last executing test programs: 4.843452348s ago: executing program 3 (id=731): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000240), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000010000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4.80098532s ago: executing program 3 (id=733): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000100)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020"], 0x0) poll(0x0, 0x0, 0x9) socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.024236749s ago: executing program 1 (id=734): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 3.973294232s ago: executing program 1 (id=737): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000200)="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", 0xffc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @remote, 0xfffc, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7, 0x0, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 3.923767064s ago: executing program 4 (id=738): epoll_create(0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) 3.79403657s ago: executing program 0 (id=742): r0 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xda90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="eebd73c460f8a4a8", 0x8}], 0x1) read$eventfd(r0, &(0x7f0000002100), 0x8) eventfd2(0x0, 0x0) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xda90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="eebd73c460f8a4a8", 0x8}], 0x1) (async) read$eventfd(r0, &(0x7f0000002100), 0x8) (async) 3.781626171s ago: executing program 3 (id=744): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r6 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0}, 0x0) 3.737947903s ago: executing program 2 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000330b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000002000000000000000000000000000000000000000080000000000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x448, 0xfabc, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000010c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x185, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x801c1, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x67b2, 0x3, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x3, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x2, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x753, 0x8cf2, 0x3, 0x0, 0x10000, 0x3fa, 0x7f, 0x6, 0x6, 0x26, 0x80000001, 0xfdffffff, 0x2, 0xfffffffe, 0x10, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x1, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) write$UHID_CREATE2(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="e8c56083ec07efa13d5d777e63ba11132bd6e58ad2cf60f6e143d0e0b50d9537f811df645769d6141b24ec0ffa8488741c49019a30"], 0x118) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f00000000c0)=[{r7, 0x480}], 0x1, 0xf0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000040)=""/4130, &(0x7f0000000000)=0x1022) 3.666013727s ago: executing program 0 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1e}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x10) syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, 0xb0a, &(0x7f0000000c00)="$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") r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a4c000000090a3f0400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000440ffffff00140000001100010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x40080}, 0x200400d1) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000003080)="$eJzs3U1oHPfZAPBn9EqxooAJeUtqjOOM7RRs6iq7q0SpyCHdrEbyJNKu2F0Vm1KSEMvFWPkgJrTxoYkvST8pPfWY5hpy6a3QQ6GHtqdCc+ilh0Igp5JCA6WlFFRmdtdeyfpyLNlJ+vuJ6D8788x/npmdzLOz1swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY7ZSqSYHI2L5bLq1xmy7tbjN9EF/v17XbLPciKT4L8bH41Bv1KEvXJ98f/HreBzpvToS4yODCfc+/v+jI4P5t0nokzq2y7gk4o0ioUvPra6uvLIPidxGP/jVTc/yr7Xi93zWzDutfLE+n6V5p5XOTE9XHj4z10nn8oWsc67TzRbTRjurd1vt9GTjVFqdmZlKs8lzreXm/Gx9IRuMfOwrtUplOn1qcimrtzut5sNPTXYaZ/KFhbw5X8bUKt+OIuaxYkd8Ou+m3ay+mKYXLq6uTO2UahFUXTfmwLod58hD93746gcfX1wpdsitOkn6+1+tWq3VqtOPzjz6WKUyWqvU1o+obBDXImIkoojYl52Wz5A9OnLDrRsp6v/HScRC5NGM5TgbaaQxUv6+/jMW4zEb7WjFYvH6T2Mbpt9Q/7/08N/+sN1yh+v/oMofuj75cJT1/2jv1dEYL5rxuHLPuvpfHJQ35rF/P833etkMj7scr8WVuBTPxWqsxkq8chvz+UQ/I3vb33xk0Yw8OtGKPBajXo5J+2PSmInpmI5KPBNnYi46kcZc5LEQWXTiXHR+ONp/vxvRjizq0Y1WtCONk9GIU5FGNWZiJqYijSwm41y0YjmaMR+zUS97uRAXy+0+tSGv+7/7bPLGHz98uxi+FlTdZkWS4sNcEfT3bYL6xfzB2FX9v7u/busj1P/Pm/H++7zb+L04bMOeWCvP/0fvdBoAAADAPkrKb9+TiBiLB8qhuXwh+8adTgsAAADYQ+XfNR8pmrFi6IFIivP/yiaR79/23AAAAIC9kZTX2CURMREP9oYGl0tt9iUAAAAA8BlU/vv/0aKZiHi9HOH8HwAAAD5nvjd0j/0YvsfuB3f179HbWTqQ/F8/eunsQ8kL9WKo/kJ/XL/5+rUeu3OHk4P9TspmevTKPUlEjDayI8ng7pf/OdBrPyp7OHz9BoQb87h2r992eyy5unUCsX0C5av4URzrxRw732vPD6b0ljIxly9kk43WwuPVpP/lSPfVFy9+J6JY+vebiweTuHBxdWXy+ZdWz5e5XC16ufpC//bwyU3kstbfAvHA5ms8Vl6I0V/uRG+5leH17z8SYWT7ZSbDy3wzjvdijk/02on16z9eLLM6+Xg16vWDI93sbPfVtaG172dRvcU1fzNO9GJOnDzRazbJorYuixdvzKI2nMXutsWus3j72Otn//HbVpJN7ZTF1C1mAXCnXCjv+nO9Ct1dVqF/r/UU9X9D3R3c1fymjnIXrn/KGMw/VOtGY2+q+5txshdzsvd5YvTwJnWlsskR/eWLL/+uf0R/5N2f/fybR3//i62r21qyfRbvxqleYL+J+35zQxZFF9Vyy/54Q1V9p5jjnS2ramehlsRYjPSmDCavfGvlxVptarrySKXyaC3Gyo8K/UbtAWATOz5jZxdP4Xlk87PqGFS8+679ScFkPB8vxWqcj9Pl1QYR8eDmvU4M/RnC6R3OWieGnvByeodzy+uxtY2xB04ksUXs1NAW++JPy+af+/eeAMB+O75DHd5N/T+9w3n3+lp+qvfg3MHZcWxdyzfz1f3eIADwPyBrf5RMdN9K2u186ZnqzEy13j2Tpe1W4+m0nc/OZ2ne7Gbtxpl6cz5Ll9qtbqsx+OJ4NuukneWlpVa7m8612ulSq5OfLZ/8nvYf/d7JFuvNbt7oLC1k9U6WNlrNbr3RTWfzTiNdWn5yIe+cydrlzJ2lrJHP5Y16N281005rud3IJtO0k2VDgfls1uzmc3kx2EyX2vlivX01IhaWF7N0Nus02vlSt9XrcLCsvDnXai+W3U7euPp/vd3bGwA+DS6/duXSc6urK6+sH1hLNo7ZfODPu4i5HLF2p1cTABgyXKUBAAAAAAAAAAAAAIBPpxsv1yvG7nhJ3/DAWNxE8IaBA/FJ5vr8Dnz5vd7bshcd3ko/d697T+/q7yx3fvvc9MCzTzxxaauYJ18/dOYvWcTO/Wz+f8rle27Ye+OtgxF3/fInvTFfu11r+n701iJGb2r2tWSbmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf03AAD//2tvTu0=") r4 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) 3.136355753s ago: executing program 1 (id=747): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x3, 0x40000}, 0xffffff6f) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.316863154s ago: executing program 0 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2.197890511s ago: executing program 1 (id=749): epoll_create(0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) 2.177171061s ago: executing program 4 (id=750): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000061118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2.127113734s ago: executing program 2 (id=751): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000100)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020"], 0x0) poll(0x0, 0x0, 0x9) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.975557751s ago: executing program 4 (id=752): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xcf43, 0x4c8, 0x5, 0x95ff, 0xfd, "bd52e3ff00"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40400) r3 = socket$inet6(0xa, 0x1, 0x0) splice(r2, 0xfffffffffffffffc, r3, 0x0, 0x81, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x6) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) 1.917990834s ago: executing program 0 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) (fail_nth: 6) 1.661052317s ago: executing program 3 (id=754): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000100)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020"], 0x0) poll(0x0, 0x0, 0x9) socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.111634295s ago: executing program 0 (id=755): getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000240)) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) 897.892165ms ago: executing program 1 (id=756): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000330b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000002000000000000000000000000000000000000000080000000000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x448, 0xfabc, 0x60, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000010c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x185, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x801c1, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x67b2, 0x3, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x3, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x2, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x753, 0x8cf2, 0x3, 0x0, 0x10000, 0x3fa, 0x7f, 0x6, 0x6, 0x26, 0x80000001, 0xfdffffff, 0x2, 0xfffffffe, 0x10, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x1, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) write$UHID_CREATE2(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="e8c56083ec07efa13d5d777e63ba11132bd6e58ad2cf60f6e143d0e0b50d9537f811df645769d6141b24ec0ffa8488741c49019a30"], 0x118) r6 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x480}], 0x1, 0xf0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000040)=""/4130, &(0x7f0000000000)=0x1022) 897.677225ms ago: executing program 4 (id=757): lsetxattr$security_selinux(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50) 888.801276ms ago: executing program 0 (id=758): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0xb83d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_read_part_table(0x5d6, &(0x7f0000000300)="$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") r5 = socket(0x1, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$sock_ifreq(r5, 0x891f, &(0x7f0000000740)={'ipvlan0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000040)='\x00\xba+\x11\x8a\xcf\r\xbe\xe9L\xc3\x1d\x84P\xd1D\xc3=\n\xa0\x9eN\x80\xcaS\xb0G%\xf0\xee0\xa8(\xe0\b\xe8Yvc\xed$\xac,\xd7\xe9H\xc4\xc0\x845w\xc2\xe6\xa3\xcc4\xd1\x12\xdeu\xde\x1e\xfa\x19\xb0\bu\x0f\xfc\x17CI\x8f\xa7n\xe8\x16\xe3P\xf9\xe2\xe7^\v7\x02\xfb\x144\xa9Y\x9b\x8d\x1fs\xfa\xbc\xea&\x807-\xb3`\x87\xb7\\o\xf4\xb4W\xf0b%\xc1\xe0h\x81\xed\x10\xd9\xbd\x10A^:\x88\xe54\xc4d\v\x91\xd8\x1d\xc2u3\xe8\xa6\xba\x98K\x9c!\xb4\xbb\xb44W\xe7m\xf0+=\f\xb8zg\xa0r\x1c(D\xb9\xbbS\xab^\xb7FMwQ\'B\xdf\xeb\xad\xddWS\xaa\x94\xd8o\xb4\xbdq\xf7\xf5Qs\xd5\xfc\x05|h\\\x88E\x10_\x1c\x00'/219, 0x0) 816.010649ms ago: executing program 4 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1e}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x10) syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, 0xb0a, &(0x7f0000000c00)="$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") r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a4c000000090a3f0400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000440ffffff00140000001100010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x40080}, 0x200400d1) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000003080)="$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") r4 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) 613.28884ms ago: executing program 2 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd28, 0x25dfdbff, {0x80, 0x20, 0x10, 0x40, 0xfc, 0x2, 0x0, 0x2, 0x1000}, ["", ""]}, 0x1c}}, 0x20008000) 476.381806ms ago: executing program 3 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 346.022203ms ago: executing program 2 (id=762): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 256.315697ms ago: executing program 2 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 159.081872ms ago: executing program 3 (id=764): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000aefeffff180000000700000005000000000700000000000000000000000a0000000000002e00005f00"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10000, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001880)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039df80d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb150000000000000080785eff87c92b65a3ba4bf18f5d459397fc39ac6f228f76ba172e59978288ef03e4"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, r4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004880)={0x38, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="00020000", @ANYRES16=r9, @ANYBLOB="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"], 0x200}}, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r12, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18580000040000000000000000000000b9b27edbcc80ff9fa8d71660bda7f688d5d1e2240b441bd10ea12255365481fd017aca35933688034f3cbc0d5a440808dc8ddcb59046739f3aa5afc86bd5de3bd341c802620e71565d81e018204ee9e83824bdf1016a959c908c04133b82e17fed64e759519197175716b6df877a019cf7a2261054dd8451c7d5302ead3874fd86b0979764bfaff2670ec629e7a7886f80042b21a82a78cc66bbfe653ec20b55be878b60900a8ba385c7528dcbf18f18f08e81b771cc2df13ed36042cd86c67e20aadee4feb618a0bbb7966a055e71a1ff347d8426b674e2f7ac8ce2244719ac5f5ded1c8fda5bd78db46f2bea10415d3b8b8cb576514e4944b550a5105f150da12e6fc277679f952c700cf8f3bb0f96b71e80ed0d44b60d5d0b0738f6f34375ffbcdd28af0afa9f71884a0ec806cfb51b0ce20e346e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 156.082992ms ago: executing program 4 (id=765): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000800010000000000000000000700000a34000000060a010400000000000000000a000001200004801c0001800900010068617368000000000c0300000000024000000014140000001101010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0xffffffffffffffff, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}], 0x1, 0x0, &(0x7f0000000240)={[0x2]}, 0x8) io_uring_setup(0x1f0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000000)={{@_ha_fsid={[0x2, 0x1ff]}, {0x1, 0x6, 0x400, 0x80}}, {{[0x82, 0x10001, 0x0, 0x8]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000740)=[{{@_ha_fsid={[0xa1, 0x4]}, {0x3ff, 0x8, 0x2, 0xc08}}, 0x1, 0x0, 'cpuset.effective_cpus\x00'}, {{@align=0x40, {0x7f, 0xb735, 0x2f2, 0x2}}, 0x2, 0x0, ',#$\x00'}, {{@_ha_fsid={[0xe, 0x8]}, {0x0, 0x8, 0x2, 0x101}}, 0x20080000, 0x0, '/dev/infiniband/rdma_cm\x00'}]}}) unshare(0x20000680) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200005, 0x0) accept$packet(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) r7 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f00000037c0)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESOCT=r7, @ANYBLOB="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", @ANYRES32=r7, @ANYRES64, @ANYBLOB="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", @ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX=r7], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 86.011286ms ago: executing program 2 (id=766): epoll_create(0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000280)=""/97}, {&(0x7f0000000580)=""/218}, {&(0x7f0000000800)=""/56}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000cc0)=""/151}], 0x0, &(0x7f0000000e00)=""/164}, 0x5}, {{0x0, 0x4a, &(0x7f0000001140)=[{&(0x7f0000000ec0)=""/126}, {&(0x7f0000000f40)=""/239}, {&(0x7f0000001040)=""/64}, {&(0x7f0000001080)=""/133}], 0x0, &(0x7f0000001180)=""/152}, 0x10001}, {{&(0x7f0000001240)=@alg, 0x0, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/73}], 0x0, &(0x7f0000001380)=""/237}, 0xcc3a6d5}], 0x5d, 0x2, 0x0) syz_io_uring_setup(0x47a8, 0x0, &(0x7f0000000180), &(0x7f0000000700)) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) io_setup(0x239f, &(0x7f0000000380)) (async) socket(0x2, 0x3, 0x8) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x100020da, 0x7, 0xa, 0x20004, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x118) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008032, 0xffffffffffffffff, 0xb89de000) (async) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000, 0x1}], 0x1) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0x420180, 0x0) (async) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a80)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000740)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000100)) kernel console output (not intermixed with test programs): not started [ 53.986737][ T314] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.010771][ T3787] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.024868][ T3787] vhci_hcd vhci_hcd.1: invalid port number 96 [ 54.037705][ T3787] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 54.211299][ T3797] 9p: Bad value for 'timeout' [ 54.360183][ T3803] loop2: detected capacity change from 0 to 512 [ 54.369120][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.442963][ T3807] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 54.567630][ T3807] macvlan1: entered allmulticast mode [ 54.577194][ T3807] veth1_vlan: entered allmulticast mode [ 54.588277][ T3807] team0: Port device macvlan1 added [ 54.886685][ T3813] Cannot find add_set index 0 as target [ 55.723065][ T3820] loop1: detected capacity change from 0 to 1024 [ 55.742514][ T3820] EXT4-fs: test_dummy_encryption option not supported [ 56.801816][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.924214][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.938920][ T10] IPVS: starting estimator thread 0... [ 57.951560][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.088261][ T3841] IPVS: using max 2736 ests per chain, 136800 per kthread [ 58.234653][ T3852] loop4: detected capacity change from 0 to 512 [ 58.270121][ T3852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 58.293922][ T3852] System zones: 0-2, 18-18, 34-34 [ 58.308465][ T3852] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 58.323201][ T3852] EXT4-fs (loop4): Remounting filesystem read-only [ 58.329769][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 58.329803][ C1] EXT4-fs (loop4): initial error at time 1774223171: ext4_mb_generate_buddy:1315 [ 58.329820][ C1] EXT4-fs (loop4): last error at time 1774223171: ext4_mb_generate_buddy:1315 [ 58.355115][ T3852] EXT4-fs (loop4): 1 truncate cleaned up [ 58.384381][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.410562][ T3852] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.436416][ T58] __quota_error: 66 callbacks suppressed [ 58.436428][ T58] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.438300][ T3852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.456867][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.474127][ T58] Quota error (device loop4): write_blk: dquota write failed [ 58.481606][ T58] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 58.492948][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.512216][ T3865] loop1: detected capacity change from 0 to 512 [ 58.521999][ T58] Quota error (device loop4): write_blk: dquota write failed [ 58.546945][ T58] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 58.566805][ T58] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.579610][ T3865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.590991][ T58] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 58.610850][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.614532][ T58] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.632810][ T3865] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.649205][ T58] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.662507][ T3865] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.679978][ T3852] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.696692][ T3852] vhci_hcd vhci_hcd.1: invalid port number 96 [ 58.712059][ T3852] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 58.722076][ T3865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.723486][ T3874] loop3: detected capacity change from 0 to 8192 [ 58.847287][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.861151][ T3879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.967731][ T3879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.028256][ T28] audit: type=1400 audit(1774223172.245:245): avc: denied { ioctl } for pid=3883 comm="syz.1.100" path="socket:[5115]" dev="sockfs" ino=5115 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.110787][ T3885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'. [ 59.120944][ T3885] Cannot find add_set index 0 as target [ 59.521582][ T28] audit: type=1400 audit(1774223172.565:246): avc: denied { create } for pid=3883 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.609722][ T3901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 59.940695][ T3914] loop2: detected capacity change from 0 to 8192 [ 60.028503][ T3923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.333053][ T3934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.617586][ T3952] loop3: detected capacity change from 0 to 512 [ 60.638606][ T3955] loop4: detected capacity change from 0 to 512 [ 60.645100][ T3952] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 60.653451][ T3952] System zones: 0-2, 18-18, 34-34 [ 60.657258][ T3955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.667580][ T3952] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 60.687246][ T3952] EXT4-fs (loop3): Remounting filesystem read-only [ 60.695180][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.707647][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.707666][ C1] EXT4-fs (loop3): initial error at time 1774223173: ext4_mb_generate_buddy:1315 [ 60.707690][ C1] EXT4-fs (loop3): last error at time 1774223173: ext4_mb_generate_buddy:1315 [ 60.737742][ T3952] EXT4-fs (loop3): 1 truncate cleaned up [ 60.767270][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.769976][ T3955] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.790197][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.800948][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.811559][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.828772][ T3955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.839186][ T3952] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.869672][ T3952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.912927][ T3952] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.936981][ T3952] vhci_hcd vhci_hcd.1: invalid port number 96 [ 60.943257][ T3952] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 60.989391][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.007457][ T3972] loop3: detected capacity change from 0 to 512 [ 61.021204][ T3972] EXT4-fs: Ignoring removed nobh option [ 61.034105][ T3972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.046905][ T3972] EXT4-fs (loop3): 1 truncate cleaned up [ 61.089625][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.109637][ T3977] netlink: 277 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.121203][ T3977] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 61.141347][ T3977] macvlan1: entered allmulticast mode [ 61.149441][ T3977] veth1_vlan: entered allmulticast mode [ 61.161182][ T3977] team0: Port device macvlan1 added [ 61.591207][ T3983] loop4: detected capacity change from 0 to 1024 [ 61.612271][ T3983] EXT4-fs: test_dummy_encryption option not supported [ 61.832940][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.957287][ T3998] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 62.280710][ T4011] loop3: detected capacity change from 0 to 512 [ 62.438274][ T4011] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 62.456500][ T4011] System zones: 0-2, 18-18, 34-34 [ 62.464007][ T4011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 62.478657][ T4011] EXT4-fs (loop3): Remounting filesystem read-only [ 62.485646][ T4011] EXT4-fs (loop3): 1 truncate cleaned up [ 62.491326][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 62.491342][ C1] EXT4-fs (loop3): initial error at time 1774223175: ext4_mb_generate_buddy:1315 [ 62.491374][ C1] EXT4-fs (loop3): last error at time 1774223175: ext4_mb_generate_buddy:1315 [ 62.516891][ T4011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.529666][ T4011] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.541598][ T4011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.670640][ T4016] loop0: detected capacity change from 0 to 512 [ 62.678687][ T4016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.708324][ T4016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.721100][ T4016] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.737063][ T4016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.792755][ T30] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.833626][ T30] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.854456][ T30] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.905447][ T4011] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.915475][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.944812][ T4011] vhci_hcd vhci_hcd.1: invalid port number 96 [ 62.955100][ T4011] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 63.000133][ T4029] 9p: Bad value for 'timeout' [ 63.070415][ T4034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.532050][ T4049] loop3: detected capacity change from 0 to 512 [ 63.549198][ T4049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.568688][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.583478][ T4049] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.599741][ T4049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.646665][ T4060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.659729][ T4060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.668054][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.692711][ T4063] loop0: detected capacity change from 0 to 512 [ 63.712990][ T4063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 63.721119][ T4063] System zones: 0-2, 18-18, 34-34 [ 63.727938][ T4063] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 63.743231][ T4063] EXT4-fs (loop0): Remounting filesystem read-only [ 63.749900][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 63.749926][ C0] EXT4-fs (loop0): initial error at time 1774223176: ext4_mb_generate_buddy:1315 [ 63.749961][ C0] EXT4-fs (loop0): last error at time 1774223176: ext4_mb_generate_buddy:1315 [ 63.776250][ T4063] EXT4-fs (loop0): 1 truncate cleaned up [ 63.782495][ T4063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.795010][ T12] __quota_error: 18 callbacks suppressed [ 63.795022][ T12] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 63.813320][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.826851][ T12] Quota error (device loop0): write_blk: dquota write failed [ 63.834357][ T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 63.844560][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.855270][ T12] Quota error (device loop0): write_blk: dquota write failed [ 63.862786][ T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 63.872754][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.885013][ T4063] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.896302][ T12] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 63.905259][ T12] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 63.925802][ T4063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.934851][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.964217][ T4063] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.978545][ T4063] vhci_hcd vhci_hcd.1: invalid port number 96 [ 63.992129][ T4063] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 64.002671][ T4072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.068024][ T4079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.309767][ T4093] loop3: detected capacity change from 0 to 512 [ 64.338046][ T4093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.417272][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.430018][ T4093] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.457371][ T4093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.588670][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.656955][ T4101] 9p: Bad value for 'timeout' [ 64.936006][ T28] audit: type=1400 audit(1774223178.145:249): avc: denied { read write } for pid=4103 comm="syz.3.173" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.959705][ T28] audit: type=1400 audit(1774223178.145:250): avc: denied { open } for pid=4103 comm="syz.3.173" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.097864][ T4111] loop0: detected capacity change from 0 to 512 [ 65.160775][ T4111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 65.174251][ T4111] System zones: 0-2, 18-18, 34-34 [ 65.187987][ T4111] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 65.204676][ T4111] EXT4-fs (loop0): Remounting filesystem read-only [ 65.211279][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 65.211300][ C0] EXT4-fs (loop0): initial error at time 1774223178: ext4_mb_generate_buddy:1315 [ 65.211339][ C0] EXT4-fs (loop0): last error at time 1774223178: ext4_mb_generate_buddy:1315 [ 65.236376][ T4111] EXT4-fs (loop0): 1 truncate cleaned up [ 65.243041][ T4111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.255895][ T4117] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 65.263973][ T4111] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.275234][ T4111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.288058][ T72] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.310761][ T72] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.321432][ T72] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.339916][ T4111] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.353837][ T4123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.360626][ T4111] vhci_hcd vhci_hcd.1: invalid port number 96 [ 65.380013][ T4111] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 66.491012][ T4160] FAULT_INJECTION: forcing a failure. [ 66.491012][ T4160] name failslab, interval 1, probability 0, space 0, times 1 [ 66.509049][ T4160] CPU: 0 UID: 0 PID: 4160 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT(full) [ 66.509081][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.509101][ T4160] Call Trace: [ 66.509108][ T4160] [ 66.509116][ T4160] __dump_stack+0x1d/0x30 [ 66.509144][ T4160] dump_stack_lvl+0x95/0xd0 [ 66.509244][ T4160] dump_stack+0x15/0x1b [ 66.509317][ T4160] should_fail_ex+0x263/0x280 [ 66.509368][ T4160] should_failslab+0x8c/0xb0 [ 66.509403][ T4160] __kmalloc_cache_node_noprof+0x6b/0x480 [ 66.509465][ T4160] ? __get_vm_area_node+0x106/0x1d0 [ 66.509491][ T4160] __get_vm_area_node+0x106/0x1d0 [ 66.509518][ T4160] __vmalloc_node_range_noprof+0x291/0x12b0 [ 66.509604][ T4160] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 66.509704][ T4160] ? path_openat+0x1ab2/0x2050 [ 66.509807][ T4160] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 66.509829][ T4160] __vmalloc_noprof+0xa4/0xf0 [ 66.509931][ T4160] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 66.509953][ T4160] bpf_prog_alloc_no_stats+0x47/0x390 [ 66.510038][ T4160] ? bpf_prog_alloc+0x2a/0x150 [ 66.510098][ T4160] bpf_prog_alloc+0x3c/0x150 [ 66.510119][ T4160] __get_filter+0x92/0x230 [ 66.510180][ T4160] sk_reuseport_attach_filter+0x20/0x140 [ 66.510214][ T4160] sk_setsockopt+0x18ba/0x2140 [ 66.510253][ T4160] sock_setsockopt+0x40/0x50 [ 66.510283][ T4160] __sys_setsockopt+0x13a/0x200 [ 66.510406][ T4160] __x64_sys_setsockopt+0x64/0x80 [ 66.510439][ T4160] x64_sys_call+0x2327/0x3020 [ 66.510466][ T4160] do_syscall_64+0x12c/0x370 [ 66.510562][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.510598][ T4160] RIP: 0033:0x7f791a4dc799 [ 66.510618][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.510634][ T4160] RSP: 002b:00007f7918f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.510651][ T4160] RAX: ffffffffffffffda RBX: 00007f791a755fa0 RCX: 00007f791a4dc799 [ 66.510666][ T4160] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 66.510681][ T4160] RBP: 00007f7918f37090 R08: 0000000000000010 R09: 0000000000000000 [ 66.510695][ T4160] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 66.510731][ T4160] R13: 00007f791a756038 R14: 00007f791a755fa0 R15: 00007ffc21b00d28 [ 66.510777][ T4160] [ 66.511941][ T4160] syz.4.193: vmalloc error: size 8192, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 66.755663][ T4162] loop3: detected capacity change from 0 to 512 [ 66.775973][ T4160] ,cpuset=/,mems_allowed=0 [ 66.780741][ T4160] CPU: 0 UID: 0 PID: 4160 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT(full) [ 66.780791][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.780803][ T4160] Call Trace: [ 66.780809][ T4160] [ 66.780817][ T4160] __dump_stack+0x1d/0x30 [ 66.780889][ T4160] dump_stack_lvl+0x95/0xd0 [ 66.780917][ T4160] dump_stack+0x15/0x1b [ 66.780995][ T4160] warn_alloc+0x145/0x1c0 [ 66.781022][ T4160] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 66.781113][ T4160] ? path_openat+0x1ab2/0x2050 [ 66.781145][ T4160] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 66.781186][ T4160] __vmalloc_noprof+0xa4/0xf0 [ 66.781213][ T4160] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 66.781231][ T4160] bpf_prog_alloc_no_stats+0x47/0x390 [ 66.781246][ T4160] ? bpf_prog_alloc+0x2a/0x150 [ 66.781307][ T4160] bpf_prog_alloc+0x3c/0x150 [ 66.781322][ T4160] __get_filter+0x92/0x230 [ 66.781354][ T4160] sk_reuseport_attach_filter+0x20/0x140 [ 66.781456][ T4160] sk_setsockopt+0x18ba/0x2140 [ 66.781492][ T4160] sock_setsockopt+0x40/0x50 [ 66.781517][ T4160] __sys_setsockopt+0x13a/0x200 [ 66.781542][ T4160] __x64_sys_setsockopt+0x64/0x80 [ 66.781666][ T4160] x64_sys_call+0x2327/0x3020 [ 66.781693][ T4160] do_syscall_64+0x12c/0x370 [ 66.781715][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.781795][ T4160] RIP: 0033:0x7f791a4dc799 [ 66.781808][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.781823][ T4160] RSP: 002b:00007f7918f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.781839][ T4160] RAX: ffffffffffffffda RBX: 00007f791a755fa0 RCX: 00007f791a4dc799 [ 66.781882][ T4160] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 66.781892][ T4160] RBP: 00007f7918f37090 R08: 0000000000000010 R09: 0000000000000000 [ 66.781903][ T4160] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 66.781913][ T4160] R13: 00007f791a756038 R14: 00007f791a755fa0 R15: 00007ffc21b00d28 [ 66.781929][ T4160] [ 66.781949][ T4160] Mem-Info: [ 66.990982][ T4160] active_anon:27954 inactive_anon:0 isolated_anon:0 [ 66.990982][ T4160] active_file:15117 inactive_file:2020 isolated_file:0 [ 66.990982][ T4160] unevictable:6176 dirty:254 writeback:0 [ 66.990982][ T4160] slab_reclaimable:3285 slab_unreclaimable:15754 [ 66.990982][ T4160] mapped:40381 shmem:22421 pagetables:1133 [ 66.990982][ T4160] sec_pagetables:0 bounce:0 [ 66.990982][ T4160] kernel_misc_reclaimable:0 [ 66.990982][ T4160] free:1862897 free_pcp:8516 free_cma:0 [ 66.997655][ T4162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 67.044937][ T4162] System zones: 0-2, 18-18, 34-34 [ 67.051442][ T4162] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 67.066258][ T4162] EXT4-fs (loop3): Remounting filesystem read-only [ 67.072796][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 67.072819][ C1] EXT4-fs (loop3): initial error at time 1774223180: ext4_mb_generate_buddy:1315 [ 67.072842][ C1] EXT4-fs (loop3): last error at time 1774223180: ext4_mb_generate_buddy:1315 [ 67.086320][ T4160] Node 0 active_anon:111816kB inactive_anon:0kB active_file:59656kB inactive_file:8080kB unevictable:25516kB isolated(anon):0kB isolated(file):0kB mapped:162336kB dirty:1016kB writeback:0kB shmem:89684kB kernel_stack:3488kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 67.091963][ T4162] EXT4-fs (loop3): 1 truncate cleaned up [ 67.106901][ T4160] Node 0 [ 67.127584][ T4162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.131364][ T72] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.176987][ T4162] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.196810][ T72] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.217184][ T4167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.225955][ T4162] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.236799][ T4160] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.255516][ T72] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.287770][ T4169] 9p: Bad value for 'timeout' [ 67.296587][ T4160] lowmem_reserve[]: 0 2879 7857 7857 [ 67.302204][ T4160] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 67.334071][ T4160] lowmem_reserve[]: 0 0 4978 4978 [ 67.339399][ T4160] Node 0 Normal free:4498552kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100216kB inactive_anon:0kB active_file:56524kB inactive_file:8080kB unevictable:28648kB writepending:1016kB zspages:0kB present:5242880kB managed:5098240kB mlocked:28796kB bounce:0kB free_pcp:35052kB local_pcp:33012kB free_cma:0kB [ 67.380574][ T4162] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.388028][ T4162] vhci_hcd vhci_hcd.1: invalid port number 96 [ 67.404409][ T4162] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 67.416304][ T4160] lowmem_reserve[]: 0 0 0 0 [ 67.431048][ T4160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.470086][ T4160] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB [ 67.513287][ T4160] Node 0 Normal: 597*4kB (UM) 256*8kB (UME) 84*16kB (UM) 63*32kB (UME) 62*64kB (UM) 14*128kB (UME) 11*256kB (UME) 6*512kB (ME) 9*1024kB (ME) 4*2048kB (UM) 1093*4096kB (M) = 4513780kB [ 67.548126][ T4160] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 67.597380][ T4160] 40784 total pagecache pages [ 67.602130][ T4160] 0 pages in swap cache [ 67.606401][ T4160] Free swap = 124996kB [ 67.610993][ T4160] Total swap = 124996kB [ 67.615199][ T4160] 2097051 pages RAM [ 67.619176][ T4160] 0 pages HighMem/MovableOnly [ 67.623971][ T4160] 81611 pages reserved [ 67.805109][ T4186] netlink: 277 bytes leftover after parsing attributes in process `syz.4.200'. [ 67.818610][ T4186] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 68.915349][ T4202] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.987305][ T4208] loop0: detected capacity change from 0 to 512 [ 69.006792][ T4208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.062239][ T4208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.076123][ T4208] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.128062][ T4213] loop2: detected capacity change from 0 to 1024 [ 69.146650][ T4213] EXT4-fs: test_dummy_encryption option not supported [ 69.412427][ T4208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.847058][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 69.847080][ T28] audit: type=1400 audit(1774223183.035:261): avc: denied { write } for pid=4211 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.896820][ T3523] IPVS: starting estimator thread 0... [ 70.049099][ T4222] IPVS: using max 2400 ests per chain, 120000 per kthread [ 70.648263][ T4234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 70.657682][ T4234] Cannot find add_set index 0 as target [ 70.709561][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.141364][ T4247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.483523][ T4261] 9p: Bad value for 'timeout' [ 71.595891][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.607187][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.713695][ T4276] loop3: detected capacity change from 0 to 1024 [ 71.720491][ T4276] EXT4-fs: test_dummy_encryption option not supported [ 71.825089][ T4278] netlink: 277 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.834736][ T4278] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 71.986092][ T3416] IPVS: starting estimator thread 0... [ 72.076890][ T4283] IPVS: using max 2400 ests per chain, 120000 per kthread [ 72.834069][ T4292] loop2: detected capacity change from 0 to 512 [ 72.877951][ T4292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.901764][ T4296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.958422][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.997163][ T4292] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.034666][ T4294] loop0: detected capacity change from 0 to 512 [ 73.058614][ T4294] EXT4-fs: Ignoring removed bh option [ 73.064624][ T4294] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.073885][ T4294] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 73.090970][ T4304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.118929][ T4294] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.130030][ T4294] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.147455][ T4294] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 73.147848][ T4303] loop4: detected capacity change from 0 to 8192 [ 73.164115][ T4294] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 73.174684][ T4294] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.234: Failed to acquire dquot type 1 [ 73.206047][ T4294] loop0: lost filesystem error report for type 5 error -5 [ 73.210429][ T4294] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.234: Invalid block bitmap block 0 in block_group 0 [ 73.218130][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.218170][ C1] EXT4-fs (loop0): last error at time 1774223186: ext4_acquire_dquot:7001 [ 73.299146][ T4294] loop0: lost filesystem error report for type 5 error -117 [ 73.301516][ T4294] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.234: Invalid block bitmap block 0 in block_group 0 [ 73.345541][ T4294] loop0: lost filesystem error report for type 5 error -117 [ 73.346252][ T4294] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.234: Invalid block bitmap block 0 in block_group 0 [ 73.393079][ T4294] loop0: lost filesystem error report for type 5 error -117 [ 73.395363][ T4294] Quota error (device loop0): write_blk: dquota write failed [ 73.427650][ T4294] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 73.449253][ T4294] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.234: Failed to acquire dquot type 1 [ 73.499610][ T4294] loop0: lost filesystem error report for type 5 error -28 [ 73.507849][ T4294] Quota error (device loop0): write_blk: dquota write failed [ 73.559021][ T4294] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 73.591072][ T4294] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.234: Failed to acquire dquot type 1 [ 73.627923][ T4294] loop0: lost filesystem error report for type 5 error -28 [ 73.632030][ T4294] EXT4-fs (loop0): 1 orphan inode deleted [ 73.724430][ T4316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'. [ 73.819296][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.843960][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.877356][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.963105][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.972373][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.062411][ T4331] netlink: 277 bytes leftover after parsing attributes in process `syz.2.242'. [ 74.072563][ T4331] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 74.080584][ T4331] veth1_vlan: left allmulticast mode [ 74.716135][ T4346] netlink: 277 bytes leftover after parsing attributes in process `syz.0.249'. [ 74.726186][ T4346] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 74.734183][ T4346] veth1_vlan: left allmulticast mode [ 74.950310][ T4351] loop3: detected capacity change from 0 to 1024 [ 74.963705][ T4353] loop2: detected capacity change from 0 to 512 [ 75.001018][ T4351] EXT4-fs: test_dummy_encryption option not supported [ 75.021016][ T4353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.261623][ T4353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.350403][ T4361] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.372625][ T4353] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.619213][ T4366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.925557][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.043097][ T4380] loop4: detected capacity change from 0 to 8192 [ 77.256585][ T4394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.264'. [ 77.265978][ T4394] Cannot find add_set index 0 as target [ 77.758017][ T4413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.270'. [ 77.893276][ T4416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'. [ 77.902743][ T4416] Cannot find add_set index 0 as target [ 78.988193][ T4419] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 79.204909][ T4430] loop0: detected capacity change from 0 to 512 [ 79.754097][ T4430] EXT4-fs: Ignoring removed nobh option [ 79.775774][ T4430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.192636][ T4430] EXT4-fs (loop0): 1 truncate cleaned up [ 80.202079][ T4440] loop2: detected capacity change from 0 to 512 [ 80.220409][ T4430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.388830][ T4440] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 80.404462][ T4440] System zones: 0-2, 18-18, 34-34 [ 80.415270][ T4440] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 80.437075][ T4440] EXT4-fs (loop2): Remounting filesystem read-only [ 80.456700][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.463253][ C0] EXT4-fs (loop2): initial error at time 1774223193: ext4_mb_generate_buddy:1315 [ 80.472435][ C0] EXT4-fs (loop2): last error at time 1774223193: ext4_mb_generate_buddy:1315 [ 80.482990][ T4453] netlink: 277 bytes leftover after parsing attributes in process `syz.1.281'. [ 80.492697][ T4453] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 80.514734][ T4440] EXT4-fs (loop2): 1 truncate cleaned up [ 80.528364][ T4440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.542547][ T72] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 80.569975][ T4440] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.570556][ T72] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.591427][ T4440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.612569][ T72] Quota error (device loop2): write_blk: dquota write failed [ 80.621031][ T72] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 80.631587][ T72] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.642410][ T72] Quota error (device loop2): write_blk: dquota write failed [ 80.649910][ T72] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 80.659803][ T72] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.670047][ T72] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 80.678871][ T72] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 80.694722][ T72] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.707412][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.802335][ T4463] netlink: 277 bytes leftover after parsing attributes in process `syz.4.283'. [ 80.814855][ T4463] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 80.983627][ T4440] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.118392][ T4440] vhci_hcd vhci_hcd.1: invalid port number 96 [ 81.124399][ T4468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 81.148298][ T4440] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 82.696337][ T4478] loop0: detected capacity change from 0 to 1024 [ 82.718505][ T4478] EXT4-fs: test_dummy_encryption option not supported [ 82.901877][ T4494] loop3: detected capacity change from 0 to 512 [ 82.920534][ T4494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 82.932061][ T4494] System zones: 0-2, 18-18, 34-34 [ 82.950776][ T4494] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 83.066786][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 83.073258][ C0] EXT4-fs (loop3): initial error at time 1774223196: ext4_mb_generate_buddy:1315 [ 83.082421][ C0] EXT4-fs (loop3): last error at time 1774223196: ext4_mb_generate_buddy:1315 [ 83.124042][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.157077][ T4494] EXT4-fs (loop3): Remounting filesystem read-only [ 83.179552][ T4494] EXT4-fs (loop3): 1 truncate cleaned up [ 83.193002][ T4494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.206103][ T4507] batadv_slave_0: entered promiscuous mode [ 83.215634][ T4500] netlink: 277 bytes leftover after parsing attributes in process `syz.4.296'. [ 83.224945][ T30] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 83.254571][ T4507] batadv_slave_0: entered allmulticast mode [ 83.262559][ T30] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.301775][ T4503] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 83.322285][ T4509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.329919][ T4494] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.364709][ T30] Quota error (device loop3): write_blk: dquota write failed [ 83.378476][ T4494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.395098][ T4507] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 83.416963][ T30] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.437314][ T30] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.787737][ T3523] IPVS: starting estimator thread 0... [ 83.911655][ T4494] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.922459][ T4494] vhci_hcd vhci_hcd.1: invalid port number 96 [ 83.949516][ T4494] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 84.006920][ T4502] IPVS: using max 2544 ests per chain, 127200 per kthread [ 85.019879][ T4544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.034801][ T4546] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.139245][ T4550] loop3: detected capacity change from 0 to 8192 [ 85.272099][ T4561] loop4: detected capacity change from 0 to 1024 [ 85.298547][ T4561] EXT4-fs: test_dummy_encryption option not supported [ 85.309732][ T4562] netlink: 277 bytes leftover after parsing attributes in process `syz.1.315'. [ 85.319256][ T4562] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 85.538397][ T4567] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 87.031722][ T4586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.113284][ T4588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.383077][ T4595] loop4: detected capacity change from 0 to 512 [ 87.419531][ T4595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.468225][ T4595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.487380][ T4595] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.509798][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 87.509811][ T28] audit: type=1400 audit(1774223200.725:266): avc: denied { module_request } for pid=4609 comm="syz.0.331" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 87.516250][ T4595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.624263][ T4615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.650011][ T4618] loop3: detected capacity change from 0 to 512 [ 87.665648][ T4618] ext4: Unknown parameter 'inlinecrypt"init_itable' [ 87.833016][ T4624] loop3: detected capacity change from 0 to 1024 [ 87.918800][ T4624] EXT4-fs: test_dummy_encryption option not supported [ 87.985937][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.292897][ T4632] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 88.364745][ T28] audit: type=1400 audit(1774223201.575:267): avc: denied { mac_admin } for pid=4633 comm="syz.0.339" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.543729][ T4641] program syz.4.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.611117][ T4641] loop4: detected capacity change from 0 to 512 [ 88.785118][ T28] audit: type=1400 audit(1774223201.995:268): avc: denied { read } for pid=4646 comm="syz.0.343" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.854124][ T28] audit: type=1400 audit(1774223202.065:269): avc: denied { bind } for pid=4651 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.874757][ T4652] syzkaller0: entered promiscuous mode [ 88.890949][ T4652] syzkaller0: entered allmulticast mode [ 88.979937][ T4655] syzkaller0: entered promiscuous mode [ 88.987718][ T4655] FAULT_INJECTION: forcing a failure. [ 88.987718][ T4655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.006879][ T4655] CPU: 1 UID: 0 PID: 4655 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 89.006905][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.006917][ T4655] Call Trace: [ 89.006923][ T4655] [ 89.006931][ T4655] __dump_stack+0x1d/0x30 [ 89.006959][ T4655] dump_stack_lvl+0x95/0xd0 [ 89.007016][ T4655] dump_stack+0x15/0x1b [ 89.007036][ T4655] should_fail_ex+0x263/0x280 [ 89.007060][ T4655] should_fail+0xb/0x20 [ 89.007079][ T4655] should_fail_usercopy+0x1a/0x20 [ 89.007124][ T4655] _copy_from_user+0x1c/0xb0 [ 89.007227][ T4655] __copy_msghdr+0x244/0x300 [ 89.007255][ T4655] ___sys_sendmsg+0x10c/0x1e0 [ 89.007304][ T4655] __x64_sys_sendmsg+0xd4/0x160 [ 89.007335][ T4655] x64_sys_call+0x194c/0x3020 [ 89.007385][ T4655] do_syscall_64+0x12c/0x370 [ 89.007411][ T4655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.007483][ T4655] RIP: 0033:0x7f25e357c799 [ 89.007500][ T4655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.007553][ T4655] RSP: 002b:00007f25e1fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.007621][ T4655] RAX: ffffffffffffffda RBX: 00007f25e37f5fa0 RCX: 00007f25e357c799 [ 89.007637][ T4655] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000006 [ 89.007682][ T4655] RBP: 00007f25e1fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 89.007756][ T4655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.007770][ T4655] R13: 00007f25e37f6038 R14: 00007f25e37f5fa0 R15: 00007fff59dc7638 [ 89.007792][ T4655] [ 89.341795][ T4659] syzkaller0: entered promiscuous mode [ 89.769502][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.803288][ T4664] batadv_slave_0: entered promiscuous mode [ 90.012523][ T4664] batadv_slave_0: entered allmulticast mode [ 90.041842][ T4664] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 90.230723][ T4671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.101752][ T4679] loop0: detected capacity change from 0 to 512 [ 91.193223][ T4685] tipc: Enabling of bearer rejected, failed to enable media [ 91.227128][ T4679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 91.252761][ T4687] program syz.2.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.263762][ T4679] System zones: 0-2, 18-18, 34-34 [ 91.326581][ T4679] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 91.385353][ T4679] EXT4-fs (loop0): Remounting filesystem read-only [ 91.391912][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 91.391927][ C0] EXT4-fs (loop0): initial error at time 1774223204: ext4_mb_generate_buddy:1315 [ 91.391953][ C0] EXT4-fs (loop0): last error at time 1774223204: ext4_mb_generate_buddy:1315 [ 91.470681][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 91.497048][ T4679] EXT4-fs (loop0): 1 truncate cleaned up [ 91.512101][ T4702] loop2: detected capacity change from 0 to 1024 [ 91.518674][ T314] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 91.541520][ T4679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.555761][ T314] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.593425][ T4702] EXT4-fs: test_dummy_encryption option not supported [ 91.603405][ T4679] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.623983][ T314] Quota error (device loop0): write_blk: dquota write failed [ 91.747101][ T4679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.759627][ T314] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 91.770874][ T314] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.872152][ T4709] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 91.881925][ T314] Quota error (device loop0): write_blk: dquota write failed [ 91.889787][ T314] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 91.899767][ T314] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.909952][ T314] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 92.658217][ T314] __quota_error: 1 callbacks suppressed [ 92.658310][ T314] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.914560][ T4716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.703705][ T4679] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.711202][ T4679] vhci_hcd vhci_hcd.1: invalid port number 96 [ 93.726787][ T4679] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 94.066178][ T4730] loop0: detected capacity change from 0 to 8192 [ 94.149426][ T28] audit: type=1400 audit(1774223207.365:270): avc: denied { listen } for pid=4739 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.249241][ T4750] netlink: 277 bytes leftover after parsing attributes in process `syz.2.372'. [ 94.259017][ T4750] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 94.326290][ T28] audit: type=1400 audit(1774223207.535:271): avc: denied { ioctl } for pid=4739 comm="syz.3.370" path="socket:[9322]" dev="sockfs" ino=9322 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.441201][ T4756] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 94.640671][ T4760] FAULT_INJECTION: forcing a failure. [ 94.640671][ T4760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.728064][ T4760] CPU: 0 UID: 0 PID: 4760 Comm: syz.3.375 Not tainted syzkaller #0 PREEMPT(full) [ 94.728108][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.728122][ T4760] Call Trace: [ 94.728129][ T4760] [ 94.728135][ T4760] __dump_stack+0x1d/0x30 [ 94.728180][ T4760] dump_stack_lvl+0x95/0xd0 [ 94.728277][ T4760] dump_stack+0x15/0x1b [ 94.728359][ T4760] should_fail_ex+0x263/0x280 [ 94.728390][ T4760] should_fail+0xb/0x20 [ 94.728427][ T4760] should_fail_usercopy+0x1a/0x20 [ 94.728456][ T4760] _copy_from_user+0x1c/0xb0 [ 94.728498][ T4760] btf_new_fd+0x223/0x730 [ 94.728516][ T4760] ? ns_capable+0x7c/0xb0 [ 94.728537][ T4760] bpf_btf_load+0x112/0x130 [ 94.728563][ T4760] __sys_bpf+0x3d8/0x7e0 [ 94.728710][ T4760] __x64_sys_bpf+0x41/0x50 [ 94.728737][ T4760] x64_sys_call+0x10cb/0x3020 [ 94.728797][ T4760] do_syscall_64+0x12c/0x370 [ 94.728818][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.728882][ T4760] RIP: 0033:0x7f7aa500c799 [ 94.728951][ T4760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.728969][ T4760] RSP: 002b:00007f7aa3a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.728990][ T4760] RAX: ffffffffffffffda RBX: 00007f7aa5285fa0 RCX: 00007f7aa500c799 [ 94.729003][ T4760] RDX: 0000000000000028 RSI: 0000200000000740 RDI: 0000000000000012 [ 94.729024][ T4760] RBP: 00007f7aa3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.729034][ T4760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.729044][ T4760] R13: 00007f7aa5286038 R14: 00007f7aa5285fa0 R15: 00007ffe25d603a8 [ 94.729059][ T4760] [ 95.101473][ T4762] loop2: detected capacity change from 0 to 1024 [ 95.235248][ T4762] EXT4-fs: test_dummy_encryption option not supported [ 97.492439][ T4768] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.803401][ T28] audit: type=1400 audit(1774223212.015:272): avc: denied { create } for pid=4783 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 98.899410][ T4790] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.907380][ T4788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.918058][ T4792] netlink: 277 bytes leftover after parsing attributes in process `syz.0.384'. [ 98.928009][ T4792] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 98.949514][ T4790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.386'. [ 99.266523][ T4806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.387'. [ 99.358149][ T4806] Cannot find add_set index 0 as target [ 99.512784][ T4816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.391'. [ 99.523273][ T4816] Cannot find add_set index 0 as target [ 100.289972][ T4824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.393'. [ 100.300435][ T4824] Cannot find add_set index 0 as target [ 100.631088][ T4834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.749214][ T4840] loop4: detected capacity change from 0 to 1024 [ 100.757199][ T4840] EXT4-fs: test_dummy_encryption option not supported [ 101.003460][ T4856] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 102.830380][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.411'. [ 102.839807][ T4879] Cannot find add_set index 0 as target [ 103.061079][ T4881] loop0: detected capacity change from 0 to 512 [ 103.106953][ T28] audit: type=1400 audit(1774223216.315:273): avc: denied { mount } for pid=4884 comm="syz.1.416" name="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.158550][ T4881] EXT4-fs: Ignoring removed nobh option [ 103.233956][ T28] audit: type=1326 audit(1774223216.425:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.239994][ T4881] ------------[ cut here ]------------ [ 103.257343][ T28] audit: type=1326 audit(1774223216.425:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.262752][ T4881] EA inode 11 i_nlink=1026 [ 103.285851][ T28] audit: type=1326 audit(1774223216.425:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.285880][ T28] audit: type=1326 audit(1774223216.425:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.290368][ T4881] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.412/4881 [ 103.313574][ T28] audit: type=1326 audit(1774223216.425:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.337835][ T4881] Modules linked in: [ 103.347541][ T28] audit: type=1326 audit(1774223216.425:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 103.397709][ T4881] [ 103.400074][ T4881] CPU: 0 UID: 0 PID: 4881 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 103.409332][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.419426][ T4881] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 103.426042][ T4881] Code: 54 4b 99 ff 4c 8d 2d 2d b4 5d 05 49 8d 7e 40 e8 a4 df b5 ff 49 8b 6e 40 4c 89 e7 e8 d8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 9b dd 03 66 66 66 66 66 66 2e [ 103.426815][ T28] audit: type=1400 audit(1774223216.635:280): avc: denied { read append } for pid=4893 comm="syz.2.419" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.445738][ T4881] RSP: 0018:ffffc90010fc75a8 EFLAGS: 00010246 [ 103.445758][ T4881] RAX: ffff88810198cdc8 RBX: ffff88811a8bc608 RCX: ffffffff81c013e8 [ 103.445775][ T4881] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc800 [ 103.492241][ T4881] RBP: 000000000000000b R08: 000188811a8bc5bb R09: 0000000000000000 [ 103.500305][ T4881] R10: ffffc90010fc74d8 R11: 0001c90010fc74d8 R12: ffff88811a8bc5b8 [ 103.508311][ T4881] R13: ffffffff871dc800 R14: ffff88811a8bc570 R15: 0000000000000001 [ 103.516301][ T4881] FS: 00007f25e1fae6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 103.525321][ T4881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.532003][ T4881] CR2: 00007f7aa3a3dff8 CR3: 000000012430a000 CR4: 00000000003506f0 [ 103.540066][ T4881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.548130][ T4881] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 103.556173][ T4881] Call Trace: [ 103.559484][ T4881] [ 103.562544][ T4881] ext4_xattr_set_entry+0x77c/0x1010 [ 103.568027][ T4899] mmap: syz.3.418 (4899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.568009][ T4881] ext4_xattr_ibody_set+0x184/0x3c0 [ 103.585051][ T4881] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 103.591021][ T4881] __ext4_expand_extra_isize+0x246/0x280 [ 103.596184][ T4895] loop5: detected capacity change from 0 to 7 [ 103.596713][ T4881] __ext4_mark_inode_dirty+0x29b/0x400 [ 103.608276][ T4881] ext4_evict_inode+0x7c3/0xd60 [ 103.613238][ T4881] ? __pfx_ext4_evict_inode+0x10/0x10 [ 103.618763][ T4881] evict+0x2af/0x510 [ 103.622747][ T4881] ? __dquot_initialize+0x146/0x7c0 [ 103.628012][ T4881] iput+0x41a/0x580 [ 103.628146][ T4896] team0: Device gtp0 is of different type [ 103.631838][ T4881] ext4_process_orphan+0x1a9/0x1c0 [ 103.642702][ T4881] ext4_orphan_cleanup+0x6a8/0xa00 [ 103.643375][ T28] audit: type=1400 audit(1774223216.635:281): avc: denied { open } for pid=4893 comm="syz.2.419" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.647953][ T4881] ext4_fill_super+0x3408/0x37c0 [ 103.677168][ T4881] ? set_blocksize+0x14c/0x270 [ 103.682031][ T4881] ? setup_bdev_super+0x30e/0x370 [ 103.687216][ T4881] ? __pfx_ext4_fill_super+0x10/0x10 [ 103.692579][ T4881] get_tree_bdev_flags+0x291/0x300 [ 103.697768][ T4881] ? __pfx_ext4_fill_super+0x10/0x10 [ 103.703081][ T4881] get_tree_bdev+0x1f/0x30 [ 103.707608][ T4881] ext4_get_tree+0x1c/0x30 [ 103.712032][ T4881] vfs_get_tree+0x57/0x1d0 [ 103.716484][ T4881] do_new_mount+0x288/0x8d0 [ 103.721058][ T4881] path_mount+0x4d0/0xbc0 [ 103.725426][ T4881] __se_sys_mount+0x28c/0x2e0 [ 103.730274][ T4881] __x64_sys_mount+0x67/0x80 [ 103.734929][ T4881] x64_sys_call+0x2d61/0x3020 [ 103.739691][ T4881] do_syscall_64+0x12c/0x370 [ 103.744327][ T4881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.750298][ T4881] RIP: 0033:0x7f25e357da0a [ 103.754726][ T4881] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.774394][ T4881] RSP: 002b:00007f25e1fade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.782870][ T4881] RAX: ffffffffffffffda RBX: 00007f25e1fadee0 RCX: 00007f25e357da0a [ 103.790918][ T4881] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f25e1fadea0 [ 103.798947][ T4881] RBP: 0000200000000180 R08: 00007f25e1fadee0 R09: 0000000000000740 [ 103.806978][ T4881] R10: 0000000000000740 R11: 0000000000000246 R12: 0000200000000140 [ 103.815068][ T4881] R13: 00007f25e1fadea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 103.823183][ T4881] [ 103.826271][ T4881] ---[ end trace 0000000000000000 ]--- [ 103.857325][ T4881] EXT4-fs (loop0): 1 orphan inode deleted [ 103.863641][ T4881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.866344][ T4907] 9p: Bad value for 'timeout' [ 103.912955][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 103.912971][ T28] audit: type=1400 audit(1774223217.125:284): avc: denied { create } for pid=4871 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.954068][ T28] audit: type=1400 audit(1774223217.165:285): avc: denied { accept } for pid=4871 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.025358][ T28] audit: type=1400 audit(1774223217.235:286): avc: denied { create } for pid=4914 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.075265][ T28] audit: type=1400 audit(1774223217.235:287): avc: denied { bind } for pid=4871 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.102934][ T28] audit: type=1326 audit(1774223217.265:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.2.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb6a89c799 code=0x0 [ 104.213173][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.055827][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 105.181876][ T4929] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 105.192082][ T4929] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.200134][ T4929] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.248220][ T4933] loop2: detected capacity change from 0 to 764 [ 105.253554][ T4937] sctp: [Deprecated]: syz.0.429 (pid 4937) Use of int in maxseg socket option. [ 105.253554][ T4937] Use struct sctp_assoc_value instead [ 105.277598][ T4937] x_tables: duplicate underflow at hook 1 [ 105.430798][ T4911] loop3: detected capacity change from 0 to 128 [ 105.438891][ T4941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=4941 comm=syz.0.431 [ 105.440681][ T28] audit: type=1400 audit(1774223218.555:289): avc: denied { mount } for pid=4914 comm="syz.2.424" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 105.489435][ T4941] netlink: 7 bytes leftover after parsing attributes in process `syz.0.431'. [ 105.555094][ T4946] 9p: Bad value for 'timeout' [ 105.714861][ T4956] loop0: detected capacity change from 0 to 128 [ 105.734041][ T28] audit: type=1400 audit(1774223218.945:290): avc: denied { mount } for pid=4958 comm="syz.3.439" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.758272][ T28] audit: type=1400 audit(1774223218.975:291): avc: denied { getopt } for pid=4958 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.863477][ T4964] 9p: Bad value for 'rfdno' [ 106.077728][ T4975] 9p: Bad value for 'timeout' [ 106.278244][ T4979] SELinux: failed to load policy [ 106.294120][ T28] audit: type=1400 audit(1774223219.495:292): avc: denied { load_policy } for pid=4977 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.618177][ T28] audit: type=1400 audit(1774223219.835:293): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 106.672862][ T4998] loop4: detected capacity change from 0 to 1024 [ 106.699099][ T4998] EXT4-fs: test_dummy_encryption option not supported [ 107.826833][ T5008] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 108.106795][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 108.306813][ T5007] Cannot find add_set index 0 as target [ 108.777911][ T5011] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.016380][ T5021] FAULT_INJECTION: forcing a failure. [ 109.016380][ T5021] name failslab, interval 1, probability 0, space 0, times 0 [ 109.078053][ T5021] CPU: 1 UID: 0 PID: 5021 Comm: syz.3.461 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.078144][ T5021] Tainted: [W]=WARN [ 109.078151][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.078162][ T5021] Call Trace: [ 109.078167][ T5021] [ 109.078248][ T5021] __dump_stack+0x1d/0x30 [ 109.078276][ T5021] dump_stack_lvl+0x95/0xd0 [ 109.078369][ T5021] dump_stack+0x15/0x1b [ 109.078388][ T5021] should_fail_ex+0x263/0x280 [ 109.078436][ T5021] should_failslab+0x8c/0xb0 [ 109.078458][ T5021] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 109.078484][ T5021] ? __alloc_skb+0x2d6/0x690 [ 109.078514][ T5021] __alloc_skb+0x2d6/0x690 [ 109.078589][ T5021] tcp_stream_alloc_skb+0x30/0x320 [ 109.078611][ T5021] tcp_sendmsg_locked+0xd21/0x2de0 [ 109.078656][ T5021] ? __rcu_read_unlock+0x4e/0x70 [ 109.078673][ T5021] ? avc_has_perm_noaudit+0xab/0x130 [ 109.078704][ T5021] ? __pfx_tcp_sendmsg+0x10/0x10 [ 109.078772][ T5021] tcp_sendmsg+0x2f/0x50 [ 109.078836][ T5021] inet_sendmsg+0x76/0xd0 [ 109.078868][ T5021] ? __pfx_inet_sendmsg+0x10/0x10 [ 109.078894][ T5021] ____sys_sendmsg+0x519/0x5b0 [ 109.079061][ T5021] ___sys_sendmsg+0x195/0x1e0 [ 109.079087][ T5021] ? path_openat+0x1b01/0x2050 [ 109.079131][ T5021] __sys_sendmmsg+0x185/0x320 [ 109.079227][ T5021] __x64_sys_sendmmsg+0x57/0x70 [ 109.079259][ T5021] x64_sys_call+0x27aa/0x3020 [ 109.079288][ T5021] do_syscall_64+0x12c/0x370 [ 109.079384][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.079408][ T5021] RIP: 0033:0x7f7aa500c799 [ 109.079465][ T5021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.079483][ T5021] RSP: 002b:00007f7aa3a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.079502][ T5021] RAX: ffffffffffffffda RBX: 00007f7aa5285fa0 RCX: 00007f7aa500c799 [ 109.079515][ T5021] RDX: 0000000000000001 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 109.079526][ T5021] RBP: 00007f7aa3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.079536][ T5021] R10: 0000000004000001 R11: 0000000000000246 R12: 0000000000000001 [ 109.079580][ T5021] R13: 00007f7aa5286038 R14: 00007f7aa5285fa0 R15: 00007ffe25d603a8 [ 109.079596][ T5021] [ 109.332092][ T5026] loop0: detected capacity change from 0 to 128 [ 109.559838][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 109.559853][ T28] audit: type=1400 audit(1774223222.775:296): avc: denied { name_bind } for pid=5043 comm="syz.4.471" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.597312][ T5044] FAULT_INJECTION: forcing a failure. [ 109.597312][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 109.615690][ T5044] CPU: 1 UID: 0 PID: 5044 Comm: syz.4.471 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.615721][ T5044] Tainted: [W]=WARN [ 109.615728][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.615740][ T5044] Call Trace: [ 109.615770][ T5044] [ 109.615777][ T5044] __dump_stack+0x1d/0x30 [ 109.615804][ T5044] dump_stack_lvl+0x95/0xd0 [ 109.615827][ T5044] dump_stack+0x15/0x1b [ 109.615927][ T5044] should_fail_ex+0x263/0x280 [ 109.615954][ T5044] should_failslab+0x8c/0xb0 [ 109.616027][ T5044] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 109.616051][ T5044] ? __alloc_skb+0x2d6/0x690 [ 109.616120][ T5044] __alloc_skb+0x2d6/0x690 [ 109.616145][ T5044] ? tcp_write_queue_purge+0x73e/0x760 [ 109.616174][ T5044] tcp_stream_alloc_skb+0x30/0x320 [ 109.616198][ T5044] tcp_connect+0xd0d/0x25e0 [ 109.616312][ T5044] ? tcp_fastopen_defer_connect+0x69/0x1e0 [ 109.616409][ T5044] tcp_v6_connect+0xbe1/0xcc0 [ 109.616440][ T5044] ? avc_has_perm_noaudit+0xab/0x130 [ 109.616470][ T5044] __inet_stream_connect+0x169/0x7f0 [ 109.616577][ T5044] ? tcp_sendmsg_fastopen+0x172/0x520 [ 109.616600][ T5044] ? should_failslab+0x8c/0xb0 [ 109.616620][ T5044] ? __kmalloc_cache_noprof+0x18a/0x410 [ 109.616646][ T5044] tcp_sendmsg_fastopen+0x43a/0x520 [ 109.616693][ T5044] tcp_sendmsg_locked+0x2939/0x2de0 [ 109.616718][ T5044] ? __rcu_read_unlock+0x4e/0x70 [ 109.616740][ T5044] ? terminate_walk+0x1e6/0x210 [ 109.616775][ T5044] ? path_openat+0x1ab2/0x2050 [ 109.616808][ T5044] ? path_openat+0x1b01/0x2050 [ 109.616897][ T5044] ? __rcu_read_unlock+0x4e/0x70 [ 109.616918][ T5044] ? avc_has_perm_noaudit+0xab/0x130 [ 109.616950][ T5044] ? avc_has_perm+0x101/0x190 [ 109.616976][ T5044] ? _raw_spin_lock_bh+0x56/0xb0 [ 109.617111][ T5044] ? __pfx_tcp_sendmsg+0x10/0x10 [ 109.617139][ T5044] ? __pfx_inet6_sendmsg+0x10/0x10 [ 109.617159][ T5044] tcp_sendmsg+0x2f/0x50 [ 109.617314][ T5044] inet6_sendmsg+0x76/0xd0 [ 109.617338][ T5044] __sys_sendto+0x325/0x490 [ 109.617427][ T5044] __x64_sys_sendto+0x76/0x90 [ 109.617456][ T5044] x64_sys_call+0x2d35/0x3020 [ 109.617486][ T5044] do_syscall_64+0x12c/0x370 [ 109.617568][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.617591][ T5044] RIP: 0033:0x7f791a4dc799 [ 109.617608][ T5044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.617626][ T5044] RSP: 002b:00007f7918f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.617692][ T5044] RAX: ffffffffffffffda RBX: 00007f791a755fa0 RCX: 00007f791a4dc799 [ 109.617708][ T5044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 109.617721][ T5044] RBP: 00007f7918f37090 R08: 0000200000b63fe4 R09: 000000000000001c [ 109.617736][ T5044] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 109.617749][ T5044] R13: 00007f791a756038 R14: 00007f791a755fa0 R15: 00007ffc21b00d28 [ 109.617769][ T5044] [ 109.967759][ T5058] loop3: detected capacity change from 0 to 1024 [ 109.977140][ T5058] EXT4-fs: test_dummy_encryption option not supported [ 109.985949][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 110.218847][ T5069] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 110.291526][ T5072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.370261][ T28] audit: type=1400 audit(1774223223.575:297): avc: denied { getopt } for pid=5070 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.959713][ T5092] loop4: detected capacity change from 0 to 8192 [ 111.682125][ T5104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.486'. [ 111.691525][ T5104] Cannot find add_set index 0 as target [ 112.073820][ T5113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=5113 comm=syz.1.490 [ 112.297916][ T5111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 112.312585][ T5111] loop3: detected capacity change from 0 to 512 [ 112.336639][ T5130] 9p: Bad value for 'timeout' [ 112.341557][ T5111] EXT4-fs (loop3): 1 truncate cleaned up [ 112.363283][ T5111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.396394][ T28] audit: type=1400 audit(1774223225.605:298): avc: denied { create } for pid=5110 comm="syz.3.489" name="blkio.bfq.io_queued_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.429801][ T28] audit: type=1400 audit(1774223225.635:299): avc: denied { read append open } for pid=5110 comm="syz.3.489" path="/94/file1/file0/blkio.bfq.io_queued_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.456799][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.770472][ T5140] loop3: detected capacity change from 0 to 1024 [ 112.778906][ T5140] EXT4-fs: test_dummy_encryption option not supported [ 113.006014][ T5144] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 113.129834][ T5149] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 113.223710][ T5152] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 113.487505][ T28] audit: type=1400 audit(1774223226.695:300): avc: denied { connect } for pid=5159 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.820436][ T5172] FAULT_INJECTION: forcing a failure. [ 113.820436][ T5172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.839030][ T5164] loop0: detected capacity change from 0 to 8192 [ 113.856930][ T5173] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 113.870420][ T5172] CPU: 0 UID: 0 PID: 5172 Comm: syz.4.508 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.870455][ T5172] Tainted: [W]=WARN [ 113.870462][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.870471][ T5172] Call Trace: [ 113.870477][ T5172] [ 113.870482][ T5172] __dump_stack+0x1d/0x30 [ 113.870512][ T5172] dump_stack_lvl+0x95/0xd0 [ 113.870538][ T5172] dump_stack+0x15/0x1b [ 113.870562][ T5172] should_fail_ex+0x263/0x280 [ 113.870618][ T5172] should_fail+0xb/0x20 [ 113.870643][ T5172] should_fail_usercopy+0x1a/0x20 [ 113.870673][ T5172] _copy_to_user+0x20/0xa0 [ 113.870748][ T5172] map_get_next_key+0x277/0x330 [ 113.870853][ T5172] __sys_bpf+0x64d/0x7e0 [ 113.870882][ T5172] __x64_sys_bpf+0x41/0x50 [ 113.870913][ T5172] x64_sys_call+0x10cb/0x3020 [ 113.870942][ T5172] do_syscall_64+0x12c/0x370 [ 113.870988][ T5172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.871005][ T5172] RIP: 0033:0x7f791a4dc799 [ 113.871017][ T5172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.871031][ T5172] RSP: 002b:00007f7918f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.871047][ T5172] RAX: ffffffffffffffda RBX: 00007f791a755fa0 RCX: 00007f791a4dc799 [ 113.871072][ T5172] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004 [ 113.871082][ T5172] RBP: 00007f7918f37090 R08: 0000000000000000 R09: 0000000000000000 [ 113.871126][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.871138][ T5172] R13: 00007f791a756038 R14: 00007f791a755fa0 R15: 00007ffc21b00d28 [ 113.871159][ T5172] [ 114.089125][ T3305] loop0: p2 p3 p4 < > [ 114.093214][ T3305] loop0: partition table partially beyond EOD, truncated [ 114.111613][ T3305] loop0: p2 size 590592 extends beyond EOD, truncated [ 114.253120][ T5179] loop4: detected capacity change from 0 to 8192 [ 114.316847][ T5183] 9p: Bad value for 'timeout' [ 114.615375][ T3305] loop0: p3 start 4294967295 is beyond EOD, truncated [ 114.636786][ T3305] loop0: p4 start 117440516 is beyond EOD, truncated [ 114.649132][ T5164] loop0: p2 p3 p4 < > [ 114.653240][ T5164] loop0: partition table partially beyond EOD, truncated [ 114.666202][ T5164] loop0: p2 size 590592 extends beyond EOD, truncated [ 114.673514][ T5164] loop0: p3 start 4294967295 is beyond EOD, truncated [ 114.680406][ T5164] loop0: p4 start 117440516 is beyond EOD, truncated [ 114.803523][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 114.917610][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 124.616296][ T28] audit: type=1400 audit(1774223237.825:301): avc: denied { remount } for pid=5201 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.753344][ T5216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 125.677693][ T28] audit: type=1400 audit(1774223237.965:302): avc: denied { bind } for pid=5212 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.739971][ T5216] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 125.751758][ T5216] bond1 (unregistering): Released all slaves [ 125.907571][ T28] audit: type=1400 audit(1774223239.125:303): avc: denied { create } for pid=5235 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.949838][ T5238] loop3: detected capacity change from 0 to 512 [ 125.984667][ T5242] loop0: detected capacity change from 0 to 512 [ 126.074903][ T5242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.117711][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.137249][ T5242] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.148574][ T5238] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.164352][ T28] audit: type=1400 audit(1774223239.375:304): avc: denied { setattr } for pid=5241 comm="syz.0.528" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.208337][ T5238] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks [ 126.215658][ T5238] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 126.340689][ T5259] loop2: detected capacity change from 0 to 1024 [ 126.374644][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.387716][ T28] audit: type=1400 audit(1774223239.415:305): avc: denied { read } for pid=5245 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.408436][ T5259] EXT4-fs: test_dummy_encryption option not supported [ 126.990171][ T5261] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 127.194722][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.411976][ T28] audit: type=1400 audit(1774223240.605:306): avc: denied { bind } for pid=5269 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.431135][ T28] audit: type=1400 audit(1774223240.605:307): avc: denied { name_bind } for pid=5269 comm="syz.4.536" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.452755][ T28] audit: type=1400 audit(1774223240.605:308): avc: denied { node_bind } for pid=5269 comm="syz.4.536" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 127.881163][ T5275] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.900588][ T28] audit: type=1326 audit(1774223241.115:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.0.538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25e357c799 code=0x0 [ 128.049087][ T5282] loop0: detected capacity change from 0 to 512 [ 128.114204][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 128.151052][ T5289] netlink: 277 bytes leftover after parsing attributes in process `syz.4.540'. [ 128.190021][ T5289] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 128.201827][ T5282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 128.271209][ T5282] System zones: 1-12 [ 128.332442][ T5282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.538: error while reading EA inode 32 err=-116 [ 128.352371][ T5282] loop0: lost filesystem error report for type 5 error -117 [ 128.356716][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 128.370494][ C0] EXT4-fs (loop0): initial error at time 1774223241: ext4_xattr_inode_iget:446 [ 128.379471][ C0] EXT4-fs (loop0): last error at time 1774223241: ext4_xattr_inode_iget:446 [ 128.491327][ T5282] EXT4-fs (loop0): Remounting filesystem read-only [ 128.497955][ T5282] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 128.508617][ T5282] EXT4-fs (loop0): 1 orphan inode deleted [ 128.514916][ T5282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.347330][ T5282] ip6erspan0: entered allmulticast mode [ 129.543504][ T28] audit: type=1400 audit(1774223242.755:310): avc: denied { create } for pid=5308 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.353722][ T5313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 130.364493][ T28] audit: type=1400 audit(1774223242.785:311): avc: denied { write } for pid=5308 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.392750][ T5314] netlink: 112 bytes leftover after parsing attributes in process `syz.4.549'. [ 130.405023][ T5311] Cannot find add_set index 0 as target [ 130.415572][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.526736][ T28] audit: type=1400 audit(1774223243.735:312): avc: denied { read write } for pid=5317 comm="syz.2.552" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.579620][ T28] audit: type=1400 audit(1774223243.735:313): avc: denied { open } for pid=5317 comm="syz.2.552" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.604497][ T28] audit: type=1400 audit(1774223243.785:314): avc: denied { read } for pid=5317 comm="syz.2.552" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.630543][ T28] audit: type=1400 audit(1774223243.785:315): avc: denied { open } for pid=5317 comm="syz.2.552" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.656304][ T28] audit: type=1400 audit(1774223243.875:316): avc: denied { name_bind } for pid=5317 comm="syz.2.552" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 130.747603][ T5326] loop2: detected capacity change from 0 to 1024 [ 130.754423][ T5326] EXT4-fs: test_dummy_encryption option not supported [ 131.244697][ T5334] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 131.263995][ T28] audit: type=1400 audit(1774223244.475:317): avc: denied { watch } for pid=5327 comm="syz.3.556" path="/106" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.049428][ T5337] netlink: 88 bytes leftover after parsing attributes in process `syz.1.558'. [ 132.658068][ T5345] netlink: 277 bytes leftover after parsing attributes in process `syz.3.559'. [ 133.416386][ T5351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.560'. [ 133.425819][ T5351] Cannot find add_set index 0 as target [ 133.462707][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.473689][ T5352] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 133.739537][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.792798][ T5352] veth1_vlan: left allmulticast mode [ 133.800468][ T5350] loop2: detected capacity change from 0 to 8192 [ 133.858720][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 133.890911][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.930564][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.041589][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.217215][ T5379] netlink: 112 bytes leftover after parsing attributes in process `syz.1.566'. [ 134.301388][ T12] bridge_slave_1: left allmulticast mode [ 134.318005][ T12] bridge_slave_1: left promiscuous mode [ 134.323879][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.409889][ T12] bridge_slave_0: left allmulticast mode [ 134.469227][ T12] bridge_slave_0: left promiscuous mode [ 134.526958][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.578076][ T28] audit: type=1400 audit(1774223247.775:318): avc: denied { read open } for pid=5388 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.823578][ T28] audit: type=1400 audit(1774223247.775:319): avc: denied { getattr } for pid=5388 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.872102][ T28] audit: type=1400 audit(1774223247.775:320): avc: denied { getattr } for pid=5388 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.910698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.943674][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.968768][ T12] bond0 (unregistering): Released all slaves [ 135.076270][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 135.221936][ T12] hsr_slave_0: left promiscuous mode [ 135.230879][ T12] hsr_slave_1: left promiscuous mode [ 135.581702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.590133][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.597957][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.610971][ T12] veth1_macvtap: left promiscuous mode [ 135.617011][ T12] veth0_macvtap: left promiscuous mode [ 135.622640][ T12] veth1_vlan: left promiscuous mode [ 135.628532][ T12] veth0_vlan: left promiscuous mode [ 135.704662][ T12] team0 (unregistering): Port device macvlan1 removed [ 135.732007][ T12] team0 (unregistering): Port device team_slave_1 removed [ 135.749018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 135.794101][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 135.794112][ T28] audit: type=1400 audit(1774223249.005:329): avc: denied { ioctl } for pid=5414 comm="syz.2.570" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.852193][ T5413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.866357][ T5417] loop2: detected capacity change from 0 to 1024 [ 135.873342][ T5417] EXT4-fs: test_dummy_encryption option not supported [ 135.982222][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.990617][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.998491][ T5362] bridge_slave_0: entered allmulticast mode [ 136.018609][ T5362] bridge_slave_0: entered promiscuous mode [ 136.031716][ T5413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.116912][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.209945][ T5422] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 136.255177][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.269416][ T5362] bridge_slave_1: entered allmulticast mode [ 136.293657][ T5362] bridge_slave_1: entered promiscuous mode [ 136.493684][ T5413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.191424][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.226241][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.264927][ T5413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.361557][ T5362] team0: Port device team_slave_0 added [ 137.382002][ T5362] team0: Port device team_slave_1 added [ 137.408643][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.519778][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.568265][ T12] IPVS: stop unused estimator thread 0... [ 137.586286][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.617074][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.624027][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.051166][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.276345][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.535773][ T5458] FAULT_INJECTION: forcing a failure. [ 138.535773][ T5458] name failslab, interval 1, probability 0, space 0, times 0 [ 138.556211][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.604777][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.674323][ T5458] CPU: 1 UID: 0 PID: 5458 Comm: syz.3.577 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.674349][ T5458] Tainted: [W]=WARN [ 138.674355][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.674368][ T5458] Call Trace: [ 138.674374][ T5458] [ 138.674381][ T5458] __dump_stack+0x1d/0x30 [ 138.674404][ T5458] dump_stack_lvl+0x95/0xd0 [ 138.674468][ T5458] dump_stack+0x15/0x1b [ 138.674486][ T5458] should_fail_ex+0x263/0x280 [ 138.674619][ T5458] should_failslab+0x8c/0xb0 [ 138.674642][ T5458] __kmalloc_noprof+0xb8/0x4e0 [ 138.674684][ T5458] ? security_sk_alloc+0x52/0x120 [ 138.674712][ T5458] ? should_failslab+0x8c/0xb0 [ 138.674795][ T5458] security_sk_alloc+0x52/0x120 [ 138.674934][ T5458] sk_prot_alloc+0xc2/0x180 [ 138.674959][ T5458] sk_alloc+0x35/0x3e0 [ 138.674982][ T5458] bpf_prog_test_run_skb+0x31b/0xef0 [ 138.675027][ T5458] ? __fget_files+0x184/0x1c0 [ 138.675059][ T5458] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 138.675164][ T5458] bpf_prog_test_run+0x204/0x340 [ 138.675196][ T5458] __sys_bpf+0x52e/0x7e0 [ 138.675244][ T5458] __x64_sys_bpf+0x41/0x50 [ 138.675345][ T5458] x64_sys_call+0x10cb/0x3020 [ 138.675402][ T5458] do_syscall_64+0x12c/0x370 [ 138.675484][ T5458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.675510][ T5458] RIP: 0033:0x7f7aa500c799 [ 138.675526][ T5458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.675540][ T5458] RSP: 002b:00007f7aa3a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.675556][ T5458] RAX: ffffffffffffffda RBX: 00007f7aa5285fa0 RCX: 00007f7aa500c799 [ 138.675614][ T5458] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 138.675627][ T5458] RBP: 00007f7aa3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.675641][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.675654][ T5458] R13: 00007f7aa5286038 R14: 00007f7aa5285fa0 R15: 00007ffe25d603a8 [ 138.675732][ T5458] [ 138.882786][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.985407][ T5362] hsr_slave_0: entered promiscuous mode [ 138.992092][ T5362] hsr_slave_1: entered promiscuous mode [ 139.006722][ T28] audit: type=1400 audit(1774223252.215:330): avc: denied { name_bind } for pid=5467 comm="syz.3.580" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.069638][ T5470] netlink: 277 bytes leftover after parsing attributes in process `syz.0.579'. [ 139.131732][ T5362] debugfs: 'hsr0' already exists in 'hsr' [ 139.137850][ T5471] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 139.188829][ T5362] Cannot create hsr debugfs directory [ 139.304535][ T5464] loop2: detected capacity change from 0 to 8192 [ 139.481518][ T5478] loop3: detected capacity change from 0 to 1024 [ 139.489828][ T5478] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.564199][ T5478] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 139.577613][ T5478] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 139.597264][ T5478] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 139.686116][ T5478] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 139.857268][ T5483] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 139.909674][ T5477] netlink: 88 bytes leftover after parsing attributes in process `syz.3.581'. [ 140.004156][ T28] audit: type=1400 audit(1774223253.215:331): avc: denied { setopt } for pid=5497 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.024664][ T5499] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 140.047477][ T5499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5499 comm=syz.3.585 [ 140.114624][ T28] audit: type=1400 audit(1774223253.325:332): avc: denied { mount } for pid=5482 comm="syz.0.582" name="/" dev="ramfs" ino=10671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.141646][ T5362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.158058][ T5362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.168107][ T5500] loop0: detected capacity change from 0 to 512 [ 140.187576][ T5362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.197888][ T28] audit: type=1400 audit(1774223253.415:333): avc: denied { block_suspend } for pid=5505 comm="syz.3.586" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.224202][ T5362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.257840][ T5506] SET target dimension over the limit! [ 140.295630][ T5506] loop3: detected capacity change from 0 to 4096 [ 140.331572][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.353883][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.364955][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.372097][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.393789][ T5362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.405576][ T5362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.419785][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.426877][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.488924][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.586877][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.657626][ T28] audit: type=1400 audit(1774223253.845:334): avc: denied { create } for pid=5538 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.703954][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.715912][ T28] audit: type=1400 audit(1774223253.845:335): avc: denied { write } for pid=5538 comm="syz.1.589" path="socket:[10697]" dev="sockfs" ino=10697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.992701][ T5553] loop2: detected capacity change from 0 to 1024 [ 141.059767][ T5553] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.189564][ T28] audit: type=1400 audit(1774223253.845:336): avc: denied { setopt } for pid=5538 comm="syz.1.589" lport=46618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.274583][ T5553] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.592: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 141.294977][ T5553] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 141.296677][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.306837][ T5553] EXT4-fs (loop2): Remounting filesystem read-only [ 141.312153][ C1] EXT4-fs (loop2): initial error at time 1774223254: ext4_ext_check_inode:521: inode 3 [ 141.328337][ C1] EXT4-fs (loop2): last error at time 1774223254: ext4_ext_check_inode:521: inode 3 [ 141.351562][ T5553] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.367344][ T5553] EXT4-fs (loop2): mount failed [ 141.597347][ T5362] veth0_vlan: entered promiscuous mode [ 141.657441][ T5362] veth1_vlan: entered promiscuous mode [ 141.738983][ T5362] veth0_macvtap: entered promiscuous mode [ 141.793784][ T28] audit: type=1326 audit(1774223254.995:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.0.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25e357c799 code=0x0 [ 141.822873][ T5362] veth1_macvtap: entered promiscuous mode [ 141.848225][ T5596] loop0: detected capacity change from 0 to 512 [ 141.856011][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.866747][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.890409][ T28] audit: type=1400 audit(1774223255.105:338): avc: denied { mounton } for pid=5362 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 141.914575][ T1670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.931254][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.940406][ T5596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 141.949076][ T5596] System zones: 1-12 [ 141.953214][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.962573][ T5596] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.597: error while reading EA inode 32 err=-116 [ 141.981103][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.990357][ T5596] loop0: lost filesystem error report for type 5 error -117 [ 141.990579][ T5596] EXT4-fs (loop0): Remounting filesystem read-only [ 141.997905][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 141.997921][ C0] EXT4-fs (loop0): initial error at time 1774223255: ext4_xattr_inode_iget:446 [ 141.997949][ C0] EXT4-fs (loop0): last error at time 1774223255: ext4_xattr_inode_iget:446 [ 142.050436][ T5596] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 142.091359][ T5596] EXT4-fs (loop0): 1 orphan inode deleted [ 142.098754][ T5596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.548760][ T28] audit: type=1400 audit(1774223256.715:339): avc: denied { create } for pid=5619 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 143.601666][ T28] audit: type=1400 audit(1774223256.795:340): avc: denied { name_connect } for pid=5607 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 143.807554][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.931745][ T28] audit: type=1400 audit(1774223257.145:341): avc: denied { write } for pid=5659 comm="syz.2.604" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 144.293344][ T5649] syzkaller0: entered promiscuous mode [ 144.299082][ T5649] syzkaller0: entered allmulticast mode [ 144.496880][ T28] audit: type=1400 audit(1774223257.705:342): avc: denied { create } for pid=5668 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.674447][ T28] audit: type=1400 audit(1774223257.735:343): avc: denied { bind } for pid=5668 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.721053][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 144.738885][ T28] audit: type=1400 audit(1774223257.735:344): avc: denied { write } for pid=5668 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.872612][ T28] audit: type=1326 audit(1774223257.945:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5675 comm="syz.1.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd48dcc799 code=0x7ffc0000 [ 146.018351][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 146.878306][ T5701] loop0: detected capacity change from 0 to 128 [ 146.892138][ T5701] FAT-fs (loop0): bogus number of reserved sectors [ 146.898804][ T5701] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 146.910028][ T5701] FAT-fs (loop0): Can't find a valid FAT filesystem [ 147.002145][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 147.002159][ T28] audit: type=1400 audit(1774223260.205:351): avc: denied { execute } for pid=5711 comm="syz.0.618" path="/file1" dev="ramfs" ino=12573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 147.051246][ T5715] loop2: detected capacity change from 0 to 1024 [ 147.076237][ T5715] EXT4-fs: test_dummy_encryption option not supported [ 147.736380][ T5731] loop0: detected capacity change from 0 to 512 [ 147.833432][ T5731] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 147.954520][ T5731] EXT4-fs (loop0): 1 truncate cleaned up [ 147.978826][ T5731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.135950][ T5739] loop3: detected capacity change from 0 to 2048 [ 148.162873][ T28] audit: type=1400 audit(1774223261.365:352): avc: denied { add_name } for pid=5728 comm="syz.0.622" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.250925][ T5745] loop4: detected capacity change from 0 to 1024 [ 148.321264][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.396252][ T28] audit: type=1400 audit(1774223261.605:353): avc: denied { ioctl } for pid=5728 comm="syz.0.622" path="/135/file1/file1" dev="loop0" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.481077][ T28] audit: type=1400 audit(1774223261.695:354): avc: denied { remove_name } for pid=5744 comm="syz.4.628" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.521774][ T5362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.564841][ T28] audit: type=1400 audit(1774223261.695:355): avc: denied { rename } for pid=5744 comm="syz.4.628" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.629464][ T28] audit: type=1400 audit(1774223261.695:356): avc: denied { unlink } for pid=5744 comm="syz.4.628" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.883108][ T28] audit: type=1400 audit(1774223262.095:357): avc: denied { read } for pid=5771 comm="syz.2.638" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.934003][ T28] audit: type=1400 audit(1774223262.095:358): avc: denied { open } for pid=5771 comm="syz.2.638" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.001031][ T5776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.639'. [ 149.068038][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.077342][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.086229][ T28] audit: type=1400 audit(1774223262.295:359): avc: denied { create } for pid=5775 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.447551][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.774374][ T5796] loop3: detected capacity change from 0 to 164 [ 149.859530][ T28] audit: type=1400 audit(1774223263.055:360): avc: denied { ioctl } for pid=5771 comm="syz.2.638" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.204137][ T5803] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 150.214311][ T5803] Cannot find add_set index 0 as target [ 150.255506][ T5806] loop3: detected capacity change from 0 to 1024 [ 150.270127][ T5806] EXT4-fs: test_dummy_encryption option not supported [ 150.602365][ T5810] loop2: detected capacity change from 0 to 164 [ 150.957283][ T5810] FAULT_INJECTION: forcing a failure. [ 150.957283][ T5810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.013961][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.2.650 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.014056][ T5810] Tainted: [W]=WARN [ 151.014062][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.014071][ T5810] Call Trace: [ 151.014076][ T5810] [ 151.014082][ T5810] __dump_stack+0x1d/0x30 [ 151.014106][ T5810] dump_stack_lvl+0x95/0xd0 [ 151.014202][ T5810] dump_stack+0x15/0x1b [ 151.014221][ T5810] should_fail_ex+0x263/0x280 [ 151.014262][ T5810] should_fail+0xb/0x20 [ 151.014280][ T5810] should_fail_usercopy+0x1a/0x20 [ 151.014320][ T5810] _copy_to_user+0x20/0xa0 [ 151.014356][ T5810] simple_read_from_buffer+0xb5/0x130 [ 151.014437][ T5810] proc_fail_nth_read+0x10e/0x150 [ 151.014473][ T5810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.014518][ T5810] vfs_read+0x1ab/0x7f0 [ 151.014556][ T5810] ? __rcu_read_unlock+0x4e/0x70 [ 151.014574][ T5810] ? __fget_files+0x184/0x1c0 [ 151.014599][ T5810] ? mutex_lock+0x57/0x90 [ 151.014659][ T5810] ksys_read+0xdc/0x1a0 [ 151.014675][ T5810] __x64_sys_read+0x40/0x50 [ 151.014691][ T5810] x64_sys_call+0x2886/0x3020 [ 151.014785][ T5810] do_syscall_64+0x12c/0x370 [ 151.014813][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.014835][ T5810] RIP: 0033:0x7fdb6a85cfce [ 151.014848][ T5810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.014863][ T5810] RSP: 002b:00007fdb692f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.014920][ T5810] RAX: ffffffffffffffda RBX: 00007fdb692f76c0 RCX: 00007fdb6a85cfce [ 151.014931][ T5810] RDX: 000000000000000f RSI: 00007fdb692f70a0 RDI: 0000000000000004 [ 151.014942][ T5810] RBP: 00007fdb692f7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.014957][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.015013][ T5810] R13: 00007fdb6ab16038 R14: 00007fdb6ab15fa0 R15: 00007ffc4b396168 [ 151.015037][ T5810] [ 151.413669][ T5828] loop7: detected capacity change from 0 to 7 [ 151.430103][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.439842][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.448494][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.458727][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.468375][ T5383] loop7: unable to read partition table [ 151.475238][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.484853][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.493242][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.502865][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.511185][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.520779][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.528944][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.538577][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.546694][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.556258][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.830576][ T5831] netlink: 'syz.0.657': attribute type 9 has an invalid length. [ 152.030998][ T5838] can0: slcan on ptm0. [ 152.044896][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 152.044951][ T28] audit: type=1400 audit(1774223265.255:364): avc: denied { bind } for pid=5840 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.073365][ T5841] loop4: detected capacity change from 0 to 512 [ 152.080291][ T5841] EXT4-fs: dax option not supported [ 152.283396][ T5837] netlink: 277 bytes leftover after parsing attributes in process `syz.1.660'. [ 152.293265][ T5837] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 152.312192][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.321809][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.329985][ T5828] loop7: unable to read partition table [ 152.349513][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.358511][ T5828] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 152.359215][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.507183][ T5838] loop0: detected capacity change from 0 to 164 [ 152.516573][ T5838] iso9660: Unknown parameter '' [ 152.676623][ T5859] 9pnet_fd: p9_fd_create_tcp (5859): problem connecting socket to 127.0.0.1 [ 152.686612][ T28] audit: type=1400 audit(1774223265.885:365): avc: denied { mounton } for pid=5840 comm="syz.4.661" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 153.073371][ T5835] can0 (unregistered): slcan off ptm0. [ 153.246767][ T28] audit: type=1400 audit(1774223266.455:366): avc: denied { create } for pid=5898 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.267638][ T28] audit: type=1400 audit(1774223266.455:367): avc: denied { bind } for pid=5898 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.330411][ T5902] loop4: detected capacity change from 0 to 128 [ 153.341267][ T5902] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 153.352801][ T5902] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 153.360803][ T5902] FAT-fs (loop4): Filesystem has been set read-only [ 153.367474][ T5902] syz.4.672: attempt to access beyond end of device [ 153.367474][ T5902] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.171187][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.674'. [ 154.181108][ T5916] Cannot find add_set index 0 as target [ 154.480433][ T5927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=5927 comm=syz.3.678 [ 154.511896][ T28] audit: type=1400 audit(1774223267.725:368): avc: denied { map } for pid=5930 comm="syz.0.680" path="socket:[12930]" dev="sockfs" ino=12930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.586346][ T28] audit: type=1400 audit(1774223267.795:369): avc: denied { setattr } for pid=5930 comm="syz.0.680" name="NETLINK" dev="sockfs" ino=12930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.671237][ T5963] loop0: detected capacity change from 0 to 128 [ 154.727436][ T5963] ext2: Unknown parameter 'appraise' [ 154.759665][ T5958] netlink: 'syz.2.687': attribute type 14 has an invalid length. [ 154.767507][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 154.851551][ T1670] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.892810][ T5967] loop2: detected capacity change from 0 to 164 [ 154.941647][ T1670] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.014446][ T5967] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.072257][ T1670] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.180920][ T1670] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.204106][ T5958] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.266481][ T5958] rock: directory entry would overflow storage [ 155.329725][ T5967] netlink: 244 bytes leftover after parsing attributes in process `syz.2.687'. [ 155.374194][ T5958] rock: sig=0x4f50, size=4, remaining=3 [ 155.407086][ T5958] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 155.413208][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 155.424388][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 155.435058][ T28] audit: type=1400 audit(1774223268.655:370): avc: denied { setopt } for pid=5975 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.574876][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 155.655645][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.690'. [ 155.680829][ T5995] Cannot find add_set index 0 as target [ 155.685006][ T28] audit: type=1400 audit(1774223268.895:371): avc: denied { write } for pid=5998 comm="syz.3.698" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.160048][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.704'. [ 156.881624][ T6101] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.711'. [ 156.903198][ T6101] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 156.925137][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 157.269979][ T6119] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.714'. [ 157.392089][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 157.467167][ T6140] netlink: 'syz.1.719': attribute type 21 has an invalid length. [ 157.764728][ T6141] loop3: detected capacity change from 0 to 1024 [ 157.796551][ T6141] EXT4-fs: test_dummy_encryption option not supported [ 159.945252][ T28] audit: type=1326 audit(1774223273.155:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 159.986905][ T28] audit: type=1326 audit(1774223273.185:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.415933][ T28] audit: type=1326 audit(1774223273.185:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.456701][ T28] audit: type=1326 audit(1774223273.185:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.496464][ T28] audit: type=1326 audit(1774223273.195:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.519840][ T28] audit: type=1326 audit(1774223273.345:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.543228][ T28] audit: type=1326 audit(1774223273.345:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.566464][ T28] audit: type=1326 audit(1774223273.345:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.630298][ T28] audit: type=1326 audit(1774223273.345:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.697820][ T28] audit: type=1326 audit(1774223273.345:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b17c799 code=0x7ffc0000 [ 160.729279][ T6196] __nla_validate_parse: 2 callbacks suppressed [ 160.729368][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.1.737'. [ 160.754530][ T6191] sch_fq: defrate 4294967295 ignored. [ 160.868261][ T6210] loop3: detected capacity change from 0 to 1024 [ 160.877220][ T6210] EXT4-fs: test_dummy_encryption option not supported [ 160.966329][ T6217] loop0: detected capacity change from 0 to 4096 [ 161.074518][ T6220] netlink: 277 bytes leftover after parsing attributes in process `syz.2.745'. [ 161.086416][ T6220] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 161.172991][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.362648][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.675753][ T6242] FAULT_INJECTION: forcing a failure. [ 162.675753][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 163.025740][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.0.753 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.025768][ T6242] Tainted: [W]=WARN [ 163.025851][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.025862][ T6242] Call Trace: [ 163.025869][ T6242] [ 163.025877][ T6242] __dump_stack+0x1d/0x30 [ 163.025912][ T6242] dump_stack_lvl+0x95/0xd0 [ 163.025943][ T6242] dump_stack+0x15/0x1b [ 163.025968][ T6242] should_fail_ex+0x263/0x280 [ 163.025998][ T6242] ? rtnl_newlink+0x5c/0x1330 [ 163.026098][ T6242] should_failslab+0x8c/0xb0 [ 163.026115][ T6242] __kmalloc_cache_noprof+0x5f/0x410 [ 163.026138][ T6242] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.026155][ T6242] rtnl_newlink+0x5c/0x1330 [ 163.026244][ T6242] ? xas_load+0x276/0x430 [ 163.026351][ T6242] ? xas_load+0x413/0x430 [ 163.026388][ T6242] ? xas_load+0x413/0x430 [ 163.026403][ T6242] ? __rcu_read_unlock+0x4e/0x70 [ 163.026420][ T6242] ? __memcg_slab_free_hook+0x14b/0x240 [ 163.026498][ T6242] ? __rcu_read_unlock+0x4e/0x70 [ 163.026520][ T6242] ? avc_has_perm_noaudit+0xab/0x130 [ 163.026558][ T6242] ? cred_has_capability+0x224/0x2a0 [ 163.026590][ T6242] ? selinux_capable+0x31/0x40 [ 163.026620][ T6242] ? security_capable+0x7b/0x90 [ 163.026649][ T6242] ? ns_capable+0x7c/0xb0 [ 163.026677][ T6242] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.026696][ T6242] rtnetlink_rcv_msg+0x64b/0x720 [ 163.026737][ T6242] netlink_rcv_skb+0x123/0x220 [ 163.026762][ T6242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.026790][ T6242] rtnetlink_rcv+0x1c/0x30 [ 163.026893][ T6242] netlink_unicast+0x5c0/0x690 [ 163.026925][ T6242] netlink_sendmsg+0x5c8/0x6f0 [ 163.026960][ T6242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.027008][ T6242] ____sys_sendmsg+0x563/0x5b0 [ 163.027043][ T6242] ___sys_sendmsg+0x195/0x1e0 [ 163.027088][ T6242] __x64_sys_sendmsg+0xd4/0x160 [ 163.027145][ T6242] x64_sys_call+0x194c/0x3020 [ 163.027310][ T6242] do_syscall_64+0x12c/0x370 [ 163.027329][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.027352][ T6242] RIP: 0033:0x7f25e357c799 [ 163.027368][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.027393][ T6242] RSP: 002b:00007f25e1fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.027410][ T6242] RAX: ffffffffffffffda RBX: 00007f25e37f5fa0 RCX: 00007f25e357c799 [ 163.027421][ T6242] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 163.027499][ T6242] RBP: 00007f25e1fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 163.027511][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.027540][ T6242] R13: 00007f25e37f6038 R14: 00007f25e37f5fa0 R15: 00007fff59dc7638 [ 163.027560][ T6242] [ 163.948244][ T6261] netlink: 277 bytes leftover after parsing attributes in process `syz.1.756'. [ 164.002127][ T6263] loop4: detected capacity change from 0 to 4096 [ 164.187399][ T6263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.248622][ T6272] vlan2: entered allmulticast mode [ 164.421770][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 164.447877][ T6265] loop0: detected capacity change from 0 to 2048 [ 164.477064][ T5362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.489172][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 164.505939][ T5383] loop0: p3 p4 < > [ 164.513143][ T5383] loop0: p3 start 11362048 is beyond EOD, truncated [ 164.529313][ T6265] loop0: p3 p4 < > [ 164.533937][ T6265] loop0: p3 start 11362048 is beyond EOD, truncated [ 164.550224][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 164.550498][ T72] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.569387][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 164.581826][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 164.590753][ T72] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.603505][ T72] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.613683][ T72] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.647043][ T6290] ================================================================== [ 164.655141][ T6290] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 164.662450][ T6290] [ 164.664785][ T6290] write to 0xffff888105be3f00 of 8 bytes by task 6289 on cpu 1: [ 164.672428][ T6290] mas_wmb_replace+0x20d/0x1610 [ 164.677302][ T6290] mas_wr_store_entry+0x16b6/0x2ed0 [ 164.682508][ T6290] mas_store_prealloc+0x72e/0xa70 [ 164.687547][ T6290] vma_complete+0x3c7/0x850 [ 164.692076][ T6290] __split_vma+0x5db/0x640 [ 164.696510][ T6290] vma_modify+0xbc9/0xd00 [ 164.700868][ T6290] vma_modify_flags+0x182/0x210 [ 164.705745][ T6290] mprotect_fixup+0x312/0x5d0 [ 164.710430][ T6290] do_mprotect_pkey+0x67b/0x920 [ 164.715293][ T6290] __x64_sys_mprotect+0x48/0x60 [ 164.720145][ T6290] x64_sys_call+0x2768/0x3020 [ 164.724854][ T6290] do_syscall_64+0x12c/0x370 [ 164.729455][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.735353][ T6290] [ 164.737679][ T6290] read to 0xffff888105be3f00 of 8 bytes by task 6290 on cpu 0: [ 164.745220][ T6290] mas_state_walk+0x485/0x650 [ 164.749902][ T6290] mas_walk+0x60/0x150 [ 164.753984][ T6290] lock_vma_under_rcu+0xc9/0x210 [ 164.758935][ T6290] do_user_addr_fault+0x232/0x1050 [ 164.764066][ T6290] exc_page_fault+0x62/0xa0 [ 164.768593][ T6290] asm_exc_page_fault+0x26/0x30 [ 164.773447][ T6290] [ 164.775803][ T6290] value changed: 0xffff888104ef4a81 -> 0xffff888105be3f00 [ 164.782915][ T6290] [ 164.785249][ T6290] Reported by Kernel Concurrency Sanitizer on: [ 164.791401][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.1.767 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.802168][ T6290] Tainted: [W]=WARN [ 164.805972][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.816039][ T6290] ================================================================== [ 164.835834][ T6294] netlink: 'syz.3.764': attribute type 21 has an invalid length. [ 164.849325][ T5383] udevd[5383]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 164.855498][ T6294] netlink: 128 bytes leftover after parsing attributes in process `syz.3.764'. [ 164.869125][ T6294] netlink: 3 bytes leftover after parsing attributes in process `syz.3.764'. [ 164.902011][ T6285] loop4: detected capacity change from 0 to 128