last executing test programs: 1m33.056489853s ago: executing program 3 (id=79): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="38b628bd7000fbdbdf2507000015ae5d23a1b4ced0a985acd1fb", @ANYRES32=r3, @ANYBLOB="0c0099000008000020000000050053000100000005005300010000000a00e800ffffffffffff000008000500070000000a001800030303030303000014000400776c616e3000000000000000000000000a001800030303030303000005005300000000000400cc000500530000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1m32.814443884s ago: executing program 3 (id=83): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast2, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3766}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9f6b010018000000000000000002000000000000000000008406010000000000000000000d00"/50], &(0x7f0000000f40)=""/4079, 0x32, 0xfef, 0x6, 0x4}, 0x28) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f0000000380)) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) syz_io_uring_setup(0x5c76, &(0x7f0000000580)={0x0, 0x55ce, 0x2, 0x0, 0x2da}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r7, 0x1, 0xffc, 0x9) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400001f879c11eaece73f0f00a6eff4a73d7ee83eeef8440f1c29a61b351ca3656798009890e50d81f782c96462fa4f5d675076", @ANYBLOB="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", @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0x1}], 0x1) 1m30.831508846s ago: executing program 3 (id=87): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000580)={0xffffffffffffffff}) setuid(0x0) setreuid(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10400, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="642126e613259526cbf6c81cacbc6a1d12e20ccf6a1c9d6b478bec1aaad3cfd0bbce2717f7d6aeac31a9daf4ecd48d9913b6ba7881ea066d1bf8d8dd940fc9fa2c1d22350a9f3c31eda673f4cc2be7580c002d32c2e89264642d0f6722fcfe6e30cd5da0b58b253b070774fbe99cb5397d1e177d66bfa1b81e3c143050f394a30e59f2eab1bf2f2ec69de288afe440b1a8a58cd53033c3ada43fa6421c191a10e9cf24ec8173baa3a7888d5c11f18d213a4d854d4e3ce5dbfad915a1a4e83c2c5ae9f09310e69b", @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r7, 0xdcd5b000) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000280)={0xb, 0x8000, 0xffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) 1m29.471459963s ago: executing program 3 (id=98): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000100000900ff000000000000341000000000000009000000"], 0x0, 0x1a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) io_uring_setup(0xaae, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet(0x2, 0x6, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000380)={0x200000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x32}, &(0x7f0000000200)=""/46, 0x2e, &(0x7f0000000300)=""/20, &(0x7f0000000340)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='net/ip6_tables_targets\x00') lseek(r6, 0x1, 0x1) getdents64(r6, 0xffffffffffffffff, 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) 1m29.065085551s ago: executing program 3 (id=102): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) r1 = socket(0x40000000015, 0xa, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0xfffff6e6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x7}, 0x8) socket$kcm(0x29, 0x5, 0x0) 1m28.039122352s ago: executing program 3 (id=108): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000580)={0xffffffffffffffff}) setuid(0x0) setreuid(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10400, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="642126e613259526cbf6c81cacbc6a1d12e20ccf6a1c9d6b478bec1aaad3cfd0bbce2717f7d6aeac31a9daf4ecd48d9913b6ba7881ea066d1bf8d8dd940fc9fa2c1d22350a9f3c31eda673f4cc2be7580c002d32c2e89264642d0f6722fcfe6e30cd5da0b58b253b070774fbe99cb5397d1e177d66bfa1b81e3c143050f394a30e59f2eab1bf2f2ec69de288afe440b1a8a58cd53033c3ada43fa6421c191a10e9cf24ec8173baa3a7888d5c11f18d213a4d854d4e3ce5dbfad915a1a4e83c2c5ae9f09310e69b", @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r7, 0xdcd5b000) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000280)={0xb, 0x8000, 0xffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) 1m27.916216283s ago: executing program 32 (id=108): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000580)={0xffffffffffffffff}) setuid(0x0) setreuid(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10400, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="642126e613259526cbf6c81cacbc6a1d12e20ccf6a1c9d6b478bec1aaad3cfd0bbce2717f7d6aeac31a9daf4ecd48d9913b6ba7881ea066d1bf8d8dd940fc9fa2c1d22350a9f3c31eda673f4cc2be7580c002d32c2e89264642d0f6722fcfe6e30cd5da0b58b253b070774fbe99cb5397d1e177d66bfa1b81e3c143050f394a30e59f2eab1bf2f2ec69de288afe440b1a8a58cd53033c3ada43fa6421c191a10e9cf24ec8173baa3a7888d5c11f18d213a4d854d4e3ce5dbfad915a1a4e83c2c5ae9f09310e69b", @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r7, 0xdcd5b000) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000280)={0xb, 0x8000, 0xffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) 6.630931991s ago: executing program 5 (id=1003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount_setattr(r1, 0x0, 0x0, &(0x7f0000000800)={0x10000a, 0xfe}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x80800) fadvise64(r2, 0x6, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYBLOB="bad0f944b38c16001e1806e30ea63dfc36f3f42abc91b0ccad7d931ac708592bd53d2618db82df1f7d05779e5f7f372d257a14978e964e9121ce44a6030b1ea9e6bb2d09b94455a85aaabd94417151851eaf60b8381d350ab86075486072c979e1b7634abfbb79ed00348c0bcd4c5eb2cbc6ef412c11545c04447a2914ed7d30efc4cfb1542eb667dd4a8c8db95330455d3717ee47846158cfeb44e2108c0724b6a7e6fe5cb741993e0395a577f5e7f470ce1a9fc80b50dadad6625cf1574cac6a47c0ccdb91979bbba660ca", @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYBLOB="7aa94bdf2de4ea242424be5c5631415b1b98841f3483"], 0x44}}, 0x2048045) mprotect(&(0x7f0000717000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) mlockall(0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000020) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX], &(0x7f0000000100)=""/151, 0x3a, 0x97, 0x1, 0x0, 0x10000}, 0x28) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r6, 0x2000, 0x1) 3.977359505s ago: executing program 2 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x24048850}, 0x8010) syz_emit_ethernet(0xcf, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x99, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0xe, "1d6ace8f8ca9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a38e86fe6101bf2c4e313e4f930b10cd9a70cebc77f319c1857ad9d50341d17b5e7857a871249feab9b7b485d93f657e3941"}]}}}}}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004058) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x200040, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@map, 0xffffffffffffffff, 0x14, 0x3}, 0x20) 3.473310999s ago: executing program 5 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x44008001) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000013800048034000180090001007866726d0000000024000280080004400000002108000240000000020500030001000000080001400000010c0900020073797a32000000000900010073797a31"], 0x95}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001040500000000003300000007000008080003400000005805000100010000009707c71fba8957746cfabd46207eb984e50200e863200e4051b0c393c09603415c5a686b69292ad399e51e2e210f57cfab5749dbc66fe4729c2ec44a52ba2bde25895143162827e65c40e64432"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYBLOB='&'], 0x10) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$kcm(0x2, 0x3, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r4], 0x7c}}, 0x20000801) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000100000001100010000000000000000000000000ab83a058adba652c6055c11d2ed358a526fcdd73c575001a1e213c782e7109b15db"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$sock_timeval(r8, 0x1, 0x0, &(0x7f0000000500)={0x77359400}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x6000, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000000100), 0x4, 0x1) ioctl$RTC_EPOCH_SET(r10, 0x4008700e, 0x7fffffff) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x8e, 0x0, 0x80000001, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xf, 0x40, 0xffff, 0x9}}) sendmsg$nl_route(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400e000000108000200ac1e01010800080000060000"], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000011) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="0100feffffff0000010017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000024}, 0x80) write(0xffffffffffffffff, &(0x7f0000000480)="d48fb1a406cf8b54dd46ddbf1612c3c06d2be5e6dde971d6473fe0acc9c6a224937b4978e424e4859abf87e7ec57aee38db5cec8a70995c616369fa1a7234410921bce6ee900070efeec4685e7bbe2c7bf5b3b4fb752b7da82cce376a777593a4605ed192e1229c5b919a70169b9c0474a07", 0x72) creat(&(0x7f0000000080)='./file0\x00', 0x40) 3.218883092s ago: executing program 0 (id=1029): syz_io_uring_complete(0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1016, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_emit_ethernet(0x3a, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0002000000119078000000000000000000004e4283edab780400000007740000fdffffffffffffff"], 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) close_range(r2, r2, 0x2) 3.010894316s ago: executing program 2 (id=1030): r0 = socket$kcm(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x51, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x42}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.623930721s ago: executing program 2 (id=1031): r0 = socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0xd, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7, 0x1, 0x7c}}]}, {0x0, [0x30, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/177, 0x51, 0xb1, 0x1, 0x1, 0x10000}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0xd, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7, 0x1, 0x7c}}]}, {0x0, [0x30, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/177, 0x51, 0xb1, 0x1, 0x1, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x10, 0x0}, 0x8) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) (async) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x6) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000580)={{0x80, 0x3}, 'port0\x00', 0x7f, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x4}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r9, r10, 0x25, 0x4, @val=@tcx}, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10020000", @ANYRES16=0x0, @ANYBLOB="040026bd700008000000130000003c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000300000008000300020000000800030021ffa68908000300010000000c00018008000100", @ANYRES32=r2, @ANYBLOB="3000018014000200766972745f776966693000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030003000000400001801400020073797a6b616c6c657231000000000000080003001100000008000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c00018008000300020000004400018008000300000000001400020070696d72656730000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="14000200697036677265300000000000000000004400018008000100", @ANYRES32=r7, @ANYBLOB="1400020067656e6576653000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f62617461647600080003000200000060000180140002007663616e300000000000000000000000140002006970366772653000000000000000000008000300030000001400020065727370616e3000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300010000000800030000000000180001801400020070696d367265670000000000000000003800018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030001000000140002006970766c616e30000000000000000000"], 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x8010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10000}, @jmp={0x5, 0x0, 0xe, 0x6, 0x7, 0xfe40bea581aa69ff, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0xff, 0xdd, &(0x7f0000000180)=""/221, 0x40f00, 0x0, '\x00', r2, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x3, 0x2, 0x1}, 0x10, r4, 0x0, 0x5, &(0x7f0000000540)=[r1, r1], &(0x7f0000000580)=[{0x5, 0x1, 0x4, 0x9}, {0x4, 0x2, 0x8, 0x9}, {0x3, 0x2, 0xc, 0xa}, {0x5, 0x2, 0x0, 0x8}, {0x2, 0x4, 0xa, 0x2}], 0x10, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0xffffffc3, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0xffffffc3, 0x4) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.323505252s ago: executing program 5 (id=1033): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140), 0x3, 0x513, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x161440, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x48) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x98e, @loopback, 0x6}, 0x1c) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_settime(0x0, &(0x7f00000001c0)={0x7f, 0x2f000000}) socket(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x45dc) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x4, 0x110, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xa}, 0x22e0, 0x10000, 0x0, 0x1, 0x100008, 0x20005, 0xfffb, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x1, r1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x3, 0x0) lremovexattr(0x0, 0x0) 2.249207214s ago: executing program 0 (id=1034): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x110c34, 0x5, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x61, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa8, 0x40, "210466cf8747aa140db9aa00ca1aed26f3000000c5"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x880}, 0x2014) syz_emit_ethernet(0x13c, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) 2.248148064s ago: executing program 2 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x5) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x10001) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0xe0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x182, 0x0) pwritev2(r6, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b580ab", 0x3}], 0x1, 0x7f, 0x9, 0x0) syz_io_uring_setup(0x2642, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601000000000000000000050000000c00078008000800000000400900020073797a31000000000500ecff00000000050005000a00000005000100070000001300030068617368c78b65742c6966616365000004000780"], 0x5c}}, 0x8) 1.73421136s ago: executing program 2 (id=1041): r0 = socket$kcm(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x51, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x42}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.725170362s ago: executing program 2 (id=1042): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r4 = socket(0x2, 0x80805, 0x0) fallocate(r0, 0x28, 0x8, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000003500000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="dfc214e397804e76c06a82c2711affd14f2eefb183f06100", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.478799723s ago: executing program 0 (id=1044): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x3e, 0x0, "bb71a3c364ca41d6357e54cdd2237388c4b31c964e00ab8d34a6ff1f56c54dc46d47f92ccd00a0ef0a007bbe00000000000000000000000000000000000000000000004000"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0xd) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setuid(0xee00) socket$netlink(0x10, 0x3, 0x4) set_mempolicy(0x4000, &(0x7f0000000200)=0x7, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x5, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x93b1}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.235051004s ago: executing program 4 (id=1050): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2b, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r1, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1.060895043s ago: executing program 4 (id=1053): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000002240)={0x0, {{0x2, 0x4e23, @broadcast}}}, 0x88) 1.060473023s ago: executing program 1 (id=1054): syz_open_dev$loop(&(0x7f0000000100), 0xf01b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7b, 0xfffffffffffffffb}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.058938723s ago: executing program 5 (id=1055): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r2, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1016, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) close_range(r3, r3, 0x2) 974.881827ms ago: executing program 4 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x44008001) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000013800048034000180090001007866726d0000000024000280080004400000002108000240000000020500030001000000080001400000010c0900020073797a32000000000900010073797a31"], 0x95}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001040500000000003300000007000008080003400000005805000100010000009707c71fba8957746cfabd46207eb984e50200e863200e4051b0c393c09603415c5a686b69292ad399e51e2e210f57cfab5749dbc66fe4729c2ec44a52ba2bde25895143162827e65c40e64432"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYBLOB='&'], 0x10) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$kcm(0x2, 0x3, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r4], 0x7c}}, 0x20000801) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000100000001100010000000000000000000000000ab83a058adba652c6055c11d2ed358a526fcdd73c575001a1e213c782e7109b15db"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$sock_timeval(r8, 0x1, 0x0, &(0x7f0000000500)={0x77359400}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x6000, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000000100), 0x4, 0x1) ioctl$RTC_EPOCH_SET(r10, 0x4008700e, 0x7fffffff) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x8e, 0x0, 0x80000001, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xf, 0x40, 0xffff, 0x9}}) sendmsg$nl_route(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400e000000108000200ac1e01010800080000060000"], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000011) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="0100feffffff0000010017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000024}, 0x80) write(0xffffffffffffffff, &(0x7f0000000480)="d48fb1a406cf8b54dd46ddbf1612c3c06d2be5e6dde971d6473fe0acc9c6a224937b4978e424e4859abf87e7ec57aee38db5cec8a70995c616369fa1a7234410921bce6ee900070efeec4685e7bbe2c7bf5b3b4fb752b7da82cce376a777593a4605ed192e1229c5b919a70169b9c0474a07", 0x72) creat(&(0x7f0000000080)='./file0\x00', 0x40) 966.018099ms ago: executing program 4 (id=1057): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 931.278344ms ago: executing program 0 (id=1058): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000001080)='./file0\x00', 0x400, &(0x7f0000000040), 0x1, 0x4a6, &(0x7f0000000a40)="$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") setxattr$incfs_metadata(&(0x7f0000000380)='./cgroup.net/devices.allow\x00', &(0x7f00000003c0), &(0x7f0000002140)="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", 0x142, 0x2) (async) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c00048005000300050000000800020001000000040008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) (async) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040006}, 0x40000) (async) r3 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x6, 0x2) write$hidraw(r3, &(0x7f0000000200)="755e2b7d8ddcffa549c478495a2e790b5d3bb7468f925bfd1fef9c6990b1d09f9ba3edd1af8364fc80f428788bb12b5a29e65b143120db505bc4cd9ff15cbacf8ed87ad48ff7b716d5253d9c77e9b088838bf2284baa7fc1ebdaa0333342a9036cc00b2626c89db3354428cb8252636426f0ae26337802ecd645e2fb5da63c8253ec5f2d9a41a398f988f93e1580c71569729e38ebb1b8d721bd1b19614da656a3d9a56a3a26d99b919f0efe408d2835b74042c47bc6f8345d1d65c4dceff0e1f891572c", 0xc4) r4 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r4, 0x0, 0xbf5, 0x2000402) (async) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 763.375092ms ago: executing program 0 (id=1059): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 709.911921ms ago: executing program 0 (id=1060): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/222, 0xde}, 0x40000002) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c3}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x10}, 0x10}, 0x94) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x2130c0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000001140)={{r3}, "a9ec00a345da39b9ab746e4dc0b05d05f55ba831d349fb6318175fbfada1344838cd9994986f20a88b38371600bd542531156222d4b5ff5021101dc86a4fdc0777552207c64ea2165725974b833042ba0c87012d9889ab919203f74863c45c8adc9265278238ae9545bf5ae67561cf89d33fb3c8af494e7ea9c3c05c72b12c038f82595de2cac6556d638fcfc7d32eaba648ff4968323c18f0f3b08f58516cce9a20ae4f744bcfe96e20cc4bfdd2d566c21842e704c468ef5ab8f9d3f41f60d7386c147a44d4e92359ba2b263d0326a4d54096fe3d0b09a2052f8d1fd8763b3311e5fa83b83e5045d235a01466ced80e4e38e70d41f4c4f118a98cc7770ba7ee93b630a6156a23a8a5580185ce7882d2da2f6371b40613579ede218911fb7183bab78bf6cbda339dd118a8fcececccc3e6a2d50284061c2f242423eff3b74432870e97926e44ed6fb3187d58663a3bbcc48a94551d11158addc204fcb9f8b94589afeb28b7b166d857547d3b16422df1007d5f5425b65920e4a8fdc8308448c6e58c43afa87835fdbac59a36979bf2a38e6523d1b700726029d20942b70946465bb78873a66f564f6cf35b32b432a62076e94e8baa4354558e872c45752aa4917d2e0b2c2bb296661a1020b8dbb06ae11ed1a5e78a375fb0fc62a33059a8a4a25e420b58708ee0f1dde2df2a3f328449e29a96658f94bf9956c4fd5d762763e9731041a75da6821335947b10f081a42afd710bb354ec33895222345b7499229b9b5665614b8fc51f88969f0add500f09e4c7f64ba82c64ba90d6f00e860c280dd600a68852b85b755b20f15d38cf53a5006098d71bdd81d663d7a5bce69416e4a9c42dda2f56cbc0ff4c10c4ac17feaea132e1bf72b2157ef0b7132adc4a8b66bf9a12f8c3465ee4591bbefd8584a979dc48ae1864a8c8570ed88d048674a269f8b06ce91f5916c985c11e8d73fac453cd5de421fd5201e953643bbef711bc82b3db10d0c358d89a14e96ea2a644b478d130f6ba7679303f29db6d926a07b3f964782f88b1508dcc148b326a0487534bea5e8b748aaca7d0e48d72377cab001e6a91ea0ab05f7d2eb92310fa304b8e2502b6f8456cc696ddcc2f6870305058dd9611eb4f883d0f8d437d48725f9b3ef8dc3154a36c5431ca4e15b57780188420eede4aaf89f97237f030ea57dc5f1a7746bd0ee87c16a9741ee7e86869e0bee75b3106ae413e86262f655d74356866f0140c36e1e043ae699e20d621bf1d9ab8652c28ad99a650e79699b4ff17a80e7108959d97fee07583097d0bb1b5c9b6308873da1d5c52177b6f8b30f43fc13067f38c068afb34e4f48c89bdd7852c3f4e03b9869bd3632a593dd09f51012503bd00122f35861c79bc4312b19e26ef0b990514e09f32ab77eb05c311042d5caa415e8749e68824b0b69f1dcee9744acdaf0273d232e3e0fc13c440c0266922cb7607b81c944e05b40cb6e6688525d5dc0c530de223f8022cb0edece743209b3276af3cf87687e7ee0befe6aea11b043d9d3be88ac5314d460fac2d40f4aa056266bb8544da434893c9fbed8d617f3f498d8787656b8eff2adf099af8d8e90d0abb5866e55a9a75c8d84864c1d10e57040246796e8270a56236ff3d2ab372ce277e7f5c78d1dafe61e0bd87a73a0b40b6e472af1def4f5955d0a3fada4381096fb790214bf5fadd297b521548168955a5d92c206736e0c6f4e4419c4d69ef83dae080e478f84ee9e21b1050fb7b9c8d8bc257120af37be501d3d8020f3723d068e7e2b42c4447fa0385c393c89779d0c5a3f2cb7169409fee3677bdaa41e3399d9b0ce795cf84e4ca4f7700ffb73726a57e521789dfed27a0c8f624880fc9d94dae3c4ac8589d2941558b5b7f514bd49497efdec4aac614b303972151b2296f5028fbc75c1471d81e2b9c1e64bc9fab23ccf7a58ff539c0764cec0ce8bdac0e654b447fcdd13124dcf60e710a292942eaa1cd44b66d98a9020b5591d7206c4d50e0349a1ddbd6a270b14cb5b5abccf6ef155dca0b01cb4c355110a8de849a26b7fca280979906f9cd74b88c6343243ff0cae997cf8d34800458e1af897e7ef046b9e6620247798f2f930417be0d87893c3f0da991119e9ed079b4c4501324abfe9457f5a909d3f1680a50e3b4c401da00f05bbcd189975f757311f3870858a937b930f9566c9d25947bbf3594306e2287a05592836833af3e0720165200dd3be3a590824d10fc66e4e4daa7c3aefed47353c31ce9fb04141447199c60acadf615f31e39c54dce77cb5320660ac5fdf71e529bcdf940f56eebe36b5d45cedf6b222a851439defaedcd2c3355910e92891ab95926a3c5d45dd5cae3f6b42bc45cb89addc5bb3e5487b5f1f20433f325a9ea8bc8be5f4e281db21ddf8ca960b02f5caa9aa1a54e4a5e15313f9e095ec4e3b43f8407eb269930d8d70fb0654d512efb4931cef26902fc594dbda38098d682f28c3354e472eddcc62fd12fcb30dcae08bc9b857b6c0f007f8e005cff5c53da90714474e4f96228c10c052b2735ce70929111a6b2cb67c0dbc8885a09115efe8363d9972f37329209d5180d9e83b448030885cd8ad15115cb4e571b92ef8d68fd3bb89b75c9f5fe3abce6eadfe67e67bb5507f06131f50799d7dae134d97d739908bf90a206edbdae4210cba8eefe9b932b3a309d7e25bfbd63e46a157df484e974420ef326059bb6c351bb655be8e0375703217e40ef15b36026624700ff59f3a878a2708252088a4d1243b65d6275d1e55225d3d12747484f3c4449490bd4fb544f2a96de0fc0ab023d285cb66c292ef8be52d91d4b7626e7481ad98e8f3ccfc88ee83c8a130408aede94c4ede526632627512fbb155d8e12e486db9826cbc46586a78746b845519036dfe099820bd733f1dc0eeaf2309d7998686f4b74be3b7b28e133e64c6c19bc7712d88801a4b86ac6dbdfa9c662250eecd61b260df08811b117df2970218f8013a72fb69b8cfd543062a449bb5d088aa09aafe1c17f571712d879f8906b7aaacb62ea8c82b42cc90115fc3f2c81386d77a4fc1610863be8bdbd99d12d63c6de79366bf2b8d72a7af7901ef08de97f916a146a63305b34fa73ed1d8254035dccfd860ff4f6154d11e13ef03ff91d5babb31d08b35481c86db34c65c83f122bb3ac811228b42eff8068880891ccdceddf58cf36ef3f86e2881e6218ad7b204109ddfd459eea47d6ad8e49269012c9f6fab31287e997cfb22ce5879f58d9c77a6e9f8ee78cc783755f062bf6d1a5ce76912e403da47c364a5b3bdd02a71acb07ac2afeb5c17a70076d4a1a4a35e3a5b9d65ff8aaae0bf331ecbfab4ecc868c91f63db806f7d515ac24962d83ef29efaf8fdc130382912bfd41c9145b07727c6a0db6c7cf7d51531069bdc5a4e1b96b340305d573488a06180560314c2fd23556517b1628b05e148ec1b6488feae7f8b11ef90c26f95bb513e3166c5a13eec7a5657b4afbe8caecb13bead51e128aeeda38ad315f8c688f1d0da28345ddfca7606b775b0b074ee8ac029e51ca8a88fd750f1ec1ff06ad9ea2418f5caf0d2c839f3e9abd2a1fd077dee6aa9da207c32e81676b24fd45f7ddf04f4ffecb79999d16083d696fea5e69b50551b859c6a02116b6b2e9d8f360c3d8c58a9d0a069251d1b4ba8bf6aaceab2e09ae14fa4e1d41b24fc6048c44fd4938965586a55e3aeb54986b23e68fd56e1a593def67642a149f767d19502dc39a7a33cb1e743c347b7fe66fbdac868e695fef1dd7ff4e370ff602762513443b8dcf394af1abf14dd228ab15dd5d75ed4370dee13fda1392f7444327973d36a1e72540d89572ff0c7678c4c628c2c185580a4445bab51571f75245002b2bbc682203c41464ceae7e0499a69a97bde24194581f229ec3715f3515d81073711c8d8ad06ac03722f8ed4edbef4689b4b7ded7189ad2ad4d3cf6ac140a5304205b7a057251d3c720f70a21fa7eed7b19f35a45efd18e403dc596f449ca26461dc46b27d66951b78098d9ccd5c338c5128c215f44404d922ed6e27f302983f17b3631b1344d6bc6c2766f5f4b904c0ba2778cd4f7c6df7c17b82830e508aaf30c7d5e879bffe0dd48402ca4833f0564a518b139f9815ec2ef190bab0dae26ad6229bcd8c59acc207f1a193fbb20002be68db443fa195495268f9706a987a4bf8c69681e2f308a300c60a024ed82fc2e8f134b4e0bbc6d5c849ceebb0555d8caab54ed839ad358a1c12791db05080dcfa87c0f798bc089b845871ab3089e7b0ee048e8599ab9506fce95a7b68691ef3924d0311b4c86b24f2109f19f6dd5fb6d820f6df2ba2f062cc13c049c1190544eedeb472c405d27f1daaae5e559a8af4d07818278529155d31e3a6df760c026314d6bac182975ba1c4208964fdbf48437ccbf2bc4a1d39dfda05b5a82becae7ae104cae0f97deea0dcd86a4f0c6b6b44a509a557c2447c4abf5b0553e39227119dd6be6148cedb739a3e862435b3528dd5806db89fe831e69c8816bdc5fc73a1d5730d5ebe273aec76f9d5bcb8f81258d6fe4d6ecda50a0f9f4617aec9e15ab8a4f61d882776c1ff1943675409b6a9b4c5c52adc681d7dae198b9176ea27513845039bd4c72b7ab58eff93788de7b2e2014e40adeb2d6b135aa935a425f1d7cd883cd8b59387bf92a83608cebfaae282d6fc6b7575c241c254e2e7f6a6433febe2f0868783600e9bc41333356e111bc800a550d4af054c2f5a059af7f8bf43f6d2f4816db97753019457d6f82cf7034974edaf67d82e9acdc143057723f227d38efab97445e7481ea3997076f8d12cf07098a5120616ba60b05d8a79e6fb432ce3dabe0454eb28702708ca49f095f698edd4992bd7ddea438d27db4380694fb3a69796520c94c164d40aa019b06e2b8b65488e109384d39713ddefca75bdc8dc805fbb8ceb3b9ccb7b11c915ff44908b808aee9738158496731c0dbf87fa0ce41650d8ba748e099cafba364251dc92275ae0d1282e63fd72a730839f2a9dfa615adc82804f8066cd8c4419903ca03dd0842ecebbb8ac2ac058b23857a6df6dcb740bb15c313c981a1c13dea85bf3cfeaa131c8b024b8fa1abe4d30f395feee165fd19cf990b790d087cbb0cb81d060220b518a2b094e8e5ffafec33f614bfaa59687ff642033538cee605cfc4473a8f00485c9d527365a042263e331900e160bdf350b7927e885c80b6ebbd00461e013950c02332d7a386a53cdd84055f2f91b6fa8a61bc3237fae64169cc902c8acbc7fa953e07f36749b7a89a2dc066ed90c802029779e8235b06f7e2cfc25e1026de625b78dd157865c267075bca826662e624eec275603991ed509403372ea87d264740968a2a674a614c6680c3ec57e679a683f8f4f5950746c7cfd4c974ce6d16f984b50255980060393e2d3819768e2d691a6f6327aab3413b016420e40943380aed82979aeeab1a5ad9ab8cfbd2c14ee4d169feb9f7e890a51b5bedb48e0ff54907f8816fbcafb79bd7fd6bd599df86ed4172da2c8d1368603cd82da43dec1a1f20d65367205a87fc656f33f846f9be08b0d4d4525c22e2755a94152bbc626a13019aa7e6407dfdda666a49f4868b3182669bbba707bdcb23ab60547694c7df91f007e4a6de140f1698db0cb3aac3ba7391d99c7b7451834eb009bad236f599535323f9e48e2e60de9e803e7790df648943a0c68f9c7ad54f0ca6642aecf44030b7ab40540571646a05cc0acb29e2e7a0ac6060d641b48a0c4d0287a6a5"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x14, &(0x7f0000000d00)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="0013000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000620756c2500000000002020207b1a00ff00000000bfa1000000000000070100005092de3183d83bb99a5148ef156d0008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x0, 0xd19}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000004c0)={0x0, 0xbd0, 0x8, 0x7ff, 0xa, 0x6}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r5, 0x10000}, 0x8) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0x238, 0xb, 0x3, "ff04ddf0ffa64d7feb190e0000000200", 0x2000006, 0xfffffffd}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) r7 = socket(0x1, 0x2, 0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r7) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000480)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) fdatasync(r7) 558.399647ms ago: executing program 1 (id=1061): syz_emit_ethernet(0xd2, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x41, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xa, "ccf0294e2a3bdb4a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 524.443422ms ago: executing program 1 (id=1062): syz_open_dev$loop(&(0x7f0000000100), 0xf01b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7b, 0xfffffffffffffffb}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 312.019968ms ago: executing program 1 (id=1063): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00) 212.511694ms ago: executing program 1 (id=1064): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x143041, 0x31) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x75e8, 0x800007, 0x2b6}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84842, 0x110) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x0) 140.129756ms ago: executing program 5 (id=1065): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000001f80)={0x2, 0x1, 0xa, 0x8, 0x1a0, &(0x7f0000001b80)="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"}) 56.93265ms ago: executing program 5 (id=1066): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x7ffffffe}}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x5, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x143041, 0x31) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x75e8, 0x800007, 0x2b6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84842, 0x110) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x0) 932.75µs ago: executing program 1 (id=1067): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000002240)={0x0, {{0x2, 0x4e23, @broadcast}}}, 0x88) 430.53µs ago: executing program 4 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x44008001) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000013800048034000180090001007866726d0000000024000280080004400000002108000240000000020500030001000000080001400000010c0900020073797a32000000000900010073797a31"], 0x95}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001040500000000003300000007000008080003400000005805000100010000009707c71fba8957746cfabd46207eb984e50200e863200e4051b0c393c09603415c5a686b69292ad399e51e2e210f57cfab5749dbc66fe4729c2ec44a52ba2bde25895143162827e65c40e64432"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB='&'], 0x10) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$kcm(0x2, 0x3, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r4], 0x7c}}, 0x20000801) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000100000001100010000000000000000000000000ab83a058adba652c6055c11d2ed358a526fcdd73c575001a1e213c782e7109b15db"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000000500)={0x77359400}, 0x10) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x6000, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r9 = syz_open_dev$rtc(&(0x7f0000000100), 0x4, 0x1) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x7fffffff) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x8e, 0x0, 0x80000001, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xf, 0x40, 0xffff, 0x9}}) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="08000400e000000108000200ac1e01010800080000060000"], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000011) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="0100feffffff0000010017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000024}, 0x80) write(0xffffffffffffffff, &(0x7f0000000480)="d48fb1a406cf8b54dd46ddbf1612c3c06d2be5e6dde971d6473fe0acc9c6a224937b4978e424e4859abf87e7ec57aee38db5cec8a70995c616369fa1a7234410921bce6ee900070efeec4685e7bbe2c7bf5b3b4fb752b7da82cce376a777593a4605ed192e1229c5b919a70169b9c0474a07", 0x72) creat(&(0x7f0000000080)='./file0\x00', 0x40) 0s ago: executing program 4 (id=1069): r0 = creat(0x0, 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x61}, 0xffffffffffffffe3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xecc0, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x221d, 0xf439, 0x16, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x306, @random="7bed878802ec"}, 0x4a, {0x2, 0x4e22, @private=0xa010102}, 'wg1\x00'}) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.801517][ T4476] RSP: 002b:00007f01e1b07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 81.801544][ T4476] RAX: ffffffffffffffda RBX: 00007f01e3325fa0 RCX: 00007f01e30ac819 [ 81.801562][ T4476] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 81.801577][ T4476] RBP: 00007f01e1b07090 R08: 0000000000000000 R09: 0000000000000020 [ 81.801602][ T4476] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 81.801618][ T4476] R13: 00007f01e3326038 R14: 00007f01e3325fa0 R15: 00007ffc1cf51c08 [ 81.801642][ T4476] [ 81.801753][ T28] audit: type=1400 audit(1776049361.415:300): avc: denied { read } for pid=4475 comm="syz.0.230" path="socket:[6792]" dev="sockfs" ino=6792 scontext=root:sysadm_r:sysadm_t tsid=137 tclass=bluetooth_socket permissive=1 [ 81.807679][ T3368] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 81.856125][ T28] audit: type=1400 audit(1776049361.505:301): avc: denied { create } for pid=4477 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.935952][ T3368] hid-generic 0000:0000:000E.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 82.105126][ T28] audit: type=1400 audit(1776049361.585:302): avc: denied { setopt } for pid=4477 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.213318][ T4486] fido_id[4486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.283685][ T4498] lo speed is unknown, defaulting to 1000 [ 82.364349][ T28] audit: type=1400 audit(1776049361.915:303): avc: denied { getopt } for pid=4497 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.407682][ T4509] loop4: detected capacity change from 0 to 4096 [ 82.428180][ T4509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.519916][ T4521] loop5: detected capacity change from 0 to 512 [ 82.527740][ T28] audit: type=1400 audit(1776049362.155:304): avc: denied { append } for pid=4506 comm="syz.4.239" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.562129][ T4525] loop1: detected capacity change from 0 to 512 [ 82.581116][ T4525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.616108][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.648368][ T4521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.657212][ T4525] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.671023][ T4521] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.706786][ T28] audit: type=1400 audit(1776049362.335:305): avc: denied { write } for pid=4520 comm="syz.5.244" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.742211][ T4519] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.243: Directory hole found for htree leaf block 0 [ 82.787767][ T28] audit: type=1400 audit(1776049362.335:306): avc: denied { open } for pid=4520 comm="syz.5.244" path="/17/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.811704][ T28] audit: type=1400 audit(1776049362.345:307): avc: denied { read } for pid=4520 comm="syz.5.244" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.834645][ T4545] FAULT_INJECTION: forcing a failure. [ 82.834645][ T4545] name failslab, interval 1, probability 0, space 0, times 0 [ 82.881042][ T4545] CPU: 0 UID: 0 PID: 4545 Comm: syz.4.246 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.881091][ T4545] Tainted: [W]=WARN [ 82.881100][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.881116][ T4545] Call Trace: [ 82.881123][ T4545] [ 82.881132][ T4545] __dump_stack+0x1d/0x30 [ 82.881173][ T4545] dump_stack_lvl+0x95/0xd0 [ 82.881199][ T4545] dump_stack+0x15/0x1b [ 82.881220][ T4545] should_fail_ex+0x263/0x280 [ 82.881261][ T4545] should_failslab+0x8c/0xb0 [ 82.881294][ T4545] kmem_cache_alloc_noprof+0x66/0x400 [ 82.881317][ T4545] ? security_file_alloc+0x32/0xf0 [ 82.881344][ T4545] security_file_alloc+0x32/0xf0 [ 82.881373][ T4545] init_file+0x5b/0x1b0 [ 82.881406][ T4545] alloc_empty_file+0x8b/0x200 [ 82.881434][ T4545] alloc_file_pseudo+0xf6/0x190 [ 82.881475][ T4545] anon_inode_getfile+0xa0/0x120 [ 82.881495][ T4545] bpf_link_prime+0xfc/0x1d0 [ 82.881528][ T4545] netns_bpf_link_create+0x17b/0x510 [ 82.881637][ T4545] ? __fget_files+0x184/0x1c0 [ 82.881668][ T4545] link_create+0x474/0x690 [ 82.881696][ T4545] __sys_bpf+0x35d/0x7e0 [ 82.881741][ T4545] __x64_sys_bpf+0x41/0x50 [ 82.881765][ T4545] x64_sys_call+0x10cb/0x3020 [ 82.881872][ T4545] do_syscall_64+0x12c/0x370 [ 82.881904][ T4545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.881933][ T4545] RIP: 0033:0x7f32b7b6c819 [ 82.881994][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.882012][ T4545] RSP: 002b:00007f32b65c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.882076][ T4545] RAX: ffffffffffffffda RBX: 00007f32b7de5fa0 RCX: 00007f32b7b6c819 [ 82.882093][ T4545] RDX: 0000000000000044 RSI: 00002000000004c0 RDI: 000000000000001c [ 82.882109][ T4545] RBP: 00007f32b65c7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.882125][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.882162][ T4545] R13: 00007f32b7de6038 R14: 00007f32b7de5fa0 R15: 00007fffc505e2f8 [ 82.882252][ T4545] [ 82.924627][ T28] audit: type=1400 audit(1776049362.385:308): avc: denied { add_name } for pid=4518 comm="syz.1.243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.147008][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.227760][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.468196][ T4574] loop4: detected capacity change from 0 to 512 [ 83.660440][ T4573] syzkaller0: entered promiscuous mode [ 83.727921][ T4573] syzkaller0: entered allmulticast mode [ 84.134582][ T4591] loop5: detected capacity change from 0 to 512 [ 84.143941][ T4591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.287150][ T4591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.366342][ T4591] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.411912][ T4610] loop0: detected capacity change from 0 to 2048 [ 84.555902][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.201390][ T4645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4645 comm=syz.0.274 [ 85.240847][ T4648] loop4: detected capacity change from 0 to 254 [ 85.481223][ T4657] loop5: detected capacity change from 0 to 128 [ 85.955288][ T4661] netlink: 'syz.5.278': attribute type 13 has an invalid length. [ 86.116116][ T4645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.137532][ T4660] syzkaller0: entered promiscuous mode [ 86.157348][ T4660] syzkaller0: entered allmulticast mode [ 86.174723][ T4645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.026775][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 87.026795][ T28] audit: type=1400 audit(1776049366.665:326): avc: denied { map } for pid=4607 comm="syz.1.266" path="socket:[8606]" dev="sockfs" ino=8606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.114404][ T28] audit: type=1326 audit(1776049366.745:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 87.147384][ T28] audit: type=1326 audit(1776049366.745:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 87.282540][ T28] audit: type=1326 audit(1776049366.755:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 87.306457][ T28] audit: type=1326 audit(1776049366.755:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 87.478893][ T4685] loop5: detected capacity change from 0 to 512 [ 87.705435][ T4687] FAULT_INJECTION: forcing a failure. [ 87.705435][ T4687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.753810][ T28] audit: type=1326 audit(1776049366.755:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 87.850164][ T4687] CPU: 1 UID: 0 PID: 4687 Comm: syz.2.287 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.850208][ T4687] Tainted: [W]=WARN [ 87.850215][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.850228][ T4687] Call Trace: [ 87.850234][ T4687] [ 87.850298][ T4687] __dump_stack+0x1d/0x30 [ 87.850333][ T4687] dump_stack_lvl+0x95/0xd0 [ 87.850377][ T4687] dump_stack+0x15/0x1b [ 87.850401][ T4687] should_fail_ex+0x263/0x280 [ 87.850515][ T4687] should_fail+0xb/0x20 [ 87.850576][ T4687] should_fail_usercopy+0x1a/0x20 [ 87.850608][ T4687] _copy_from_user+0x1c/0xb0 [ 87.850643][ T4687] generic_map_update_batch+0x4a9/0x680 [ 87.850728][ T4687] ? __pfx_generic_map_update_batch+0x10/0x10 [ 87.850819][ T4687] bpf_map_do_batch+0x25c/0x380 [ 87.850846][ T4687] __sys_bpf+0x6a2/0x7e0 [ 87.850877][ T4687] __x64_sys_bpf+0x41/0x50 [ 87.850901][ T4687] x64_sys_call+0x10cb/0x3020 [ 87.851071][ T4687] do_syscall_64+0x12c/0x370 [ 87.851107][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.851163][ T4687] RIP: 0033:0x7f699521c819 [ 87.851178][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.851212][ T4687] RSP: 002b:00007f6993c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.851237][ T4687] RAX: ffffffffffffffda RBX: 00007f6995495fa0 RCX: 00007f699521c819 [ 87.851252][ T4687] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 87.851264][ T4687] RBP: 00007f6993c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.851276][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.851367][ T4687] R13: 00007f6995496038 R14: 00007f6995495fa0 R15: 00007fff43ac9138 [ 87.851387][ T4687] [ 88.146419][ T28] audit: type=1326 audit(1776049366.755:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 88.238970][ T28] audit: type=1326 audit(1776049366.755:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 88.376906][ T28] audit: type=1326 audit(1776049366.755:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 88.429578][ T4693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 88.436229][ T4693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.485120][ T4693] vhci_hcd vhci_hcd.0: Device attached [ 88.513022][ T28] audit: type=1326 audit(1776049366.755:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 88.690033][ T3408] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 88.748066][ T3408] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 88.765807][ T4709] batadv_slave_0: entered promiscuous mode [ 88.786860][ T4708] batadv_slave_0: left promiscuous mode [ 88.942344][ T4717] loop4: detected capacity change from 0 to 512 [ 89.162465][ T4700] vhci_hcd: connection reset by peer [ 89.201497][ T3668] vhci_hcd vhci_hcd.2: stop threads [ 89.221006][ T3668] vhci_hcd vhci_hcd.2: release socket [ 89.237924][ T3668] vhci_hcd vhci_hcd.2: disconnect device [ 89.359851][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.300'. [ 89.575260][ T4733] loop4: detected capacity change from 0 to 512 [ 89.742821][ T4733] EXT4-fs (loop4): 1 orphan inode deleted [ 89.761821][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.781565][ T4733] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.876769][ T3401] IPVS: starting estimator thread 0... [ 89.907360][ T4706] Set syz1 is full, maxelem 65536 reached [ 90.017620][ T4742] IPVS: using max 2304 ests per chain, 115200 per kthread [ 90.038043][ T4733] Cannot find set identified by id 0 to match [ 90.406544][ T3576] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:19: Failed to release dquot type 1 [ 90.769715][ T4763] loop0: detected capacity change from 0 to 1024 [ 90.816502][ T4763] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.855565][ T4763] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 90.901153][ T4763] EXT4-fs (loop0): invalid journal inode [ 90.931220][ T4763] EXT4-fs (loop0): can't get journal size [ 90.991395][ T4763] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.310: blocks 3-3 from inode overlap system zone [ 90.991551][ T4763] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 91.006793][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 91.006836][ C1] EXT4-fs (loop0): initial error at time 1776049370: ext4_protect_reserved_inode:182: inode 2 [ 91.006883][ C1] EXT4-fs (loop0): last error at time 1776049370: ext4_protect_reserved_inode:182: inode 2 [ 91.012708][ T4763] EXT4-fs (loop0): failed to initialize system zone (-117) [ 91.012816][ T4763] EXT4-fs (loop0): mount failed [ 91.261048][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.376049][ T4772] loop1: detected capacity change from 0 to 512 [ 91.407074][ T4773] loop4: detected capacity change from 0 to 2048 [ 91.418476][ T4772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.441253][ T4772] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.465077][ T4773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.498312][ T4773] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 91.512550][ T4773] EXT4-fs (loop4): shut down requested (0) [ 91.687904][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.504471][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 92.612033][ T28] audit: type=1400 audit(1776049372.145:362): avc: denied { bind } for pid=4801 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.679193][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.494779][ T28] audit: type=1400 audit(1776049372.315:363): avc: denied { bind } for pid=4799 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.817657][ T3408] usb 5-1: enqueue for inactive port 0 [ 93.835954][ T3408] usb 5-1: enqueue for inactive port 0 [ 93.896845][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 93.926036][ T28] audit: type=1400 audit(1776049373.565:364): avc: denied { ioctl } for pid=4824 comm="syz.5.328" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.959717][ T3408] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 93.970666][ T4825] loop5: detected capacity change from 0 to 1024 [ 94.000812][ T4825] EXT4-fs: inline encryption not supported [ 94.043405][ T4830] loop1: detected capacity change from 0 to 1024 [ 94.070870][ T4825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.078489][ T4830] EXT4-fs: test_dummy_encryption option not supported [ 94.132170][ T4825] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.218653][ T4825] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.328: lblock 0 mapped to illegal pblock 0 (length 1) [ 94.250963][ T4838] lo speed is unknown, defaulting to 1000 [ 94.257695][ T4825] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.328: lblock 0 mapped to illegal pblock 0 (length 1) [ 94.278064][ T4825] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 94.321741][ T4825] EXT4-fs (loop5): This should not happen!! Data will be lost [ 94.321741][ T4825] [ 94.358282][ T4847] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 94.387655][ T4849] sg_write: data in/out 4731904/4 bytes for SCSI command 0xb5-- guessing data in; [ 94.387655][ T4849] program syz.5.328 not setting count and/or reply_len properly [ 94.448374][ T3953] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.466253][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.499820][ T4852] loop2: detected capacity change from 0 to 128 [ 94.556580][ T4856] loop5: detected capacity change from 0 to 1024 [ 94.577823][ T4856] EXT4-fs: test_dummy_encryption option not supported [ 94.591059][ T28] audit: type=1400 audit(1776049374.235:365): avc: denied { read } for pid=4861 comm="syz.2.339" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.647337][ T28] audit: type=1400 audit(1776049374.235:366): avc: denied { open } for pid=4861 comm="syz.2.339" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.677995][ T4867] loop2: detected capacity change from 0 to 512 [ 94.690698][ T28] audit: type=1400 audit(1776049374.275:367): avc: denied { ioctl } for pid=4861 comm="syz.2.339" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.768183][ T4867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.799462][ T4867] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.946830][ T28] audit: type=1400 audit(1776049374.585:368): avc: denied { create } for pid=4866 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.059958][ T4880] batman_adv: batadv0: Adding interface: gretap1 [ 95.066958][ T4880] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.094177][ T4880] batman_adv: batadv0: Interface activated: gretap1 [ 95.144795][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 95.170482][ T4843] loop4: detected capacity change from 0 to 32768 [ 95.178984][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 95.217924][ T3917] loop4: p1 p3 < p5 p6 > [ 95.237865][ T4843] loop4: p1 p3 < p5 p6 > [ 95.305107][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.825168][ T4886] lo speed is unknown, defaulting to 1000 [ 95.962918][ T28] audit: type=1400 audit(1776049375.605:369): avc: denied { setopt } for pid=4894 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.995399][ T4898] loop2: detected capacity change from 0 to 512 [ 96.095564][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 96.147264][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 96.159439][ T4908] loop4: detected capacity change from 0 to 512 [ 96.183201][ T4908] EXT4-fs: Ignoring removed bh option [ 96.201368][ T4908] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 96.211552][ T4908] EXT4-fs (loop4): 1 truncate cleaned up [ 96.221469][ T4908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.222891][ T28] audit: type=1400 audit(1776049375.865:370): avc: denied { watch } for pid=4910 comm="syz.2.355" path="/79" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.259333][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.266819][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.281014][ T4908] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.354: bg 0: block 465: padding at end of block bitmap is not set [ 96.296381][ T4908] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 96.310209][ T4908] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.310209][ T4908] [ 96.335061][ T4908] EXT4-fs error (device loop4) in ext4_setattr:6028: Corrupt filesystem [ 96.345610][ T28] audit: type=1400 audit(1776049375.975:371): avc: denied { watch_reads } for pid=4910 comm="syz.2.355" path="/79" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.520373][ T4915] loop1: detected capacity change from 0 to 128 [ 96.675980][ T4908] syz.4.354 (4908) used greatest stack depth: 8696 bytes left [ 96.718940][ T3312] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.750944][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.894131][ T4937] loop5: detected capacity change from 0 to 512 [ 97.227613][ T4938] EXT4-fs: test_dummy_encryption option not supported [ 98.014211][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 98.014230][ T28] audit: type=1400 audit(1776049377.655:373): avc: denied { connect } for pid=4932 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.466229][ T4964] set_capacity_and_notify: 1 callbacks suppressed [ 99.466249][ T4964] loop0: detected capacity change from 0 to 256 [ 99.481826][ T4964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.366'. [ 99.490885][ T4964] netlink: 72 bytes leftover after parsing attributes in process `syz.0.366'. [ 99.500038][ T4964] netlink: 'syz.0.366': attribute type 3 has an invalid length. [ 99.507871][ T4964] netlink: 11 bytes leftover after parsing attributes in process `syz.0.366'. [ 99.781337][ T4975] loop5: detected capacity change from 0 to 512 [ 99.835996][ T28] audit: type=1400 audit(1776049379.475:374): avc: denied { create } for pid=4976 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.930181][ T28] audit: type=1400 audit(1776049379.515:375): avc: denied { setopt } for pid=4976 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.132906][ T4958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.370'. [ 100.502589][ T28] audit: type=1326 audit(1776049380.145:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.567889][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 100.618452][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 100.642153][ T28] audit: type=1326 audit(1776049380.175:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.728197][ T28] audit: type=1326 audit(1776049380.175:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.766590][ T5003] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 100.772171][ T28] audit: type=1326 audit(1776049380.175:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.788233][ T5003] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 100.857339][ T28] audit: type=1326 audit(1776049380.175:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.906606][ T28] audit: type=1326 audit(1776049380.175:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 100.962039][ T28] audit: type=1326 audit(1776049380.175:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 101.088778][ T5026] netlink: 'syz.5.392': attribute type 8 has an invalid length. [ 101.143142][ T5031] lo speed is unknown, defaulting to 1000 [ 101.258795][ T5041] loop0: detected capacity change from 0 to 128 [ 101.401909][ T5059] netlink: 76 bytes leftover after parsing attributes in process `syz.4.397'. [ 101.410916][ T5059] netlink: 72 bytes leftover after parsing attributes in process `syz.4.397'. [ 101.419832][ T5059] netlink: 'syz.4.397': attribute type 3 has an invalid length. [ 101.427595][ T5059] netlink: 11 bytes leftover after parsing attributes in process `syz.4.397'. [ 101.600067][ T5076] loop5: detected capacity change from 0 to 128 [ 101.976008][ T5110] loop5: detected capacity change from 0 to 512 [ 102.018306][ T5113] loop1: detected capacity change from 0 to 128 [ 102.379309][ T5133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 102.388761][ T5133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 102.399595][ T5133] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 102.439513][ T5111] loop0: detected capacity change from 0 to 32768 [ 102.487930][ T5142] loop2: detected capacity change from 0 to 1024 [ 102.496551][ T5142] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 102.496551][ T5142] [ 102.506265][ T5111] loop0: p1 p3 < p5 p6 > [ 102.610074][ T5148] loop4: detected capacity change from 0 to 512 [ 102.638207][ T5150] bridge0: port 3(ipvlan2) entered blocking state [ 102.645051][ T5150] bridge0: port 3(ipvlan2) entered disabled state [ 102.653729][ T5150] ipvlan2: entered allmulticast mode [ 102.659472][ T5150] bridge0: entered allmulticast mode [ 102.665294][ T5150] ipvlan2: left allmulticast mode [ 102.670603][ T5150] bridge0: left allmulticast mode [ 102.838473][ T3001] loop0: p1 p3 < p5 p6 > [ 102.846123][ T5158] loop4: detected capacity change from 0 to 4096 [ 102.858314][ T5158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.874059][ T5158] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 102.989324][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.035369][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 103.035386][ T28] audit: type=1400 audit(1776049382.675:402): avc: denied { unlink } for pid=5157 comm="syz.4.446" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.089308][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.197305][ T5169] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 103.197305][ T5169] [ 103.261180][ T28] audit: type=1400 audit(1776049382.905:403): avc: denied { ioctl } for pid=5176 comm="syz.5.452" path="socket:[9876]" dev="sockfs" ino=9876 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.419250][ T5185] FAULT_INJECTION: forcing a failure. [ 103.419250][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.432585][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.4.456 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.432669][ T5185] Tainted: [W]=WARN [ 103.432676][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.432692][ T5185] Call Trace: [ 103.432698][ T5185] [ 103.432707][ T5185] __dump_stack+0x1d/0x30 [ 103.432742][ T5185] dump_stack_lvl+0x95/0xd0 [ 103.432802][ T5185] dump_stack+0x15/0x1b [ 103.432842][ T5185] should_fail_ex+0x263/0x280 [ 103.432921][ T5185] should_fail+0xb/0x20 [ 103.432992][ T5185] should_fail_usercopy+0x1a/0x20 [ 103.433036][ T5185] _copy_from_user+0x1c/0xb0 [ 103.433080][ T5185] ___sys_sendmsg+0xc1/0x1e0 [ 103.433173][ T5185] __x64_sys_sendmsg+0xd4/0x160 [ 103.433205][ T5185] x64_sys_call+0x194c/0x3020 [ 103.433331][ T5185] do_syscall_64+0x12c/0x370 [ 103.433503][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.433527][ T5185] RIP: 0033:0x7f32b7b6c819 [ 103.433545][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.433569][ T5185] RSP: 002b:00007f32b65c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.433595][ T5185] RAX: ffffffffffffffda RBX: 00007f32b7de5fa0 RCX: 00007f32b7b6c819 [ 103.433613][ T5185] RDX: 000000000404c000 RSI: 0000200000002880 RDI: 0000000000000003 [ 103.433734][ T5185] RBP: 00007f32b65c7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.433751][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.433767][ T5185] R13: 00007f32b7de6038 R14: 00007f32b7de5fa0 R15: 00007fffc505e2f8 [ 103.433793][ T5185] [ 104.002226][ T5203] EXT4-fs: test_dummy_encryption option not supported [ 104.186059][ T5205] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.318639][ T3301] loop5: p1 p3 < p5 p6 > [ 104.343679][ T5194] loop5: p1 p3 < p5 p6 > [ 104.464983][ T28] audit: type=1400 audit(1776049384.105:404): avc: denied { listen } for pid=5213 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.516417][ T28] audit: type=1400 audit(1776049384.125:405): avc: denied { shutdown } for pid=5213 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.539043][ T5214] lo speed is unknown, defaulting to 1000 [ 104.596743][ T28] audit: type=1400 audit(1776049384.235:406): avc: denied { read } for pid=5215 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.629562][ T5216] netlink: 'syz.1.467': attribute type 29 has an invalid length. [ 104.656909][ T5216] netlink: 'syz.1.467': attribute type 29 has an invalid length. [ 104.692789][ T5216] netlink: 500 bytes leftover after parsing attributes in process `syz.1.467'. [ 104.702067][ T28] audit: type=1400 audit(1776049384.335:407): avc: denied { create } for pid=5215 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.789519][ T5223] set_capacity_and_notify: 5 callbacks suppressed [ 104.789538][ T5223] loop1: detected capacity change from 0 to 512 [ 104.863873][ T5227] loop2: detected capacity change from 0 to 128 [ 105.248890][ T28] audit: type=1400 audit(1776049384.895:408): avc: denied { getopt } for pid=5258 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.750873][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 105.769576][ T5283] bond0: Unable to set up delay as MII monitoring is disabled [ 105.807194][ T5285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=5285 comm=syz.5.489 [ 105.892316][ T5289] loop0: detected capacity change from 0 to 128 [ 106.177837][ T5306] lo speed is unknown, defaulting to 1000 [ 106.487863][ T28] audit: type=1400 audit(1776049386.135:409): avc: denied { read } for pid=5320 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.538650][ T28] audit: type=1400 audit(1776049386.185:410): avc: denied { write } for pid=5320 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.575183][ T5325] loop2: detected capacity change from 0 to 2048 [ 106.670522][ T5325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.728041][ T5325] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.806459][ T5338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.504: bg 0: block 345: padding at end of block bitmap is not set [ 106.880635][ T5338] EXT4-fs (loop2): Remounting filesystem read-only [ 106.918794][ T3590] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 106.991509][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.004665][ T5351] loop5: detected capacity change from 0 to 128 [ 107.056353][ T5357] loop2: detected capacity change from 0 to 2048 [ 107.096565][ T5363] loop1: detected capacity change from 0 to 512 [ 107.108054][ T3301] loop2: p1 < > p3 p4 [ 107.116322][ T3301] loop2: p3 start 4294901760 is beyond EOD, truncated [ 107.123936][ T5363] EXT4-fs (loop1): 1 truncate cleaned up [ 107.136307][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.155133][ T3301] loop2: p4 size 722688 extends beyond EOD, truncated [ 107.167836][ T5357] loop2: p1 < > p3 p4 [ 107.173343][ T5357] loop2: p3 start 4294901760 is beyond EOD, truncated [ 107.180709][ T5357] loop2: p4 size 722688 extends beyond EOD, truncated [ 107.194792][ T3001] loop2: p1 < > p3 p4 [ 107.199895][ T3001] loop2: p3 start 4294901760 is beyond EOD, truncated [ 107.206759][ T3001] loop2: p4 size 722688 extends beyond EOD, truncated [ 107.240723][ T28] audit: type=1400 audit(1776049386.885:411): avc: denied { read } for pid=5356 comm="syz.2.512" name="loop2p1" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.285010][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.351054][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 107.369677][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 107.441415][ T5374] loop1: detected capacity change from 0 to 512 [ 107.542645][ T5381] loop4: detected capacity change from 0 to 2048 [ 107.560008][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.589641][ T5381] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.677179][ T5386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.523: bg 0: block 345: padding at end of block bitmap is not set [ 107.707758][ T5386] EXT4-fs (loop4): Remounting filesystem read-only [ 107.734697][ T3565] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 107.748801][ T5381] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #15: comm syz.4.523: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 107.748801][ T5381] [ 107.856201][ T5398] loop5: detected capacity change from 0 to 512 [ 107.865740][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.889488][ T5398] EXT4-fs (loop5): 1 truncate cleaned up [ 107.917102][ T5398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.970921][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.074178][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.528883][ T5431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.548864][ T5431] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.619340][ T5431] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.539: bg 0: block 345: padding at end of block bitmap is not set [ 108.633967][ T5431] EXT4-fs (loop1): Remounting filesystem read-only [ 108.648367][ T4630] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 108.748587][ T5438] ext4: Unknown parameter 'uid' [ 109.202610][ T5453] tipc: Enabling of bearer rejected, failed to enable media [ 109.338449][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.352935][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.401810][ T5460] EXT4-fs: Ignoring removed bh option [ 109.460879][ T5460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.517068][ T5466] FAULT_INJECTION: forcing a failure. [ 109.517068][ T5466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.542431][ T5468] EXT4-fs: test_dummy_encryption option not supported [ 109.553029][ T5460] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.583630][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.1.553 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.583690][ T5466] Tainted: [W]=WARN [ 109.583699][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.583793][ T5466] Call Trace: [ 109.583801][ T5466] [ 109.583861][ T5466] __dump_stack+0x1d/0x30 [ 109.583896][ T5466] dump_stack_lvl+0x95/0xd0 [ 109.583935][ T5466] dump_stack+0x15/0x1b [ 109.584028][ T5466] should_fail_ex+0x263/0x280 [ 109.584058][ T5466] should_fail+0xb/0x20 [ 109.584083][ T5466] should_fail_usercopy+0x1a/0x20 [ 109.584127][ T5466] _copy_from_user+0x1c/0xb0 [ 109.584168][ T5466] con_set_cmap+0x52/0x3b0 [ 109.584199][ T5466] ? selinux_capable+0x31/0x40 [ 109.584297][ T5466] vt_ioctl+0xea4/0x18d0 [ 109.584373][ T5466] ? tty_jobctrl_ioctl+0x29c/0x810 [ 109.584453][ T5466] tty_ioctl+0x7d7/0xb80 [ 109.584489][ T5466] ? __pfx_tty_ioctl+0x10/0x10 [ 109.584542][ T5466] __se_sys_ioctl+0xce/0x140 [ 109.584588][ T5466] __x64_sys_ioctl+0x43/0x50 [ 109.584613][ T5466] x64_sys_call+0x1563/0x3020 [ 109.584647][ T5466] do_syscall_64+0x12c/0x370 [ 109.584720][ T5466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.584797][ T5466] RIP: 0033:0x7f270abbc819 [ 109.584816][ T5466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.584839][ T5466] RSP: 002b:00007f270960f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.584858][ T5466] RAX: ffffffffffffffda RBX: 00007f270ae35fa0 RCX: 00007f270abbc819 [ 109.584909][ T5466] RDX: 0000200000000000 RSI: 0000000000004b71 RDI: 0000000000000003 [ 109.584924][ T5466] RBP: 00007f270960f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.584940][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.584955][ T5466] R13: 00007f270ae36038 R14: 00007f270ae35fa0 R15: 00007ffca63f6918 [ 109.584977][ T5466] [ 110.068847][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 110.068865][ T28] audit: type=1400 audit(1776049389.705:413): avc: denied { rename } for pid=5459 comm="syz.2.552" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.147564][ T5336] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 110.188458][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.344292][ T28] audit: type=1400 audit(1776049389.855:414): avc: denied { write } for pid=5467 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.434791][ T5498] set_capacity_and_notify: 8 callbacks suppressed [ 110.434812][ T5498] loop0: detected capacity change from 0 to 512 [ 110.457157][ T5492] loop1: detected capacity change from 0 to 2048 [ 110.518705][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.551993][ T5492] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.643736][ T5511] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.564: bg 0: block 345: padding at end of block bitmap is not set [ 110.669415][ T5511] EXT4-fs (loop1): Remounting filesystem read-only [ 110.698814][ T70] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 110.712171][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 110.754579][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 110.768909][ T5522] loop5: detected capacity change from 0 to 512 [ 110.776855][ T5522] journal_path: Non-blockdev passed as './file2' [ 110.790117][ T5522] EXT4-fs: error: could not find journal device path [ 110.885296][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.983241][ T5536] loop5: detected capacity change from 0 to 512 [ 110.997467][ T5535] loop1: detected capacity change from 0 to 128 [ 111.036793][ T28] audit: type=1400 audit(1776049390.675:415): avc: denied { remount } for pid=5539 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.079463][ T5543] FAULT_INJECTION: forcing a failure. [ 111.079463][ T5543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.126424][ T5543] CPU: 1 UID: 0 PID: 5543 Comm: syz.1.582 Tainted: G W syzkaller #0 PREEMPT(full) [ 111.126463][ T5543] Tainted: [W]=WARN [ 111.126553][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.126566][ T5543] Call Trace: [ 111.126572][ T5543] [ 111.126580][ T5543] __dump_stack+0x1d/0x30 [ 111.126688][ T5543] dump_stack_lvl+0x95/0xd0 [ 111.126757][ T5543] dump_stack+0x15/0x1b [ 111.126781][ T5543] should_fail_ex+0x263/0x280 [ 111.126809][ T5543] should_fail+0xb/0x20 [ 111.126833][ T5543] should_fail_usercopy+0x1a/0x20 [ 111.126877][ T5543] copy_folio_from_iter_atomic+0x269/0x1170 [ 111.126927][ T5543] ? shmem_write_begin+0xfc/0x1f0 [ 111.126969][ T5543] ? shmem_write_begin+0x135/0x1f0 [ 111.127011][ T5543] generic_perform_write+0x2c1/0x490 [ 111.127053][ T5543] shmem_file_write_iter+0xc5/0xf0 [ 111.127103][ T5543] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 111.127148][ T5543] vfs_write+0x5a6/0x9f0 [ 111.127212][ T5543] ksys_write+0xdc/0x1a0 [ 111.127364][ T5543] __x64_sys_write+0x40/0x50 [ 111.127389][ T5543] x64_sys_call+0x27e1/0x3020 [ 111.127423][ T5543] do_syscall_64+0x12c/0x370 [ 111.127468][ T5543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.127496][ T5543] RIP: 0033:0x7f270ab7d04e [ 111.127513][ T5543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.127576][ T5543] RSP: 002b:00007f270960eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.127596][ T5543] RAX: ffffffffffffffda RBX: 00007f270960f6c0 RCX: 00007f270ab7d04e [ 111.127610][ T5543] RDX: 0000000000040000 RSI: 00007f27011ef000 RDI: 0000000000000004 [ 111.127625][ T5543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.127639][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 111.127654][ T5543] R13: 00007f270960eee0 R14: 00007f270960eea0 R15: 00007f27011ef000 [ 111.127678][ T5543] [ 111.322156][ T5513] loop0: detected capacity change from 0 to 32768 [ 111.342822][ T5552] tmpfs: Bad value for 'mpol' [ 111.347763][ T28] audit: type=1400 audit(1776049390.985:416): avc: denied { mounton } for pid=5551 comm="syz.2.585" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 111.390645][ T5552] netlink: 152 bytes leftover after parsing attributes in process `syz.2.585'. [ 111.416557][ T5543] loop1: detected capacity change from 0 to 512 [ 111.421557][ T5556] loop5: detected capacity change from 0 to 512 [ 111.429497][ T3917] loop0: p1 p3 < p5 p6 > [ 111.463808][ T5513] loop0: p1 p3 < > [ 111.498393][ T28] audit: type=1400 audit(1776049391.145:417): avc: denied { open } for pid=5564 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.532896][ T28] audit: type=1400 audit(1776049391.165:418): avc: denied { kernel } for pid=5564 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.553418][ T28] audit: type=1400 audit(1776049391.165:419): avc: denied { tracepoint } for pid=5564 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.594627][ T5556] EXT4-fs (loop5): 1 orphan inode deleted [ 111.614258][ T5556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.665265][ T28] audit: type=1400 audit(1776049391.305:420): avc: denied { ioctl } for pid=5555 comm="syz.5.586" path="socket:[11539]" dev="sockfs" ino=11539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.849155][ T28] audit: type=1400 audit(1776049391.495:421): avc: denied { ioctl } for pid=5588 comm="syz.4.599" path="socket:[12324]" dev="sockfs" ino=12324 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.878802][ T5597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5597 comm=syz.4.599 [ 111.911355][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 111.913555][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 111.934335][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 111.944930][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 111.968904][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 111.981380][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 112.052506][ T28] audit: type=1400 audit(1776049391.695:422): avc: denied { write } for pid=5599 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.251487][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.355837][ T5598] loop0: detected capacity change from 0 to 32768 [ 112.388687][ T3917] loop0: p1 p3 < p5 p6 > [ 112.406343][ T5598] loop0: p1 p3 < p5 p6 > [ 112.554539][ T5617] loop5: detected capacity change from 0 to 128 [ 112.633144][ T5620] netlink: 268 bytes leftover after parsing attributes in process `syz.5.606'. [ 112.916503][ T5625] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 112.930068][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 112.942011][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 112.953980][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 112.973566][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 113.003032][ T5625] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 113.013854][ T5625] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.609: Corrupt directory, running e2fsck is recommended [ 113.028590][ T5625] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 113.036987][ T5625] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.609: corrupted in-inode xattr: e_name out of bounds [ 113.051216][ T5625] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.051474][ T5625] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.609: couldn't read orphan inode 15 (err -117) [ 113.060701][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.060718][ C0] EXT4-fs (loop2): initial error at time 1776049392: ext4_iget_extra_inode:5040: inode 15 [ 113.060746][ C0] EXT4-fs (loop2): last error at time 1776049392: ext4_iget_extra_inode:5040: inode 15 [ 113.154107][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 113.176209][ T5625] loop2: lost filesystem error report for type 5 error -117 [ 113.176806][ T5625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.255792][ T5625] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.281346][ T5636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.288663][ T5636] IPv6: NLM_F_CREATE should be set when creating new route [ 113.296042][ T5625] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 113.327411][ T5637] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.347370][ T5625] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.609: Corrupt directory, running e2fsck is recommended [ 113.380193][ T5637] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 113.407670][ T5637] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.609: Corrupt directory, running e2fsck is recommended [ 113.441883][ T5617] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 113.493158][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.502775][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.522981][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.614368][ T5617] team0: Port device netdevsim1 added [ 113.629072][ T3673] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.639734][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 113.657780][ T3673] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.674168][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 113.687076][ T3673] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.735372][ T3673] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.847958][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.620'. [ 113.960502][ T5659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.977883][ T5659] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.107619][ T5669] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.621: bg 0: block 345: padding at end of block bitmap is not set [ 114.173556][ T5669] EXT4-fs (loop5): Remounting filesystem read-only [ 114.211806][ T3672] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 114.273825][ T5681] EXT4-fs (loop2): 1 truncate cleaned up [ 114.281802][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 114.300865][ T5683] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 114.318771][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.332138][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 114.344337][ T5683] EXT4-fs (loop1): group descriptors corrupted! [ 114.360833][ T3306] loop4: p1 p3 < p5 p6 > [ 114.371574][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.403690][ T5654] loop4: p1 p3 < p5 p6 > [ 114.507923][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 114.517426][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 114.550076][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.629155][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 114.629886][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 114.642413][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 114.660168][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 114.667311][ T5698] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 114.731311][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 114.731379][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 115.074905][ T5723] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.644: invalid indirect mapped block 4294967295 (level 1) [ 115.089104][ T5723] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.089322][ T5723] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.644: invalid indirect mapped block 4294967295 (level 1) [ 115.098664][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 115.098684][ C0] EXT4-fs (loop0): initial error at time 1776049394: ext4_free_branches:1023: inode 11 [ 115.098709][ C0] EXT4-fs (loop0): last error at time 1776049394: ext4_free_branches:1023: inode 11 [ 115.138995][ T5723] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.140576][ T5723] EXT4-fs (loop0): 2 truncates cleaned up [ 115.156261][ T5723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.181455][ T5723] lo speed is unknown, defaulting to 1000 [ 115.340929][ T5727] veth1_to_bond: entered allmulticast mode [ 115.389322][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 115.389337][ T28] audit: type=1326 audit(127.788:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.420424][ T28] audit: type=1326 audit(127.788:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.444432][ T5723] pim6reg: entered allmulticast mode [ 115.454440][ T28] audit: type=1326 audit(127.788:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.455801][ T5726] veth1_to_bond: left allmulticast mode [ 115.490201][ T28] audit: type=1326 audit(127.788:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.513606][ T5723] pim6reg: left allmulticast mode [ 115.520497][ T28] audit: type=1326 audit(127.788:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.543949][ T28] audit: type=1326 audit(127.788:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.567198][ T28] audit: type=1326 audit(127.788:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.591232][ T28] audit: type=1326 audit(127.788:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.600544][ T5734] set_capacity_and_notify: 8 callbacks suppressed [ 115.600659][ T5734] loop1: detected capacity change from 0 to 128 [ 115.662390][ T28] audit: type=1326 audit(127.788:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.747193][ T28] audit: type=1326 audit(127.788:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 115.774376][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.804890][ T5742] loop1: detected capacity change from 0 to 2048 [ 115.838896][ T5742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.916324][ T5754] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.954178][ T5758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.651: bg 0: block 345: padding at end of block bitmap is not set [ 115.992259][ T5763] loop0: detected capacity change from 0 to 1024 [ 116.012348][ T5763] ext4: Unknown parameter 'uid<00000000000000000000' [ 116.095634][ T5758] EXT4-fs (loop1): Remounting filesystem read-only [ 116.105611][ T5771] program syz.4.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.117498][ T310] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 116.146161][ T5771] loop4: detected capacity change from 0 to 512 [ 116.231284][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.242341][ T5775] loop4: detected capacity change from 0 to 1024 [ 116.266825][ T5775] journal_path: Lookup failure for './file0/file0' [ 116.285457][ T5775] EXT4-fs: error: could not find journal device path [ 116.306864][ T5778] loop1: detected capacity change from 0 to 512 [ 116.327768][ T5778] EXT4-fs (loop1): 1 truncate cleaned up [ 116.337927][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.379748][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.659999][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 116.669057][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 116.839874][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.669'. [ 116.919423][ T5802] loop2: detected capacity change from 0 to 2048 [ 116.944140][ T5802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.960410][ T5804] loop5: detected capacity change from 0 to 512 [ 116.975464][ T5804] EXT4-fs (loop5): 1 truncate cleaned up [ 117.004340][ T5804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.037784][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.726004][ T5813] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.671: bg 0: block 345: padding at end of block bitmap is not set [ 117.759530][ T5813] EXT4-fs (loop2): Remounting filesystem read-only [ 117.873240][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.956157][ T5839] loop5: detected capacity change from 0 to 2048 [ 118.004745][ T3301] Alternate GPT is invalid, using primary GPT. [ 118.014105][ T5846] loop4: detected capacity change from 0 to 512 [ 118.023395][ T3301] loop5: p2 p3 p7 [ 118.041908][ T5846] EXT4-fs (loop4): 1 truncate cleaned up [ 118.057123][ T5846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.073195][ T5839] Alternate GPT is invalid, using primary GPT. [ 118.096281][ T5839] loop5: p2 p3 p7 [ 118.172900][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 118.184075][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 118.194845][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 118.230559][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.279006][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 118.292335][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 118.303544][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 118.381870][ T5863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.657177][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.691'. [ 118.669663][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.691'. [ 118.765835][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.847303][ T5880] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.693: bg 0: block 345: padding at end of block bitmap is not set [ 118.874286][ T5880] EXT4-fs (loop2): Remounting filesystem read-only [ 118.901031][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 119.237599][ T5871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.689: bg 0: block 345: padding at end of block bitmap is not set [ 119.264325][ T5871] EXT4-fs (loop4): Remounting filesystem read-only [ 119.435351][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.973830][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.044834][ T5901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.267311][ T5910] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.701: bg 0: block 345: padding at end of block bitmap is not set [ 120.312639][ T5910] EXT4-fs (loop4): Remounting filesystem read-only [ 120.337860][ T4126] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 120.821866][ T5907] set_capacity_and_notify: 4 callbacks suppressed [ 120.821886][ T5907] loop2: detected capacity change from 0 to 2048 [ 120.829616][ T5915] loop1: detected capacity change from 0 to 512 [ 120.879746][ T5907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.928408][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.058035][ T5932] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.702: bg 0: block 345: padding at end of block bitmap is not set [ 121.091790][ T5932] EXT4-fs (loop2): Remounting filesystem read-only [ 121.134685][ T4126] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 121.185438][ T5946] loop4: detected capacity change from 0 to 512 [ 121.205933][ T5946] EXT4-fs (loop4): 1 truncate cleaned up [ 121.215890][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.254226][ T5951] netlink: 88 bytes leftover after parsing attributes in process `syz.1.717'. [ 121.254482][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.294072][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.304784][ T5951] loop1: detected capacity change from 0 to 256 [ 121.326745][ T5951] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.399681][ T5957] loop2: detected capacity change from 0 to 2048 [ 121.459242][ T5957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.477313][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 121.477333][ T28] audit: type=1400 audit(133.858:501): avc: denied { load_policy } for pid=5961 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.580477][ T5969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.719: bg 0: block 345: padding at end of block bitmap is not set [ 121.598887][ T5969] EXT4-fs (loop2): Remounting filesystem read-only [ 121.606679][ T3668] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 121.692789][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.735743][ T5977] loop5: detected capacity change from 0 to 128 [ 121.843096][ T5986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.899907][ T5986] bond1: (slave ip6gretap1): making interface the new active one [ 121.924646][ T5986] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 122.219681][ T5997] loop0: detected capacity change from 0 to 1024 [ 122.241741][ T5997] EXT4-fs: test_dummy_encryption option not supported [ 122.268096][ T5994] loop5: detected capacity change from 0 to 512 [ 122.435019][ T6002] loop5: detected capacity change from 0 to 1024 [ 122.457727][ T6002] EXT4-fs: test_dummy_encryption option not supported [ 122.548519][ T28] audit: type=1400 audit(134.928:502): avc: denied { read } for pid=5996 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.637866][ T6009] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 122.650034][ T6011] loop2: detected capacity change from 0 to 512 [ 122.693762][ T6011] EXT4-fs (loop2): 1 truncate cleaned up [ 122.729069][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.879076][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.914922][ T3408] IPVS: starting estimator thread 0... [ 123.000220][ T6020] FAULT_INJECTION: forcing a failure. [ 123.000220][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 123.012949][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.2.738 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.013022][ T6020] Tainted: [W]=WARN [ 123.013029][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.013049][ T6020] Call Trace: [ 123.013057][ T6020] [ 123.013066][ T6020] __dump_stack+0x1d/0x30 [ 123.013101][ T6020] dump_stack_lvl+0x95/0xd0 [ 123.013132][ T6020] dump_stack+0x15/0x1b [ 123.013239][ T6020] should_fail_ex+0x263/0x280 [ 123.013269][ T6020] ? sel_netnode_sid_slow+0x1eb/0x540 [ 123.013297][ T6020] should_failslab+0x8c/0xb0 [ 123.013321][ T6020] __kmalloc_cache_noprof+0x5f/0x410 [ 123.013434][ T6020] sel_netnode_sid_slow+0x1eb/0x540 [ 123.013467][ T6020] sel_netnode_sid+0x1e3/0x250 [ 123.013496][ T6020] selinux_socket_bind+0x530/0x6e0 [ 123.013600][ T6020] selinux_sctp_bind_connect+0x1bc/0x250 [ 123.013630][ T6020] security_sctp_bind_connect+0x4c/0x90 [ 123.013661][ T6020] sctp_setsockopt_bindx+0x116/0x2c0 [ 123.013792][ T6020] sctp_setsockopt+0x7de/0xea0 [ 123.013827][ T6020] sock_common_setsockopt+0x69/0x80 [ 123.013914][ T6020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 123.014026][ T6020] __sys_setsockopt+0x184/0x200 [ 123.014072][ T6020] __x64_sys_setsockopt+0x64/0x80 [ 123.014188][ T6020] x64_sys_call+0x2327/0x3020 [ 123.014278][ T6020] do_syscall_64+0x12c/0x370 [ 123.014317][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.014349][ T6020] RIP: 0033:0x7f699521c819 [ 123.014369][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.014394][ T6020] RSP: 002b:00007f6993c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.014466][ T6020] RAX: ffffffffffffffda RBX: 00007f6995495fa0 RCX: 00007f699521c819 [ 123.014553][ T6020] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 123.014570][ T6020] RBP: 00007f6993c6f090 R08: 000000000000001c R09: 0000000000000000 [ 123.014587][ T6020] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 123.014605][ T6020] R13: 00007f6995496038 R14: 00007f6995495fa0 R15: 00007fff43ac9138 [ 123.014628][ T6020] [ 123.297349][ T6017] IPVS: using max 2304 ests per chain, 115200 per kthread [ 123.749554][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.307521][ T6044] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.744: bg 0: block 345: padding at end of block bitmap is not set [ 124.345624][ T6044] EXT4-fs (loop2): Remounting filesystem read-only [ 124.419591][ T6055] EXT4-fs (loop1): 1 truncate cleaned up [ 124.436048][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.496934][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.532566][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.625787][ T6063] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 124.651907][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.704980][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 124.747332][ T6069] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.749: bg 0: block 345: padding at end of block bitmap is not set [ 124.800847][ T6069] EXT4-fs (loop2): Remounting filesystem read-only [ 124.820521][ T4129] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 124.908021][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.379133][ T6095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.398851][ T6095] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 125.424210][ T6095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.206145][ T6109] set_capacity_and_notify: 4 callbacks suppressed [ 126.206239][ T6109] loop1: detected capacity change from 0 to 512 [ 126.287575][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.302617][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.392726][ T6112] loop2: detected capacity change from 0 to 128 [ 126.452546][ T28] audit: type=1400 audit(138.838:504): avc: denied { bind } for pid=6113 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.485432][ T28] audit: type=1400 audit(138.818:503): avc: denied { mounton } for pid=6102 comm="syz.1.763" path="/150/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.982602][ T6138] loop0: detected capacity change from 0 to 2048 [ 127.000433][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.020419][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.104010][ T6153] loop2: detected capacity change from 0 to 2048 [ 127.136578][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.242128][ T6164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.781: bg 0: block 345: padding at end of block bitmap is not set [ 127.280308][ T6164] EXT4-fs (loop2): Remounting filesystem read-only [ 127.304660][ T4212] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 127.342541][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 127.362354][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 127.426924][ T6175] loop2: detected capacity change from 0 to 1024 [ 127.454435][ T28] audit: type=1326 audit(139.838:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.455498][ T6175] EXT4-fs: test_dummy_encryption option not supported [ 127.542551][ T28] audit: type=1326 audit(139.838:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.566186][ T28] audit: type=1326 audit(139.838:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.603408][ T6159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.775: bg 0: block 345: padding at end of block bitmap is not set [ 127.728849][ T28] audit: type=1326 audit(139.838:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.752271][ T6159] EXT4-fs (loop0): Remounting filesystem read-only [ 127.753019][ T28] audit: type=1326 audit(139.868:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.788926][ T28] audit: type=1326 audit(139.878:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.818690][ T28] audit: type=1326 audit(139.878:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.867910][ T28] audit: type=1326 audit(139.878:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 127.997471][ T28] audit: type=1326 audit(139.888:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 128.002957][ T6194] loop1: detected capacity change from 0 to 2048 [ 128.043228][ T6196] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 128.114632][ T28] audit: type=1326 audit(139.888:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 128.172632][ T6200] loop5: detected capacity change from 0 to 2048 [ 128.286821][ T6214] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.796: bg 0: block 345: padding at end of block bitmap is not set [ 128.308707][ T6214] EXT4-fs (loop5): Remounting filesystem read-only [ 128.337780][ T3593] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 128.622693][ T6205] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.795: bg 0: block 345: padding at end of block bitmap is not set [ 128.670763][ T6205] EXT4-fs (loop1): Remounting filesystem read-only [ 128.893582][ T6231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=6231 comm=syz.1.803 [ 129.134808][ T6228] loop4: detected capacity change from 0 to 512 [ 129.163945][ T6228] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.804: corrupted inode contents [ 129.163980][ T6228] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.164212][ T6228] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 129.164235][ T6228] loop4: lost filesystem error report for type 5 error -117 [ 129.164361][ T6228] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.804: corrupted inode contents [ 129.164392][ T6228] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.164697][ T6228] EXT4-fs error (device loop4): ext4_evict_inode:313: inode #15: comm syz.4.804: mark_inode_dirty error [ 129.164740][ T6228] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.165088][ T6228] EXT4-fs (loop4): 1 orphan inode deleted [ 129.296762][ T6252] loop5: detected capacity change from 0 to 2048 [ 129.314351][ T6228] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.583349][ T6269] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 129.611973][ T3368] lo speed is unknown, defaulting to 1000 [ 129.618742][ T6269] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 129.626477][ T3368] syz0: Port: 1 Link DOWN [ 129.640118][ T10] lo speed is unknown, defaulting to 1000 [ 129.657223][ T10] syz0: Port: 1 Link ACTIVE [ 129.859603][ T6259] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.813: bg 0: block 345: padding at end of block bitmap is not set [ 129.901446][ T6259] EXT4-fs (loop5): Remounting filesystem read-only [ 130.240012][ T6307] syzkaller0: entered promiscuous mode [ 130.262961][ T6307] syzkaller0: entered allmulticast mode [ 130.288834][ T6305] lo speed is unknown, defaulting to 1000 [ 130.390938][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 130.414024][ T6316] loop5: detected capacity change from 0 to 512 [ 130.425936][ T6316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.432836][ T6316] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.441439][ T6316] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 130.473830][ T6316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e018, mo2=0002] [ 130.497449][ T6316] System zones: 1-12 [ 130.501575][ T6316] EXT4-fs (loop5): orphan cleanup on readonly fs [ 130.515128][ T6316] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.837: bg 0: block 361: padding at end of block bitmap is not set [ 130.529452][ T6316] loop5: lost filesystem error report for type 5 error -117 [ 130.532404][ T6316] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 130.539809][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 130.539835][ C1] EXT4-fs (loop5): initial error at time 142: ext4_validate_block_bitmap:441 [ 130.539885][ C1] EXT4-fs (loop5): last error at time 142: ext4_validate_block_bitmap:441 [ 130.577018][ T6316] loop5: lost filesystem error report for type 5 error -117 [ 130.577327][ T6316] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.837: attempt to clear invalid blocks 33619980 len 1 [ 130.597993][ T6316] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.598390][ T6316] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.837: invalid indirect mapped block 1811939328 (level 0) [ 130.622396][ T6316] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.622549][ T6316] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.837: invalid indirect mapped block 2 (level 2) [ 130.645283][ T6316] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.645522][ T6316] EXT4-fs (loop5): 1 truncate cleaned up [ 130.700745][ T6312] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #2: block 5: comm syz.5.837: lblock 0 mapped to illegal pblock 5 (length 1) [ 130.739058][ T6312] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.837: error -117 reading directory block [ 130.934275][ T6343] loop5: p2 p3 p7 [ 130.973359][ T3001] loop5: p2 p3 p7 [ 131.005748][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 131.022334][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 131.037147][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 131.046764][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 131.047574][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 131.101655][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 131.108650][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 131.124482][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 132.281753][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.288752][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 132.291443][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.313061][ T6366] 9p: Bad value for 'wfdno' [ 132.319301][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 132.334019][ T6368] 9p: Bad value for 'wfdno' [ 132.341321][ T6368] set_capacity_and_notify: 3 callbacks suppressed [ 132.341336][ T6368] loop5: detected capacity change from 0 to 512 [ 132.355492][ T6366] loop0: detected capacity change from 0 to 512 [ 132.380977][ T6368] EXT4-fs (loop5): 1 orphan inode deleted [ 132.460057][ T6366] EXT4-fs (loop0): 1 orphan inode deleted [ 132.583175][ T6379] loop4: detected capacity change from 0 to 512 [ 132.606147][ T6379] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.861: invalid indirect mapped block 4294967295 (level 1) [ 132.625086][ T6379] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 132.625302][ T6379] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.861: invalid indirect mapped block 4294967295 (level 1) [ 132.634523][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 132.634546][ C1] EXT4-fs (loop4): initial error at time 145: ext4_free_branches:1023: inode 11 [ 132.634593][ C1] EXT4-fs (loop4): last error at time 145: ext4_free_branches:1023: inode 11 [ 132.674467][ T6379] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 132.674708][ T6379] EXT4-fs (loop4): 2 truncates cleaned up [ 132.722149][ T6379] lo speed is unknown, defaulting to 1000 [ 132.817001][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 132.817019][ T28] audit: type=1326 audit(145.198:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.861440][ T28] audit: type=1326 audit(145.198:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.885746][ T28] audit: type=1326 audit(145.208:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.915687][ T28] audit: type=1326 audit(145.208:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.940280][ T28] audit: type=1326 audit(145.208:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.963657][ T28] audit: type=1326 audit(145.208:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 132.987328][ T28] audit: type=1326 audit(145.208:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 133.010716][ T28] audit: type=1326 audit(145.208:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 133.034174][ T28] audit: type=1326 audit(145.208:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 133.058159][ T28] audit: type=1326 audit(145.208:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 133.278280][ T3312] EXT4-fs unmount: 17 callbacks suppressed [ 133.278301][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.480541][ T6403] loop2: detected capacity change from 0 to 2048 [ 133.500490][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.665184][ T6410] loop1: detected capacity change from 0 to 512 [ 133.674814][ T6410] EXT4-fs: Ignoring removed nobh option [ 133.689370][ T6410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.709484][ T6410] EXT4-fs (loop1): 1 truncate cleaned up [ 133.715688][ T6410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.975439][ T6419] loop4: detected capacity change from 0 to 2048 [ 134.254155][ T6419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.340437][ T6425] loop5: detected capacity change from 0 to 1024 [ 134.396283][ T6425] EXT4-fs: test_dummy_encryption option not supported [ 134.522519][ T6370] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 134.552544][ T6370] EXT4-fs (loop2): Remounting filesystem read-only [ 134.664765][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.777599][ T6437] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 134.855561][ T6442] program syz.1.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.887501][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.007190][ T6449] loop0: detected capacity change from 0 to 512 [ 135.051900][ T6449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.096056][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 135.143117][ T12] EXT4-fs (loop4): Remounting filesystem read-only [ 135.160638][ T70] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 135.685491][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.695180][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.793261][ T6461] loop1: detected capacity change from 0 to 256 [ 135.831849][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 135.841520][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 136.035521][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 136.046045][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 136.075406][ T6475] lo speed is unknown, defaulting to 1000 [ 136.251711][ T6481] loop4: detected capacity change from 0 to 2048 [ 136.330969][ T6481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.608660][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 136.716684][ T6492] FAULT_INJECTION: forcing a failure. [ 136.716684][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.747306][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.1.897 Tainted: G W syzkaller #0 PREEMPT(full) [ 136.747342][ T6492] Tainted: [W]=WARN [ 136.747351][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.747447][ T6492] Call Trace: [ 136.747453][ T6492] [ 136.747529][ T6492] __dump_stack+0x1d/0x30 [ 136.747628][ T6492] dump_stack_lvl+0x95/0xd0 [ 136.747674][ T6492] dump_stack+0x15/0x1b [ 136.747698][ T6492] should_fail_ex+0x263/0x280 [ 136.747726][ T6492] should_fail+0xb/0x20 [ 136.747814][ T6492] should_fail_usercopy+0x1a/0x20 [ 136.747873][ T6492] _copy_from_user+0x1c/0xb0 [ 136.747908][ T6492] get_itimerspec64+0x102/0x1b0 [ 136.748009][ T6492] __x64_sys_timer_settime+0x9a/0x160 [ 136.748047][ T6492] x64_sys_call+0x284f/0x3020 [ 136.748117][ T6492] do_syscall_64+0x12c/0x370 [ 136.748191][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.748250][ T6492] RIP: 0033:0x7f270abbc819 [ 136.748268][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.748291][ T6492] RSP: 002b:00007f27095ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 136.748315][ T6492] RAX: ffffffffffffffda RBX: 00007f270ae36090 RCX: 00007f270abbc819 [ 136.748409][ T6492] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.748426][ T6492] RBP: 00007f27095ee090 R08: 0000000000000000 R09: 0000000000000000 [ 136.748442][ T6492] R10: 0000200000020800 R11: 0000000000000246 R12: 0000000000000001 [ 136.748459][ T6492] R13: 00007f270ae36128 R14: 00007f270ae36090 R15: 00007ffca63f6918 [ 136.748484][ T6492] [ 136.976347][ T6493] netlink: 'syz.2.898': attribute type 11 has an invalid length. [ 136.996598][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 137.211319][ T3566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set [ 137.250374][ T3566] EXT4-fs (loop4): Remounting filesystem read-only [ 137.263743][ T70] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 137.427807][ T6517] sctp: [Deprecated]: syz.0.908 (pid 6517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.427807][ T6517] Use struct sctp_sack_info instead [ 137.453002][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.604226][ T6524] set_capacity_and_notify: 2 callbacks suppressed [ 137.604245][ T6524] loop1: detected capacity change from 0 to 2048 [ 137.638990][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.704231][ T6532] loop4: detected capacity change from 0 to 128 [ 137.843514][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 137.843533][ T28] audit: type=1400 audit(150.228:666): avc: denied { write } for pid=6535 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.944135][ T6533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.909: bg 0: block 345: padding at end of block bitmap is not set [ 137.977491][ T6533] EXT4-fs (loop1): Remounting filesystem read-only [ 138.071243][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.135564][ T6542] loop2: detected capacity change from 0 to 128 [ 138.267530][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 138.277022][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 138.663086][ T6558] loop0: detected capacity change from 0 to 512 [ 138.827890][ T6560] netlink: 'syz.5.922': attribute type 10 has an invalid length. [ 138.852007][ T6560] veth1_macvtap: left promiscuous mode [ 139.018115][ T6563] loop4: detected capacity change from 0 to 128 [ 139.348902][ T6588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.403032][ T6588] loop4: detected capacity change from 0 to 512 [ 139.429608][ T6588] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 139.440296][ T28] audit: type=1400 audit(151.828:667): avc: denied { write } for pid=6566 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.521923][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 139.530934][ T28] audit: type=1400 audit(151.908:668): avc: denied { bind } for pid=6577 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.580059][ T28] audit: type=1400 audit(151.958:669): avc: denied { setopt } for pid=6577 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.769781][ T6593] loop0: detected capacity change from 0 to 2048 [ 139.803771][ T6593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.899568][ T6596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.932: bg 0: block 345: padding at end of block bitmap is not set [ 139.942434][ T6596] EXT4-fs (loop0): Remounting filesystem read-only [ 139.985378][ T4636] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 140.003276][ T6593] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.932: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 140.003276][ T6593] [ 140.062987][ T6601] loop1: detected capacity change from 0 to 1024 [ 140.078153][ T6601] EXT4-fs: test_dummy_encryption option not supported [ 140.100384][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.300014][ T6611] loop4: detected capacity change from 0 to 128 [ 140.324407][ T6613] loop0: detected capacity change from 0 to 512 [ 140.376518][ T6613] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.939: invalid indirect mapped block 4294967295 (level 1) [ 140.436509][ T6613] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.436733][ T6613] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.939: invalid indirect mapped block 4294967295 (level 1) [ 140.445965][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 140.445984][ C0] EXT4-fs (loop0): initial error at time 152: ext4_free_branches:1023: inode 11 [ 140.446037][ C0] EXT4-fs (loop0): last error at time 152: ext4_free_branches:1023: inode 11 [ 140.496124][ T6613] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.509506][ T6613] EXT4-fs (loop0): 2 truncates cleaned up [ 140.552612][ T6613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.612181][ T6613] lo speed is unknown, defaulting to 1000 [ 140.726908][ T6627] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 140.762824][ T6619] EXT4-fs (loop4): 1 orphan inode deleted [ 140.775830][ T6619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.800922][ T28] audit: type=1326 audit(153.188:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 140.885914][ T28] audit: type=1326 audit(153.188:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 140.919388][ T28] audit: type=1326 audit(153.188:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 140.942567][ T28] audit: type=1326 audit(153.188:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 140.968508][ T28] audit: type=1326 audit(153.188:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 141.009168][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.020391][ T28] audit: type=1326 audit(153.188:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e30ac819 code=0x7ffc0000 [ 141.244922][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.273433][ T6638] can0: slcan on ttyS3. [ 141.387400][ T6638] can0 (unregistered): slcan off ttyS3. [ 141.478450][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.696827][ T6667] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.946: bg 0: block 345: padding at end of block bitmap is not set [ 141.722311][ T6656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.772291][ T6667] EXT4-fs (loop0): Remounting filesystem read-only [ 141.780597][ T6669] lo speed is unknown, defaulting to 1000 [ 141.786644][ T310] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 141.919190][ T6677] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 141.929617][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.029867][ T6677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.949: bg 0: block 345: padding at end of block bitmap is not set [ 142.130348][ T6677] EXT4-fs (loop4): Remounting filesystem read-only [ 142.188827][ T4636] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 142.202974][ T6656] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #15: comm syz.4.949: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 142.202974][ T6656] [ 142.440023][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.860500][ T6732] set_capacity_and_notify: 3 callbacks suppressed [ 142.860522][ T6732] loop1: detected capacity change from 0 to 1024 [ 142.884416][ T6732] EXT4-fs: test_dummy_encryption option not supported [ 143.068932][ T6735] loop4: detected capacity change from 0 to 2048 [ 143.102929][ T6735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.154217][ T6735] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.966: bg 0: block 345: padding at end of block bitmap is not set [ 143.187456][ T6735] EXT4-fs (loop4): Remounting filesystem read-only [ 143.350245][ T6739] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 143.437945][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.609233][ T6747] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 143.779850][ T6754] loop0: detected capacity change from 0 to 1024 [ 143.830379][ T6754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.873541][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.192491][ T6758] netlink: 'syz.0.973': attribute type 2 has an invalid length. [ 144.222500][ T6758] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 144.548407][ T6775] loop2: detected capacity change from 0 to 128 [ 144.567284][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 144.567356][ T28] audit: type=1400 audit(156.878:815): avc: denied { bind } for pid=6771 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.834795][ T6788] loop4: detected capacity change from 0 to 512 [ 144.872161][ T6788] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.983: invalid block [ 144.890058][ T6788] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.890294][ T6788] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.983: invalid indirect mapped block 4294967295 (level 1) [ 144.899533][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 144.899556][ C1] EXT4-fs (loop4): initial error at time 157: ext4_get_branch:178: inode 11: block 4294967295 [ 144.899610][ C1] EXT4-fs (loop4): last error at time 157: ext4_get_branch:178: inode 11: block 4294967295 [ 144.952822][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 144.962624][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 144.981350][ T6788] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.983668][ T6788] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.983: invalid indirect mapped block 4294967295 (level 1) [ 145.010945][ T6788] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.011359][ T6788] EXT4-fs (loop4): 2 truncates cleaned up [ 145.026831][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.083782][ T6788] lo speed is unknown, defaulting to 1000 [ 145.309227][ T6809] FAULT_INJECTION: forcing a failure. [ 145.309227][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 145.338896][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.0.991 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.338932][ T6809] Tainted: [W]=WARN [ 145.339017][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.339034][ T6809] Call Trace: [ 145.339039][ T6809] [ 145.339046][ T6809] __dump_stack+0x1d/0x30 [ 145.339079][ T6809] dump_stack_lvl+0x95/0xd0 [ 145.339112][ T6809] dump_stack+0x15/0x1b [ 145.339133][ T6809] should_fail_ex+0x263/0x280 [ 145.339169][ T6809] should_failslab+0x8c/0xb0 [ 145.339197][ T6809] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 145.339271][ T6809] ? __alloc_skb+0x2d6/0x690 [ 145.339306][ T6809] __alloc_skb+0x2d6/0x690 [ 145.339343][ T6809] ? __alloc_skb+0x200/0x690 [ 145.339439][ T6809] netlink_ack+0xfd/0x500 [ 145.339474][ T6809] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 145.339559][ T6809] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 145.339598][ T6809] ? __pfx_nl802154_post_doit+0x10/0x10 [ 145.339628][ T6809] netlink_rcv_skb+0x192/0x220 [ 145.339704][ T6809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.339743][ T6809] genl_rcv+0x28/0x40 [ 145.339770][ T6809] netlink_unicast+0x5c0/0x690 [ 145.339876][ T6809] netlink_sendmsg+0x5c8/0x6f0 [ 145.339901][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.339996][ T6809] ____sys_sendmsg+0x563/0x5b0 [ 145.340024][ T6809] ___sys_sendmsg+0x195/0x1e0 [ 145.340061][ T6809] __x64_sys_sendmsg+0xd4/0x160 [ 145.340147][ T6809] x64_sys_call+0x194c/0x3020 [ 145.340184][ T6809] do_syscall_64+0x12c/0x370 [ 145.340227][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.340253][ T6809] RIP: 0033:0x7f01e30ac819 [ 145.340296][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.340316][ T6809] RSP: 002b:00007f01e1b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.340342][ T6809] RAX: ffffffffffffffda RBX: 00007f01e3325fa0 RCX: 00007f01e30ac819 [ 145.340361][ T6809] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 145.340378][ T6809] RBP: 00007f01e1b07090 R08: 0000000000000000 R09: 0000000000000000 [ 145.340394][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.340473][ T6809] R13: 00007f01e3326038 R14: 00007f01e3325fa0 R15: 00007ffc1cf51c08 [ 145.340495][ T6809] [ 145.616945][ T6811] loop5: detected capacity change from 0 to 128 [ 145.625349][ T6813] loop0: detected capacity change from 0 to 1024 [ 145.647177][ T6811] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.663214][ T6813] EXT4-fs: test_dummy_encryption option not supported [ 145.694841][ T6816] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 145.698143][ T28] audit: type=1326 audit(158.078:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.741091][ T6811] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.759433][ T28] audit: type=1326 audit(158.078:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.759571][ T28] audit: type=1326 audit(158.078:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.806437][ T28] audit: type=1326 audit(158.078:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.836242][ T6811] syzkaller0: entered promiscuous mode [ 145.847328][ T6811] syzkaller0: entered allmulticast mode [ 145.866834][ T28] audit: type=1326 audit(158.078:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.890753][ T28] audit: type=1326 audit(158.078:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.920735][ T28] audit: type=1326 audit(158.078:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.945179][ T28] audit: type=1326 audit(158.078:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 145.968640][ T28] audit: type=1326 audit(158.078:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b7b6c819 code=0x7ffc0000 [ 146.007902][ T6820] loop1: detected capacity change from 0 to 1024 [ 146.019953][ T6823] loop2: detected capacity change from 0 to 1024 [ 146.031937][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.071081][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.089248][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.108320][ T6823] FAULT_INJECTION: forcing a failure. [ 146.108320][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 146.121155][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.2.997 Tainted: G W syzkaller #0 PREEMPT(full) [ 146.121191][ T6823] Tainted: [W]=WARN [ 146.121199][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.121234][ T6823] Call Trace: [ 146.121242][ T6823] [ 146.121251][ T6823] __dump_stack+0x1d/0x30 [ 146.121285][ T6823] dump_stack_lvl+0x95/0xd0 [ 146.121315][ T6823] dump_stack+0x15/0x1b [ 146.121388][ T6823] should_fail_ex+0x263/0x280 [ 146.121421][ T6823] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 146.121454][ T6823] should_failslab+0x8c/0xb0 [ 146.121515][ T6823] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 146.121541][ T6823] ? ext4_alloc_inode+0x38/0x320 [ 146.121570][ T6823] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 146.121671][ T6823] ext4_alloc_inode+0x38/0x320 [ 146.121699][ T6823] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 146.121727][ T6823] alloc_inode+0x40/0x170 [ 146.121804][ T6823] iget_locked+0x101/0x440 [ 146.121839][ T6823] __ext4_iget+0x152/0x23f0 [ 146.121869][ T6823] ? kmem_cache_alloc_lru_noprof+0x1eb/0x410 [ 146.121899][ T6823] ? __d_alloc+0x37/0x340 [ 146.121991][ T6823] ext4_lookup+0x173/0x3a0 [ 146.122025][ T6823] lookup_one_qstr_excl+0xcb/0x250 [ 146.122069][ T6823] __start_renaming+0xff/0x2a0 [ 146.122107][ T6823] filename_renameat2+0x2d0/0x6e0 [ 146.122211][ T6823] __se_sys_renameat2+0x4f/0x1c0 [ 146.122240][ T6823] __x64_sys_renameat2+0x67/0x80 [ 146.122265][ T6823] x64_sys_call+0x2a12/0x3020 [ 146.122292][ T6823] do_syscall_64+0x12c/0x370 [ 146.122383][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.122423][ T6823] RIP: 0033:0x7f699521c819 [ 146.122441][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.122463][ T6823] RSP: 002b:00007f6993c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 146.122497][ T6823] RAX: ffffffffffffffda RBX: 00007f6995495fa0 RCX: 00007f699521c819 [ 146.122550][ T6823] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 146.122567][ T6823] RBP: 00007f6993c6f090 R08: 0000000000000002 R09: 0000000000000000 [ 146.122585][ T6823] R10: 0000200000001240 R11: 0000000000000246 R12: 0000000000000002 [ 146.122601][ T6823] R13: 00007f6995496038 R14: 00007f6995495fa0 R15: 00007fff43ac9138 [ 146.122623][ T6823] [ 146.507285][ T6833] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 146.538130][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.569861][ T4128] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.618152][ T6370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.679775][ T6370] EXT4-fs (loop1): Remounting filesystem read-only [ 147.380174][ T6851] loop2: detected capacity change from 0 to 128 [ 147.823457][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.142738][ T6867] loop0: detected capacity change from 0 to 128 [ 148.167896][ T6867] EXT4-fs: Ignoring removed nobh option [ 148.194894][ T6867] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.223731][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 148.234688][ T6876] loop4: detected capacity change from 0 to 512 [ 148.254582][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 148.266427][ T6876] EXT4-fs: Ignoring removed nobh option [ 148.303931][ T6876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.325614][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 148.325644][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 148.372382][ T6876] EXT4-fs (loop4): 1 truncate cleaned up [ 148.391268][ T6876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.415580][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.474779][ T6883] loop0: detected capacity change from 0 to 512 [ 148.606379][ T6883] EXT4-fs: Ignoring removed nobh option [ 148.616424][ T6883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.629594][ T6883] EXT4-fs (loop0): 1 truncate cleaned up [ 148.635721][ T6883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.182242][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.288260][ T6895] loop1: detected capacity change from 0 to 512 [ 149.305229][ T6895] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1019: invalid block [ 149.318943][ T6895] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.319094][ T6895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1019: invalid indirect mapped block 4294967295 (level 1) [ 149.328292][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 149.328307][ C1] EXT4-fs (loop1): initial error at time 167: ext4_get_branch:178: inode 11: block 4294967295 [ 149.328368][ C1] EXT4-fs (loop1): last error at time 167: ext4_get_branch:178: inode 11: block 4294967295 [ 149.369566][ T6895] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.377326][ T6895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1019: invalid indirect mapped block 4294967295 (level 1) [ 149.426461][ T6895] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.426815][ T6895] EXT4-fs (loop1): 2 truncates cleaned up [ 149.465782][ T6895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.913145][ T6895] lo speed is unknown, defaulting to 1000 [ 149.989898][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.189000][ T6919] loop4: detected capacity change from 0 to 512 [ 150.215107][ T6919] EXT4-fs: Ignoring removed nobh option [ 150.221880][ T6919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.240404][ T6919] EXT4-fs (loop4): 1 truncate cleaned up [ 150.246830][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.392680][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 150.392697][ T28] audit: type=1326 audit(168.781:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 150.558118][ T28] audit: type=1326 audit(168.811:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 150.887838][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.919107][ T28] audit: type=1326 audit(168.831:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 150.943899][ T28] audit: type=1326 audit(168.831:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 150.967169][ T28] audit: type=1326 audit(168.831:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 151.002739][ T28] audit: type=1326 audit(168.831:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 151.055378][ T28] audit: type=1326 audit(168.831:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 151.081224][ T28] audit: type=1326 audit(168.831:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 151.105144][ T28] audit: type=1326 audit(168.831:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f270abbc819 code=0x7ffc0000 [ 151.128795][ T6946] loop5: detected capacity change from 0 to 512 [ 151.208419][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.247598][ T6946] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1033: invalid block [ 151.339521][ T6946] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.339767][ T6946] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1033: invalid indirect mapped block 4294967295 (level 1) [ 151.349114][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 151.349140][ C0] EXT4-fs (loop5): initial error at time 169: ext4_get_branch:178: inode 11: block 4294967295 [ 151.349184][ C0] EXT4-fs (loop5): last error at time 169: ext4_get_branch:178: inode 11: block 4294967295 [ 151.401961][ T6946] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.403329][ T6946] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1033: invalid indirect mapped block 4294967295 (level 1) [ 151.426905][ T6946] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.427531][ T6946] EXT4-fs (loop5): 2 truncates cleaned up [ 151.457269][ T28] audit: type=1400 audit(169.841:847): avc: denied { setcheckreqprot } for pid=6950 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.460571][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.598874][ T6946] lo speed is unknown, defaulting to 1000 [ 151.748006][ T6986] loop4: detected capacity change from 0 to 128 [ 151.935110][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1045'. [ 152.266064][ T6997] loop2: detected capacity change from 0 to 512 [ 152.377945][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.511149][ T7030] loop0: detected capacity change from 0 to 512 [ 152.549302][ T7030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.622046][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.152599][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 153.162588][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 153.252359][ T7052] loop1: detected capacity change from 0 to 2048 [ 153.292681][ T7052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.317505][ T7052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1064: bg 0: block 345: padding at end of block bitmap is not set [ 153.349723][ T7052] EXT4-fs (loop1): Remounting filesystem read-only [ 153.374197][ T7058] loop5: detected capacity change from 0 to 2048 [ 153.391253][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.433003][ T7058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.518170][ T7069] ================================================================== [ 153.526331][ T7069] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 153.533596][ T7069] [ 153.535949][ T7069] read-write to 0xffff88811a5bf468 of 8 bytes by task 7058 on cpu 1: [ 153.544044][ T7069] __xa_set_mark+0xd2/0x1a0 [ 153.548593][ T7069] __folio_mark_dirty+0x383/0x4a0 [ 153.553671][ T7069] mark_buffer_dirty+0x120/0x220 [ 153.553707][ T7069] folio_zero_new_buffers+0x28c/0x2e0 [ 153.553741][ T7069] block_write_end+0x200/0x210 [ 153.553772][ T7069] ext4_da_write_end+0x1d3/0x810 [ 153.573915][ T7069] generic_perform_write+0x311/0x490 [ 153.579333][ T7069] ext4_buffered_write_iter+0x1ee/0x3c0 [ 153.584903][ T7069] ext4_file_write_iter+0x380/0xfa0 [ 153.590120][ T7069] vfs_write+0x5a6/0x9f0 [ 153.594387][ T7069] ksys_write+0xdc/0x1a0 [ 153.598827][ T7069] __x64_sys_write+0x40/0x50 [ 153.603533][ T7069] x64_sys_call+0x27e1/0x3020 [ 153.608266][ T7069] do_syscall_64+0x12c/0x370 [ 153.612893][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.618816][ T7069] [ 153.621156][ T7069] read to 0xffff88811a5bf468 of 8 bytes by task 7069 on cpu 0: [ 153.628730][ T7069] xas_find_marked+0x213/0x620 [ 153.633554][ T7069] filemap_get_folios_tag+0xfa/0x510 [ 153.638879][ T7069] mpage_prepare_extent_to_map+0x328/0xc50 [ 153.644720][ T7069] ext4_do_writepages+0xa07/0x2840 [ 153.649869][ T7069] ext4_writepages+0x18f/0x320 [ 153.654668][ T7069] do_writepages+0x1c6/0x310 [ 153.659291][ T7069] filemap_flush_range+0x105/0x140 [ 153.664425][ T7069] generic_fadvise+0x338/0x460 [ 153.669223][ T7069] __x64_sys_fadvise64+0xcb/0x110 [ 153.674282][ T7069] x64_sys_call+0x242b/0x3020 [ 153.678990][ T7069] do_syscall_64+0x12c/0x370 [ 153.683608][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.689556][ T7069] [ 153.691909][ T7069] value changed: 0x000000000001ffff -> 0x00000000000fffff [ 153.699032][ T7069] [ 153.701367][ T7069] Reported by Kernel Concurrency Sanitizer on: [ 153.707533][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.5.1066 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.718407][ T7069] Tainted: [W]=WARN [ 153.722255][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.732338][ T7069] ================================================================== [ 153.765991][ T7069] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1066: bg 0: block 345: padding at end of block bitmap is not set [ 153.781488][ T7069] EXT4-fs (loop5): Remounting filesystem read-only [ 153.788815][ T3575] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 153.859719][ T3953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.