last executing test programs: 2.961008062s ago: executing program 4 (id=462): ioperm(0x4, 0x1, 0x4000000000000020) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FITRIM(r3, 0x40086604, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x48960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x110081, 0x2000000000000000, 0x4}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.547281779s ago: executing program 4 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 2.46519516s ago: executing program 4 (id=468): r0 = geteuid() r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a00)="b77831ba5991c21ae9214bc4bf82066a336c77587a2421f98c794dd7f4553a974218a0dc6f61165e7f086c730b688c82eaf04f18fb92751740bb2aa1514002ce8427d1b24fb57335e8a9949c9c97401b3c3b510fe9969f8adfc3cf572c1d131555041b984db2263c22e60e34f27a8c1bd6e660ce9b1ebe81c7283e042f1c308021f604", 0x83}], 0x1, &(0x7f0000000c00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1, 0xffffffffffffffff]}}], 0x70, 0x40801}, 0x20008980) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x10000}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r11) 2.435131491s ago: executing program 3 (id=469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000f03ea900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x5000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) 2.360963222s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 2.354499842s ago: executing program 4 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r4, &(0x7f00000002c0)=""/113, 0x71) 2.335787882s ago: executing program 3 (id=473): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = io_uring_setup(0x288, &(0x7f00000003c0)={0x0, 0xd1e2, 0x20, 0x2, 0x1f4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000cd9000/0x4000)=nil, 0x4000, 0x1d, 0x20010, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000300)={0x6, 0x5, 0x4b2, 0xf97, 0x16, "88a218447d569d77"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x18) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000000)='2', 0x1, 0x4fed0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.992361158s ago: executing program 3 (id=475): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB='cruft,dmode=0x00000000000006ad,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6a6f6c6965742c756e686964652c686964652c6e6f726f636b2c7362736563746f723d3078303030303030303030303030303030302c6f76657272696465726f636b7065726d2c73686f776173736f632c6d61703d6e6f726d616c2c6d61703d61636f726e2c73657373696f6e3d3078303030303030303030303030302035372c0004471220d6296e78a934fe879e9ef2df1af65c353b3e824188dcbb4556f884556e48d1b0470ebea0893b1ba0be1e6304e778d4e644a840b763c3d1234f3dfdde31832481ca597595526dc7d7788c2bff6e"], 0x4, 0x3f8, &(0x7f0000000b00)="$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") sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$phonet(0x23, 0x2, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="02030007ffff00000000", 0xa, 0x4000050, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@nolazytime}, {@i_version}, {@data_err_ignore}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise}]}, 0x21, 0x44d, &(0x7f0000001500)="$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") sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="900000001c001f4d154a8173932798ff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0020c5b068d0bf46d323456536e16466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd258ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390000000", 0x90, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000040)=0x2eb4, 0x2) 1.692046252s ago: executing program 3 (id=478): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7}, 0x18) socketpair(0x1, 0x20000000000001, 0xfffffffe, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x10000}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r11) 1.419637647s ago: executing program 1 (id=484): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000040000000eec893f2b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) socket$kcm(0x2, 0x3, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) 1.418945547s ago: executing program 4 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r3, 0x0, 0x0) 1.324041448s ago: executing program 1 (id=486): ioperm(0x4, 0x1, 0x4000000000000020) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FITRIM(r3, 0x40086604, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x48960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x110081, 0x2000000000000000, 0x4}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) 1.321766608s ago: executing program 0 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000f03ea900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x5000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) 1.166590931s ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005c2d28e4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x1100, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 1.035624003s ago: executing program 0 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 826.446946ms ago: executing program 2 (id=490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x103080, 0xd) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000017c0)=0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r5) r6 = gettid() fstat(r2, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/consoles\x00', 0x0, 0x0) r10 = socket$inet(0x2, 0x2000000080002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@local, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x2, @in6=@dev, 0x4, 0x0, 0x0, 0xf}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x2, @in6=@empty, 0x0, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000023c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) r13 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r13, 0x1, 0xffff4000, 0x1, 0x0, 0x0) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000039c0), 0x10000, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000051c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000080)="c7cee00f1b401a71dc7c34690df91668873211dbf335967859d33122d21f1819ed70cd65c0467f95d4aea4777c8f25d7bf1d3942a8ccf37564eb6c5937ff9ec1db0a9a03d5de82d7aea605c4e60f53a064042fe98b5da0bf498780c77d83346d17b014f49bc483e136ccf0e266e675e82227b0bc4043a279562627aa91c8c655caaead02375081b6", 0x88}, {&(0x7f0000000200)="7c48a4abf9c39c51d9a905bad222373ad780da886eed59bf6758d2305365cc88340362d674b4db244458049413c57b52ae1566c0a82df4f636fbced8a99f1d9a163c81225de9701d8b5cc76396f4c25524b70d52784cea7d52c052498b79355b777e7efc6d17e1de8c50f4a04a5604e029fd0b78451f86d6970bf84c53d0cb89a9b55efd510c6a12eb0e496c3854ba81a9e199351f24", 0x96}, {&(0x7f0000000140)="ef1fe065f3f958e4c69f5995d6db21464941eb55004ee265aaf9f6e23ca15281b5c79ab7cd46a73dd4c3800e42860fbf1dd7343ac3", 0x35}, {&(0x7f00000002c0)="2a1ec2e3a780de696fbcb6cea52863132f4b571f9fb6562806908e10e1aefb778dcf93ccf9e8409dfc7f9005b6e8028304b63284d71a9299326ad75cf1f6d0c15632e18d3300f70f19575114d4011077948919d7a27b7fa99546275e7abe21", 0x5f}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="0cea577d092bde160472669cbf9f910fa12121f3a924031fe5e0a193aadb5060665a0682020ab75514fe89f8e505360273a2dc300ba572480009d4daac62e9e2335aabe693a78e1d75fe43183026cdee83973202ffd6e892622056b21fc1ec36bd35e1152b9cbde73e02adf735b129b467cdaab747eebe5a486dc9985ba41b6fc980f65e2ff25488db1894c1b13468d8fe0307c727ec7494537ae231d722d6b4f7cf910b236a89f65adf321fc685232e019a", 0xb2}], 0x6, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r2, r0, r0]}}], 0x28, 0x40}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)="90de37370a98b75513193cd63fbd4fece0a69812075dda4c19f9eeb33bb20202aa55d692141ac88a3f2461be65dca39b694c59ae3e1c4a1486445d8dfa4f55a520a61a8b6d3c8aa410344a59059f77de7097e9dd39fed469f3b2291987a8", 0x5e}, {&(0x7f0000001580)="241eca2ccddd19604ef5ef96", 0xc}, {&(0x7f00000015c0)="b89887542371a87139cc047beab03aec69a35f7e9d2db39ea138afd1b75c1948ca9a7f1cb421c5801627e197a3e7cda76a6c1c34320e5299cd1ac1c46e09b2ad8788475606ce383be8d37707d568310191f9758c7d8dad3c40cbf8065c1456b035923b7e8a3257bad10573dea21a38a3720579662ddb36f12951163480060d8f", 0x80}, {&(0x7f0000001640)="4a9839ff06c9257937e6bb3b91b0338d90de2eaf0865bcab8afb99", 0x1b}, {&(0x7f0000001680)="c0c8d69b1e17bc322b5822564b33ae770aa23b5ecc6eb110ca4a09ad33a54bb8a0d268ab74335d02cd6bc6b5d24a8c011a486658e941ca0a3983a4050c8763170c5326ab1fff72d7b7bcebd6eeb67c0abaf55160657e56eb06c0b074560d7767bf310921aad609f77653685633a86e12c73aa975161bcd7559b2e41d7e5b153dc909ba851f2fbe55f74cae5ab0411f7ecc0d22f9e42d6bf35e28eb6c7d932f914d9f76df", 0xa4}], 0x5, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [r9, r0, r10, r2, 0xffffffffffffffff, r1, r0]}}], 0x70, 0x40000}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001a40)="bd07038f69d14c4fb7dc5a271e4a19a22229f7ddafb7782fe1ac14afc3ae770b2b711dbb3c188c81a81a2ec386a7d1ee9c0337710be2a03a81e8bcd57eefed", 0x3f}, {&(0x7f0000001a80)="479720fa5f85c0c651a7693c1ebeac993f3dccae133d654fe9e6ca05eb1859b185e3c03cfb280cb3e758deb85d7a6fa80b164b16ed62e9bf22cc1c4b3ee01a5c09080a017abb75e84e3b18acf54d9691a605f00a6dfe190a31e8e058746174ee1e823aa39fd8ff92b0403ac101cb425ff155be6531a5fab900ac5eb50865c270bbe0b13e559f", 0x86}, {&(0x7f0000001b40)="f5e65e5990bc15b3eb11375a2d3211cb6e8ff8c81eb0273cfc55ddbdfc113434ac5d2bae2e2747dec2abd2fb", 0x2c}, {&(0x7f0000001b80)="9e2272ce47eb87ea2bbd66f96f795dd62bc3b9edbdd0e949c7917327547c3fb5c49a552a1097ffb9f927d2b9ad8f0614e348390a426c0446b47bf5d70718db8a24e943d022d602ee7e96bd3e6c898d7d92e6b63dbed3aacca5e6c1edf3b7c8f704de1d350f6a5fbe073df905257b80d2aa5a79a77be0a7f9028f57ad53d2ce78ff0a0467119a9807be35fa3fe47ee6870eb9be33926a95f973f0b69b5ef7ac9277369ac103759023c04242edbe4334a86c", 0xb1}, {&(0x7f0000001d00)="d990929d6ecc8fc0a9161a8665c20844ac79977e3fc6b533a217fd52ffd276207e148d52e00d64fce9b6a18ca55f40d0264213a0eed135bc8c46a31bdcf8418728f033ccb7a007dbd2bb569ef55dc64ff698067566e7d975d59d29a805b173b6be4c53cfe835d9a85db860a7df0f33e9f50704dab31a645280de70ed43d435f7200386d87b95cc50f472bbc6eea9105674298847af2de765ab4057bef2cece49e3bf765bf22daaecfe486ac2375ed2937d7cdaae5b0eb70e3daa94221e232937d83194569bb6f57235", 0xc9}, {&(0x7f0000001e00)="816e09f1b2a651c4b43fa7e32ffbedfd3b86b2d655ae9dd078c9179b796566a25c8da9ab4c54f1dc9093ea16201ebdfd39e172b87faf0fd0618cf1552b23931e8e37ec01e2324118802f098ae9b5c901de437a65bf1b22a3958adca2958bd71f1e1c1db5009970965aea0fdfb75e9ef0c7bd0b351dbdd3b9a6dedca3bba550d503bd51b6e99cdf524ef143a7b4d14d07de301ec81a", 0x95}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}], 0x20, 0x24008004}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f80)="ef734cd4be859b71660a5a00e29ec1f1f5e1649d16346aaaa219582719655b1f9686f04b8f6466c5a240cf360b8a7c5f58bc744d3aced8ea8d7e6d70a2013c1b0cdebb784b5eb7ed0640a916affc0b8611e77f56d4ac579c1b663608842507e3f98813ca687ff62096c35280decee815c2dc57178123de6e160e5a9217d1abf63d7908de68e1892c43a8d8dd5c5db82ec90be3aa8cff5723e0d890cac1217c13e5d9dd4fb01f", 0xa6}, {&(0x7f0000002040)="8611856dd763f11626627e0fabaee194fce8cc9ae7f04ebcbd19872b467c394e1fdeb2edbdce58b2c9e674cb41b2b737bd8058ef22192257fbcc84e590a8d39c1c15965ce5e9723eebdd9595cf8d530b8afb82de0524cecd359d5af5ef499de263dcac4445a4a49c4d399bcb578b11d74ee4d0d580c76af7a6551b5b62873a93d7f20084d2c602fea5bada4197694179bca421b7eafb6aa32df26b6e3e54b166224abe6515bd020ab5ee11ed74e6ff9d34270fc1f053c978e0b6c83a9423b38e49102306cc8fc91a575ba747e459a47ca57a60bd89620a34e5068eefb3b73509cc03cc", 0xe3}], 0x2, &(0x7f0000002180)=[@rights={{0x20, 0x1, 0x1, [r10, r2, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002280)}, {&(0x7f00000022c0)="cfea7ea7976dd3ce0b6316c405a744195de673ddff2cfae17422733b3bbae0a8f67036469f6d1b82b3a469ea13f9fe4e12b83bf51c5a4c29cdd10a8469082a5d8995aa2793c9ac2ccbd9886b566255f013de9ea806f03508864c4b3f61307f22ce8ce3c702ea4ece706827cea50aa61467898e561d7ad91490446ea432b2dac13df99709e4c2874aadff2773323255c306046a9dc956b2eea05610f0ca49f4220c10ab88e0b3b3fd8643d5cad4f7b558a262347a278f3c703eb94fd3ea2e", 0xbe}], 0x2, &(0x7f00000024c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r4}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r9, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r12, r2]}}], 0xa8, 0x48080}}, {{&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000002600)="f03f5819394134574162b29cabd8cc792ac4c0fe1e053523f37eb2cda08804340e759cc68a12e21ccc8fa9d35c38094a49e0950a8efce99405cd74aa01c70a4b7fd912b4aca31d25cef84f4a420dee0deac1a59987b9d63ceee5e23b4fd8a6213bf934ca5075bab59699950fec6dcecb54610b49b9f4dad4dfcb1f470201f65b05f5fd8f96fd97f640974714d5c96ab989e4110ee43fe085f9bb03baeee6353b73df72159ed3d220ae1c9a7dca9bcab425efcd0f59e3c9168a36c076", 0xbc}, {&(0x7f00000026c0)="c4e7588f7d93ad47cc4620e28089ff43b9b8af0b313bb6650eb08a255dd01a1c3ceee3ff4cbacf2baefbf85e6c3d14ea678c614969f45c6f147e72e061d8e9207da785a03c037cbb0f009e4c8ca92e871a97b17c51b14225f7df8c10b1c31f0afecfeecbc569bcce8cd5e21e09dd91534d293081ad7112f296cfca15eda8260c01ffa182f73e092378d1750b2efad5b138738d67ccac2044f6bf6505cc95601b163f252a7eaad1990f961c920f82c4736e91f4bbd00742146b3d0f6223072fae4861f45da05aeb87cd2a", 0xca}, {&(0x7f00000027c0)="52f67cd8bb4d6e31638b435fd3f9475c042fff8edb22a59bd58e619f9c6417bef060d1fd2805a7590ea6ae728d645cd6975e69f899d48394fbbec06d5e1ade5500d807a37f0fad52675efdb95d36a12647836569fbdc15a37a52dc52060862478d6549e2511d0ef520ae8266d4564fbdfb3759313e2b84e6929dcc222150580718a4d229fa6cde59677576b224af1dc7655abcda9c33420b23f746825063d4bf779eb8fdea3d0af2ea2782be63f6d5f392149f91c70541161a9b429605c87b2f681b287e39b216a895d430ad3419b096836292a277cba7a10de07786597102b0a4", 0xe1}, {&(0x7f00000028c0)="db00244983e0f48c8e49e9329886f982e32eba45e2ea5ee0fae6e3be5b1079f728f7ffec9c43808c9a9e52f2a85c42fcb2cd021ad580b012582244896af23ce95081bb2d54ab", 0x46}, {&(0x7f0000002940)="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", 0x1000}], 0x5, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r8}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r0, r12, 0xffffffffffffffff, r9]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r10, r14, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}, @rights={{0x1c, 0x1, 0x1, [r15, r2, r2]}}], 0xd8, 0x8080}}, {{&(0x7f0000003b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003b80)="c32105274998ae2ccf4b38b2f880e06a44e84693e414909b2496bcc04ed30116e406f8f3587a3c260c3b477e932944ed4671fce64ec86953d512f1774a", 0x3d}, {&(0x7f0000003bc0)="953ed6ab5505669dd185f5640a6e2ed16c1df49cc3f7e487858440393d2b299ffcd0f5af70", 0x25}, {&(0x7f0000003c00)="6e6f81985d174aacaf405ddd52df40a3b13e85355a1d622e0160d2555200a1b5ef7d012cb5be382ca0ba1768457d32f1f5541a7b04e37aa923572e8ff2a79f7373d0bcc444b523b97103ec88a97c331a390c299b501fdc6975bb2159b9af165fbd0a89e4a2d823cfaf92c5f1a3aced5d9892c84041025f521ce793cb9351fd1ffdf26475d8980f187b45c10ec3d9625bba65792d0813d964c778ea879545dd8ee7e7c2e5379e4c2d4e4b7bebe206dbcc31f8d0e41a55066ce0ede0986d2052b28535e57a931e6a8b5144c67a00dfd874f5dc3552ccae165829adb03f2c46bede26c023", 0xe3}, {&(0x7f0000003d00)="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", 0x1000}, {&(0x7f0000004d00)="bf84d0fa4b99012f166e51f54dee469df44b5057ddcb23f441e76943593cc41647d6fba0145a9ed66a6961fef5dc15", 0x2f}, {&(0x7f0000004d40)="ec75005dbe2544b6b1a88055d8b38068f9009a222516d937b3ddbaf7727cdde087f50a9cb219537660c75bea0ceab6ea8d5b8b50a874f930e3a6f220d952f479e7ca6c67c9332ce2c86b34a33dbcc5c412ce0376d662a754978d45082d73a9999e3d696b6a2a", 0x66}, {&(0x7f0000004dc0)}], 0x7, &(0x7f0000004e80)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r14, r10, 0xffffffffffffffff, r12, r9]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000004f00)="dee785809b317b37f46968028c46939973403e3d036a5d2a2930", 0x1a}], 0x1, &(0x7f0000005080)=[@rights={{0x20, 0x1, 0x1, [r1, r15, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r16}}}, @rights={{0x30, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, r1, r14, 0xffffffffffffffff, r9, r2]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r13, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r15]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110, 0x4000844}}], 0x8, 0x0) 815.035066ms ago: executing program 3 (id=491): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000002030104000000000000000100000001080001"], 0x1c}}, 0x99ef5ed2f81131a) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) syz_open_dev$sg(0x0, 0x0, 0xe1002) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00', 0x0, 0x821}, 0x2c) 809.925237ms ago: executing program 1 (id=492): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3M2AlSvvX5Ji2sk47Yjj77fp4d577j0vr00WJed9+dp0fPNOFicPH0SeZ9E5iIN4lMVudKL1XXQDAHh+PEopfk9VmKXahpndzpUWBgBcmfrz/4k++AGA/7iPP/3sw8Hh4Y2PiiKPV/r3Z8MsIqb3Z8N6fnA7vo5J3Irr0Y/TiLRQx+9/cHgjukVpN96czmfDMnP6xc/N/oPfIqr8/ejH7vr8/aK2+JdD+XO4HS9GEYPb222p/Xh5ff7bbf7y/HkMe/HWGyv170U/fvkq7sQkbkaZu8z/dr8o3kvfP/zm8/KYMj/rxHCnWldJKfJnelcAAAAAAAAAAAAAAAAAAAAAAHje7RVFVrfvqfr3lENV/5zZcOu0mt8rWqv9feZtf6Cs3ajuD5SiadEzT/FD21/nelEUqVm4zO/Gq10PFgAAAAAAAAAAAAAAAAAAAIDS0b0H10aTya27R/eOx08dtN0A2q/1/9N9DlZGXo/j8Wjr/A13Nj9rtdtAWeuFi6PbjUt6WdYHJ4uRF8p6Lv2InViMfBJ10N6YSz3rpXfrTY/Ho6KZal/k8Sh73Fl5e+N+XJ3qxWLNH6n2hIWl6lfiNJ29p/mi1LNZvQ12LnMft6Z3be3UnymlzYp/59f6HjUjWdViY7NL3m6CtRdYBnk0V1H/4ZdTP52/4blvGVtP/aYDAAAAAAAAAAAAAAAAAACstfzS75rJkwtTO1dWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Y8vn/7dBHhFnR/4WzJvki9Y0QS/uHv3LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wF8BAAD//4oXU2s=") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="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", 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0xe065) 752.561317ms ago: executing program 2 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 631.914889ms ago: executing program 3 (id=494): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0, 0x0, 0x6}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x20, 0x4000, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 533.918931ms ago: executing program 4 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="259e", @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0) 533.509841ms ago: executing program 2 (id=496): syz_emit_ethernet(0x55, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1f, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x0, "36dad83aea"}]}}}}}}, 0x0) 505.963551ms ago: executing program 1 (id=497): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 488.641172ms ago: executing program 2 (id=498): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7}, 0x18) socketpair(0x1, 0x20000000000001, 0xfffffffe, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x10000}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r11) kernel console output (not intermixed with test programs): ounton } for pid=3494 comm="syz.1.2" path="/0/file1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.815319][ T29] audit: type=1400 audit(1750091165.424:108): avc: denied { create } for pid=3486 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 38.846828][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.863578][ T3504] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.989354][ T29] audit: type=1400 audit(1750091165.524:109): avc: denied { add_name } for pid=3490 comm="syz.0.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.989392][ T29] audit: type=1400 audit(1750091165.524:110): avc: denied { create } for pid=3490 comm="syz.0.7" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.989495][ T29] audit: type=1400 audit(1750091165.524:111): avc: denied { read write } for pid=3490 comm="syz.0.7" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.044741][ T3512] geneve2: entered promiscuous mode [ 39.044759][ T3512] geneve2: entered allmulticast mode [ 39.570280][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.581475][ T3520] loop3: detected capacity change from 0 to 512 [ 39.581998][ T3520] ======================================================= [ 39.581998][ T3520] WARNING: The mand mount option has been deprecated and [ 39.581998][ T3520] and is ignored by this kernel. Remove the mand [ 39.581998][ T3520] option from the mount to silence this warning. [ 39.581998][ T3520] ======================================================= [ 39.582130][ T3520] EXT4-fs: dax option not supported [ 39.589648][ T3520] loop3: detected capacity change from 0 to 512 [ 39.591360][ T3520] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.603179][ T3517] geneve2: entered promiscuous mode [ 39.603261][ T3517] geneve2: entered allmulticast mode [ 39.604932][ T3520] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 39.604981][ T3520] System zones: 0-2, 18-18, 34-34 [ 39.605808][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.605996][ T3520] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.651169][ T3525] loop2: detected capacity change from 0 to 256 [ 39.778943][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 39.782041][ T3529] bond_slave_0: entered promiscuous mode [ 39.782065][ T3529] bond_slave_1: entered promiscuous mode [ 39.783091][ T3529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 39.785803][ T3517] syz.1.9 (3517) used greatest stack depth: 10800 bytes left [ 39.798088][ T3529] bond_slave_0: left promiscuous mode [ 39.798116][ T3529] bond_slave_1: left promiscuous mode [ 39.802043][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.836999][ T3528] loop4: detected capacity change from 0 to 128 [ 39.922509][ T3525] FAT-fs (loop2): codepage cp1251 not found [ 40.494957][ T3554] loop4: detected capacity change from 0 to 1024 [ 40.516534][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.591463][ T3554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.708696][ T3568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 40.720151][ T3568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'. [ 40.882006][ T3575] loop1: detected capacity change from 0 to 4096 [ 40.904040][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.946503][ T3578] geneve2: entered promiscuous mode [ 40.952771][ T3578] geneve2: entered allmulticast mode [ 41.015868][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 41.045491][ T3581] bond_slave_0: entered promiscuous mode [ 41.052131][ T3581] bond_slave_1: entered promiscuous mode [ 41.093469][ T3581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 41.139824][ T3581] bond_slave_0: left promiscuous mode [ 41.145930][ T3581] bond_slave_1: left promiscuous mode [ 41.452436][ T3589] loop3: detected capacity change from 0 to 512 [ 41.459710][ T3589] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.466174][ T3589] EXT4-fs: Ignoring removed bh option [ 41.483062][ T3589] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.496295][ T3589] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.535218][ T3589] EXT4-fs (loop3): 1 truncate cleaned up [ 41.542821][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.563697][ T3589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.073837][ T3596] loop4: detected capacity change from 0 to 512 [ 42.080845][ T3596] EXT4-fs: Ignoring removed i_version option [ 42.272884][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.301682][ T3596] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.430936][ T3599] loop0: detected capacity change from 0 to 512 [ 42.472979][ T3599] EXT4-fs: dax option not supported [ 42.585096][ T3599] loop0: detected capacity change from 0 to 512 [ 42.638335][ T3599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.703544][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.735585][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.761176][ T3599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 42.776808][ T3599] System zones: 0-2, 18-18, 34-34 [ 42.789890][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.818835][ T3599] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.004611][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.168302][ T3606] loop3: detected capacity change from 0 to 512 [ 43.175296][ T3606] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.182112][ T3606] EXT4-fs: Ignoring removed bh option [ 43.195089][ T3606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.221090][ T3606] EXT4-fs (loop3): 1 truncate cleaned up [ 43.227904][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.261162][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 43.437096][ T3608] bond_slave_0: entered promiscuous mode [ 43.443031][ T3608] bond_slave_1: entered promiscuous mode [ 43.463460][ T3608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.480713][ T3608] bond_slave_0: left promiscuous mode [ 43.486491][ T3608] bond_slave_1: left promiscuous mode [ 43.619415][ T3615] loop0: detected capacity change from 0 to 4096 [ 43.663000][ T3615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.685100][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.730761][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 43.730778][ T29] audit: type=1400 audit(1750091170.424:313): avc: denied { allowed } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.775997][ T29] audit: type=1400 audit(1750091170.464:314): avc: denied { sqpoll } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.796056][ T29] audit: type=1400 audit(1750091170.464:315): avc: denied { create } for pid=3622 comm="syz.3.30" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.821077][ T29] audit: type=1400 audit(1750091170.514:316): avc: denied { create } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.860982][ T29] audit: type=1326 audit(1750091170.514:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3611 comm="syz.0.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x0 [ 43.867853][ T3621] geneve2: entered promiscuous mode [ 43.884291][ T29] audit: type=1400 audit(1750091170.534:318): avc: denied { write } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.889849][ T3621] geneve2: entered allmulticast mode [ 43.909430][ T29] audit: type=1400 audit(1750091170.534:319): avc: denied { nlmsg_write } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.946084][ T29] audit: type=1400 audit(1750091170.634:320): avc: denied { bind } for pid=3622 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.134976][ T29] audit: type=1326 audit(1750091170.824:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 44.158602][ T29] audit: type=1326 audit(1750091170.824:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 44.199348][ T3635] loop3: detected capacity change from 0 to 128 [ 44.212559][ T3636] loop4: detected capacity change from 0 to 1024 [ 44.238513][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.313634][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.330392][ T3636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.373574][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 44.403663][ T3648] loop2: detected capacity change from 0 to 512 [ 44.412647][ T3648] EXT4-fs: dax option not supported [ 44.429600][ T3642] bond_slave_0: entered promiscuous mode [ 44.435973][ T3642] bond_slave_1: entered promiscuous mode [ 44.506379][ T3642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.520179][ T3642] bond_slave_0: left promiscuous mode [ 44.525831][ T3642] bond_slave_1: left promiscuous mode [ 44.682406][ T3655] loop0: detected capacity change from 0 to 512 [ 44.689578][ T3655] EXT4-fs: Ignoring removed i_version option [ 44.755723][ T3655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.771942][ T3655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.877785][ T3654] loop2: detected capacity change from 0 to 4096 [ 44.985047][ T3654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.237400][ T3661] loop3: detected capacity change from 0 to 4096 [ 45.315646][ T3661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.329753][ T3667] loop4: detected capacity change from 0 to 128 [ 45.476416][ T3665] syzkaller0: entered promiscuous mode [ 45.482525][ T3665] syzkaller0: entered allmulticast mode [ 45.680340][ T3665] Zero length message leads to an empty skb [ 45.861136][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.123475][ T3678] geneve2: entered promiscuous mode [ 46.128822][ T3678] geneve2: entered allmulticast mode [ 46.408030][ T3680] loop4: detected capacity change from 0 to 512 [ 46.430631][ T3680] EXT4-fs: dax option not supported [ 46.500705][ T3680] loop4: detected capacity change from 0 to 512 [ 46.542287][ T3680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.657744][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.710653][ T3680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 47.111677][ T3695] loop2: detected capacity change from 0 to 256 [ 47.398633][ T3680] System zones: 0-2, 18-18, 34-34 [ 47.420223][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.730886][ T3680] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.872522][ T3688] loop0: detected capacity change from 0 to 512 [ 47.883133][ T3688] EXT4-fs: Ignoring removed i_version option [ 47.990316][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.007967][ T3688] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.062909][ T3695] FAT-fs (loop2): codepage cp1251 not found [ 48.557061][ T3689] loop1: detected capacity change from 0 to 4096 [ 49.051920][ T3689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.532212][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.542440][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 49.542481][ T29] audit: type=1326 audit(1750091176.234:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0a4fe929 code=0x0 [ 50.317544][ T29] audit: type=1400 audit(1750091177.004:542): avc: denied { create } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.389518][ T29] audit: type=1400 audit(1750091177.034:543): avc: denied { setopt } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.408902][ T29] audit: type=1400 audit(1750091177.034:544): avc: denied { create } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.429630][ T29] audit: type=1400 audit(1750091177.044:545): avc: denied { write } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.449534][ T29] audit: type=1400 audit(1750091177.044:546): avc: denied { connect } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.470693][ T29] audit: type=1400 audit(1750091177.044:547): avc: denied { name_connect } for pid=3712 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.540437][ T29] audit: type=1400 audit(1750091177.164:548): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.565204][ T29] audit: type=1400 audit(1750091177.164:549): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.590859][ T29] audit: type=1400 audit(1750091177.164:550): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.623865][ T3716] loop3: detected capacity change from 0 to 4096 [ 50.638091][ T3689] syz.1.47 (3689) used greatest stack depth: 10488 bytes left [ 50.676948][ T3716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.711645][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.477640][ T3734] lo speed is unknown, defaulting to 1000 [ 51.477679][ T3734] lo speed is unknown, defaulting to 1000 [ 51.477868][ T3734] lo speed is unknown, defaulting to 1000 [ 51.478365][ T3734] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.479313][ T3734] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.559545][ T3734] lo speed is unknown, defaulting to 1000 [ 51.560267][ T3734] lo speed is unknown, defaulting to 1000 [ 51.561078][ T3734] lo speed is unknown, defaulting to 1000 [ 51.561522][ T3734] lo speed is unknown, defaulting to 1000 [ 51.562304][ T3734] lo speed is unknown, defaulting to 1000 [ 51.776354][ T3738] IPv6: Can't replace route, no match found [ 51.927043][ T3751] loop0: detected capacity change from 0 to 512 [ 51.931052][ T3751] EXT4-fs (loop0): unsupported inode size: 22272 [ 51.931156][ T3751] EXT4-fs (loop0): blocksize: 1024 [ 52.031393][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 52.074901][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.137129][ T3757] loop2: detected capacity change from 0 to 512 [ 52.137664][ T3757] EXT4-fs: Ignoring removed i_version option [ 52.422038][ T3763] netlink: 108 bytes leftover after parsing attributes in process `syz.4.65'. [ 52.473553][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.487143][ T3757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.544041][ T3770] loop3: detected capacity change from 0 to 136 [ 52.551448][ T3770] iso9660: Bad value for 'session' [ 52.562537][ T3770] loop3: detected capacity change from 0 to 512 [ 52.570628][ T3770] EXT4-fs: Ignoring removed i_version option [ 52.578610][ T3770] ext4: Unknown parameter 'fsmagic' [ 52.607679][ T3773] netlink: 100 bytes leftover after parsing attributes in process `syz.1.68'. [ 52.644790][ T3776] loop3: detected capacity change from 0 to 512 [ 52.669953][ T3776] EXT4-fs (loop3): unsupported inode size: 22272 [ 52.676483][ T3776] EXT4-fs (loop3): blocksize: 1024 [ 52.714820][ T3771] loop0: detected capacity change from 0 to 4096 [ 52.781614][ T3774] loop4: detected capacity change from 0 to 128 [ 52.801554][ T3771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.826114][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 52.947570][ T3784] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.700159][ T3794] FAULT_INJECTION: forcing a failure. [ 53.700159][ T3794] name failslab, interval 1, probability 0, space 0, times 1 [ 53.712916][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: syz.1.74 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 53.712985][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.713000][ T3794] Call Trace: [ 53.713008][ T3794] [ 53.713017][ T3794] __dump_stack+0x1d/0x30 [ 53.713044][ T3794] dump_stack_lvl+0xe8/0x140 [ 53.713068][ T3794] dump_stack+0x15/0x1b [ 53.713085][ T3794] should_fail_ex+0x265/0x280 [ 53.713162][ T3794] should_failslab+0x8c/0xb0 [ 53.713228][ T3794] __kmalloc_noprof+0xa5/0x3e0 [ 53.713261][ T3794] ? ip_options_get+0x52/0x350 [ 53.713291][ T3794] ip_options_get+0x52/0x350 [ 53.713330][ T3794] ? tcp_release_cb+0xf1/0x370 [ 53.713428][ T3794] do_ip_setsockopt+0x19d4/0x2240 [ 53.713458][ T3794] ip_setsockopt+0x58/0x110 [ 53.713490][ T3794] tcp_setsockopt+0x95/0xb0 [ 53.713577][ T3794] sock_common_setsockopt+0x66/0x80 [ 53.713658][ T3794] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.713684][ T3794] __sys_setsockopt+0x181/0x200 [ 53.713765][ T3794] __x64_sys_setsockopt+0x64/0x80 [ 53.713795][ T3794] x64_sys_call+0x2bd5/0x2fb0 [ 53.713817][ T3794] do_syscall_64+0xd2/0x200 [ 53.713893][ T3794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.713927][ T3794] ? clear_bhb_loop+0x40/0x90 [ 53.713954][ T3794] ? clear_bhb_loop+0x40/0x90 [ 53.713979][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.714023][ T3794] RIP: 0033:0x7f9d0a4fe929 [ 53.714043][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.714063][ T3794] RSP: 002b:00007f9d08b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.714086][ T3794] RAX: ffffffffffffffda RBX: 00007f9d0a725fa0 RCX: 00007f9d0a4fe929 [ 53.714155][ T3794] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.714170][ T3794] RBP: 00007f9d08b67090 R08: 0000000000000000 R09: 0000000000000000 [ 53.714185][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.714201][ T3794] R13: 0000000000000000 R14: 00007f9d0a725fa0 R15: 00007ffc91361a48 [ 53.714223][ T3794] [ 54.072342][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.120184][ T3807] loop3: detected capacity change from 0 to 136 [ 54.134737][ T3807] iso9660: Bad value for 'session' [ 54.146282][ T3811] netlink: 100 bytes leftover after parsing attributes in process `syz.4.80'. [ 54.161350][ T3807] loop3: detected capacity change from 0 to 512 [ 54.172486][ T3807] EXT4-fs: Ignoring removed i_version option [ 54.187736][ T3807] ext4: Unknown parameter 'fsmagic' [ 54.513996][ T3827] loop3: detected capacity change from 0 to 128 [ 54.665082][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 54.665098][ T29] audit: type=1400 audit(1750091181.354:636): avc: denied { open } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.691211][ T29] audit: type=1400 audit(1750091181.354:637): avc: denied { kernel } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.734433][ T29] audit: type=1400 audit(1750091181.404:638): avc: denied { tracepoint } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.754515][ T29] audit: type=1400 audit(1750091181.424:639): avc: denied { create } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.785122][ T29] audit: type=1400 audit(1750091181.474:640): avc: denied { bind } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.804808][ T29] audit: type=1400 audit(1750091181.474:641): avc: denied { setopt } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.824334][ T29] audit: type=1400 audit(1750091181.474:642): avc: denied { write } for pid=3829 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.885255][ T3834] loop1: detected capacity change from 0 to 512 [ 54.892376][ T3834] EXT4-fs: dax option not supported [ 54.900008][ T29] audit: type=1326 audit(1750091181.594:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0a4fe929 code=0x7ffc0000 [ 54.927046][ T3834] loop1: detected capacity change from 0 to 512 [ 54.931974][ T29] audit: type=1326 audit(1750091181.614:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0a4fe929 code=0x7ffc0000 [ 54.938740][ T3834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.957197][ T29] audit: type=1326 audit(1750091181.614:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0a4fe929 code=0x7ffc0000 [ 54.993287][ T3834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 55.001596][ T3834] System zones: 0-2, 18-18, 34-34 [ 55.008064][ T3834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.021199][ T3834] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.057417][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.208103][ T3843] syz.0.90 uses obsolete (PF_INET,SOCK_PACKET) [ 55.220943][ T3843] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 55.295030][ T3849] loop4: detected capacity change from 0 to 512 [ 55.315505][ T3846] geneve2: entered promiscuous mode [ 55.321329][ T3846] geneve2: entered allmulticast mode [ 55.330945][ T3849] EXT4-fs (loop4): unsupported inode size: 22272 [ 55.337393][ T3849] EXT4-fs (loop4): blocksize: 1024 [ 55.557256][ T3855] loop3: detected capacity change from 0 to 136 [ 55.586639][ T3855] iso9660: Bad value for 'session' [ 55.785797][ T3849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 55.812928][ T3859] netlink: 88 bytes leftover after parsing attributes in process `syz.2.97'. [ 55.886758][ T3863] loop0: detected capacity change from 0 to 512 [ 55.894421][ T3863] EXT4-fs: Ignoring removed i_version option [ 55.983830][ T3863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.000017][ T3863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.128086][ T3862] netlink: 256 bytes leftover after parsing attributes in process `syz.3.98'. [ 56.269205][ T3869] loop1: detected capacity change from 0 to 136 [ 56.398624][ T3869] iso9660: Bad value for 'session' [ 56.787465][ T3869] loop1: detected capacity change from 0 to 512 [ 56.795445][ T3880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 56.814388][ T3869] EXT4-fs: Ignoring removed i_version option [ 56.824655][ T3869] ext4: Unknown parameter 'fsmagic' [ 56.896835][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 56.953104][ T3889] netlink: 'syz.1.105': attribute type 4 has an invalid length. [ 56.994969][ T3888] loop2: detected capacity change from 0 to 512 [ 57.005679][ T3888] EXT4-fs (loop2): unsupported inode size: 22272 [ 57.012611][ T3888] EXT4-fs (loop2): blocksize: 1024 [ 57.049023][ T3878] __nla_validate_parse: 1 callbacks suppressed [ 57.049043][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 57.066598][ T3887] geneve2: entered promiscuous mode [ 57.071976][ T3887] geneve2: entered allmulticast mode [ 57.086304][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 57.267928][ T3897] loop2: detected capacity change from 0 to 512 [ 57.284888][ T3897] EXT4-fs (loop2): unsupported inode size: 22272 [ 57.291460][ T3897] EXT4-fs (loop2): blocksize: 1024 [ 57.634561][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 57.938493][ T3908] loop2: detected capacity change from 0 to 512 [ 57.945107][ T3908] EXT4-fs: Ignoring removed i_version option [ 58.400724][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.414423][ T3908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.511767][ T3923] FAULT_INJECTION: forcing a failure. [ 58.511767][ T3923] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.524920][ T3923] CPU: 1 UID: 0 PID: 3923 Comm: syz.0.114 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 58.524976][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.525002][ T3923] Call Trace: [ 58.525040][ T3923] [ 58.525047][ T3923] __dump_stack+0x1d/0x30 [ 58.525077][ T3923] dump_stack_lvl+0xe8/0x140 [ 58.525101][ T3923] dump_stack+0x15/0x1b [ 58.525192][ T3923] should_fail_ex+0x265/0x280 [ 58.525305][ T3923] should_fail+0xb/0x20 [ 58.525346][ T3923] should_fail_usercopy+0x1a/0x20 [ 58.525387][ T3923] _copy_from_iter+0xcf/0xe40 [ 58.525409][ T3923] ? __build_skb_around+0x1a0/0x200 [ 58.525446][ T3923] ? __alloc_skb+0x223/0x320 [ 58.525491][ T3923] netlink_sendmsg+0x471/0x6b0 [ 58.525530][ T3923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.525549][ T3923] __sock_sendmsg+0x142/0x180 [ 58.525576][ T3923] ____sys_sendmsg+0x31e/0x4e0 [ 58.525618][ T3923] ___sys_sendmsg+0x17b/0x1d0 [ 58.525650][ T3923] __x64_sys_sendmsg+0xd4/0x160 [ 58.525675][ T3923] x64_sys_call+0x2999/0x2fb0 [ 58.525790][ T3923] do_syscall_64+0xd2/0x200 [ 58.525813][ T3923] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.525882][ T3923] ? clear_bhb_loop+0x40/0x90 [ 58.525930][ T3923] ? clear_bhb_loop+0x40/0x90 [ 58.525954][ T3923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.525981][ T3923] RIP: 0033:0x7f55c1a5e929 [ 58.526008][ T3923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.526046][ T3923] RSP: 002b:00007f55c00c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.526073][ T3923] RAX: ffffffffffffffda RBX: 00007f55c1c85fa0 RCX: 00007f55c1a5e929 [ 58.526089][ T3923] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 58.526176][ T3923] RBP: 00007f55c00c7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.526191][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.526219][ T3923] R13: 0000000000000000 R14: 00007f55c1c85fa0 R15: 00007ffe825558e8 [ 58.526241][ T3923] [ 58.526682][ T3925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 58.994683][ T3933] geneve2: entered promiscuous mode [ 59.000087][ T3933] geneve2: entered allmulticast mode [ 59.255600][ T3939] loop1: detected capacity change from 0 to 512 [ 59.387688][ T3939] EXT4-fs (loop1): unsupported inode size: 22272 [ 59.394436][ T3939] EXT4-fs (loop1): blocksize: 1024 [ 59.494691][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 59.506491][ T3940] loop2: detected capacity change from 0 to 4096 [ 59.533167][ T3391] IPVS: starting estimator thread 0... [ 59.613603][ T3940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.635477][ T3947] loop1: detected capacity change from 0 to 512 [ 59.668810][ T3944] IPVS: using max 2352 ests per chain, 117600 per kthread [ 59.687606][ T3947] EXT4-fs (loop1): unsupported inode size: 22272 [ 59.694092][ T3947] EXT4-fs (loop1): blocksize: 1024 [ 59.721835][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 59.721849][ T29] audit: type=1326 audit(1750091186.414:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.2.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x0 [ 59.996451][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 60.296176][ T3968] FAULT_INJECTION: forcing a failure. [ 60.296176][ T3968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.314843][ T3968] CPU: 1 UID: 0 PID: 3968 Comm: syz.4.129 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 60.314871][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.314888][ T3968] Call Trace: [ 60.314897][ T3968] [ 60.314907][ T3968] __dump_stack+0x1d/0x30 [ 60.314975][ T3968] dump_stack_lvl+0xe8/0x140 [ 60.314993][ T3968] dump_stack+0x15/0x1b [ 60.315010][ T3968] should_fail_ex+0x265/0x280 [ 60.315062][ T3968] should_fail+0xb/0x20 [ 60.315089][ T3968] should_fail_usercopy+0x1a/0x20 [ 60.315138][ T3968] _copy_from_user+0x1c/0xb0 [ 60.315165][ T3968] __sys_connect+0xd0/0x2b0 [ 60.315263][ T3968] __x64_sys_connect+0x3f/0x50 [ 60.315320][ T3968] x64_sys_call+0x1daa/0x2fb0 [ 60.315342][ T3968] do_syscall_64+0xd2/0x200 [ 60.315360][ T3968] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.315388][ T3968] ? clear_bhb_loop+0x40/0x90 [ 60.315471][ T3968] ? clear_bhb_loop+0x40/0x90 [ 60.315492][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.315519][ T3968] RIP: 0033:0x7f31fafbe929 [ 60.315537][ T3968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.315560][ T3968] RSP: 002b:00007f31f9627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.315585][ T3968] RAX: ffffffffffffffda RBX: 00007f31fb1e5fa0 RCX: 00007f31fafbe929 [ 60.315608][ T3968] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 60.315656][ T3968] RBP: 00007f31f9627090 R08: 0000000000000000 R09: 0000000000000000 [ 60.315668][ T3968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.315684][ T3968] R13: 0000000000000000 R14: 00007f31fb1e5fa0 R15: 00007ffcd650c0f8 [ 60.315708][ T3968] [ 60.377572][ T29] audit: type=1400 audit(1750091186.604:836): avc: denied { name_connect } for pid=3955 comm="syz.4.126" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.530470][ T29] audit: type=1400 audit(1750091186.624:837): avc: denied { create } for pid=3960 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.551080][ T29] audit: type=1400 audit(1750091186.634:838): avc: denied { bind } for pid=3960 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.573158][ T29] audit: type=1400 audit(1750091186.634:839): avc: denied { bind } for pid=3960 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.592439][ T29] audit: type=1400 audit(1750091186.634:840): avc: denied { name_bind } for pid=3960 comm="syz.3.127" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.614268][ T29] audit: type=1400 audit(1750091186.634:841): avc: denied { node_bind } for pid=3960 comm="syz.3.127" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 60.635252][ T29] audit: type=1400 audit(1750091186.654:842): avc: denied { read write } for pid=3960 comm="syz.3.127" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.659428][ T29] audit: type=1400 audit(1750091186.654:843): avc: denied { open } for pid=3960 comm="syz.3.127" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.730706][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 60.742250][ T3974] bridge_slave_1: left allmulticast mode [ 60.749340][ T3974] bridge_slave_1: left promiscuous mode [ 60.757799][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.778027][ T29] audit: type=1400 audit(1750091187.094:844): avc: denied { read write } for pid=3969 comm="syz.1.130" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.795717][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.825737][ T3985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 60.847773][ T10] IPVS: starting estimator thread 0... [ 61.302204][ T3983] loop1: detected capacity change from 0 to 512 [ 61.315493][ T3983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.333860][ T3974] bridge_slave_0: left allmulticast mode [ 61.339819][ T3974] bridge_slave_0: left promiscuous mode [ 61.345919][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.390118][ T3987] IPVS: using max 1584 ests per chain, 79200 per kthread [ 61.437014][ T3983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.450241][ T3983] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.728211][ T3988] lo speed is unknown, defaulting to 1000 [ 61.803788][ T4001] process 'syz.2.138' launched './file0' with NULL argv: empty string added [ 61.807293][ T4004] loop4: detected capacity change from 0 to 136 [ 61.815217][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.834904][ T4004] iso9660: Bad value for 'session' [ 61.897158][ T4004] loop4: detected capacity change from 0 to 512 [ 61.913097][ T4004] EXT4-fs: Ignoring removed i_version option [ 61.953095][ T4004] ext4: Unknown parameter 'fsmagic' [ 62.104203][ T4021] lo speed is unknown, defaulting to 1000 [ 62.158162][ T4021] loop1: detected capacity change from 0 to 512 [ 62.165819][ T4021] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.173107][ T4021] EXT4-fs: Ignoring removed bh option [ 62.221588][ T4021] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.234868][ T4021] EXT4-fs (loop1): 1 truncate cleaned up [ 62.241656][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.630076][ T4030] loop2: detected capacity change from 0 to 512 [ 62.638263][ T4030] EXT4-fs: Ignoring removed i_version option [ 62.667401][ T4030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.921513][ T4022] loop0: detected capacity change from 0 to 4096 [ 62.930063][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.133383][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.622697][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.755927][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.079290][ T4058] loop2: detected capacity change from 0 to 128 [ 64.209549][ T4059] loop0: detected capacity change from 0 to 128 [ 64.425266][ T4064] loop4: detected capacity change from 0 to 4096 [ 64.436304][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.523636][ T4068] siw: device registration error -23 [ 64.795948][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 64.795963][ T29] audit: type=1326 audit(1750091191.484:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.4.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x0 [ 65.197025][ T4075] lo speed is unknown, defaulting to 1000 [ 65.247853][ T4075] loop1: detected capacity change from 0 to 512 [ 65.254695][ T4075] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.261298][ T4075] EXT4-fs: Ignoring removed bh option [ 65.291748][ T4075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.306152][ T4075] EXT4-fs (loop1): 1 truncate cleaned up [ 65.312678][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.720622][ T4082] loop3: detected capacity change from 0 to 512 [ 65.727818][ T4082] EXT4-fs: Ignoring removed i_version option [ 65.852873][ T29] audit: type=1400 audit(1750091192.544:915): avc: denied { sqpoll } for pid=4074 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.309440][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.309845][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.381801][ T4087] loop0: detected capacity change from 0 to 512 [ 66.412723][ T4091] loop2: detected capacity change from 0 to 512 [ 66.423284][ T4087] EXT4-fs (loop0): unsupported inode size: 22272 [ 66.430583][ T4087] EXT4-fs (loop0): blocksize: 1024 [ 66.443110][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.467267][ T4091] EXT4-fs (loop2): unsupported inode size: 22272 [ 66.473778][ T4091] EXT4-fs (loop2): blocksize: 1024 [ 66.497531][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 66.502357][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 66.519991][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.937515][ T4102] loop4: detected capacity change from 0 to 4096 [ 67.490357][ T4115] lo speed is unknown, defaulting to 1000 [ 67.531964][ T4115] loop0: detected capacity change from 0 to 512 [ 67.538685][ T4115] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.545313][ T4115] EXT4-fs: Ignoring removed bh option [ 67.556222][ T4115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.622431][ T4117] siw: device registration error -23 [ 67.914369][ T4102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.479762][ T4115] EXT4-fs (loop0): 1 truncate cleaned up [ 68.486418][ T4115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.520979][ T4123] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 68.932783][ T29] audit: type=1326 audit(1750091195.624:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.4.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x0 [ 69.590428][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.228754][ T4138] loop2: detected capacity change from 0 to 512 [ 70.251238][ T4140] loop0: detected capacity change from 0 to 4096 [ 70.294496][ T4138] EXT4-fs (loop2): unsupported inode size: 22272 [ 70.301020][ T4138] EXT4-fs (loop2): blocksize: 1024 [ 70.309867][ T4142] loop1: detected capacity change from 0 to 136 [ 70.342576][ T4140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.358743][ T4142] iso9660: Bad value for 'session' [ 70.388620][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.417179][ T4142] loop1: detected capacity change from 0 to 512 [ 70.455580][ T4142] EXT4-fs: Ignoring removed i_version option [ 70.498344][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 70.532866][ T29] audit: type=1326 audit(1750091197.214:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.0.176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x0 [ 70.558551][ T4142] ext4: Unknown parameter 'fsmagic' [ 70.600085][ T4145] netlink: 'syz.3.180': attribute type 2 has an invalid length. [ 70.607951][ T4145] netlink: 'syz.3.180': attribute type 3 has an invalid length. [ 70.615852][ T4145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.180'. [ 70.701590][ T4153] loop2: detected capacity change from 0 to 512 [ 70.729932][ T29] audit: type=1400 audit(1750091197.414:918): avc: denied { create } for pid=4147 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.770048][ T4153] EXT4-fs (loop2): filesystem is read-only [ 70.784722][ T29] audit: type=1400 audit(1750091197.474:919): avc: denied { read } for pid=4147 comm="syz.4.179" path="socket:[6738]" dev="sockfs" ino=6738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.811867][ T4153] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.181: casefold flag without casefold feature [ 70.828628][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.840551][ T4161] loop4: detected capacity change from 0 to 256 [ 70.845053][ T4153] EXT4-fs (loop2): get root inode failed [ 70.852943][ T4153] EXT4-fs (loop2): mount failed [ 70.866458][ T4158] loop1: detected capacity change from 0 to 512 [ 70.886660][ T4158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.898126][ T4158] ext3: Unknown parameter 'journal_checksum"errors' [ 70.919399][ T29] audit: type=1400 audit(1750091197.604:920): avc: denied { remount } for pid=4157 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.947022][ T4161] FAT-fs (loop4): codepage cp1251 not found [ 70.953037][ T29] audit: type=1326 audit(1750091197.644:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.3.185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cc92e929 code=0x0 [ 70.991763][ T4152] lo speed is unknown, defaulting to 1000 [ 71.011066][ T29] audit: type=1326 audit(1750091197.704:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 71.034894][ T29] audit: type=1326 audit(1750091197.704:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 71.081021][ T4171] netlink: 256 bytes leftover after parsing attributes in process `syz.2.186'. [ 71.081619][ T29] audit: type=1326 audit(1750091197.754:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 71.114051][ T29] audit: type=1326 audit(1750091197.754:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 71.137774][ T29] audit: type=1326 audit(1750091197.754:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 71.203430][ T4176] geneve2: entered promiscuous mode [ 71.209099][ T4176] geneve2: entered allmulticast mode [ 71.246175][ T4174] bond1: entered promiscuous mode [ 71.251690][ T4174] bond1: entered allmulticast mode [ 71.258786][ T4174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.275875][ T4174] bond1 (unregistering): Released all slaves [ 71.304154][ T4181] loop1: detected capacity change from 0 to 1024 [ 71.346843][ T4181] lo speed is unknown, defaulting to 1000 [ 71.357703][ T4188] loop0: detected capacity change from 0 to 136 [ 71.366334][ T4188] iso9660: Bad value for 'session' [ 71.483932][ T4193] loop0: detected capacity change from 0 to 2048 [ 71.502740][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.533702][ T4193] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.682590][ T4205] random: crng reseeded on system resumption [ 71.684995][ T4204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'. [ 71.868133][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 71.975572][ T4219] loop4: detected capacity change from 0 to 512 [ 71.982483][ T4219] EXT4-fs: Ignoring removed i_version option [ 72.040172][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.056733][ T4221] loop0: detected capacity change from 0 to 512 [ 72.142830][ T4221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.201: bg 0: block 5: invalid block bitmap [ 72.297087][ T4221] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.312461][ T4221] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.201: invalid indirect mapped block 3 (level 2) [ 72.325943][ T4221] EXT4-fs (loop0): 2 truncates cleaned up [ 72.332523][ T4221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.356188][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.372414][ T4229] loop2: detected capacity change from 0 to 512 [ 72.391015][ T4229] EXT4-fs (loop2): 1 orphan inode deleted [ 72.392919][ T4231] loop0: detected capacity change from 0 to 512 [ 72.403819][ T4231] EXT4-fs: Ignoring removed oldalloc option [ 72.410551][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.423507][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 72.424378][ T4229] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.446751][ T4231] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.203: Parent and EA inode have the same ino 15 [ 72.460514][ T4231] EXT4-fs (loop0): Remounting filesystem read-only [ 72.467237][ T4231] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.480269][ T4231] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.491241][ T4231] EXT4-fs (loop0): 1 orphan inode deleted [ 72.492212][ T4229] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.498191][ T4231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.520630][ T4231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.522150][ T4229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.202'. [ 72.617618][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.660268][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.679965][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4240 comm=syz.3.206 [ 72.720279][ T4240] FAULT_INJECTION: forcing a failure. [ 72.720279][ T4240] name failslab, interval 1, probability 0, space 0, times 0 [ 72.733031][ T4240] CPU: 0 UID: 0 PID: 4240 Comm: syz.3.206 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 72.733063][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.733079][ T4240] Call Trace: [ 72.733086][ T4240] [ 72.733095][ T4240] __dump_stack+0x1d/0x30 [ 72.733161][ T4240] dump_stack_lvl+0xe8/0x140 [ 72.733242][ T4240] dump_stack+0x15/0x1b [ 72.733263][ T4240] should_fail_ex+0x265/0x280 [ 72.733296][ T4240] should_failslab+0x8c/0xb0 [ 72.733393][ T4240] kmem_cache_alloc_node_noprof+0x57/0x320 [ 72.733496][ T4240] ? __alloc_skb+0x101/0x320 [ 72.733593][ T4240] __alloc_skb+0x101/0x320 [ 72.733626][ T4240] ? audit_log_start+0x365/0x6c0 [ 72.733793][ T4240] audit_log_start+0x380/0x6c0 [ 72.733832][ T4240] audit_seccomp+0x48/0x100 [ 72.733886][ T4240] ? __seccomp_filter+0x68c/0x10d0 [ 72.733909][ T4240] __seccomp_filter+0x69d/0x10d0 [ 72.733940][ T4240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.733964][ T4240] ? vfs_write+0x75e/0x8e0 [ 72.734107][ T4240] __secure_computing+0x82/0x150 [ 72.734137][ T4240] syscall_trace_enter+0xcf/0x1e0 [ 72.734169][ T4240] do_syscall_64+0xac/0x200 [ 72.734253][ T4240] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.734285][ T4240] ? clear_bhb_loop+0x40/0x90 [ 72.734388][ T4240] ? clear_bhb_loop+0x40/0x90 [ 72.734416][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.734437][ T4240] RIP: 0033:0x7f54cc92e929 [ 72.734451][ T4240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.734468][ T4240] RSP: 002b:00007f54caf97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 72.734489][ T4240] RAX: ffffffffffffffda RBX: 00007f54ccb55fa0 RCX: 00007f54cc92e929 [ 72.734557][ T4240] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000800 [ 72.734573][ T4240] RBP: 00007f54caf97090 R08: 0000000000000001 R09: 0000000000000000 [ 72.734588][ T4240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.734604][ T4240] R13: 0000000000000000 R14: 00007f54ccb55fa0 R15: 00007fff07898618 [ 72.734623][ T4240] [ 72.740743][ T4245] capability: warning: `syz.2.209' uses deprecated v2 capabilities in a way that may be insecure [ 72.784479][ T4243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4243 comm=syz.1.208 [ 72.917306][ T4254] loop2: detected capacity change from 0 to 512 [ 73.040256][ T4254] EXT4-fs (loop2): 1 orphan inode deleted [ 73.048174][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.063029][ T4254] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.074331][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 73.113282][ T4263] loop4: detected capacity change from 0 to 512 [ 73.147039][ T4266] loop1: detected capacity change from 0 to 512 [ 73.156412][ T4266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.216569][ T4266] EXT4-fs (loop1): 1 truncate cleaned up [ 73.225665][ T4266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.254476][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.721511][ T4279] netlink: 'syz.0.218': attribute type 9 has an invalid length. [ 73.752899][ T4281] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.219'. [ 73.852351][ T4287] loop2: detected capacity change from 0 to 512 [ 73.859205][ T4287] EXT4-fs: Ignoring removed i_version option [ 73.891600][ T4281] loop0: detected capacity change from 0 to 512 [ 73.903651][ T4287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.068103][ T4281] EXT4-fs: Invalid want_extra_isize 512 [ 74.341825][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.381113][ T4305] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 74.381113][ T4305] program syz.2.222 not setting count and/or reply_len properly [ 74.417475][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.450127][ T4310] netlink: 256 bytes leftover after parsing attributes in process `syz.3.226'. [ 74.466829][ T4311] loop1: detected capacity change from 0 to 136 [ 74.489604][ T4311] iso9660: Bad value for 'session' [ 74.511527][ T4315] loop2: detected capacity change from 0 to 512 [ 74.532474][ T4321] loop1: detected capacity change from 0 to 512 [ 74.539127][ T4315] EXT4-fs (loop2): unsupported inode size: 22272 [ 74.546243][ T4315] EXT4-fs (loop2): blocksize: 1024 [ 74.559185][ T4321] EXT4-fs: dax option not supported [ 74.565190][ T4323] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.228'. [ 74.567732][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 74.574999][ T4319] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.228'. [ 74.602335][ T4321] loop1: detected capacity change from 0 to 512 [ 74.637512][ T4321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.670517][ T4321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 74.688081][ T4321] System zones: 0-2, 18-18, 34-34 [ 74.696363][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.711554][ T4321] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.740918][ T4330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4330 comm=syz.2.231 [ 74.766487][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.297481][ T4337] loop2: detected capacity change from 0 to 512 [ 75.304359][ T4337] EXT4-fs: Ignoring removed i_version option [ 75.329624][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.424603][ T4340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 75.759839][ T4350] loop1: detected capacity change from 0 to 136 [ 75.768080][ T4350] iso9660: Bad value for 'session' [ 75.787839][ T4350] loop1: detected capacity change from 0 to 512 [ 75.796262][ T4350] EXT4-fs: Ignoring removed i_version option [ 75.802497][ T4350] ext4: Unknown parameter 'fsmagic' [ 75.803026][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.843314][ T4352] Cannot find add_set index 0 as target [ 75.872386][ T4353] loop3: detected capacity change from 0 to 4096 [ 75.888170][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 75.888187][ T29] audit: type=1400 audit(1750091202.574:1475): avc: denied { write } for pid=4354 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 75.914924][ T29] audit: type=1400 audit(1750091202.574:1476): avc: denied { create } for pid=4354 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.952523][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.208202][ T29] audit: type=1326 audit(1750091202.864:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.3.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cc92e929 code=0x0 [ 78.463541][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.763408][ T4363] loop1: detected capacity change from 0 to 256 [ 79.213422][ T4363] FAT-fs (loop1): codepage cp1251 not found [ 79.243342][ T4359] lo speed is unknown, defaulting to 1000 [ 79.470951][ T29] audit: type=1326 audit(1750091206.164:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x0 [ 80.525385][ T4390] loop4: detected capacity change from 0 to 4096 [ 80.552768][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.673789][ T4407] loop1: detected capacity change from 0 to 512 [ 80.680853][ T4407] EXT4-fs: Ignoring removed i_version option [ 80.735419][ T4407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.811503][ T29] audit: type=1400 audit(1750091207.474:1479): avc: denied { listen } for pid=4403 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.925755][ T4402] loop0: detected capacity change from 0 to 512 [ 80.947112][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 80.978840][ T4402] EXT4-fs: Ignoring removed i_version option [ 80.984911][ T4402] ext4: Unknown parameter 'fsmagic' [ 81.021789][ T29] audit: type=1400 audit(1750091207.634:1480): avc: denied { ioctl } for pid=4412 comm="syz.2.253" path="socket:[7146]" dev="sockfs" ino=7146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.048055][ T29] audit: type=1400 audit(1750091207.634:1481): avc: denied { bind } for pid=4412 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.067968][ T29] audit: type=1326 audit(1750091207.634:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4383 comm="syz.4.248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x0 [ 81.091170][ T29] audit: type=1400 audit(1750091207.634:1483): avc: denied { read } for pid=4403 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 81.110375][ T29] audit: type=1400 audit(1750091207.634:1484): avc: denied { create } for pid=4403 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.130358][ T29] audit: type=1400 audit(1750091207.634:1485): avc: denied { setopt } for pid=4412 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.149963][ T29] audit: type=1400 audit(1750091207.634:1486): avc: denied { write } for pid=4412 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.208353][ T4418] loop3: detected capacity change from 0 to 512 [ 81.219140][ T4418] EXT4-fs: Ignoring removed oldalloc option [ 81.317588][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.382678][ T4418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.254: Parent and EA inode have the same ino 15 [ 81.399708][ T29] audit: type=1400 audit(1750091208.094:1487): avc: denied { cpu } for pid=4426 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 81.426853][ T4425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4425 comm=syz.2.257 [ 81.431025][ T4418] EXT4-fs (loop3): Remounting filesystem read-only [ 81.446439][ T4418] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.456769][ T4418] EXT4-fs (loop3): 1 orphan inode deleted [ 81.463017][ T4418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.477601][ T29] audit: type=1400 audit(1750091208.164:1488): avc: denied { create } for pid=4426 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.497004][ T29] audit: type=1400 audit(1750091208.164:1489): avc: denied { connect } for pid=4426 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.518292][ T4418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.540134][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.574736][ T4432] loop4: detected capacity change from 0 to 512 [ 81.579121][ T4430] loop0: detected capacity change from 0 to 512 [ 81.592424][ T4432] EXT4-fs: dax option not supported [ 81.597175][ T4430] EXT4-fs: dax option not supported [ 81.637084][ T4430] loop0: detected capacity change from 0 to 512 [ 81.656595][ T4434] Cannot find add_set index 0 as target [ 81.676244][ T4425] xt_CT: No such helper "pptp" [ 81.702700][ T4430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.739302][ T4430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 81.748827][ T4430] System zones: 0-2, 18-18, 34-34 [ 81.767634][ T4430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.843754][ T4430] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.941441][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.954844][ T4461] ipvlan2: entered promiscuous mode [ 81.980919][ T4461] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 82.064089][ T4439] mmap: syz.1.262 (4439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.126231][ T4477] loop4: detected capacity change from 0 to 512 [ 82.133135][ T4477] EXT4-fs: Ignoring removed i_version option [ 82.179665][ T4461] syz.1.262 (4461) used greatest stack depth: 10336 bytes left [ 82.241644][ T4477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.266800][ T4480] loop2: detected capacity change from 0 to 128 [ 82.630484][ T4496] xt_CT: No such helper "pptp" [ 82.701931][ T4500] loop0: detected capacity change from 0 to 512 [ 82.708855][ T4500] EXT4-fs: Ignoring removed i_version option [ 82.812191][ T4500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.826215][ T4500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.838165][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.055056][ T4508] Cannot find add_set index 0 as target [ 83.109953][ T4515] tls_set_device_offload_rx: netdev not found [ 83.144471][ T4520] loop4: detected capacity change from 0 to 256 [ 83.163143][ T4523] loop3: detected capacity change from 0 to 512 [ 83.179737][ T4521] FAULT_INJECTION: forcing a failure. [ 83.179737][ T4521] name failslab, interval 1, probability 0, space 0, times 0 [ 83.192706][ T4521] CPU: 1 UID: 0 PID: 4521 Comm: syz.1.279 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 83.192739][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.192754][ T4521] Call Trace: [ 83.192762][ T4521] [ 83.192772][ T4521] __dump_stack+0x1d/0x30 [ 83.192892][ T4521] dump_stack_lvl+0xe8/0x140 [ 83.192927][ T4521] dump_stack+0x15/0x1b [ 83.192947][ T4521] should_fail_ex+0x265/0x280 [ 83.192996][ T4521] should_failslab+0x8c/0xb0 [ 83.193022][ T4521] kmem_cache_alloc_node_noprof+0x57/0x320 [ 83.193087][ T4521] ? __alloc_skb+0x101/0x320 [ 83.193121][ T4521] __alloc_skb+0x101/0x320 [ 83.193146][ T4521] ? audit_log_start+0x365/0x6c0 [ 83.193191][ T4521] audit_log_start+0x380/0x6c0 [ 83.193383][ T4521] audit_seccomp+0x48/0x100 [ 83.193418][ T4521] ? __seccomp_filter+0x68c/0x10d0 [ 83.193504][ T4521] __seccomp_filter+0x69d/0x10d0 [ 83.193529][ T4521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.193618][ T4521] ? vfs_write+0x75e/0x8e0 [ 83.193654][ T4521] ? __rcu_read_unlock+0x4f/0x70 [ 83.193678][ T4521] ? __fget_files+0x184/0x1c0 [ 83.193703][ T4521] __secure_computing+0x82/0x150 [ 83.193777][ T4521] syscall_trace_enter+0xcf/0x1e0 [ 83.193851][ T4521] do_syscall_64+0xac/0x200 [ 83.193873][ T4521] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.193900][ T4521] ? clear_bhb_loop+0x40/0x90 [ 83.193925][ T4521] ? clear_bhb_loop+0x40/0x90 [ 83.193987][ T4521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.194008][ T4521] RIP: 0033:0x7f9d0a4fe929 [ 83.194024][ T4521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.194177][ T4521] RSP: 002b:00007f9d08b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 83.194199][ T4521] RAX: ffffffffffffffda RBX: 00007f9d0a725fa0 RCX: 00007f9d0a4fe929 [ 83.194213][ T4521] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000003 [ 83.194226][ T4521] RBP: 00007f9d08b67090 R08: 0000000000000000 R09: 0000000000000000 [ 83.194239][ T4521] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 83.194331][ T4521] R13: 0000000000000000 R14: 00007f9d0a725fa0 R15: 00007ffc91361a48 [ 83.194350][ T4521] [ 83.195665][ T4523] EXT4-fs: dax option not supported [ 83.380550][ T4527] loop2: detected capacity change from 0 to 512 [ 83.458276][ T4523] loop3: detected capacity change from 0 to 512 [ 83.465224][ T4527] EXT4-fs: dax option not supported [ 83.501958][ T4523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.532135][ T4534] loop0: detected capacity change from 0 to 2048 [ 83.548784][ T4527] loop2: detected capacity change from 0 to 512 [ 83.571872][ T4523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 83.586701][ T4538] xt_CT: No such helper "pptp" [ 83.595042][ T4527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.619843][ T4534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.639322][ T4523] System zones: 0-2, 18-18, 34-34 [ 83.662258][ T4527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 83.668146][ T4548] netlink: 108 bytes leftover after parsing attributes in process `syz.1.286'. [ 83.686395][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.692693][ T4527] System zones: 0-2, 18-18, 34-34 [ 83.732973][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.758002][ T4523] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.779586][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.782970][ T4527] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.884633][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.894415][ T4572] loop0: detected capacity change from 0 to 2048 [ 83.906152][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.939005][ T4572] loop0: p1 < > p4 [ 83.943805][ T4572] loop0: p4 size 8388608 extends beyond EOD, truncated [ 83.951427][ T4580] loop2: detected capacity change from 0 to 512 [ 83.991817][ T4556] lo speed is unknown, defaulting to 1000 [ 83.994248][ T4572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.289'. [ 84.001175][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.009235][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.051190][ T4580] EXT4-fs (loop2): unsupported inode size: 22272 [ 84.058042][ T4580] EXT4-fs (loop2): blocksize: 1024 [ 84.091697][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 84.144044][ T4595] loop3: detected capacity change from 0 to 512 [ 84.160661][ T4595] EXT4-fs (loop3): unsupported inode size: 22272 [ 84.167086][ T4595] EXT4-fs (loop3): blocksize: 1024 [ 84.289893][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 84.391796][ T4611] loop2: detected capacity change from 0 to 512 [ 84.398831][ T4611] EXT4-fs: Ignoring removed i_version option [ 84.511606][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.527289][ T4611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.713433][ T4613] xt_CT: No such helper "pptp" [ 84.763397][ T4621] FAULT_INJECTION: forcing a failure. [ 84.763397][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 84.776865][ T4621] CPU: 0 UID: 0 PID: 4621 Comm: syz.4.298 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 84.776899][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.776915][ T4621] Call Trace: [ 84.776990][ T4621] [ 84.777000][ T4621] __dump_stack+0x1d/0x30 [ 84.777027][ T4621] dump_stack_lvl+0xe8/0x140 [ 84.777051][ T4621] dump_stack+0x15/0x1b [ 84.777089][ T4621] should_fail_ex+0x265/0x280 [ 84.777164][ T4621] should_failslab+0x8c/0xb0 [ 84.777207][ T4621] kmem_cache_alloc_node_noprof+0x57/0x320 [ 84.777241][ T4621] ? __alloc_skb+0x101/0x320 [ 84.777343][ T4621] __alloc_skb+0x101/0x320 [ 84.777381][ T4621] netlink_alloc_large_skb+0xba/0xf0 [ 84.777420][ T4621] netlink_sendmsg+0x3cf/0x6b0 [ 84.777497][ T4621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.777523][ T4621] __sock_sendmsg+0x142/0x180 [ 84.777554][ T4621] sock_write_iter+0x165/0x1b0 [ 84.777592][ T4621] do_iter_readv_writev+0x421/0x4c0 [ 84.777622][ T4621] vfs_writev+0x2df/0x8b0 [ 84.777655][ T4621] do_writev+0xe7/0x210 [ 84.777677][ T4621] __x64_sys_writev+0x45/0x50 [ 84.777716][ T4621] x64_sys_call+0x2006/0x2fb0 [ 84.777744][ T4621] do_syscall_64+0xd2/0x200 [ 84.777768][ T4621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.777865][ T4621] ? clear_bhb_loop+0x40/0x90 [ 84.777953][ T4621] ? clear_bhb_loop+0x40/0x90 [ 84.777974][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.777993][ T4621] RIP: 0033:0x7f31fafbe929 [ 84.778069][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.778091][ T4621] RSP: 002b:00007f31f9627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 84.778110][ T4621] RAX: ffffffffffffffda RBX: 00007f31fb1e5fa0 RCX: 00007f31fafbe929 [ 84.778122][ T4621] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 84.778134][ T4621] RBP: 00007f31f9627090 R08: 0000000000000000 R09: 0000000000000000 [ 84.778147][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.778195][ T4621] R13: 0000000000000000 R14: 00007f31fb1e5fa0 R15: 00007ffcd650c0f8 [ 84.778218][ T4621] [ 85.157722][ T4629] loop2: detected capacity change from 0 to 512 [ 85.233811][ T4629] EXT4-fs: dax option not supported [ 85.250665][ T4631] netlink: 'syz.4.300': attribute type 3 has an invalid length. [ 85.415093][ T4629] loop2: detected capacity change from 0 to 512 [ 85.506861][ T4629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.659440][ T4629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 85.681269][ T4641] loop3: detected capacity change from 0 to 512 [ 85.696792][ T4629] System zones: 0-2, 18-18, 34-34 [ 85.713860][ T4641] EXT4-fs (loop3): 1 orphan inode deleted [ 85.726097][ T4629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.739242][ T1863] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 85.771176][ T4641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.799398][ T4629] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.801237][ T4646] loop4: detected capacity change from 0 to 512 [ 85.820166][ T4646] EXT4-fs (loop4): unsupported inode size: 22272 [ 85.826565][ T4646] EXT4-fs (loop4): blocksize: 1024 [ 85.863506][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.874707][ T4641] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.896906][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 85.937714][ T4641] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.974192][ T4641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.302'. [ 86.021291][ T4659] loop1: detected capacity change from 0 to 128 [ 86.039737][ T4662] loop0: detected capacity change from 0 to 128 [ 86.161332][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 86.161347][ T29] audit: type=1326 audit(1750091212.854:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.0.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x0 [ 86.193070][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.623481][ T29] audit: type=1326 audit(1750091212.934:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.1.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0a4fe929 code=0x0 [ 86.646759][ T29] audit: type=1400 audit(1750091212.944:2089): avc: denied { getopt } for pid=4657 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.674863][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 86.791384][ T4668] syz.3.310 (4668) used greatest stack depth: 10016 bytes left [ 86.958711][ T4678] loop4: detected capacity change from 0 to 512 [ 86.965678][ T4678] EXT4-fs: Ignoring removed oldalloc option [ 87.400537][ T4686] loop1: detected capacity change from 0 to 4096 [ 87.436799][ T4678] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.315: Parent and EA inode have the same ino 15 [ 87.488759][ T4678] EXT4-fs (loop4): Remounting filesystem read-only [ 87.495344][ T4678] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 87.517852][ T4690] loop2: detected capacity change from 0 to 512 [ 87.521575][ T4688] lo speed is unknown, defaulting to 1000 [ 87.529535][ T4690] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.536504][ T4690] EXT4-fs: Ignoring removed bh option [ 87.572211][ T4686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.615343][ T4678] EXT4-fs (loop4): 1 orphan inode deleted [ 87.625645][ T4690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.640519][ T4678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.708103][ T4693] loop3: detected capacity change from 0 to 512 [ 87.719584][ T4693] EXT4-fs: dax option not supported [ 87.721639][ T4678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.746084][ T29] audit: type=1326 audit(1750091214.434:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cc92e929 code=0x7ffc0000 [ 87.751723][ T4690] EXT4-fs (loop2): 1 truncate cleaned up [ 87.770434][ T29] audit: type=1326 audit(1750091214.434:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54cc92e929 code=0x7ffc0000 [ 87.778911][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.799862][ T29] audit: type=1326 audit(1750091214.434:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cc92e929 code=0x7ffc0000 [ 87.799900][ T29] audit: type=1326 audit(1750091214.434:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54cc92e929 code=0x7ffc0000 [ 87.799930][ T29] audit: type=1326 audit(1750091214.434:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54cc92e963 code=0x7ffc0000 [ 87.872395][ T4693] loop3: detected capacity change from 0 to 512 [ 87.890580][ T29] audit: type=1326 audit(1750091214.434:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54cc92d3df code=0x7ffc0000 [ 87.920354][ T29] audit: type=1326 audit(1750091214.434:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f54cc92e9b7 code=0x7ffc0000 [ 87.989979][ T4693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.100405][ T4693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 88.108673][ T4693] System zones: 0-2, 18-18, 34-34 [ 88.122043][ T4693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.136756][ T4693] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.323285][ T4708] loop0: detected capacity change from 0 to 1024 [ 88.352741][ T4708] EXT4-fs: Ignoring removed nobh option [ 88.358885][ T4708] EXT4-fs: Ignoring removed bh option [ 88.557049][ T4712] loop4: detected capacity change from 0 to 256 [ 88.595444][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.641440][ T4708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.736479][ T4712] FAT-fs (loop4): codepage cp1251 not found [ 88.772213][ T4710] lo speed is unknown, defaulting to 1000 [ 89.010448][ T4708] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 89.170207][ T4708] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.321: Allocating blocks 497-513 which overlap fs metadata [ 89.316431][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.330234][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.771617][ T4733] siw: device registration error -23 [ 90.313842][ T4738] loop3: detected capacity change from 0 to 136 [ 90.326311][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.345312][ T4738] iso9660: Bad value for 'session' [ 90.474762][ T4738] loop3: detected capacity change from 0 to 512 [ 90.482289][ T4738] EXT4-fs: Ignoring removed i_version option [ 90.503510][ T4738] ext4: Unknown parameter 'fsmagic' [ 90.593797][ T4748] loop4: detected capacity change from 0 to 512 [ 90.639598][ T4745] loop3: detected capacity change from 0 to 512 [ 90.681967][ T4748] EXT4-fs (loop4): 1 orphan inode deleted [ 90.695044][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.707840][ T1813] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 90.753591][ T4759] Cannot find add_set index 0 as target [ 90.760385][ T4757] netlink: 'syz.0.336': attribute type 3 has an invalid length. [ 90.876376][ T4762] loop2: detected capacity change from 0 to 512 [ 90.992627][ T4764] loop0: detected capacity change from 0 to 128 [ 91.032101][ T4762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.338: bg 0: block 5: invalid block bitmap [ 91.048003][ T4764] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.084379][ T4748] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.123692][ T4745] EXT4-fs (loop3): 1 orphan inode deleted [ 91.157927][ T4762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 91.177474][ T4745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.192579][ T1813] __quota_error: 141 callbacks suppressed [ 91.192596][ T1813] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.201571][ T4764] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.208890][ T1813] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 91.243458][ T4745] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.263106][ T4762] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.338: invalid indirect mapped block 3 (level 2) [ 91.278334][ T4748] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.287138][ T4762] EXT4-fs (loop2): 2 truncates cleaned up [ 91.296345][ T4748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.333'. [ 91.299073][ T4762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.325487][ T29] audit: type=1400 audit(2000000001.720:2237): avc: denied { create } for pid=4763 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.362518][ T4745] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.370780][ T29] audit: type=1326 audit(2000000001.730:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff52219d290 code=0x7ffc0000 [ 91.370859][ T29] audit: type=1326 audit(2000000001.730:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff52219d677 code=0x7ffc0000 [ 91.370917][ T29] audit: type=1326 audit(2000000001.730:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff52219d290 code=0x7ffc0000 [ 91.441651][ T29] audit: type=1326 audit(2000000001.730:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 91.465409][ T29] audit: type=1326 audit(2000000001.730:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 91.500446][ T4772] netlink: 48 bytes leftover after parsing attributes in process `syz.3.334'. [ 91.540054][ T29] audit: type=1326 audit(2000000001.880:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 91.563882][ T29] audit: type=1326 audit(2000000001.880:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 91.588676][ T29] audit: type=1326 audit(2000000001.880:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4761 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 91.619886][ T4778] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 91.686894][ T4778] bond1: entered promiscuous mode [ 91.686916][ T4778] bond1: entered allmulticast mode [ 91.874762][ T4781] siw: device registration error -23 [ 91.965937][ T4788] lo speed is unknown, defaulting to 1000 [ 91.996409][ T4788] loop4: detected capacity change from 0 to 512 [ 92.003417][ T4788] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.010271][ T4788] EXT4-fs: Ignoring removed bh option [ 92.208687][ T4791] loop3: detected capacity change from 0 to 256 [ 92.752642][ T4788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.771570][ T4788] EXT4-fs (loop4): 1 truncate cleaned up [ 92.898845][ T4785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'. [ 92.947303][ T4791] FAT-fs (loop3): codepage cp1251 not found [ 92.981185][ T4790] lo speed is unknown, defaulting to 1000 [ 93.442917][ T4800] Cannot find add_set index 0 as target [ 93.521091][ T4802] netlink: 256 bytes leftover after parsing attributes in process `syz.0.347'. [ 93.654841][ T4808] loop0: detected capacity change from 0 to 512 [ 93.674905][ T4808] EXT4-fs: Ignoring removed oldalloc option [ 93.705110][ T4808] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.349: Parent and EA inode have the same ino 15 [ 93.739728][ T4808] EXT4-fs (loop0): Remounting filesystem read-only [ 93.746456][ T4808] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 93.779948][ T4808] EXT4-fs (loop0): 1 orphan inode deleted [ 93.910121][ T4811] Cannot find add_set index 0 as target [ 93.915965][ T4813] loop3: detected capacity change from 0 to 1024 [ 93.958881][ T4813] EXT4-fs: Ignoring removed orlov option [ 93.964934][ T4813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.992914][ T4818] loop2: detected capacity change from 0 to 512 [ 94.070584][ T4818] EXT4-fs (loop2): 1 orphan inode deleted [ 94.078168][ T4818] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.093303][ T3943] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 94.423245][ T4832] xt_hashlimit: size too large, truncated to 1048576 [ 95.055810][ T4835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'. [ 95.397728][ T4836] : renamed from vxcan1 (while UP) [ 95.418742][ T4818] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.805000][ T4848] Cannot find add_set index 0 as target [ 95.838719][ T4852] loop4: detected capacity change from 0 to 512 [ 95.846806][ T4852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.874573][ T4852] EXT4-fs (loop4): 1 truncate cleaned up [ 96.849706][ T4864] loop3: detected capacity change from 0 to 128 [ 97.872489][ T4860] loop0: detected capacity change from 0 to 256 [ 97.903785][ T4870] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 98.138567][ T4860] FAT-fs (loop0): codepage cp1251 not found [ 98.193220][ T4860] lo speed is unknown, defaulting to 1000 [ 98.241409][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 98.241426][ T29] audit: type=1326 audit(2000000008.570:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.3.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cc92e929 code=0x0 [ 99.061166][ T4878] loop2: detected capacity change from 0 to 512 [ 99.067921][ T4878] EXT4-fs: Ignoring removed i_version option [ 99.207708][ T4884] netlink: 'syz.4.367': attribute type 3 has an invalid length. [ 99.216130][ T4882] loop0: detected capacity change from 0 to 512 [ 99.235321][ T4882] EXT4-fs: Ignoring removed oldalloc option [ 99.309277][ T4886] loop1: detected capacity change from 0 to 128 [ 99.351711][ T4882] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.366: Parent and EA inode have the same ino 15 [ 99.388949][ T4882] EXT4-fs (loop0): Remounting filesystem read-only [ 99.395682][ T4882] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 99.436298][ T4882] EXT4-fs (loop0): 1 orphan inode deleted [ 99.443733][ T29] audit: type=1326 audit(2000000009.850:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4879 comm="syz.1.365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0a4fe929 code=0x0 [ 99.768591][ T29] audit: type=1326 audit(2000000010.160:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 99.792105][ T29] audit: type=1326 audit(2000000010.160:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 99.816071][ T29] audit: type=1326 audit(2000000010.160:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 99.982257][ T4905] loop0: detected capacity change from 0 to 1024 [ 100.052312][ T29] audit: type=1326 audit(2000000010.240:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 100.076063][ T29] audit: type=1326 audit(2000000010.240:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 100.099875][ T29] audit: type=1326 audit(2000000010.240:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 100.123238][ T29] audit: type=1326 audit(2000000010.250:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 100.146868][ T29] audit: type=1326 audit(2000000010.250:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c1a5e929 code=0x7ffc0000 [ 100.157404][ T4903] bond1: entered promiscuous mode [ 100.175598][ T4903] bond1: entered allmulticast mode [ 100.181160][ T4903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.194677][ T4903] bond1 (unregistering): Released all slaves [ 100.322134][ T4915] loop4: detected capacity change from 0 to 512 [ 100.329906][ T4905] lo speed is unknown, defaulting to 1000 [ 100.335921][ T4915] EXT4-fs: dax option not supported [ 100.425694][ T4918] loop2: detected capacity change from 0 to 512 [ 100.432538][ T4918] EXT4-fs: Ignoring removed i_version option [ 100.503686][ T4915] loop4: detected capacity change from 0 to 512 [ 100.557447][ T4918] EXT4-fs mount: 18 callbacks suppressed [ 100.557466][ T4918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.578018][ T4918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.633962][ T4915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.849128][ T4915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 100.857617][ T4915] System zones: 0-2, 18-18, 34-34 [ 100.865580][ T4915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.880626][ T4924] loop3: detected capacity change from 0 to 1024 [ 100.882854][ T4915] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.895207][ T4924] EXT4-fs: Ignoring removed nobh option [ 100.903439][ T4924] EXT4-fs: Ignoring removed bh option [ 100.922507][ T4924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.946943][ T4924] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 100.971867][ T4929] loop1: detected capacity change from 0 to 512 [ 100.980424][ T4929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.051428][ T4929] EXT4-fs (loop1): 1 truncate cleaned up [ 101.057979][ T4929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.071415][ T4936] netlink: 'syz.2.381': attribute type 3 has an invalid length. [ 101.086570][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.107769][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.162070][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.171358][ T4940] loop4: detected capacity change from 0 to 2048 [ 101.209199][ T4948] loop1: detected capacity change from 0 to 512 [ 101.220088][ T4940] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.222438][ T4948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.251614][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 101.259476][ T4948] EXT4-fs (loop1): 1 truncate cleaned up [ 101.267136][ T4948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.294529][ T4955] loop4: detected capacity change from 0 to 136 [ 101.305429][ T4955] iso9660: Bad value for 'session' [ 101.333510][ T4955] loop4: detected capacity change from 0 to 512 [ 101.344457][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.357871][ T4955] EXT4-fs: Ignoring removed i_version option [ 101.369162][ T4955] ext4: Unknown parameter 'fsmagic' [ 101.375669][ T4956] loop2: detected capacity change from 0 to 128 [ 101.385658][ T4958] loop1: detected capacity change from 0 to 256 [ 101.493921][ T4963] loop4: detected capacity change from 0 to 136 [ 101.503438][ T4963] iso9660: Bad value for 'session' [ 101.535447][ T4963] loop4: detected capacity change from 0 to 512 [ 101.553856][ T4963] EXT4-fs: Ignoring removed i_version option [ 101.566129][ T4963] ext4: Unknown parameter 'fsmagic' [ 101.646781][ T4967] loop4: detected capacity change from 0 to 512 [ 101.663564][ T4967] EXT4-fs: dax option not supported [ 101.743905][ T4969] bond1: entered promiscuous mode [ 101.749178][ T4969] bond1: entered allmulticast mode [ 101.760924][ T4974] netlink: 256 bytes leftover after parsing attributes in process `syz.1.393'. [ 101.762407][ T4969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.782178][ T4969] bond1 (unregistering): Released all slaves [ 101.797731][ T4977] loop4: detected capacity change from 0 to 1024 [ 101.860562][ T4977] lo speed is unknown, defaulting to 1000 [ 102.934881][ T4992] loop3: detected capacity change from 0 to 512 [ 102.954828][ T4992] EXT4-fs: Ignoring removed oldalloc option [ 102.975252][ T4995] loop1: detected capacity change from 0 to 512 [ 102.982630][ T4995] EXT4-fs (loop1): unsupported inode size: 22272 [ 102.989123][ T4995] EXT4-fs (loop1): blocksize: 1024 [ 102.998507][ T4992] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.398: Parent and EA inode have the same ino 15 [ 103.071509][ T4992] EXT4-fs (loop3): Remounting filesystem read-only [ 103.078118][ T4992] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 103.115181][ T5006] loop4: detected capacity change from 0 to 512 [ 103.147121][ T4992] EXT4-fs (loop3): 1 orphan inode deleted [ 103.163685][ T5006] EXT4-fs: dax option not supported [ 103.167189][ T4992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.195179][ T4992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.257683][ T5016] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 103.268609][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 103.268628][ T29] audit: type=1400 audit(2000000013.660:2511): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.329064][ T5023] capability: warning: `syz.1.407' uses 32-bit capabilities (legacy support in use) [ 103.526495][ T5036] loop4: detected capacity change from 0 to 512 [ 104.121228][ T5036] EXT4-fs (loop4): unsupported inode size: 22272 [ 104.127775][ T5036] EXT4-fs (loop4): blocksize: 1024 [ 104.152975][ T5043] loop0: detected capacity change from 0 to 256 [ 104.357223][ T5043] FAT-fs (loop0): codepage cp1251 not found [ 104.391079][ T5039] lo speed is unknown, defaulting to 1000 [ 104.627407][ T23] IPVS: starting estimator thread 0... [ 104.830716][ T5049] IPVS: using max 2352 ests per chain, 117600 per kthread [ 105.340160][ T5058] program syz.1.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.380936][ T5054] bond1: entered promiscuous mode [ 105.386060][ T5054] bond1: entered allmulticast mode [ 105.433348][ T5054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.449708][ T5060] loop1: detected capacity change from 0 to 512 [ 105.471494][ T5057] loop4: detected capacity change from 0 to 1024 [ 105.569069][ T29] audit: type=1326 audit(2000000015.440:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.594994][ T29] audit: type=1326 audit(2000000015.440:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.619332][ T29] audit: type=1326 audit(2000000015.730:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.642899][ T29] audit: type=1326 audit(2000000015.730:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.666502][ T29] audit: type=1400 audit(2000000015.740:2516): avc: denied { write } for pid=5022 comm="syz.1.407" name="netstat" dev="proc" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 105.690145][ T29] audit: type=1326 audit(2000000015.750:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.716743][ T29] audit: type=1326 audit(2000000015.750:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.740824][ T29] audit: type=1326 audit(2000000015.750:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.770463][ T29] audit: type=1326 audit(2000000015.750:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fafbe929 code=0x7ffc0000 [ 105.781242][ T5054] bond1 (unregistering): Released all slaves [ 105.878438][ T5060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.930563][ T5060] EXT4-fs (loop1): 1 truncate cleaned up [ 105.936849][ T5060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.003042][ T5069] loop3: detected capacity change from 0 to 512 [ 106.023465][ T5057] lo speed is unknown, defaulting to 1000 [ 106.075059][ T5069] EXT4-fs (loop3): 1 orphan inode deleted [ 106.089968][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 106.109255][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.130923][ T5074] loop0: detected capacity change from 0 to 512 [ 106.161523][ T5069] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.197535][ T5074] EXT4-fs: Ignoring removed oldalloc option [ 106.214555][ T5079] loop2: detected capacity change from 0 to 512 [ 106.232391][ T5079] EXT4-fs: dax option not supported [ 106.276818][ T5081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.420'. [ 106.312152][ T5074] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.421: Parent and EA inode have the same ino 15 [ 106.332548][ T5069] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.340185][ T5079] loop2: detected capacity change from 0 to 512 [ 106.347930][ T5074] EXT4-fs (loop0): Remounting filesystem read-only [ 106.354744][ T5074] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 106.385462][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.401296][ T5079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.410808][ T5074] EXT4-fs (loop0): 1 orphan inode deleted [ 106.439809][ T5074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.456140][ T5085] loop4: detected capacity change from 0 to 512 [ 106.462976][ T5074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.464344][ T5085] EXT4-fs: dax option not supported [ 106.479421][ T5079] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 106.493783][ T5079] System zones: 0-2, 18-18, 34-34 [ 106.508485][ T5079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.555145][ T5092] netlink: 256 bytes leftover after parsing attributes in process `syz.0.425'. [ 106.566909][ T5079] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.619831][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.629653][ T5098] Cannot find add_set index 0 as target [ 106.639629][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.704381][ T5104] loop1: detected capacity change from 0 to 1024 [ 106.727388][ T5108] loop2: detected capacity change from 0 to 512 [ 106.727868][ T5104] EXT4-fs: Ignoring removed nobh option [ 106.736528][ T5108] EXT4-fs: dax option not supported [ 106.739900][ T5104] EXT4-fs: Ignoring removed bh option [ 106.766163][ T5108] loop2: detected capacity change from 0 to 512 [ 106.800125][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.829837][ T5108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.893390][ T5115] loop0: detected capacity change from 0 to 128 [ 106.893668][ T5104] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 107.025806][ T5118] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 107.072661][ T5108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 107.120487][ T5108] System zones: 0-2, 18-18, 34-34 [ 107.144606][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.224459][ T5108] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.371467][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.384058][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.413908][ T5125] loop1: detected capacity change from 0 to 512 [ 107.426855][ T5128] loop2: detected capacity change from 0 to 256 [ 107.447821][ T5125] EXT4-fs (loop1): 1 orphan inode deleted [ 107.459782][ T1668] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 107.460163][ T5125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.485103][ T5125] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.502224][ T5125] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.512070][ T5125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.434'. [ 107.590249][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.644466][ T5137] loop4: detected capacity change from 0 to 512 [ 107.651141][ T5135] loop1: detected capacity change from 0 to 512 [ 107.653546][ T5137] EXT4-fs: dax option not supported [ 107.669751][ T5135] EXT4-fs: Ignoring removed oldalloc option [ 107.710747][ T5135] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.438: Parent and EA inode have the same ino 15 [ 107.742093][ T5143] netlink: 256 bytes leftover after parsing attributes in process `syz.4.441'. [ 107.751253][ T5135] EXT4-fs (loop1): Remounting filesystem read-only [ 107.757841][ T5135] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 107.769210][ T5135] EXT4-fs (loop1): 1 orphan inode deleted [ 107.793147][ T5140] loop3: detected capacity change from 0 to 4096 [ 107.808758][ T5135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.809015][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.875147][ T5154] loop2: detected capacity change from 0 to 2048 [ 107.882141][ T5155] loop4: detected capacity change from 0 to 512 [ 107.894355][ T5155] EXT4-fs: dax option not supported [ 107.919963][ T5154] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.952254][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.017470][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 108.069901][ T5169] loop2: detected capacity change from 0 to 1024 [ 108.076971][ T5169] EXT4-fs: Ignoring removed nobh option [ 108.082893][ T5169] EXT4-fs: Ignoring removed bh option [ 108.133966][ T5173] loop1: detected capacity change from 0 to 512 [ 108.157023][ T5169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.160645][ T5173] EXT4-fs (loop1): 1 orphan inode deleted [ 108.176024][ T5173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.189322][ T5173] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.189746][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 108.214932][ T5173] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.224408][ T5173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.450'. [ 108.226053][ T5169] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 108.290268][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.335483][ T5169] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 108.435238][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.503701][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.759714][ T5181] loop1: detected capacity change from 0 to 136 [ 108.776775][ T5184] loop2: detected capacity change from 0 to 512 [ 108.783968][ T5181] iso9660: Bad value for 'session' [ 108.803590][ T5184] EXT4-fs: dax option not supported [ 108.816288][ T10] IPVS: starting estimator thread 0... [ 108.824603][ T5188] loop0: detected capacity change from 0 to 128 [ 108.861402][ T5188] FAULT_INJECTION: forcing a failure. [ 108.861402][ T5188] name failslab, interval 1, probability 0, space 0, times 0 [ 108.865505][ T5192] netlink: 256 bytes leftover after parsing attributes in process `syz.3.456'. [ 108.874850][ T5188] CPU: 1 UID: 0 PID: 5188 Comm: syz.0.454 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 108.874879][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.874893][ T5188] Call Trace: [ 108.874900][ T5188] [ 108.874922][ T5188] __dump_stack+0x1d/0x30 [ 108.874949][ T5188] dump_stack_lvl+0xe8/0x140 [ 108.874974][ T5188] dump_stack+0x15/0x1b [ 108.874998][ T5188] should_fail_ex+0x265/0x280 [ 108.875044][ T5188] should_failslab+0x8c/0xb0 [ 108.875075][ T5188] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 108.875121][ T5188] ? fat_alloc_inode+0x38/0xc0 [ 108.875170][ T5188] ? __pfx_fat_alloc_inode+0x10/0x10 [ 108.875220][ T5188] fat_alloc_inode+0x38/0xc0 [ 108.875258][ T5188] ? __pfx_fat_alloc_inode+0x10/0x10 [ 108.875330][ T5188] alloc_inode+0x3d/0x170 [ 108.875374][ T5188] new_inode+0x1d/0xe0 [ 108.875400][ T5188] fat_build_inode+0x169/0x290 [ 108.875446][ T5188] vfat_lookup+0x15c/0x2d0 [ 108.875491][ T5188] ? __pfx_vfat_lookup+0x10/0x10 [ 108.875596][ T5188] path_openat+0xcf0/0x2170 [ 108.875648][ T5188] do_filp_open+0x109/0x230 [ 108.875698][ T5188] do_sys_openat2+0xa6/0x110 [ 108.875737][ T5188] __x64_sys_openat+0xf2/0x120 [ 108.875778][ T5188] x64_sys_call+0x1af/0x2fb0 [ 108.875809][ T5188] do_syscall_64+0xd2/0x200 [ 108.875832][ T5188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.875941][ T5188] ? clear_bhb_loop+0x40/0x90 [ 108.875969][ T5188] ? clear_bhb_loop+0x40/0x90 [ 108.876000][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.876029][ T5188] RIP: 0033:0x7f55c1a5e929 [ 108.876049][ T5188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.876209][ T5188] RSP: 002b:00007f55c00c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.876234][ T5188] RAX: ffffffffffffffda RBX: 00007f55c1c85fa0 RCX: 00007f55c1a5e929 [ 108.876251][ T5188] RDX: 0000000000105042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 108.876268][ T5188] RBP: 00007f55c00c7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.876328][ T5188] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 108.876345][ T5188] R13: 0000000000000000 R14: 00007f55c1c85fa0 R15: 00007ffe825558e8 [ 108.876368][ T5188] [ 108.945725][ T5194] loop2: detected capacity change from 0 to 512 [ 108.968469][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 108.968488][ T29] audit: type=1326 audit(2000000019.330:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 109.008448][ T5190] IPVS: using max 2160 ests per chain, 108000 per kthread [ 109.011744][ T29] audit: type=1326 audit(2000000019.330:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 109.020155][ T5194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.022764][ T29] audit: type=1326 audit(2000000019.330:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 109.101667][ T5200] loop3: detected capacity change from 0 to 2048 [ 109.107393][ T29] audit: type=1326 audit(2000000019.330:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 109.129540][ T5194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 109.146290][ T29] audit: type=1326 audit(2000000019.330:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff52219e929 code=0x7ffc0000 [ 109.155473][ T5194] System zones: [ 109.177844][ T29] audit: type=1326 audit(2000000019.330:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff52219e963 code=0x7ffc0000 [ 109.177882][ T29] audit: type=1326 audit(2000000019.330:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff52219d3df code=0x7ffc0000 [ 109.187036][ T5194] 0-2, 18-18, 34-34 [ 109.189767][ T5200] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.211853][ T29] audit: type=1326 audit(2000000019.350:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff52219e9b7 code=0x7ffc0000 [ 109.237319][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.242131][ T29] audit: type=1326 audit(2000000019.350:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff52219d290 code=0x7ffc0000 [ 109.252105][ T5194] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.273981][ T29] audit: type=1326 audit(2000000019.350:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff52219e52b code=0x7ffc0000 [ 109.495252][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 109.539366][ T5210] loop4: detected capacity change from 0 to 512 [ 109.582132][ T5214] loop3: detected capacity change from 0 to 512 [ 109.629442][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.654357][ T5216] siw: device registration error -23 [ 109.664511][ T5214] EXT4-fs: Ignoring removed oldalloc option [ 109.671915][ T5210] EXT4-fs (loop4): 1 orphan inode deleted [ 109.689632][ T1863] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 109.713284][ T5214] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.460: Parent and EA inode have the same ino 15 [ 109.727829][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.744758][ T5214] EXT4-fs (loop3): Remounting filesystem read-only [ 109.751506][ T5214] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 109.763382][ T5210] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.785225][ T5214] EXT4-fs (loop3): 1 orphan inode deleted [ 109.817471][ T5210] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.835419][ T5214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.850193][ T5222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.462'. [ 109.860987][ T5221] Cannot find add_set index 0 as target [ 109.925321][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.941389][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.042476][ T5233] loop4: detected capacity change from 0 to 512 [ 110.052913][ T5235] netlink: 'syz.3.469': attribute type 3 has an invalid length. [ 110.064730][ T5233] EXT4-fs: dax option not supported [ 110.073148][ T5237] netlink: 256 bytes leftover after parsing attributes in process `syz.1.470'. [ 110.165077][ T5246] loop3: detected capacity change from 0 to 1024 [ 110.182353][ T5246] EXT4-fs: Ignoring removed nobh option [ 110.188050][ T5246] EXT4-fs: Ignoring removed bh option [ 110.211220][ T5246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.231419][ T5246] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 110.263462][ T5246] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.473: Allocating blocks 497-513 which overlap fs metadata [ 110.459362][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.514112][ T5254] netlink: 'syz.0.474': attribute type 3 has an invalid length. [ 110.612692][ T5256] loop3: detected capacity change from 0 to 136 [ 110.661405][ T5256] iso9660: Bad value for 'session' [ 110.706390][ T5258] Cannot find add_set index 0 as target [ 110.728536][ T5256] loop3: detected capacity change from 0 to 512 [ 110.735487][ T5256] EXT4-fs: Ignoring removed i_version option [ 110.742617][ T5256] ext4: Unknown parameter 'fsmagic' [ 110.771984][ T5260] loop0: detected capacity change from 0 to 2048 [ 110.811160][ T5260] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.844253][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 110.879058][ T5273] netlink: 256 bytes leftover after parsing attributes in process `syz.2.482'. [ 110.889116][ T5271] loop0: detected capacity change from 0 to 256 [ 110.925680][ T5278] loop2: detected capacity change from 0 to 512 [ 110.935391][ T5278] EXT4-fs: dax option not supported [ 111.094925][ T5278] loop2: detected capacity change from 0 to 512 [ 111.169893][ T5286] netlink: 'syz.0.487': attribute type 3 has an invalid length. [ 111.248171][ T5288] loop1: detected capacity change from 0 to 512 [ 111.256635][ T5278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.267849][ T5279] loop3: detected capacity change from 0 to 128 [ 111.363359][ T5278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 111.374762][ T5288] EXT4-fs (loop1): 1 orphan inode deleted [ 111.382932][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.407886][ T5278] System zones: 0-2, 18-18, 34-34 [ 111.443512][ T5278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.485305][ T5288] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.520487][ T5278] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.569855][ T1813] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 111.588426][ T5300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.486'. [ 111.605330][ T5288] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.644822][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.661229][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.696225][ T5305] loop1: detected capacity change from 0 to 256 [ 111.754293][ T5308] loop2: detected capacity change from 0 to 512 [ 111.779655][ T5308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.809033][ T5308] EXT4-fs (loop2): 1 truncate cleaned up [ 111.818837][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.938424][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.042940][ T5324] loop3: detected capacity change from 0 to 512 [ 112.050010][ T5324] EXT4-fs: Ignoring removed i_version option [ 112.169753][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.184208][ T5324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.246979][ T5325] loop2: detected capacity change from 0 to 4096 [ 112.299760][ T5325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.444088][ T5334] loop1: detected capacity change from 0 to 1024 [ 112.482522][ T5334] EXT4-fs: Ignoring removed nobh option [ 112.488304][ T5334] EXT4-fs: Ignoring removed bh option [ 112.521402][ T5336] loop0: detected capacity change from 0 to 512 [ 112.577602][ T5336] EXT4-fs: dax option not supported [ 112.590928][ T3299] ================================================================== [ 112.599081][ T3299] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 112.606145][ T3299] [ 112.608487][ T3299] write to 0xffff8881037ade04 of 4 bytes by task 3736 on cpu 1: [ 112.616227][ T3299] shmem_mknod+0x137/0x180 [ 112.620672][ T3299] shmem_create+0x34/0x50 [ 112.625028][ T3299] path_openat+0x1105/0x2170 [ 112.629655][ T3299] do_filp_open+0x109/0x230 [ 112.634187][ T3299] do_sys_openat2+0xa6/0x110 [ 112.639151][ T3299] __x64_sys_openat+0xf2/0x120 [ 112.643966][ T3299] x64_sys_call+0x1af/0x2fb0 [ 112.648581][ T3299] do_syscall_64+0xd2/0x200 [ 112.653105][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.659120][ T3299] [ 112.661452][ T3299] read to 0xffff8881037ade04 of 4 bytes by task 3299 on cpu 0: [ 112.669008][ T3299] fill_mg_cmtime+0x5b/0x260 [ 112.673877][ T3299] generic_fillattr+0x24a/0x340 [ 112.678742][ T3299] shmem_getattr+0x181/0x200 [ 112.683348][ T3299] vfs_getattr_nosec+0x146/0x1e0 [ 112.688570][ T3299] vfs_statx+0x113/0x390 [ 112.693299][ T3299] vfs_fstatat+0x115/0x170 [ 112.697741][ T3299] __se_sys_newfstatat+0x55/0x260 [ 112.702989][ T3299] __x64_sys_newfstatat+0x55/0x70 [ 112.708220][ T3299] x64_sys_call+0x2c22/0x2fb0 [ 112.712917][ T3299] do_syscall_64+0xd2/0x200 [ 112.717445][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.723354][ T3299] [ 112.725692][ T3299] value changed: 0x3b60b3ac -> 0x00073684 [ 112.731418][ T3299] [ 112.733750][ T3299] Reported by Kernel Concurrency Sanitizer on: [ 112.739912][ T3299] CPU: 0 UID: 0 PID: 3299 Comm: udevd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 112.750167][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.760238][ T3299] ================================================================== [ 112.790596][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.822765][ T5336] loop0: detected capacity change from 0 to 512 [ 112.835245][ T5336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.844849][ T5334] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.500: Allocating blocks 497-513 which overlap fs metadata [ 112.872921][ T5336] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 112.881325][ T5336] System zones: 0-2, 18-18, 34-34 [ 112.882886][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.896500][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.913118][ T5332] EXT4-fs (loop1): pa ffff888106a64150: logic 16, phys. 321, len 12 [ 112.913716][ T5336] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.922094][ T5332] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 112.955047][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.987440][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.