 108.651428][ C0] EXT4-fs (loop2): initial error at time 1771621895: ext4_get_journal_inode:5865 [ 108.660609][ C0] EXT4-fs (loop2): last error at time 1771621895: ext4_get_journal_inode:5865 [ 108.668842][ T28] audit: type=1326 audit(1771621895.430:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f943039cece code=0x7ffc0000 [ 108.679443][ T5725] EXT4-fs (loop2): no journal found [ 108.714855][ T5725] EXT4-fs (loop2): can't get journal size [ 108.729617][ T5725] EXT4-fs (loop2): failed to initialize system zone (-22) [ 108.739040][ T28] audit: type=1326 audit(1771621895.440:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f943039cece code=0x7ffc0000 [ 108.758129][ T5725] EXT4-fs (loop2): mount failed [ 108.794256][ T5732] netlink: 'syz.2.620': attribute type 27 has an invalid length. [ 108.843173][ T5735] process 'syz.4.621' launched './file1' with NULL argv: empty string added [ 108.847297][ T5737] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 108.868440][ T4467] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set [ 108.872172][ T28] audit: type=1326 audit(1771621895.440:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f943039cece code=0x7ffc0000 [ 108.922513][ T4467] EXT4-fs (loop0): Remounting filesystem read-only [ 108.937833][ T28] audit: type=1326 audit(1771621895.509:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 108.950249][ T4486] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 108.993710][ T28] audit: type=1326 audit(1771621895.616:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 109.045358][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.052754][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.086049][ T28] audit: type=1400 audit(1771621895.754:4603): avc: denied { execute_no_trans } for pid=5734 comm="syz.4.621" path="/129/file1" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.134960][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.783960][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.807116][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.886729][ T4467] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.905652][ T4467] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.922173][ T4467] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.945963][ T4467] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.020303][ T5760] syzkaller1: entered promiscuous mode [ 110.026113][ T5760] syzkaller1: entered allmulticast mode [ 110.214312][ T5767] set_capacity_and_notify: 1 callbacks suppressed [ 110.214355][ T5767] loop4: detected capacity change from 0 to 1024 [ 110.227390][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 110.246442][ T5767] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 110.260642][ T5767] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.296426][ T5767] EXT4-fs (loop4): invalid journal inode [ 110.309673][ T5767] EXT4-fs (loop4): can't get journal size [ 110.324351][ T5767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.379276][ T5767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 110.385860][ T5767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.428972][ T5767] vhci_hcd vhci_hcd.0: Device attached [ 110.446839][ T5772] vhci_hcd: connection closed [ 110.447103][ T4486] vhci_hcd vhci_hcd.4: stop threads [ 110.471365][ T4486] vhci_hcd vhci_hcd.4: release socket [ 110.483727][ T4486] vhci_hcd vhci_hcd.4: disconnect device [ 111.470127][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.580870][ T5797] loop4: detected capacity change from 0 to 1024 [ 111.621676][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 111.781760][ T28] audit: type=1400 audit(1771621898.615:4604): avc: denied { create } for pid=5796 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.831764][ T28] audit: type=1400 audit(1771621898.615:4605): avc: denied { ioctl } for pid=5796 comm="syz.4.641" path="socket:[11246]" dev="sockfs" ino=11246 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.151778][ T5805] loop0: detected capacity change from 0 to 512 [ 112.258590][ T5805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.271236][ T5805] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.291035][ T5805] FAULT_INJECTION: forcing a failure. [ 112.291035][ T5805] name failslab, interval 1, probability 0, space 0, times 0 [ 112.303740][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz.0.644 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.303797][ T5805] Tainted: [W]=WARN [ 112.303807][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.303822][ T5805] Call Trace: [ 112.303831][ T5805] [ 112.303841][ T5805] __dump_stack+0x1d/0x30 [ 112.303885][ T5805] dump_stack_lvl+0x95/0xd0 [ 112.303956][ T5805] dump_stack+0x15/0x1b [ 112.303982][ T5805] should_fail_ex+0x263/0x280 [ 112.304007][ T5805] ? tipc_topsrv_queue_evt+0xda/0x200 [ 112.304065][ T5805] should_failslab+0x8c/0xb0 [ 112.304084][ T5805] __kmalloc_cache_noprof+0x5f/0x410 [ 112.304107][ T5805] ? tipc_conn_lookup+0x156/0x1b0 [ 112.304144][ T5805] tipc_topsrv_queue_evt+0xda/0x200 [ 112.304173][ T5805] ? should_fail_ex+0xd9/0x280 [ 112.304200][ T5805] tipc_sub_report_overlap+0x2ef/0x310 [ 112.304238][ T5805] tipc_nametbl_insert_publ+0x86c/0x930 [ 112.304330][ T5805] tipc_nametbl_publish+0x112/0x1c0 [ 112.304410][ T5805] tipc_sk_join+0x34c/0x480 [ 112.304445][ T5805] tipc_setsockopt+0x598/0x620 [ 112.304489][ T5805] ? __pfx_tipc_setsockopt+0x10/0x10 [ 112.304513][ T5805] __sys_setsockopt+0x184/0x200 [ 112.304608][ T5805] __x64_sys_setsockopt+0x64/0x80 [ 112.304634][ T5805] x64_sys_call+0x2327/0x3020 [ 112.304723][ T5805] do_syscall_64+0x12c/0x370 [ 112.304769][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.304797][ T5805] RIP: 0033:0x7f94303dc629 [ 112.304828][ T5805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.304849][ T5805] RSP: 002b:00007f942ee2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.304869][ T5805] RAX: ffffffffffffffda RBX: 00007f9430655fa0 RCX: 00007f94303dc629 [ 112.304885][ T5805] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 112.304906][ T5805] RBP: 00007f942ee2f090 R08: 0000000000000010 R09: 0000000000000000 [ 112.304924][ T5805] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 112.304938][ T5805] R13: 00007f9430656038 R14: 00007f9430655fa0 R15: 00007ffc3e6afc38 [ 112.304963][ T5805] [ 112.564424][ T5814] loop2: detected capacity change from 0 to 512 [ 112.607813][ T5776] loop5: detected capacity change from 0 to 2048 [ 112.645909][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 112.793936][ T5776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.823509][ T5822] lo speed is unknown, defaulting to 1000 [ 112.836845][ T5822] lo speed is unknown, defaulting to 1000 [ 112.849027][ T5776] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.867585][ T5822] lo speed is unknown, defaulting to 1000 [ 112.939643][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.952999][ T5822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.011801][ T5776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.023477][ T5831] loop0: detected capacity change from 0 to 512 [ 113.028261][ T5822] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.080961][ T5831] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 113.102856][ T5822] lo speed is unknown, defaulting to 1000 [ 113.110097][ T5822] lo speed is unknown, defaulting to 1000 [ 113.117762][ T5822] lo speed is unknown, defaulting to 1000 [ 113.150980][ T5831] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 113.156971][ T5822] lo speed is unknown, defaulting to 1000 [ 113.159465][ T5831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.171753][ T5831] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.186654][ T5831] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 113.196079][ T5822] lo speed is unknown, defaulting to 1000 [ 113.205677][ T5831] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.651: bg 0: block 40: padding at end of block bitmap is not set [ 113.220599][ T5831] loop0: lost filesystem error report for type 5 error -117 [ 113.221358][ T5831] EXT4-fs (loop0): Remounting filesystem read-only [ 113.228717][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 113.228740][ C0] EXT4-fs (loop0): initial error at time 1771621900: ext4_validate_block_bitmap:441 [ 113.228788][ C0] EXT4-fs (loop0): last error at time 1771621900: ext4_validate_block_bitmap:441 [ 113.281970][ T5831] EXT4-fs (loop0): 1 truncate cleaned up [ 113.288805][ T5831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.332202][ T5837] loop5: detected capacity change from 0 to 128 [ 113.342090][ T5837] vfat: Unknown parameter '' [ 113.394724][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.404824][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 113.429074][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 113.500564][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 113.599629][ T5848] lo speed is unknown, defaulting to 1000 [ 113.735513][ T5848] SELinux: Context : is not valid (left unmapped). [ 113.742260][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 113.742419][ T28] audit: type=1400 audit(1771621900.537:4612): avc: denied { mac_admin } for pid=5845 comm="syz.3.655" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.827506][ T28] audit: type=1400 audit(1771621900.577:4613): avc: denied { relabelto } for pid=5845 comm="syz.3.655" name="rdma.current" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 113.935370][ T28] audit: type=1400 audit(1771621900.577:4614): avc: denied { associate } for pid=5845 comm="syz.3.655" name="rdma.current" dev="tmpfs" ino=814 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 113.960488][ T28] audit: type=1400 audit(1771621900.577:4615): avc: denied { append } for pid=5845 comm="syz.3.655" path="/144/rdma.current" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 114.079115][ T28] audit: type=1400 audit(1771621900.873:4616): avc: denied { unlink } for pid=3318 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 114.131076][ T5863] loop3: detected capacity change from 0 to 128 [ 114.299520][ T5870] FAULT_INJECTION: forcing a failure. [ 114.299520][ T5870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.329754][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.5.665 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.329826][ T5870] Tainted: [W]=WARN [ 114.329835][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.329850][ T5870] Call Trace: [ 114.329858][ T5870] [ 114.329867][ T5870] __dump_stack+0x1d/0x30 [ 114.329901][ T5870] dump_stack_lvl+0x95/0xd0 [ 114.330002][ T5870] dump_stack+0x15/0x1b [ 114.330030][ T5870] should_fail_ex+0x263/0x280 [ 114.330059][ T5870] should_fail+0xb/0x20 [ 114.330081][ T5870] should_fail_usercopy+0x1a/0x20 [ 114.330112][ T5870] _copy_from_user+0x1c/0xb0 [ 114.330219][ T5870] x25_ioctl+0x349/0xbe0 [ 114.330263][ T5870] sock_do_ioctl+0x73/0x230 [ 114.330312][ T5870] sock_ioctl+0x41b/0x610 [ 114.330484][ T5870] ? mutex_lock+0x57/0x90 [ 114.330523][ T5870] ? __pfx_sock_ioctl+0x10/0x10 [ 114.330574][ T5870] __se_sys_ioctl+0xce/0x140 [ 114.330690][ T5870] __x64_sys_ioctl+0x43/0x50 [ 114.330762][ T5870] x64_sys_call+0x1563/0x3020 [ 114.330796][ T5870] do_syscall_64+0x12c/0x370 [ 114.330880][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.330984][ T5870] RIP: 0033:0x7f2bff1fc629 [ 114.331004][ T5870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.331023][ T5870] RSP: 002b:00007f2bfdc4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.331098][ T5870] RAX: ffffffffffffffda RBX: 00007f2bff475fa0 RCX: 00007f2bff1fc629 [ 114.331115][ T5870] RDX: 0000000000000000 RSI: 00000000000089e5 RDI: 0000000000000004 [ 114.331129][ T5870] RBP: 00007f2bfdc4f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.331141][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.331156][ T5870] R13: 00007f2bff476038 R14: 00007f2bff475fa0 R15: 00007ffdeafec628 [ 114.331181][ T5870] [ 114.628744][ T28] audit: type=1400 audit(1771621901.406:4617): avc: denied { create } for pid=5873 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.654643][ T28] audit: type=1400 audit(1771621901.406:4618): avc: denied { setopt } for pid=5873 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.878280][ T28] audit: type=1400 audit(1771621901.672:4619): avc: denied { name_bind } for pid=5881 comm="syz.2.669" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.954742][ T5884] loop2: detected capacity change from 0 to 512 [ 114.972488][ T5884] ext4: Unknown parameter 'fowner<00000000000000000000' [ 115.005936][ T5882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.411661][ T28] audit: type=1326 audit(1771621902.196:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 115.457028][ T28] audit: type=1326 audit(1771621902.196:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 115.496438][ T5892] loop3: detected capacity change from 0 to 2048 [ 115.510120][ T5865] loop4: detected capacity change from 0 to 2048 [ 115.554931][ T5892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.571715][ T5892] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.601369][ T5865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.616538][ T5865] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.642539][ T5865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.979431][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.675'. [ 116.193818][ T4478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 116.229353][ T4478] EXT4-fs (loop3): Remounting filesystem read-only [ 116.270393][ T4472] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 116.321558][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.355283][ T5909] delete_channel: no stack [ 116.359772][ T5909] delete_channel: no stack [ 116.434965][ T5909] loop5: detected capacity change from 0 to 512 [ 116.467951][ T5909] EXT4-fs (loop5): orphan cleanup on readonly fs [ 116.481148][ T5909] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 116.499798][ T5909] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 116.508259][ T5909] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.678: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 116.527081][ T5909] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 116.528439][ T5909] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.678: couldn't read orphan inode 13 (err -117) [ 116.538287][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 116.538357][ C0] EXT4-fs (loop5): last error at time 1771621903: ext4_ext_check_inode:521: inode 13 [ 116.568492][ T5909] loop5: lost filesystem error report for type 5 error -117 [ 116.582340][ T5909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.625786][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.764293][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 116.775689][ T5916] netlink: 26 bytes leftover after parsing attributes in process `syz.0.681'. [ 117.252617][ T5936] loop4: detected capacity change from 0 to 512 [ 117.388817][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.517365][ T5936] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.661091][ T5929] loop5: detected capacity change from 0 to 4096 [ 117.819221][ T5929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.022677][ T5947] FAULT_INJECTION: forcing a failure. [ 118.022677][ T5947] name failslab, interval 1, probability 0, space 0, times 0 [ 118.053513][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.3.689 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.053552][ T5947] Tainted: [W]=WARN [ 118.053561][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.053575][ T5947] Call Trace: [ 118.053628][ T5947] [ 118.053638][ T5947] __dump_stack+0x1d/0x30 [ 118.053672][ T5947] dump_stack_lvl+0x95/0xd0 [ 118.053702][ T5947] dump_stack+0x15/0x1b [ 118.053730][ T5947] should_fail_ex+0x263/0x280 [ 118.053758][ T5947] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 118.053896][ T5947] should_failslab+0x8c/0xb0 [ 118.053922][ T5947] __kmalloc_cache_noprof+0x5f/0x410 [ 118.053955][ T5947] ftrace_profile_set_filter+0xc2/0x1b0 [ 118.054011][ T5947] perf_ioctl+0x9ed/0x15d0 [ 118.054055][ T5947] ? do_vfs_ioctl+0x84f/0xe70 [ 118.054104][ T5947] ? selinux_file_ioctl+0x5f7/0xcb0 [ 118.054129][ T5947] ? __rcu_read_unlock+0x4e/0x70 [ 118.054154][ T5947] ? __rcu_read_unlock+0x4e/0x70 [ 118.054267][ T5947] ? __fget_files+0x184/0x1c0 [ 118.054295][ T5947] ? mutex_lock+0x57/0x90 [ 118.054351][ T5947] ? __pfx_perf_ioctl+0x10/0x10 [ 118.054389][ T5947] __se_sys_ioctl+0xce/0x140 [ 118.054431][ T5947] __x64_sys_ioctl+0x43/0x50 [ 118.054547][ T5947] x64_sys_call+0x1563/0x3020 [ 118.054582][ T5947] do_syscall_64+0x12c/0x370 [ 118.054644][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.054672][ T5947] RIP: 0033:0x7f9b17f7c629 [ 118.054692][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.054754][ T5947] RSP: 002b:00007f9b169cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.054855][ T5947] RAX: ffffffffffffffda RBX: 00007f9b181f5fa0 RCX: 00007f9b17f7c629 [ 118.054869][ T5947] RDX: 0000200000000080 RSI: 0000000040082406 RDI: 0000000000000003 [ 118.054882][ T5947] RBP: 00007f9b169cf090 R08: 0000000000000000 R09: 0000000000000000 [ 118.054899][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.054914][ T5947] R13: 00007f9b181f6038 R14: 00007f9b181f5fa0 R15: 00007ffd20b28328 [ 118.054939][ T5947] [ 118.323153][ T5931] syz.4.685 (5931) used greatest stack depth: 8552 bytes left [ 118.397693][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.462554][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.511331][ T5957] lo speed is unknown, defaulting to 1000 [ 119.069533][ T28] kauditd_printk_skb: 271 callbacks suppressed [ 119.069566][ T28] audit: type=1400 audit(1771621905.806:4893): avc: denied { block_suspend } for pid=5974 comm="syz.4.699" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.131872][ T28] audit: type=1400 audit(1771621905.874:4894): avc: denied { getopt } for pid=5974 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.980564][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 120.059046][ T28] audit: type=1400 audit(1771621906.771:4895): avc: denied { map } for pid=5991 comm="syz.2.706" path="socket:[12628]" dev="sockfs" ino=12628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.298923][ T6012] sctp: [Deprecated]: syz.2.712 (pid 6012) Use of int in maxseg socket option. [ 120.298923][ T6012] Use struct sctp_assoc_value instead [ 120.400269][ T28] audit: type=1400 audit(1771621907.108:4896): avc: denied { mount } for pid=6005 comm="syz.2.712" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.484668][ T6015] loop3: detected capacity change from 0 to 512 [ 120.495602][ T6015] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.510949][ T6015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 120.562519][ T6015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.583810][ T6015] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 120.611882][ T6015] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.686910][ T6015] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 120.709015][ T6015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.713: bg 0: block 40: padding at end of block bitmap is not set [ 120.748802][ T6015] loop3: lost filesystem error report for type 5 error -117 [ 120.748941][ T6015] EXT4-fs (loop3): Remounting filesystem read-only [ 120.756321][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 120.756344][ C0] EXT4-fs (loop3): initial error at time 1771621907: ext4_validate_block_bitmap:441 [ 120.756382][ C0] EXT4-fs (loop3): last error at time 1771621907: ext4_validate_block_bitmap:441 [ 120.862928][ T6015] EXT4-fs (loop3): 1 truncate cleaned up [ 120.869122][ T6015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.954730][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 120.975446][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.294685][ T6029] loop2: detected capacity change from 0 to 1024 [ 121.327548][ T6029] EXT4-fs: Ignoring removed orlov option [ 121.387670][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.536292][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.663389][ T6038] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 121.734272][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 121.751684][ T28] audit: type=1400 audit(1771621908.416:4897): avc: denied { bind } for pid=6051 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.774850][ T6052] FAULT_INJECTION: forcing a failure. [ 121.774850][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.810035][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.726 Tainted: G W syzkaller #0 PREEMPT(full) [ 121.810114][ T6052] Tainted: [W]=WARN [ 121.810123][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.810145][ T6052] Call Trace: [ 121.810154][ T6052] [ 121.810162][ T6052] __dump_stack+0x1d/0x30 [ 121.810203][ T6052] dump_stack_lvl+0x95/0xd0 [ 121.810260][ T6052] dump_stack+0x15/0x1b [ 121.810288][ T6052] should_fail_ex+0x263/0x280 [ 121.810316][ T6052] should_fail+0xb/0x20 [ 121.810412][ T6052] should_fail_usercopy+0x1a/0x20 [ 121.810479][ T6052] _copy_from_iter+0xcf/0xea0 [ 121.810502][ T6052] ? rep_movs_alternative+0x4a/0x90 [ 121.810551][ T6052] ? _copy_from_iter+0x13e/0xea0 [ 121.810580][ T6052] copy_page_from_iter+0x178/0x2a0 [ 121.810620][ T6052] skb_copy_datagram_from_iter+0x22d/0x480 [ 121.810700][ T6052] unix_stream_sendmsg+0x642/0xbb0 [ 121.810749][ T6052] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 121.810844][ T6052] ____sys_sendmsg+0x5af/0x600 [ 121.810884][ T6052] ___sys_sendmsg+0x195/0x1e0 [ 121.810933][ T6052] __x64_sys_sendmsg+0xd4/0x160 [ 121.811038][ T6052] x64_sys_call+0x194c/0x3020 [ 121.811073][ T6052] do_syscall_64+0x12c/0x370 [ 121.811195][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.811220][ T6052] RIP: 0033:0x7f94303dc629 [ 121.811243][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.811267][ T6052] RSP: 002b:00007f942ee2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.811293][ T6052] RAX: ffffffffffffffda RBX: 00007f9430655fa0 RCX: 00007f94303dc629 [ 121.811373][ T6052] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000006 [ 121.811468][ T6052] RBP: 00007f942ee2f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.811486][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.811502][ T6052] R13: 00007f9430656038 R14: 00007f9430655fa0 R15: 00007ffc3e6afc38 [ 121.811526][ T6052] [ 122.079417][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 122.188728][ T6020] loop5: detected capacity change from 0 to 2048 [ 122.288710][ T6061] loop4: detected capacity change from 0 to 512 [ 122.301095][ T6061] EXT4-fs: Ignoring removed bh option [ 122.328823][ T6061] EXT4-fs: inline encryption not supported [ 122.363593][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.376830][ T6066] loop0: detected capacity change from 0 to 1024 [ 122.377762][ T6020] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.391710][ T6061] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.414061][ T6066] EXT4-fs: Ignoring removed orlov option [ 122.426872][ T6066] EXT4-fs: Ignoring removed nobh option [ 122.465265][ T6066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.545038][ T6020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.559629][ T6061] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 122.577306][ T28] audit: type=1400 audit(1771621909.223:4898): avc: denied { execute } for pid=6065 comm="syz.0.728" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 122.588973][ T6061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.722: bg 0: block 248: padding at end of block bitmap is not set [ 122.632660][ T6061] loop4: lost filesystem error report for type 5 error -117 [ 122.635170][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 122.646214][ T6061] Quota error (device loop4): write_blk: dquota write failed [ 122.649038][ C0] EXT4-fs (loop4): last error at time 1771621909: ext4_validate_block_bitmap:441 [ 122.657332][ T6061] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 122.678728][ T6061] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.722: Failed to acquire dquot type 1 [ 122.690005][ T6061] loop4: lost filesystem error report for type 5 error -117 [ 122.740726][ T6061] EXT4-fs (loop4): 1 truncate cleaned up [ 122.754538][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.764187][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 122.837356][ T6082] loop0: detected capacity change from 0 to 1024 [ 122.852362][ T6082] EXT4-fs: Ignoring removed orlov option [ 122.859756][ T6082] EXT4-fs: Ignoring removed nobh option [ 122.878709][ T6082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.350982][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 123.380340][ T28] audit: type=1400 audit(1771621910.011:4899): avc: denied { mounton } for pid=6060 comm="syz.4.722" path="/148/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.433121][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 123.454130][ T4467] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:9: Failed to release dquot type 1 [ 123.529894][ T4467] loop4: lost filesystem error report for type 5 error -117 [ 123.531105][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.871022][ T6095] loop5: detected capacity change from 0 to 512 [ 123.938127][ T6095] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 123.960906][ T6095] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 123.968902][ T6095] EXT4-fs (loop5): failed to initialize system zone (-117) [ 124.000255][ T6095] EXT4-fs (loop5): mount failed [ 124.847511][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 124.847527][ T28] audit: type=1400 audit(1771621911.436:4900): avc: denied { create } for pid=6109 comm="syz.5.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 124.928602][ T28] audit: type=1400 audit(1771621911.436:4901): avc: denied { sys_admin } for pid=6109 comm="syz.5.738" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 125.123075][ T6131] loop4: detected capacity change from 0 to 128 [ 125.286537][ T28] audit: type=1400 audit(1771621911.853:4902): avc: denied { mounton } for pid=6127 comm="syz.4.744" path="/152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 125.655406][ T6148] loop4: detected capacity change from 0 to 512 [ 125.690911][ T6148] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 125.729926][ T6148] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 125.787024][ T6148] EXT4-fs (loop4): failed to initialize system zone (-117) [ 125.799581][ T6153] loop0: detected capacity change from 0 to 1024 [ 125.823681][ T6148] EXT4-fs (loop4): mount failed [ 125.832542][ T6151] lo speed is unknown, defaulting to 1000 [ 125.838775][ T6153] EXT4-fs: Ignoring removed orlov option [ 125.874038][ T6153] EXT4-fs: Ignoring removed nobh option [ 125.898147][ T28] audit: type=1400 audit(1771621912.456:4903): avc: denied { mount } for pid=6150 comm="syz.3.749" name="/" dev="autofs" ino=13702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 125.961770][ T28] audit: type=1400 audit(1771621912.485:4904): avc: denied { create } for pid=6150 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.014474][ T6153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.029334][ T28] audit: type=1400 audit(1771621912.485:4905): avc: denied { listen } for pid=6150 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.059561][ T28] audit: type=1400 audit(1771621912.495:4906): avc: denied { allowed } for pid=6147 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.092742][ T28] audit: type=1400 audit(1771621912.641:4907): avc: denied { append } for pid=6152 comm="syz.0.750" path="/147/file1/pids.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.247467][ T6173] loop4: detected capacity change from 0 to 256 [ 126.254373][ T6173] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.277827][ T28] audit: type=1400 audit(1771621912.825:4908): avc: denied { map } for pid=6152 comm="syz.0.750" path="/147/file1/pids.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.306585][ T6173] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.317957][ T6153] mmap: syz.0.750 (6153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.394095][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.728332][ T6130] loop5: detected capacity change from 0 to 2048 [ 127.804702][ T28] audit: type=1400 audit(1771621914.306:4909): avc: denied { mounton } for pid=6129 comm="syz.5.745" path="/74/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.926621][ T6206] loop3: detected capacity change from 0 to 128 [ 128.024517][ T6130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.061967][ T6130] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.162462][ T6130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.646483][ T6217] loop2: detected capacity change from 0 to 512 [ 128.690886][ T6217] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.760956][ T6217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 128.805256][ T6217] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.811790][ T6217] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.829334][ T6217] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 128.836482][ T6217] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.765: bg 0: block 40: padding at end of block bitmap is not set [ 128.850730][ T6217] loop2: lost filesystem error report for type 5 error -117 [ 128.850926][ T6217] EXT4-fs (loop2): Remounting filesystem read-only [ 128.864786][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 128.864814][ C0] EXT4-fs (loop2): initial error at time 1771621915: ext4_validate_block_bitmap:441 [ 128.864839][ C0] EXT4-fs (loop2): last error at time 1771621915: ext4_validate_block_bitmap:441 [ 128.889972][ T6217] EXT4-fs (loop2): 1 truncate cleaned up [ 128.897139][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.964688][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 129.616403][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.828051][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 130.495090][ T6258] loop4: detected capacity change from 0 to 512 [ 130.503170][ T6258] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 130.516322][ T6258] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 130.524489][ T6258] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.546951][ T6258] __quota_error: 7 callbacks suppressed [ 130.546966][ T6258] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 130.562200][ T6258] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 130.577137][ T6258] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 130.590021][ T6261] loop3: detected capacity change from 0 to 512 [ 130.620441][ T6258] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.779: bg 0: block 40: padding at end of block bitmap is not set [ 130.640504][ T6261] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 130.648505][ T6261] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 130.663397][ T6258] loop4: lost filesystem error report for type 5 error -117 [ 130.663594][ T6258] EXT4-fs (loop4): Remounting filesystem read-only [ 130.670958][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 130.670985][ C0] EXT4-fs (loop4): initial error at time 1771621917: ext4_validate_block_bitmap:441 [ 130.671015][ C0] EXT4-fs (loop4): last error at time 1771621917: ext4_validate_block_bitmap:441 [ 130.673268][ T6261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 130.678543][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 130.700146][ T6261] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 130.704394][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.721020][ T6261] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 130.771487][ T6261] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 130.808587][ T6261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.780: bg 0: block 40: padding at end of block bitmap is not set [ 130.828574][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 130.851456][ T6261] loop3: lost filesystem error report for type 5 error -117 [ 130.851590][ T6261] EXT4-fs (loop3): Remounting filesystem read-only [ 130.858956][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 130.858983][ C0] EXT4-fs (loop3): initial error at time 1771621917: ext4_validate_block_bitmap:441 [ 130.859011][ C0] EXT4-fs (loop3): last error at time 1771621917: ext4_validate_block_bitmap:441 [ 130.896168][ T6261] EXT4-fs (loop3): 1 truncate cleaned up [ 130.902654][ T6261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.915764][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.986779][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 131.252194][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.335295][ T6288] random: crng reseeded on system resumption [ 131.343995][ T28] audit: type=1400 audit(1771621917.769:4916): avc: denied { write } for pid=6276 comm="syz.0.786" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.439040][ T28] audit: type=1400 audit(1771621917.769:4917): avc: denied { open } for pid=6276 comm="syz.0.786" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.038358][ T28] audit: type=1400 audit(1771621918.455:4918): avc: denied { create } for pid=6306 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.152050][ T28] audit: type=1326 audit(1771621918.573:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 132.247508][ T28] audit: type=1326 audit(1771621918.573:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 132.288122][ T6310] loop4: detected capacity change from 0 to 512 [ 132.321370][ T6310] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.416104][ T6310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 132.447805][ T28] audit: type=1326 audit(1771621918.573:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 132.485210][ T6310] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.527780][ T6310] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 132.546918][ T6310] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 132.561792][ T28] audit: type=1326 audit(1771621918.573:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f94303dc629 code=0x7ffc0000 [ 132.596052][ T6310] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 132.603403][ T6310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.795: bg 0: block 40: padding at end of block bitmap is not set [ 132.618040][ T6310] loop4: lost filesystem error report for type 5 error -117 [ 132.618168][ T6310] EXT4-fs (loop4): Remounting filesystem read-only [ 132.632065][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 132.632091][ C0] EXT4-fs (loop4): initial error at time 1771621919: ext4_validate_block_bitmap:441 [ 132.632116][ C0] EXT4-fs (loop4): last error at time 1771621919: ext4_validate_block_bitmap:441 [ 132.718691][ T6310] EXT4-fs (loop4): 1 truncate cleaned up [ 132.749649][ T6310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.799991][ T6322] FAULT_INJECTION: forcing a failure. [ 132.799991][ T6322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.870443][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 133.136905][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.3.800 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.136946][ T6322] Tainted: [W]=WARN [ 133.136955][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.137038][ T6322] Call Trace: [ 133.137046][ T6322] [ 133.137055][ T6322] __dump_stack+0x1d/0x30 [ 133.137085][ T6322] dump_stack_lvl+0x95/0xd0 [ 133.137108][ T6322] dump_stack+0x15/0x1b [ 133.137141][ T6322] should_fail_ex+0x263/0x280 [ 133.137169][ T6322] should_fail+0xb/0x20 [ 133.137191][ T6322] should_fail_usercopy+0x1a/0x20 [ 133.137215][ T6322] _copy_from_user+0x1c/0xb0 [ 133.137241][ T6322] __sys_connect+0xd0/0x2a0 [ 133.137314][ T6322] __x64_sys_connect+0x3f/0x50 [ 133.137342][ T6322] x64_sys_call+0x2df0/0x3020 [ 133.137377][ T6322] do_syscall_64+0x12c/0x370 [ 133.137465][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.137488][ T6322] RIP: 0033:0x7f9b17f7c629 [ 133.137507][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.137530][ T6322] RSP: 002b:00007f9b169cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 133.137622][ T6322] RAX: ffffffffffffffda RBX: 00007f9b181f5fa0 RCX: 00007f9b17f7c629 [ 133.137662][ T6322] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 133.137739][ T6322] RBP: 00007f9b169cf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.137752][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.137763][ T6322] R13: 00007f9b181f6038 R14: 00007f9b181f5fa0 R15: 00007ffd20b28328 [ 133.137783][ T6322] [ 133.526093][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 133.844629][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.868680][ T6341] syzkaller0: entered promiscuous mode [ 133.909610][ T6341] syzkaller0: entered allmulticast mode [ 134.101752][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 134.149814][ T6367] loop5: detected capacity change from 0 to 128 [ 134.156686][ T6367] vfat: Unknown parameter '' [ 134.263029][ T6373] loop0: detected capacity change from 0 to 512 [ 134.290948][ T6373] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 134.298056][ T6365] SELinux: failed to load policy [ 134.309074][ T6373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 134.317865][ T6373] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.324436][ T6373] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.340832][ T6373] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 134.347997][ T6373] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.818: bg 0: block 40: padding at end of block bitmap is not set [ 134.356610][ T6376] lo speed is unknown, defaulting to 1000 [ 134.363222][ T6373] loop0: lost filesystem error report for type 5 error -117 [ 134.370331][ T6373] EXT4-fs (loop0): Remounting filesystem read-only [ 134.377727][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 134.377743][ C0] EXT4-fs (loop0): initial error at time 1771621920: ext4_validate_block_bitmap:441 [ 134.377772][ C0] EXT4-fs (loop0): last error at time 1771621920: ext4_validate_block_bitmap:441 [ 134.425563][ T6373] EXT4-fs (loop0): 1 truncate cleaned up [ 134.443775][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.542333][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 134.572946][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.884119][ T6407] lo speed is unknown, defaulting to 1000 [ 135.953857][ T6410] loop3: detected capacity change from 0 to 764 [ 135.999514][ T6404] loop5: detected capacity change from 0 to 2048 [ 136.659194][ T6404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.712728][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.780033][ T6422] loop2: detected capacity change from 0 to 128 [ 136.784622][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 136.784704][ T28] audit: type=1326 audit(1771621923.119:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 136.795815][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 136.834621][ T28] audit: type=1326 audit(1771621923.158:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 136.869511][ T6425] loop4: detected capacity change from 0 to 512 [ 136.886282][ T28] audit: type=1326 audit(1771621923.158:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 136.962775][ T6430] syz.2.829: attempt to access beyond end of device [ 136.962775][ T6430] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 136.996388][ T6430] syz.2.829: attempt to access beyond end of device [ 136.996388][ T6430] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 137.040814][ T6425] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 137.051345][ T28] audit: type=1326 audit(1771621923.158:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.075014][ T28] audit: type=1326 audit(1771621923.158:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.098759][ T6430] syz.2.829: attempt to access beyond end of device [ 137.098759][ T6430] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 137.115392][ T6425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 137.126122][ T28] audit: type=1326 audit(1771621923.158:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.152902][ T28] audit: type=1326 audit(1771621923.158:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.159429][ T6433] loop5: detected capacity change from 0 to 512 [ 137.177624][ T28] audit: type=1326 audit(1771621923.158:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.206127][ T28] audit: type=1326 audit(1771621923.158:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.248092][ T28] audit: type=1326 audit(1771621923.158:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b17f7c629 code=0x7ffc0000 [ 137.281027][ T6425] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.314863][ T6433] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 137.361019][ T6425] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.429718][ T6430] syz.2.829: attempt to access beyond end of device [ 137.429718][ T6430] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 137.465686][ T6433] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 137.504918][ T6425] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 137.525852][ T6433] EXT4-fs (loop5): failed to initialize system zone (-117) [ 137.553710][ T6425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.830: bg 0: block 40: padding at end of block bitmap is not set [ 137.576354][ T6433] EXT4-fs (loop5): mount failed [ 137.658644][ T6425] loop4: lost filesystem error report for type 5 error -117 [ 137.659653][ T6425] EXT4-fs (loop4): Remounting filesystem read-only [ 137.667199][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 137.667215][ C1] EXT4-fs (loop4): initial error at time 1771621923: ext4_validate_block_bitmap:441 [ 137.667250][ C1] EXT4-fs (loop4): last error at time 1771621923: ext4_validate_block_bitmap:441 [ 137.727669][ T6425] EXT4-fs (loop4): 1 truncate cleaned up [ 137.746117][ T6425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.810487][ T6441] loop2: detected capacity change from 0 to 128 [ 137.845800][ T6441] vfat: Unknown parameter '' [ 137.851453][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 137.925566][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.107593][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 139.208195][ T6480] loop2: detected capacity change from 0 to 512 [ 139.222918][ T6480] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 139.233887][ T6480] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.252661][ T6480] EXT4-fs (loop2): failed to initialize system zone (-117) [ 139.284844][ T6480] EXT4-fs (loop2): mount failed [ 140.027846][ T6487] loop5: detected capacity change from 0 to 512 [ 140.074751][ T6487] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 140.102154][ T6487] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 140.191581][ T6487] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.215452][ T6487] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.243309][ T6496] loop2: detected capacity change from 0 to 128 [ 140.246867][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 140.258909][ T6496] vfat: Unknown parameter '' [ 140.272872][ T6487] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 140.297929][ T6487] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.849: bg 0: block 40: padding at end of block bitmap is not set [ 140.324639][ T6487] loop5: lost filesystem error report for type 5 error -117 [ 140.324887][ T6487] EXT4-fs (loop5): Remounting filesystem read-only [ 140.332432][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 140.332456][ C0] EXT4-fs (loop5): initial error at time 1771621926: ext4_validate_block_bitmap:441 [ 140.332506][ C0] EXT4-fs (loop5): last error at time 1771621926: ext4_validate_block_bitmap:441 [ 140.364819][ T6487] EXT4-fs (loop5): 1 truncate cleaned up [ 140.371110][ T6487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.385956][ T6487] veth0_vlan: entered allmulticast mode [ 140.386330][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 141.041215][ T6487] veth0_vlan (unregistering): left allmulticast mode [ 141.133726][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 141.218364][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.232455][ T6512] loop4: detected capacity change from 0 to 512 [ 141.288757][ T6512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.358268][ T6512] EXT4-fs (loop4): 1 truncate cleaned up [ 141.367340][ T6512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.900744][ T6533] 9p: Bad value for 'rfdno' [ 142.013127][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 142.013142][ T28] audit: type=1400 audit(1771621928.287:5065): avc: denied { bind } for pid=6511 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.073326][ T35] lo speed is unknown, defaulting to 1000 [ 142.136590][ T28] audit: type=1400 audit(1771621928.386:5066): avc: denied { create } for pid=6534 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.188561][ T28] audit: type=1400 audit(1771621928.386:5067): avc: denied { ioctl } for pid=6534 comm="syz.5.863" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14240 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.412469][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.615050][ T6506] loop0: detected capacity change from 0 to 2048 [ 142.759671][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.831924][ T6506] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.942543][ T6506] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.983398][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 143.294051][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 143.395485][ T28] audit: type=1326 audit(1771621929.664:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 143.447579][ T6565] loop2: detected capacity change from 0 to 2048 [ 143.476281][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.489152][ T28] audit: type=1326 audit(1771621929.664:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 143.502304][ T6565] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.609849][ T28] audit: type=1326 audit(1771621929.664:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 143.803413][ T28] audit: type=1326 audit(1771621929.664:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 143.878753][ T28] audit: type=1326 audit(1771621929.664:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 143.940612][ T28] audit: type=1326 audit(1771621929.664:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 144.016914][ T28] audit: type=1326 audit(1771621929.664:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd5d3c629 code=0x7ffc0000 [ 145.164424][ T4478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 145.190867][ T4478] EXT4-fs (loop2): Remounting filesystem read-only [ 145.197762][ T4467] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 145.362929][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.420605][ T6595] loop5: detected capacity change from 0 to 512 [ 145.682652][ T6595] EXT4-fs (loop5): 1 truncate cleaned up [ 145.689785][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.885240][ T6595] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.883: bg 0: block 465: padding at end of block bitmap is not set [ 145.942653][ T6595] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 145.946302][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 145.951937][ T6595] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.883: invalid indirect mapped block 234881024 (level 0) [ 146.049029][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 146.361669][ T6616] loop4: detected capacity change from 0 to 512 [ 146.417302][ T6616] ext4: Unknown parameter 'appraise_type' [ 146.533954][ T6616] netlink: zone id is out of range [ 146.569649][ T6616] netlink: zone id is out of range [ 146.610826][ T6616] netlink: zone id is out of range [ 146.638500][ T6616] netlink: zone id is out of range [ 146.651852][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.661722][ T6616] netlink: zone id is out of range [ 146.667521][ T6616] netlink: zone id is out of range [ 146.674745][ T6616] netlink: zone id is out of range [ 146.689419][ T6616] netlink: zone id is out of range [ 146.695906][ T6616] netlink: zone id is out of range [ 146.701139][ T6616] netlink: zone id is out of range [ 147.314507][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 147.705473][ T6655] loop3: detected capacity change from 0 to 1764 [ 147.771075][ T6658] loop2: detected capacity change from 0 to 1024 [ 147.780481][ T6656] loop4: detected capacity change from 0 to 2048 [ 147.802642][ T6658] EXT4-fs: Ignoring removed orlov option [ 147.813718][ T6656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.837878][ T6658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.881365][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 147.881380][ T28] audit: type=1400 audit(1771621934.109:5284): avc: denied { execute } for pid=6651 comm="syz.4.901" path="/178/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.945532][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.956394][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.967976][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.057349][ T28] audit: type=1400 audit(1771621934.287:5285): avc: denied { listen } for pid=6668 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.106114][ T28] audit: type=1400 audit(1771621934.327:5286): avc: denied { accept } for pid=6665 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 148.167778][ T6666] bond1: Unable to set up delay as MII monitoring is disabled [ 148.179183][ T6669] loop5: detected capacity change from 0 to 2048 [ 148.187242][ T6666] bond1 (unregistering): Released all slaves [ 148.193965][ T6669] EXT4-fs: Ignoring removed i_version option [ 148.242752][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.301646][ T6669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.089314][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 149.243718][ T30] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 149.262643][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 149.303960][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 149.303960][ T30] [ 149.324173][ T30] EXT4-fs (loop5): Total free blocks count 0 [ 149.330216][ T30] EXT4-fs (loop5): Free/Dirty block details [ 149.341873][ T30] EXT4-fs (loop5): free_blocks=2415919504 [ 149.347733][ T30] EXT4-fs (loop5): dirty_blocks=16416 [ 149.353386][ T30] EXT4-fs (loop5): Block reservation details [ 149.359568][ T30] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 149.623679][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 150.246240][ T6702] FAULT_INJECTION: forcing a failure. [ 150.246240][ T6702] name fail_futex, interval 1, probability 0, space 0, times 1 [ 150.295162][ T6702] CPU: 1 UID: 0 PID: 6702 Comm: syz.4.915 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.295228][ T6702] Tainted: [W]=WARN [ 150.295237][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.295253][ T6702] Call Trace: [ 150.295260][ T6702] [ 150.295269][ T6702] __dump_stack+0x1d/0x30 [ 150.295303][ T6702] dump_stack_lvl+0x95/0xd0 [ 150.295342][ T6702] dump_stack+0x15/0x1b [ 150.295371][ T6702] should_fail_ex+0x263/0x280 [ 150.295428][ T6702] should_fail+0xb/0x20 [ 150.295452][ T6702] get_futex_key+0x12f/0xbe0 [ 150.295491][ T6702] futex_wake+0x84/0x380 [ 150.295641][ T6702] do_futex+0x323/0x380 [ 150.295682][ T6702] mm_release+0xa1/0x190 [ 150.295710][ T6702] exit_mm_release+0x25/0x30 [ 150.295737][ T6702] exit_mm+0x37/0x180 [ 150.295852][ T6702] do_exit+0x3fa/0x15a0 [ 150.295889][ T6702] do_group_exit+0xfe/0x140 [ 150.295923][ T6702] ? get_signal+0xe4c/0xf60 [ 150.295994][ T6702] get_signal+0xe54/0xf60 [ 150.296040][ T6702] arch_do_signal_or_restart+0x96/0x450 [ 150.296086][ T6702] exit_to_user_mode_loop+0x6a/0x6f0 [ 150.296183][ T6702] ? __x64_sys_poll+0x1a4/0x230 [ 150.296288][ T6702] do_syscall_64+0x249/0x370 [ 150.296334][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.296362][ T6702] RIP: 0033:0x7fac58d9c629 [ 150.296389][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.296412][ T6702] RSP: 002b:00007fac577ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 150.296449][ T6702] RAX: 0000000000000001 RBX: 00007fac59016180 RCX: 00007fac58d9c629 [ 150.296467][ T6702] RDX: 0000000008000007 RSI: 0000000000000001 RDI: 00002000000000c0 [ 150.296484][ T6702] RBP: 00007fac577ad090 R08: 0000000000000000 R09: 0000000000000000 [ 150.296500][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.296584][ T6702] R13: 00007fac59016218 R14: 00007fac59016180 R15: 00007ffe72d655f8 [ 150.296628][ T6702] [ 150.930935][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 152.177733][ T6754] loop0: detected capacity change from 0 to 512 [ 152.224054][ T6754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.257627][ T6754] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.309029][ T28] audit: type=1400 audit(1771621938.445:5287): avc: denied { append } for pid=6753 comm="syz.0.932" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.565607][ T4472] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 152.581546][ T4472] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 152.594435][ T4472] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.594435][ T4472] [ 152.608590][ T4472] EXT4-fs (loop0): Total free blocks count 0 [ 152.615060][ T4472] EXT4-fs (loop0): Free/Dirty block details [ 152.621479][ T4472] EXT4-fs (loop0): free_blocks=65280 [ 152.627057][ T4472] EXT4-fs (loop0): dirty_blocks=31 [ 152.632499][ T4472] EXT4-fs (loop0): Block reservation details [ 152.634519][ T6768] netlink: 52 bytes leftover after parsing attributes in process `syz.3.936'. [ 152.648903][ T4472] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 152.656252][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.715356][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 152.758188][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 153.034151][ T6776] loop3: detected capacity change from 0 to 512 [ 153.052335][ T6776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.082482][ T6776] EXT4-fs (loop3): 1 truncate cleaned up [ 153.094811][ T6779] loop2: detected capacity change from 0 to 512 [ 153.101104][ T6776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.165464][ T6779] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.179037][ T6779] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 153.187198][ T6779] EXT4-fs (loop2): failed to initialize system zone (-117) [ 153.242897][ T6779] EXT4-fs (loop2): mount failed [ 154.084134][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.111744][ T6808] loop3: detected capacity change from 0 to 512 [ 154.151940][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.322293][ T6808] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.414339][ T4478] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 154.439966][ T4478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 154.465196][ T4478] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.465196][ T4478] [ 154.494294][ T4478] EXT4-fs (loop3): Total free blocks count 0 [ 154.525283][ T4478] EXT4-fs (loop3): Free/Dirty block details [ 154.566651][ T4478] EXT4-fs (loop3): free_blocks=65280 [ 154.595851][ T6818] loop0: detected capacity change from 0 to 512 [ 154.602418][ T4478] EXT4-fs (loop3): dirty_blocks=31 [ 154.611624][ T4478] EXT4-fs (loop3): Block reservation details [ 154.617695][ T4478] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 154.665796][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.761077][ T6818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.781191][ T6818] EXT4-fs (loop0): 1 truncate cleaned up [ 154.808535][ T6818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.879525][ T6828] FAULT_INJECTION: forcing a failure. [ 154.879525][ T6828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.893059][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.4.947 Tainted: G W syzkaller #0 PREEMPT(full) [ 154.893100][ T6828] Tainted: [W]=WARN [ 154.893108][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.893124][ T6828] Call Trace: [ 154.893131][ T6828] [ 154.893140][ T6828] __dump_stack+0x1d/0x30 [ 154.893173][ T6828] dump_stack_lvl+0x95/0xd0 [ 154.893282][ T6828] dump_stack+0x15/0x1b [ 154.893309][ T6828] should_fail_ex+0x263/0x280 [ 154.893337][ T6828] should_fail+0xb/0x20 [ 154.893381][ T6828] should_fail_usercopy+0x1a/0x20 [ 154.893407][ T6828] _copy_to_user+0x20/0xa0 [ 154.893438][ T6828] pagemap_read+0x3ac/0x610 [ 154.893501][ T6828] ? __pfx_pagemap_read+0x10/0x10 [ 154.893579][ T6828] vfs_read+0x1ab/0x7f0 [ 154.893636][ T6828] ? __rcu_read_unlock+0x4e/0x70 [ 154.893705][ T6828] ? __fget_files+0x184/0x1c0 [ 154.893731][ T6828] ? mutex_unlock+0x4e/0x90 [ 154.893770][ T6828] __x64_sys_pread64+0xfd/0x150 [ 154.893875][ T6828] x64_sys_call+0x27b5/0x3020 [ 154.893904][ T6828] do_syscall_64+0x12c/0x370 [ 154.893984][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.894012][ T6828] RIP: 0033:0x7fac58d9c629 [ 154.894032][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.894061][ T6828] RSP: 002b:00007fac577ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 154.894087][ T6828] RAX: ffffffffffffffda RBX: 00007fac59015fa0 RCX: 00007fac58d9c629 [ 154.894106][ T6828] RDX: 0000000000019000 RSI: 00002000000192c0 RDI: 0000000000000004 [ 154.894216][ T6828] RBP: 00007fac577ef090 R08: 0000000000000000 R09: 0000000000000000 [ 154.894232][ T6828] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.894249][ T6828] R13: 00007fac59016038 R14: 00007fac59015fa0 R15: 00007ffe72d655f8 [ 154.894275][ T6828] [ 155.043024][ T6830] 9p: Bad value for 'rfdno' [ 156.085322][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.204805][ T6856] loop0: detected capacity change from 0 to 512 [ 156.285006][ T6860] loop4: detected capacity change from 0 to 512 [ 156.314459][ T6856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.346972][ T6860] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 156.368241][ T6856] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.383927][ T6860] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 156.425529][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.676185][ T6860] bridge0: port 3(syz_tun) entered blocking state [ 156.717585][ T6860] bridge0: port 3(syz_tun) entered disabled state [ 156.732016][ T6860] syz_tun: entered allmulticast mode [ 156.818522][ T6860] syz_tun: entered promiscuous mode [ 156.870625][ T6860] bridge0: port 3(syz_tun) entered blocking state [ 156.878332][ T6860] bridge0: port 3(syz_tun) entered forwarding state [ 157.326467][ T6888] loop4: detected capacity change from 0 to 512 [ 157.369999][ T6888] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 157.419979][ T6888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 157.430247][ T6888] EXT4-fs (loop4): failed to initialize system zone (-117) [ 157.437509][ T6888] EXT4-fs (loop4): mount failed [ 157.759063][ T6902] syzkaller0: entered promiscuous mode [ 157.764884][ T6902] syzkaller0: entered allmulticast mode [ 157.775807][ T28] audit: type=1400 audit(1771621943.793:5288): avc: denied { ioctl } for pid=6901 comm="syz.5.974" path="socket:[15192]" dev="sockfs" ino=15192 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.071145][ T6906] loop2: detected capacity change from 0 to 512 [ 158.109458][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.123122][ T6906] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.242215][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.475343][ T28] audit: type=1400 audit(1771621944.504:5289): avc: denied { listen } for pid=6920 comm="syz.0.980" path=2F3139362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 159.092661][ T6929] loop0: detected capacity change from 0 to 128 [ 159.099533][ T6929] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 159.631859][ T6918] loop5: detected capacity change from 0 to 128 [ 159.658716][ T6918] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.671891][ T6918] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.689945][ T3394] IPVS: starting estimator thread 0... [ 159.708567][ T4482] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.821291][ T6934] IPVS: using max 2112 ests per chain, 105600 per kthread [ 159.843084][ T6936] loop4: detected capacity change from 0 to 512 [ 159.874693][ T6936] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 159.936277][ T6936] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 159.986085][ T6936] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.006611][ T6936] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 160.035774][ T6936] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 160.090258][ T6936] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 160.110963][ T6936] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.982: bg 0: block 40: padding at end of block bitmap is not set [ 160.145948][ T6936] loop4: lost filesystem error report for type 5 error -117 [ 160.149338][ T6936] EXT4-fs (loop4): Remounting filesystem read-only [ 160.156766][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 160.156784][ C1] EXT4-fs (loop4): initial error at time 1771621946: ext4_validate_block_bitmap:441 [ 160.156810][ C1] EXT4-fs (loop4): last error at time 1771621946: ext4_validate_block_bitmap:441 [ 160.201716][ T6936] EXT4-fs (loop4): 1 truncate cleaned up [ 160.216200][ T6936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.325038][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 160.849464][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.880176][ T6951] loop0: detected capacity change from 0 to 512 [ 160.916822][ T6951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.954239][ T6951] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.987440][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.767679][ T3607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.811372][ T6968] loop2: detected capacity change from 0 to 8192 [ 161.862122][ T6968] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.936871][ T6968] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 161.958157][ T6968] FAT-fs (loop2): Filesystem has been set read-only [ 161.965025][ T6968] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 161.973085][ T6968] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 161.993698][ T6968] netlink: 84 bytes leftover after parsing attributes in process `syz.2.992'. [ 162.205870][ T4408] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.336243][ T6976] loop5: detected capacity change from 0 to 512 [ 162.362896][ T6976] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 162.464464][ T6986] loop5: detected capacity change from 0 to 512 [ 162.524724][ T6986] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 162.542834][ T6986] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 162.577537][ T6986] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.609237][ T6986] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 162.651081][ T6986] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.712725][ T6986] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 162.734881][ T6986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.999: bg 0: block 40: padding at end of block bitmap is not set [ 162.789782][ T6986] loop5: lost filesystem error report for type 5 error -117 [ 162.789933][ T6986] EXT4-fs (loop5): Remounting filesystem read-only [ 162.797321][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 162.797365][ C0] EXT4-fs (loop5): initial error at time 1771621948: ext4_validate_block_bitmap:441 [ 162.797395][ C0] EXT4-fs (loop5): last error at time 1771621948: ext4_validate_block_bitmap:441 [ 162.846941][ T6986] EXT4-fs (loop5): 1 truncate cleaned up [ 162.862440][ T6986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.985969][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'. [ 163.047526][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.149930][ T6995] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 163.149930][ T6995] The task syz.5.1000 (6995) triggered the difference, watch for misbehavior. [ 163.227199][ T28] audit: type=1400 audit(1771621949.141:5290): avc: denied { mount } for pid=6990 comm="syz.5.1000" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.154937][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 164.183668][ T7018] loop4: detected capacity change from 0 to 512 [ 164.287995][ T7018] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.331568][ T7018] EXT4-fs (loop4): 1 truncate cleaned up [ 164.338559][ T7018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.365758][ T7027] loop2: detected capacity change from 0 to 512 [ 164.372649][ T7027] ext4: Unknown parameter 'appraise_type' [ 164.379899][ T7027] net_ratelimit: 108 callbacks suppressed [ 164.379917][ T7027] netlink: zone id is out of range [ 164.391296][ T7027] netlink: zone id is out of range [ 164.396581][ T7027] netlink: zone id is out of range [ 164.401787][ T7027] netlink: zone id is out of range [ 164.407326][ T7027] netlink: zone id is out of range [ 164.412740][ T7027] netlink: zone id is out of range [ 164.418161][ T7027] netlink: zone id is out of range [ 164.423355][ T7027] netlink: zone id is out of range [ 164.428700][ T7027] netlink: zone id is out of range [ 164.433870][ T7027] netlink: zone id is out of range [ 164.490843][ T7029] 9p: Bad value for 'rfdno' [ 164.613841][ T7036] syzkaller0: entered promiscuous mode [ 164.619416][ T7036] syzkaller0: entered allmulticast mode [ 164.909630][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.058642][ T7060] loop4: detected capacity change from 0 to 512 [ 166.068120][ T7056] loop2: detected capacity change from 0 to 512 [ 166.082001][ T7056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.113729][ T7060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.133730][ T7056] EXT4-fs (loop2): 1 truncate cleaned up [ 166.141950][ T7056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.177709][ T7060] EXT4-fs (loop4): 1 truncate cleaned up [ 166.185088][ T7060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.200449][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 166.348390][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 166.348428][ T3316] Tainted: [W]=WARN [ 166.348435][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.348496][ T3316] Call Trace: [ 166.348504][ T3316] [ 166.348513][ T3316] __dump_stack+0x1d/0x30 [ 166.348546][ T3316] dump_stack_lvl+0x95/0xd0 [ 166.348576][ T3316] dump_stack+0x15/0x1b [ 166.348600][ T3316] dump_header+0x80/0x240 [ 166.348631][ T3316] oom_kill_process+0x295/0x350 [ 166.348658][ T3316] out_of_memory+0x97d/0xb80 [ 166.348755][ T3316] try_charge_memcg+0x62e/0xa10 [ 166.348827][ T3316] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 166.348942][ T3316] __swap_cache_prepare_and_add+0x386/0x530 [ 166.348986][ T3316] swap_cache_alloc_folio+0xa2/0x120 [ 166.349021][ T3316] swap_cluster_readahead+0x36b/0x3d0 [ 166.349114][ T3316] swapin_readahead+0xde/0x840 [ 166.349143][ T3316] ? _raw_spin_unlock+0x9/0x30 [ 166.349171][ T3316] ? swap_put_entries_cluster+0x385/0x3a0 [ 166.349210][ T3316] ? __rcu_read_unlock+0x4e/0x70 [ 166.349275][ T3316] ? swap_cache_get_folio+0x26f/0x280 [ 166.349302][ T3316] do_swap_page+0x309/0x2210 [ 166.349415][ T3316] ? __rcu_read_lock+0x36/0x50 [ 166.349439][ T3316] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 166.349474][ T3316] handle_mm_fault+0xb40/0x3020 [ 166.349514][ T3316] ? vma_start_read+0x1c7/0x2c0 [ 166.349570][ T3316] do_user_addr_fault+0x62f/0x1050 [ 166.349605][ T3316] ? trace_page_fault_user+0x1f/0xe0 [ 166.349650][ T3316] exc_page_fault+0x62/0xa0 [ 166.349685][ T3316] asm_exc_page_fault+0x26/0x30 [ 166.349743][ T3316] RIP: 0033:0x7f943023ebfd [ 166.349832][ T3316] Code: 49 81 f8 00 ca 9a 3b 72 1c 31 d2 49 81 c0 00 36 65 c4 4c 89 45 c0 ff c2 49 81 f8 ff c9 9a 3b 77 ea 89 d2 eb 02 31 d2 48 01 ca <48> 89 16 4c 89 46 08 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 [ 166.349852][ T3316] RSP: 002b:00007ffc3e6aff10 EFLAGS: 00010206 [ 166.349873][ T3316] RAX: 0000000000000000 RBX: 00007f9430238038 RCX: 00000000000000a3 [ 166.349934][ T3316] RDX: 00000000000000a3 RSI: 00007ffc3e6b0030 RDI: 0000000000000001 [ 166.349951][ T3316] RBP: 00007ffc3e6aff80 R08: 000000002081e05c R09: 7fffffffffffffff [ 166.349968][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 4000000000000000 [ 166.349982][ T3316] R13: 0000000000000010 R14: 00007f9430238000 R15: 00000000000077ba [ 166.350057][ T3316] [ 166.884488][ T3316] memory: usage 109072kB, limit 307200kB, failcnt 2947 [ 166.938323][ T3316] memory+swap: usage 94092kB, limit 9007199254740988kB, failcnt 0 [ 166.999930][ T3316] kmem: usage 78888kB, limit 9007199254740988kB, failcnt 0 [ 167.025762][ T7071] 9p: Bad value for 'rfdno' [ 167.064989][ T3316] Memory cgroup stats for /syz0: [ 167.065210][ T3316] cache 0 [ 167.083718][ T3316] rss 24576 [ 167.096871][ T3316] shmem 0 [ 167.099850][ T3316] mapped_file 0 [ 167.103384][ T3316] dirty 0 [ 167.106413][ T3316] writeback 0 [ 167.117526][ T3316] workingset_refault_anon 26 [ 167.128551][ T3316] workingset_refault_file 91 [ 167.133343][ T3316] swap 368640 [ 167.136766][ T3316] swapcached 393216 [ 167.140643][ T3316] pgpgin 98077 [ 167.144133][ T3316] pgpgout 98071 [ 167.147848][ T3316] pgfault 94549 [ 167.151447][ T3316] pgmajfault 24 [ 167.155309][ T3316] inactive_anon 0 [ 167.177267][ T3316] active_anon 24576 [ 167.192611][ T3316] inactive_file 0 [ 167.199709][ T3316] active_file 0 [ 167.206763][ T3316] unevictable 0 [ 167.212442][ T3316] hierarchical_memory_limit 314572800 [ 167.218010][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 167.224468][ T3316] total_cache 0 [ 167.228036][ T3316] total_rss 24576 [ 167.231906][ T3316] total_shmem 0 [ 167.235508][ T3316] total_mapped_file 0 [ 167.239525][ T3316] total_dirty 0 [ 167.243327][ T3316] total_writeback 0 [ 167.247220][ T3316] total_workingset_refault_anon 26 [ 167.252608][ T3316] total_workingset_refault_file 91 [ 167.257963][ T3316] total_swap 368640 [ 167.269140][ T3316] total_swapcached 393216 [ 167.273654][ T3316] total_pgpgin 98077 [ 167.277606][ T3316] total_pgpgout 98071 [ 167.282149][ T3316] total_pgfault 94549 [ 167.286357][ T3316] total_pgmajfault 24 [ 167.290533][ T3316] total_inactive_anon 0 [ 167.295984][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.302008][ T3316] total_active_anon 24576 [ 167.309333][ T3316] total_inactive_file 0 [ 167.313537][ T3316] total_active_file 0 [ 167.317570][ T3316] total_unevictable 0 [ 167.321570][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1017,pid=7042,uid=0 [ 167.340546][ T3316] Memory cgroup out of memory: Killed process 7042 (syz.0.1017) total-vm:94028kB, anon-rss:1244kB, file-rss:21636kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 167.459684][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.529419][ T7081] loop3: detected capacity change from 0 to 512 [ 167.585431][ T28] audit: type=1400 audit(1771621953.369:5291): avc: denied { sqpoll } for pid=7083 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.610780][ T7081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.639472][ T7081] EXT4-fs (loop3): 1 truncate cleaned up [ 167.647212][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.208176][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.296187][ T7101] loop5: detected capacity change from 0 to 164 [ 168.303512][ T7101] rock: directory entry would overflow storage [ 168.312135][ T7101] rock: sig=0x5252, size=5, remaining=3 [ 168.377267][ T7103] loop5: detected capacity change from 0 to 512 [ 168.419349][ T7103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.545056][ T7103] EXT4-fs (loop5): 1 truncate cleaned up [ 168.552824][ T7103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.586594][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.097459][ T7122] loop0: detected capacity change from 0 to 128 [ 169.106101][ T7122] vfat: Unknown parameter '' [ 169.110167][ T7105] loop3: detected capacity change from 0 to 2048 [ 169.286135][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.301154][ T7105] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.342043][ T7105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.325050][ T7135] loop5: detected capacity change from 0 to 512 [ 170.359235][ T7135] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.386245][ T7135] EXT4-fs (loop5): 1 truncate cleaned up [ 170.393154][ T7135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.555182][ T7145] loop0: detected capacity change from 0 to 512 [ 170.598229][ T7145] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 170.609960][ T7145] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 170.627981][ T7145] EXT4-fs (loop0): failed to initialize system zone (-117) [ 170.635612][ T7145] EXT4-fs (loop0): mount failed [ 170.705102][ T7120] loop2: detected capacity change from 0 to 2048 [ 170.774068][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.837711][ T7151] loop5: detected capacity change from 0 to 512 [ 170.845528][ T7120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.874255][ T7151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.887686][ T7120] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.905459][ T7151] EXT4-fs (loop5): 1 truncate cleaned up [ 170.925536][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.926706][ T7120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.073218][ T7151] 9p: Bad value for 'rfdno' [ 171.084310][ T7141] loop3: detected capacity change from 0 to 2048 [ 171.130324][ T7141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.143426][ T7141] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.162733][ T7141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.173906][ T4408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.268538][ T7162] loop2: detected capacity change from 0 to 512 [ 171.281421][ T7162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.303257][ T7162] EXT4-fs (loop2): 1 truncate cleaned up [ 171.310998][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.429906][ T7171] vfat: Unknown parameter '' [ 171.497918][ T7172] 9p: Bad value for 'rfdno' [ 171.528659][ T7162] ================================================================== [ 171.536794][ T7162] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 171.544131][ T7162] [ 171.546479][ T7162] read-write to 0xffff888141e37d98 of 8 bytes by task 7167 on cpu 1: [ 171.554558][ T7162] xas_clear_mark+0x91/0x180 [ 171.559184][ T7162] __folio_start_writeback+0x270/0x370 [ 171.564675][ T7162] ext4_bio_write_folio+0x5ad/0x9f0 [ 171.569907][ T7162] mpage_process_page_bufs+0x4a1/0x620 [ 171.575398][ T7162] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 171.581227][ T7162] ext4_do_writepages+0x70f/0x2840 [ 171.586363][ T7162] ext4_writepages+0x18f/0x320 [ 171.591153][ T7162] do_writepages+0x1c6/0x310 [ 171.595768][ T7162] file_write_and_wait_range+0x178/0x2f0 [ 171.601445][ T7162] generic_buffers_fsync_noflush+0x45/0x130 [ 171.607361][ T7162] ext4_sync_file+0x1aa/0x6b0 [ 171.612063][ T7162] vfs_fsync_range+0xc5/0xe0 [ 171.616677][ T7162] ext4_buffered_write_iter+0x34f/0x3c0 [ 171.622256][ T7162] ext4_file_write_iter+0xbff/0xfa0 [ 171.627477][ T7162] iter_file_splice_write+0x6bc/0xa80 [ 171.632862][ T7162] direct_splice_actor+0x156/0x2a0 [ 171.638085][ T7162] splice_direct_to_actor+0x311/0x670 [ 171.643481][ T7162] do_splice_direct+0x119/0x1a0 [ 171.648365][ T7162] do_sendfile+0x382/0x650 [ 171.652896][ T7162] __x64_sys_sendfile64+0x105/0x150 [ 171.658120][ T7162] x64_sys_call+0x2dc4/0x3020 [ 171.662825][ T7162] do_syscall_64+0x12c/0x370 [ 171.667440][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.673357][ T7162] [ 171.675698][ T7162] read to 0xffff888141e37d98 of 8 bytes by task 7162 on cpu 0: [ 171.683256][ T7162] xas_find_marked+0x213/0x620 [ 171.688055][ T7162] filemap_get_folios_tag+0xfa/0x510 [ 171.693454][ T7162] mpage_prepare_extent_to_map+0x328/0xc50 [ 171.699289][ T7162] ext4_do_writepages+0x70f/0x2840 [ 171.704426][ T7162] ext4_writepages+0x18f/0x320 [ 171.709209][ T7162] do_writepages+0x1c6/0x310 [ 171.713821][ T7162] filemap_write_and_wait_range+0x166/0x370 [ 171.719740][ T7162] filemap_invalidate_pages+0xd3/0x1e0 [ 171.725245][ T7162] kiocb_invalidate_pages+0x6e/0x80 [ 171.730469][ T7162] __iomap_dio_rw+0x6f4/0x14c0 [ 171.735290][ T7162] iomap_dio_rw+0x40/0x90 [ 171.739637][ T7162] ext4_file_write_iter+0xae2/0xfa0 [ 171.744862][ T7162] iter_file_splice_write+0x6bc/0xa80 [ 171.750249][ T7162] direct_splice_actor+0x156/0x2a0 [ 171.755401][ T7162] splice_direct_to_actor+0x311/0x670 [ 171.760795][ T7162] do_splice_direct+0x119/0x1a0 [ 171.765662][ T7162] do_sendfile+0x382/0x650 [ 171.770107][ T7162] __x64_sys_sendfile64+0x105/0x150 [ 171.775347][ T7162] x64_sys_call+0x2dc4/0x3020 [ 171.780225][ T7162] do_syscall_64+0x12c/0x370 [ 171.784849][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.790761][ T7162] [ 171.793102][ T7162] value changed: 0x007e000000000000 -> 0x0040000000000000 [ 171.800308][ T7162] [ 171.802650][ T7162] Reported by Kernel Concurrency Sanitizer on: [ 171.808814][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.2.1053 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.819696][ T7162] Tainted: [W]=WARN [ 171.823509][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.833586][ T7162] ================================================================== [ 172.375361][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.