last executing test programs: 12.351843396s ago: executing program 1 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x3ff) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 8.087442789s ago: executing program 1 (id=826): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0xe56, &(0x7f00000002c0)={0x0, 0xbf43, 0x10, 0x0, 0x81}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000015c0)='./file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prlimit64(r0, 0xc, &(0x7f0000000240)={0x3f61, 0x1000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c666c7573682c646f74732c71756965742c74696d655f6f66667365743d3078303030303030303030303030303261302c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d55544303646f733178666c6f7070792c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c636865636b3d7374726963742c652c000000000000"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x11e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000dd3536b0bc100000000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 7.413282331s ago: executing program 0 (id=828): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@commit={'commit', 0x3d, 0x3}}, {@stripe}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x4, 0x46a, &(0x7f0000000640)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x9, 0x5, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, 0x1, 0x91, 0x0, 0x5}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x222900, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x3}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) ppoll(&(0x7f00000000c0)=[{r2}, {0xffffffffffffffff, 0x21a}], 0x2, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 6.477172958s ago: executing program 2 (id=835): io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 6.379948514s ago: executing program 0 (id=838): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e", 0x4e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10", 0x6e}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 5.490531153s ago: executing program 0 (id=841): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 5.38831089s ago: executing program 2 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 5.26678111s ago: executing program 0 (id=845): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r6}}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@multicast2, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) 4.619968758s ago: executing program 2 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x20000000000000e0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.439709508s ago: executing program 2 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x8c}}, 0xe040) close(r0) 4.392271356s ago: executing program 2 (id=849): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = socket(0x11, 0x3, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (async, rerun: 64) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) (async) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) (async) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000001c0)={0x2007}) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@nodioread_nolock}, {@minixdf}, {@norecovery}]}, 0x2, 0x4c5, &(0x7f0000000540)="$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") (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee00, 0x0) 4.345180334s ago: executing program 3 (id=850): syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) fadvise64(r0, 0x80000001, 0xcc4, 0x3) getpgid(0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8afcffff0206010800ff03000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000006300)=ANY=[], 0x4f8}], 0x1, 0x0, 0x0, 0x80}, 0x80) 4.283548094s ago: executing program 2 (id=851): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, r0, 0xc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, 0x0) r5 = io_uring_setup(0x25f5, &(0x7f0000000040)={0x0, 0x512, 0x2, 0x1, 0x257}) io_uring_enter(r5, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 4.111506773s ago: executing program 4 (id=852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x30) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x4f9, 0x10000) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r2 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r2, 0x0, 0x0) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaabb0000080007"], 0x30}}, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000040)={0xc, "60d6a5d876764b125df685d59a7952b2be39652faa33a11a8da00bf8e2b3bea5eaa36a5068010a2371a637f993d53b95505aded1e9c38d4c61814958a19e648a"}) 4.026820007s ago: executing program 4 (id=853): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x58}}], 0x1, 0x0) 3.895458929s ago: executing program 4 (id=854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r7}}) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@multicast2, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.618852446s ago: executing program 0 (id=855): io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 3.321257585s ago: executing program 3 (id=856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0ce609127f3c31ba0f0684bb1e0d29bdcd1100"/29, @ANYRESHEX=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084460c7220f668226c66e6660c0efe5903e4de11ee07af3ab0c961879e84ff5314fe7b6f100f878169f65949c008af56b1565c75c825d49e42a94cfcaabbe7f2b37d", @ANYBLOB="80a37ca86c6fe24993cb3512f4a62d82e39024887908c749098b38d9791e7166dfd07af4b28be0635b6ab6155ed91a171e7bbbfd03484b5b1970e213958127f16b8ce80e8d12d71afb658acabcaa30f0b5f7268b1633a40b18157a8a3a92731d7ab85423b6f4b19375cd8256262329c5b9e4adba030ef89403bac316ce2ab540155f2b75c0cd500a037734eb8dd1b8b24418fc59a89032c9ffa6cec276737ca6464df41f079499324d9b66f4f1959f8cb3497761228533082524b5fffc4300c4060029a8d71af876c920c58ae55a93baabd9b7421597f60b7deb3c777b505617f1fe1e6dce0b47b0e1b5650317a0c6529d1637cf102d5495"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbd3}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x42e, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6fa, @local, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x47c0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf58}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x10c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2081}, 0x4008080) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x400) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@nobarrier}, {@dioread_lock}, {@i_version}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6aa}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) write$selinux_create(r4, &(0x7f0000000300)=@access={'system_u:object_r:var_spool_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x8}, 0x46) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) readv(r9, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x104, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xdc}, {0x6, 0x16, 0x401}, {0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.839848106s ago: executing program 3 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.762181539s ago: executing program 3 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x20000000000000e0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.678550392s ago: executing program 3 (id=859): syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) fadvise64(r0, 0x80000001, 0xcc4, 0x3) getpgid(0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8afcffff0206010800ff03000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000006300)=ANY=[], 0x4f8}], 0x1, 0x0, 0x0, 0x80}, 0x80) 2.104686128s ago: executing program 4 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") r3 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) 1.817669677s ago: executing program 3 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x3ff) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 731.920398ms ago: executing program 1 (id=862): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xfeffff07, 0xa, 0x148, 0x0, 0x10, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xc9e5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x6, 0x0, 0x3, 0x1], 0x3, 0x3}, {0x2, [0x0, 0x8, 0x1, 0x5, 0x7, 0x7], 0x2, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x278) 642.666603ms ago: executing program 1 (id=863): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xd0) 567.768645ms ago: executing program 1 (id=864): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x58}}], 0x1, 0x0) 451.814265ms ago: executing program 1 (id=865): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000026c0)=0x3d) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsmount(r3, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 172.893032ms ago: executing program 4 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001800010000000000000000000a00000000000000", @ANYBLOB="080006000900000014000500ff"], 0x54}}, 0x0) 102.446963ms ago: executing program 0 (id=867): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0ce609127f3c31ba0f0684bb1e0d29bdcd1100"/29, @ANYRESHEX=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084460c7220f668226c66e6660c0efe5903e4de11ee07af3ab0c961879e84ff5314fe7b6f100f878169f65949c008af56b1565c75c825d49e42a94cfcaabbe7f2b37d", @ANYBLOB="80a37ca86c6fe24993cb3512f4a62d82e39024887908c749098b38d9791e7166dfd07af4b28be0635b6ab6155ed91a171e7bbbfd03484b5b1970e213958127f16b8ce80e8d12d71afb658acabcaa30f0b5f7268b1633a40b18157a8a3a92731d7ab85423b6f4b19375cd8256262329c5b9e4adba030ef89403bac316ce2ab540155f2b75c0cd500a037734eb8dd1b8b24418fc59a89032c9ffa6cec276737ca6464df41f079499324d9b66f4f1959f8cb3497761228533082524b5fffc4300c4060029a8d71af876c920c58ae55a93baabd9b7421597f60b7deb3c777b505617f1fe1e6dce0b47b0e1b5650317a0c6529d1637cf102d5495"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x188, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbd3}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x42e, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6fa, @local, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x47c0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf58}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x10c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2081}, 0x4008080) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x400) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@nobarrier}, {@dioread_lock}, {@i_version}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6aa}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) write$selinux_create(r4, &(0x7f0000000300)=@access={'system_u:object_r:var_spool_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x8}, 0x46) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) readv(r9, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x104, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xdc}, {0x6, 0x16, 0x401}, {0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@setneightbl={0x1c, 0x43, 0x4, 0x70bd25, 0x25dfdbfc, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0xc7}]}, 0x1c}}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) kernel console output (not intermixed with test programs): 31 callbacks suppressed [ 80.310730][ T28] audit: type=1400 audit(1776187437.414:455): avc: denied { getopt } for pid=4208 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.341723][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 80.343642][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 80.352973][ T28] audit: type=1400 audit(1776187437.444:456): avc: denied { write } for pid=4208 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.366549][ T4087] udevd[4087]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 80.554783][ T4214] loop4: detected capacity change from 0 to 512 [ 80.571219][ T4216] netlink: 204 bytes leftover after parsing attributes in process `syz.1.213'. [ 80.592061][ T4216] netlink: 84 bytes leftover after parsing attributes in process `syz.1.213'. [ 80.597384][ T4214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.656420][ T4219] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 80.677844][ T4214] EXT4-fs (loop4): 1 orphan inode deleted [ 80.695049][ T4214] EXT4-fs (loop4): 1 truncate cleaned up [ 80.695602][ T4219] bond1: entered promiscuous mode [ 80.727369][ T4219] bond1: entered allmulticast mode [ 80.735058][ T4219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.765650][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.807293][ T28] audit: type=1400 audit(1776187437.904:457): avc: denied { firmware_load } for pid=4218 comm="syz.1.215" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.918099][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.948538][ T4229] syzkaller0: entered promiscuous mode [ 80.956089][ T4229] syzkaller0: entered allmulticast mode [ 81.084137][ T4234] loop1: detected capacity change from 0 to 512 [ 81.156452][ T4234] EXT4-fs (loop1): 1 truncate cleaned up [ 81.167706][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.200209][ T4234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.248145][ T4231] Set syz1 is full, maxelem 65536 reached [ 81.404232][ T4243] syzkaller0: entered allmulticast mode [ 81.590245][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.656616][ T4251] loop4: detected capacity change from 0 to 512 [ 81.690109][ T4251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.715965][ T4251] EXT4-fs (loop4): 1 orphan inode deleted [ 81.730344][ T4251] EXT4-fs (loop4): 1 truncate cleaned up [ 81.742471][ T4251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.015519][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.360005][ T28] audit: type=1326 audit(1776187439.464:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7fc00000 [ 82.417023][ T4262] syzkaller0: entered promiscuous mode [ 82.455254][ T4262] syzkaller0: entered allmulticast mode [ 82.475015][ T4265] loop0: detected capacity change from 0 to 512 [ 82.497646][ T4267] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.520644][ T4265] EXT4-fs (loop0): 1 truncate cleaned up [ 82.529325][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.553371][ T4265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.569353][ T4267] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.592096][ T4267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.232: bg 0: block 248: padding at end of block bitmap is not set [ 82.622697][ T4267] loop2: lost filesystem error report for type 5 error -117 [ 82.627267][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.650382][ C0] EXT4-fs (loop2): last error at time 1776187439: ext4_validate_block_bitmap:441 [ 82.666873][ T4267] Quota error (device loop2): write_blk: dquota write failed [ 82.704301][ T4267] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 82.756180][ T4267] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.232: Failed to acquire dquot type 1 [ 82.811976][ T4267] loop2: lost filesystem error report for type 5 error -28 [ 82.814284][ T4267] EXT4-fs (loop2): 1 truncate cleaned up [ 82.844130][ T28] audit: type=1400 audit(1776187439.944:459): avc: denied { getopt } for pid=4279 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.845383][ T4267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 82.919055][ T4280] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 82.935790][ T4267] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 82.955873][ T4267] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131074 [ 82.972248][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.974342][ T4267] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.232: Failed to acquire dquot type 1 [ 83.033437][ T4285] ext4: Unknown parameter 'noacl' [ 83.093357][ T4287] EXT4-fs: Ignoring removed nobh option [ 83.131928][ T4287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.150027][ T4287] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.170752][ T4267] syz.2.232 (4267) used greatest stack depth: 8184 bytes left [ 83.210451][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 83.210910][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.431222][ T4303] EXT4-fs (loop3): 1 truncate cleaned up [ 83.444814][ T4303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.465669][ T4303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.546316][ T4311] syzkaller0: entered promiscuous mode [ 83.554921][ T4311] syzkaller0: entered allmulticast mode [ 83.642499][ T4313] netlink: 204 bytes leftover after parsing attributes in process `syz.0.247'. [ 84.316618][ T4328] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 84.332893][ T4332] set_capacity_and_notify: 6 callbacks suppressed [ 84.332913][ T4332] loop2: detected capacity change from 0 to 1024 [ 84.374790][ T4332] EXT4-fs: test_dummy_encryption option not supported [ 84.421235][ T4336] loop4: detected capacity change from 0 to 1024 [ 84.458136][ T4336] EXT4-fs: test_dummy_encryption option not supported [ 84.740516][ T4338] loop2: detected capacity change from 0 to 512 [ 85.769431][ T4340] loop4: detected capacity change from 0 to 512 [ 87.768690][ T4340] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 87.799767][ T4338] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 88.468385][ T4349] netlink: 204 bytes leftover after parsing attributes in process `syz.2.260'. [ 88.495758][ T4351] loop3: detected capacity change from 0 to 1024 [ 88.526651][ T4349] netlink: 84 bytes leftover after parsing attributes in process `syz.2.260'. [ 88.583558][ T4351] EXT4-fs: test_dummy_encryption option not supported [ 88.704110][ T28] audit: type=1400 audit(1776187445.804:460): avc: denied { write } for pid=4347 comm="syz.0.262" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.994667][ T4368] loop3: detected capacity change from 0 to 512 [ 90.886951][ T4368] EXT4-fs (loop3): 1 orphan inode deleted [ 90.908127][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 90.908510][ T4368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.941904][ T4368] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.983120][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 91.020350][ T4383] netlink: 'syz.0.270': attribute type 30 has an invalid length. [ 91.035161][ T3494] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.064009][ T4365] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 91.082766][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 91.096572][ T3494] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:8: Failed to release dquot type 1 [ 91.146034][ T4388] netlink: 204 bytes leftover after parsing attributes in process `syz.4.273'. [ 91.160227][ T4388] netlink: 84 bytes leftover after parsing attributes in process `syz.4.273'. [ 91.219266][ T28] audit: type=1400 audit(1776187448.304:461): avc: denied { create } for pid=4380 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.272571][ T4392] loop2: detected capacity change from 0 to 1024 [ 91.287867][ T28] audit: type=1400 audit(1776187448.304:462): avc: denied { bind } for pid=4380 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.315742][ T4392] EXT4-fs: test_dummy_encryption option not supported [ 91.328671][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.393974][ T4395] loop4: detected capacity change from 0 to 512 [ 91.442301][ T4395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.450953][ T28] audit: type=1400 audit(1776187448.484:463): avc: denied { connect } for pid=4393 comm="syz.4.277" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.761431][ T4401] loop2: detected capacity change from 0 to 512 [ 91.986417][ T4401] EXT4-fs (loop2): 1 orphan inode deleted [ 92.007200][ T4401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.036392][ T230] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.056027][ T4401] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.166472][ T4401] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 92.257288][ T230] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:5: Failed to release dquot type 1 [ 92.495169][ T4408] loop3: detected capacity change from 0 to 2048 [ 92.645047][ T4408] Alternate GPT is invalid, using primary GPT. [ 92.668088][ T4408] loop3: p2 p3 p7 [ 92.738548][ T2998] Alternate GPT is invalid, using primary GPT. [ 92.777356][ T28] audit: type=1400 audit(1776187449.864:464): avc: denied { read write } for pid=4414 comm="syz.1.281" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.822933][ T2998] loop3: p2 p3 p7 [ 92.842578][ T4417] loop0: detected capacity change from 0 to 1024 [ 92.853212][ T4417] ext4: Unknown parameter 'noacl' [ 92.882872][ T4415] loop1: detected capacity change from 0 to 4096 [ 92.898598][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 92.908618][ T4087] udevd[4087]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 92.934064][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 92.986782][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.054671][ T4422] syzkaller0: entered promiscuous mode [ 93.077898][ T4422] syzkaller0: entered allmulticast mode [ 93.236818][ T4425] loop3: detected capacity change from 0 to 1024 [ 93.255111][ T4425] EXT4-fs: Ignoring removed i_version option [ 93.256782][ T28] audit: type=1400 audit(1776187449.864:465): avc: denied { open } for pid=4414 comm="syz.1.281" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.278946][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.303114][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.336496][ T4087] udevd[4087]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 93.355394][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 93.370030][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 93.425673][ T4432] netlink: 204 bytes leftover after parsing attributes in process `syz.2.286'. [ 93.438897][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.498373][ T4434] loop3: detected capacity change from 0 to 512 [ 93.569423][ T4434] EXT4-fs: Ignoring removed nobh option [ 93.738923][ T4434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.756984][ T4415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.770809][ T4440] loop0: detected capacity change from 0 to 1024 [ 93.785287][ T4439] capability: warning: `syz.2.288' uses deprecated v2 capabilities in a way that may be insecure [ 93.818310][ T28] audit: type=1400 audit(1776187450.884:466): avc: denied { create } for pid=4435 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.842151][ T4434] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.898471][ T4440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.965425][ T28] audit: type=1400 audit(1776187450.884:467): avc: denied { bind } for pid=4435 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.989595][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.999148][ T28] audit: type=1400 audit(1776187450.884:468): avc: denied { listen } for pid=4435 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.067626][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.087080][ T4449] loop3: detected capacity change from 0 to 512 [ 94.103786][ T28] audit: type=1400 audit(1776187450.964:469): avc: denied { connect } for pid=4435 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.145223][ T4449] EXT4-fs: Ignoring removed nobh option [ 94.191563][ T28] audit: type=1400 audit(1776187450.964:470): avc: denied { write } for pid=4435 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.300573][ T4452] Alternate GPT is invalid, using primary GPT. [ 94.314377][ T4452] loop2: p2 p3 p7 [ 94.320006][ T4449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.336575][ T4449] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.398273][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.413055][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.428449][ T4087] udevd[4087]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 94.455714][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.518834][ T4459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.566188][ T4463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.652065][ T4459] EXT4-fs (loop2): 1 orphan inode deleted [ 94.659078][ T4463] EXT4-fs (loop3): 1 orphan inode deleted [ 94.659526][ T4459] EXT4-fs (loop2): 1 truncate cleaned up [ 94.676157][ T4463] EXT4-fs (loop3): 1 truncate cleaned up [ 95.037341][ T4471] EXT4-fs: test_dummy_encryption option not supported [ 95.162854][ T4473] netlink: 204 bytes leftover after parsing attributes in process `syz.4.298'. [ 95.254552][ T4475] ext4: Unknown parameter 'noacl' [ 95.529053][ T4478] EXT4-fs (loop1): 1 orphan inode deleted [ 95.548071][ T4478] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.639051][ T4478] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 95.665398][ T1032] IPVS: starting estimator thread 0... [ 95.674288][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.716942][ T4483] netlink: 168 bytes leftover after parsing attributes in process `syz.0.302'. [ 95.791847][ T4484] IPVS: using max 2256 ests per chain, 112800 per kthread [ 95.890574][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:1: Failed to release dquot type 1 [ 96.120097][ T4493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 96.167375][ T4493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 96.207959][ T4493] netlink: 22 bytes leftover after parsing attributes in process `syz.0.303'. [ 96.259849][ T28] audit: type=1326 audit(1776187453.364:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e2bbc819 code=0x7ffc0000 [ 96.416050][ T4496] set_capacity_and_notify: 6 callbacks suppressed [ 96.416136][ T4496] loop3: detected capacity change from 0 to 512 [ 96.455696][ T28] audit: type=1326 audit(1776187453.364:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e2bbc819 code=0x7ffc0000 [ 96.670445][ T4496] EXT4-fs: Ignoring removed nobh option [ 96.996125][ T28] audit: type=1326 audit(1776187453.394:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e2bbc819 code=0x7ffc0000 [ 97.080354][ T4496] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.150147][ T28] audit: type=1326 audit(1776187453.394:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4492 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e2bbc819 code=0x7ffc0000 [ 97.421346][ T4526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.421676][ T4527] loop2: detected capacity change from 0 to 128 [ 97.460876][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 97.479553][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 97.491939][ T4527] netlink: 44 bytes leftover after parsing attributes in process `syz.2.316'. [ 97.514148][ T4532] loop1: detected capacity change from 0 to 1024 [ 97.534147][ T4530] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 97.545982][ T4532] ext4: Unknown parameter 'noacl' [ 97.547172][ T4534] loop4: detected capacity change from 0 to 128 [ 97.576227][ T4534] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.662912][ T4536] loop3: detected capacity change from 0 to 512 [ 97.670928][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.317'. [ 97.752830][ T4536] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.768644][ T4551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848335][ T4551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.941387][ T4551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.029370][ T4551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.105299][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.124828][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.142982][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.156041][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.232196][ T4556] loop1: detected capacity change from 0 to 512 [ 98.242058][ T4556] EXT4-fs: Ignoring removed nobh option [ 98.277797][ T4556] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.328743][ T4563] loop1: detected capacity change from 0 to 256 [ 98.571552][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 98.615095][ T4586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.333'. [ 98.632548][ T4572] bond2: entered promiscuous mode [ 98.638684][ T4572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.654454][ T4572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pid=4572 comm=syz.1.329 [ 98.749739][ T4598] loop2: detected capacity change from 0 to 1024 [ 98.758914][ T4598] ext4: Unknown parameter 'noacl' [ 99.128519][ T4611] loop4: detected capacity change from 0 to 4096 [ 99.143109][ T4611] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.159171][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 99.159184][ T28] audit: type=1400 audit(1776187456.264:578): avc: denied { ioctl } for pid=4610 comm="syz.4.341" path="socket:[8812]" dev="sockfs" ino=8812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.210762][ T4613] syz.4.341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.224828][ T4613] netlink: 'syz.4.341': attribute type 21 has an invalid length. [ 99.236697][ T28] audit: type=1400 audit(1776187456.334:579): avc: denied { create } for pid=4610 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.264786][ T28] audit: type=1400 audit(1776187456.344:580): avc: denied { accept } for pid=4610 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.487713][ T4590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.556597][ T4623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'. [ 99.592299][ T28] audit: type=1400 audit(1776187456.694:581): avc: denied { map } for pid=4619 comm="syz.4.343" path="socket:[8091]" dev="sockfs" ino=8091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.671690][ T28] audit: type=1400 audit(1776187456.694:582): avc: denied { read } for pid=4619 comm="syz.4.343" path="socket:[8091]" dev="sockfs" ino=8091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.866931][ T28] audit: type=1326 audit(1776187456.964:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 99.937494][ T28] audit: type=1326 audit(1776187457.004:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 99.970694][ T28] audit: type=1326 audit(1776187457.004:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 100.010240][ T28] audit: type=1326 audit(1776187457.004:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 100.047335][ T28] audit: type=1326 audit(1776187457.004:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 100.325830][ T4670] loop3: detected capacity change from 0 to 1024 [ 100.337515][ T4670] ext4: Unknown parameter 'noacl' [ 100.500164][ T4672] Set syz1 is full, maxelem 65536 reached [ 100.587004][ T4679] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 100.939408][ T4692] sg_write: data in/out 394207/770 bytes for SCSI command 0x0-- guessing data in; [ 100.939408][ T4692] program syz.1.370 not setting count and/or reply_len properly [ 101.209894][ T4696] program syz.1.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.249859][ T4700] __nla_validate_parse: 2 callbacks suppressed [ 101.249878][ T4700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.373'. [ 101.345262][ T4680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.425732][ T4680] ext4: Unknown parameter 'smackfstransmute' [ 101.438305][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 101.685235][ T4728] set_capacity_and_notify: 1 callbacks suppressed [ 101.685248][ T4728] loop2: detected capacity change from 0 to 1024 [ 101.730085][ T4730] netlink: 'syz.4.384': attribute type 10 has an invalid length. [ 101.740931][ T4728] ext4: Unknown parameter 'noacl' [ 101.929503][ T4730] loop4: detected capacity change from 0 to 512 [ 102.002946][ T4730] EXT4-fs mount: 17 callbacks suppressed [ 102.002966][ T4730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.034825][ T4730] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.222288][ T4736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.385'. [ 102.243181][ T4738] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.386'. [ 102.404080][ T4750] loop1: detected capacity change from 0 to 512 [ 102.480641][ T4750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.506339][ T4750] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.618760][ T4758] siw: device registration error -23 [ 102.654852][ T4758] loop0: detected capacity change from 0 to 512 [ 102.677183][ T4756] loop2: detected capacity change from 0 to 256 [ 102.762188][ T4758] EXT4-fs (loop0): 1 orphan inode deleted [ 102.782750][ T4758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.857721][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.874863][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.260823][ T4795] loop2: detected capacity change from 0 to 1024 [ 104.272167][ T4795] ext4: Unknown parameter 'noacl' [ 104.425924][ T4800] netlink: 'syz.3.405': attribute type 10 has an invalid length. [ 104.438946][ T4799] loop1: detected capacity change from 0 to 1024 [ 104.454626][ T4799] EXT4-fs: Ignoring removed i_version option [ 104.488911][ T4799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.533476][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.590616][ T4800] loop3: detected capacity change from 0 to 512 [ 104.659291][ T4800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.678684][ T4800] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.694953][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 105.067096][ T4811] syzkaller0: entered promiscuous mode [ 105.087342][ T4811] syzkaller0: entered allmulticast mode [ 105.242015][ T4818] loop2: detected capacity change from 0 to 1024 [ 105.251402][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.287010][ T4818] EXT4-fs: Ignoring removed i_version option [ 105.328983][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 105.328997][ T28] audit: type=1400 audit(1776187462.434:652): avc: denied { create } for pid=4821 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.361279][ T4822] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 105.381062][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.532531][ T4832] loop3: detected capacity change from 0 to 1024 [ 105.554120][ T4832] EXT4-fs: Ignoring removed i_version option [ 105.596819][ T4832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.612970][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.732320][ T4809] syz.1.408 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 105.779662][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.798833][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: syz.1.408 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.798863][ T4809] Tainted: [W]=WARN [ 105.798869][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.798880][ T4809] Call Trace: [ 105.798885][ T4809] [ 105.798932][ T4809] __dump_stack+0x1d/0x30 [ 105.798960][ T4809] dump_stack_lvl+0x95/0xd0 [ 105.799014][ T4809] dump_stack+0x15/0x1b [ 105.799036][ T4809] dump_header+0x80/0x240 [ 105.799057][ T4809] oom_kill_process+0x295/0x350 [ 105.799078][ T4809] out_of_memory+0x97d/0xb80 [ 105.799150][ T4809] try_charge_memcg+0x62e/0xa10 [ 105.799183][ T4809] obj_cgroup_charge_pages+0x23/0xc0 [ 105.799208][ T4809] __memcg_kmem_charge_page+0x9e/0x170 [ 105.799265][ T4809] __alloc_frozen_pages_noprof+0x18a/0x360 [ 105.799358][ T4809] alloc_pages_mpol+0xb3/0x260 [ 105.799389][ T4809] alloc_pages_noprof+0x8f/0x140 [ 105.799420][ T4809] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 105.799453][ T4809] __kvmalloc_node_noprof+0x3d4/0x650 [ 105.799481][ T4809] ? futex_hash_allocate+0x190/0x9d0 [ 105.799567][ T4809] ? futex_hash_allocate+0x190/0x9d0 [ 105.799592][ T4809] futex_hash_allocate+0x190/0x9d0 [ 105.799659][ T4809] ? cap_task_prctl+0x13f/0x6e0 [ 105.799685][ T4809] futex_hash_prctl+0xd8/0xf0 [ 105.799709][ T4809] __se_sys_prctl+0x4f4/0x1400 [ 105.799773][ T4809] __x64_sys_prctl+0x67/0x80 [ 105.799861][ T4809] x64_sys_call+0x2533/0x3020 [ 105.799914][ T4809] do_syscall_64+0x12c/0x3b0 [ 105.799938][ T4809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.799986][ T4809] RIP: 0033:0x7efd4a77c819 [ 105.800001][ T4809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.800079][ T4809] RSP: 002b:00007efd491b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 105.800100][ T4809] RAX: ffffffffffffffda RBX: 00007efd4a9f6090 RCX: 00007efd4a77c819 [ 105.800112][ T4809] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 105.800124][ T4809] RBP: 00007efd4a812c91 R08: 0000000000000000 R09: 0000000000000000 [ 105.800206][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.800221][ T4809] R13: 00007efd4a9f6128 R14: 00007efd4a9f6090 R15: 00007ffc076010b8 [ 105.800299][ T4809] [ 105.800328][ T4809] memory: usage 307200kB, limit 307200kB, failcnt 410 [ 106.105374][ T4809] memory+swap: usage 273084kB, limit 9007199254740988kB, failcnt 0 [ 106.105623][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.120583][ T4809] kmem: usage 272704kB, limit 9007199254740988kB, failcnt 0 [ 106.148981][ T4809] Memory cgroup stats for /syz1: [ 106.149361][ T4809] cache 4096 [ 106.164957][ T4809] rss 0 [ 106.169683][ T4809] shmem 0 [ 106.175144][ T4809] mapped_file 0 [ 106.180321][ T4809] dirty 0 [ 106.191545][ T4809] writeback 0 [ 106.199059][ T28] audit: type=1400 audit(1776187463.274:653): avc: denied { accept } for pid=4842 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.205843][ T4809] workingset_refault_anon 2111 [ 106.244638][ T4844] ext4: Unknown parameter 'noacl' [ 106.276161][ T4846] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 106.305637][ T4809] workingset_refault_file 649 [ 106.328245][ T4809] swap 204800 [ 106.333329][ T4809] swapcached 8916992 [ 106.339723][ T4809] pgpgin 58543 [ 106.345210][ T4809] pgpgout 58542 [ 106.361713][ T4809] pgfault 56674 [ 106.365701][ T4853] EXT4-fs: Ignoring removed bh option [ 106.376236][ T4853] EXT4-fs: inline encryption not supported [ 106.386528][ T4809] pgmajfault 310 [ 106.392340][ T4809] inactive_anon 0 [ 106.397552][ T4853] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.398049][ T4809] active_anon 0 [ 106.419476][ T4809] inactive_file 0 [ 106.426281][ T4809] active_file 4096 [ 106.433885][ T4846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.457442][ T4809] unevictable 0 [ 106.464336][ T4809] hierarchical_memory_limit 314572800 [ 106.467377][ T4846] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.474950][ T4853] EXT4-fs (loop4): too many log groups per flexible block group [ 106.497326][ T4809] hierarchical_memsw_limit 9223372036854771712 [ 106.501792][ T4853] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 106.522738][ T4853] EXT4-fs (loop4): mount failed [ 106.530710][ T4809] total_cache 4096 [ 106.541792][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.547482][ T4809] total_rss 0 [ 106.565254][ T4809] total_shmem 0 [ 106.569817][ T4809] total_mapped_file 0 [ 106.578670][ T4809] total_dirty 0 [ 106.584044][ T4809] total_writeback 0 [ 106.590151][ T4809] total_workingset_refault_anon 2111 [ 106.597470][ T4809] total_workingset_refault_file 649 [ 106.605312][ T4809] total_swap 204800 [ 106.612668][ T4809] total_swapcached 8916992 [ 106.632394][ T4858] netlink: 'syz.4.425': attribute type 39 has an invalid length. [ 106.646763][ T4809] total_pgpgin 58543 [ 106.652634][ T4809] total_pgpgout 58542 [ 106.668996][ T4809] total_pgfault 56674 [ 106.675341][ T4809] total_pgmajfault 310 [ 106.683664][ T4809] total_inactive_anon 0 [ 106.690597][ T4809] total_active_anon 0 [ 106.697819][ T4809] total_inactive_file 0 [ 106.703714][ T4809] total_active_file 4096 [ 106.709116][ T4809] total_unevictable 0 [ 106.714833][ T4809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.408,pid=4805,uid=0 [ 106.736815][ T4809] Memory cgroup out of memory: Killed process 4805 (syz.1.408) total-vm:159700kB, anon-rss:1228kB, file-rss:22420kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 106.975385][ T4868] set_capacity_and_notify: 3 callbacks suppressed [ 106.975402][ T4868] loop1: detected capacity change from 0 to 1024 [ 106.995574][ T4868] EXT4-fs: Ignoring removed i_version option [ 107.037856][ T4868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.084223][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.112942][ T4881] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 107.116208][ T4879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4879 comm=syz.3.434 [ 107.241399][ T4888] netlink: 204 bytes leftover after parsing attributes in process `syz.3.438'. [ 107.695111][ T4898] loop4: detected capacity change from 0 to 1024 [ 107.769065][ T4898] ext4: Unknown parameter 'noacl' [ 107.784324][ T28] audit: type=1400 audit(1776187464.884:654): avc: denied { write } for pid=4899 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.939624][ T4907] loop3: detected capacity change from 0 to 1024 [ 107.949317][ T4907] EXT4-fs: Ignoring removed i_version option [ 108.100641][ T4907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.139665][ T28] audit: type=1326 audit(1776187465.234:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.1.446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd4a77c819 code=0x0 [ 108.205061][ T4921] netlink: 204 bytes leftover after parsing attributes in process `syz.1.450'. [ 108.248685][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.294990][ T4926] loop0: detected capacity change from 0 to 512 [ 108.315367][ T4926] loop0: detected capacity change from 0 to 128 [ 108.329924][ T4929] syzkaller1: entered promiscuous mode [ 108.350664][ T4929] syzkaller1: entered allmulticast mode [ 108.384345][ T4926] loop0: detected capacity change from 0 to 128 [ 108.414352][ T28] audit: type=1400 audit(1776187465.514:656): avc: denied { write } for pid=4928 comm="syz.3.451" path="socket:[10421]" dev="sockfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.589871][ T4945] loop4: detected capacity change from 0 to 1024 [ 108.597536][ T4945] ext4: Unknown parameter 'noacl' [ 109.180966][ T4957] netlink: 56 bytes leftover after parsing attributes in process `syz.2.462'. [ 109.199190][ T4955] loop1: detected capacity change from 0 to 1024 [ 109.208688][ T4955] EXT4-fs: Ignoring removed i_version option [ 109.238072][ T4959] netlink: 204 bytes leftover after parsing attributes in process `syz.2.463'. [ 109.260070][ T4955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.344842][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.472266][ T4975] loop1: detected capacity change from 0 to 1024 [ 109.497847][ T4975] EXT4-fs: test_dummy_encryption option not supported [ 109.614472][ T4978] loop0: detected capacity change from 0 to 1024 [ 109.627794][ T4978] EXT4-fs: test_dummy_encryption option not supported [ 112.577746][ T4982] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 112.861366][ T4998] netlink: 204 bytes leftover after parsing attributes in process `syz.3.475'. [ 113.404559][ T4993] set_capacity_and_notify: 1 callbacks suppressed [ 113.404640][ T4993] loop0: detected capacity change from 0 to 512 [ 113.918632][ T4993] EXT4-fs (loop0): 1 orphan inode deleted [ 113.931361][ T4993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.950191][ T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.963965][ T4993] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.063546][ T4993] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 114.440535][ T5004] loop3: detected capacity change from 0 to 1024 [ 114.453576][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 114.475423][ T5008] loop4: detected capacity change from 0 to 1024 [ 114.492092][ T5004] EXT4-fs: Ignoring removed i_version option [ 114.521870][ T5008] ext4: Unknown parameter 'noacl' [ 114.547846][ T5004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.665273][ T5015] FAULT_INJECTION: forcing a failure. [ 114.665273][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 114.683601][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.4.480 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.683852][ T5015] Tainted: [W]=WARN [ 114.683858][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.683869][ T5015] Call Trace: [ 114.683875][ T5015] [ 114.683883][ T5015] __dump_stack+0x1d/0x30 [ 114.683912][ T5015] dump_stack_lvl+0x95/0xd0 [ 114.684049][ T5015] dump_stack+0x15/0x1b [ 114.684115][ T5015] should_fail_ex+0x263/0x280 [ 114.684145][ T5015] ? rtnl_newlink+0x5c/0x1400 [ 114.684237][ T5015] should_failslab+0x8c/0xb0 [ 114.684325][ T5015] __kmalloc_cache_noprof+0x5f/0x410 [ 114.684420][ T5015] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.684497][ T5015] rtnl_newlink+0x5c/0x1400 [ 114.684527][ T5015] ? __memcg_slab_free_hook+0x14b/0x240 [ 114.684577][ T5015] ? __rcu_read_unlock+0x4e/0x70 [ 114.684595][ T5015] ? avc_has_perm_noaudit+0xab/0x130 [ 114.684624][ T5015] ? cred_has_capability+0x224/0x2a0 [ 114.684672][ T5015] ? selinux_capable+0x31/0x40 [ 114.684695][ T5015] ? security_capable+0x7b/0x90 [ 114.684721][ T5015] ? ns_capable+0x7c/0xb0 [ 114.684801][ T5015] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.684826][ T5015] rtnetlink_rcv_msg+0x64b/0x720 [ 114.684855][ T5015] netlink_rcv_skb+0x123/0x220 [ 114.684896][ T5015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.684975][ T5015] rtnetlink_rcv+0x1c/0x30 [ 114.685002][ T5015] netlink_unicast+0x5c0/0x690 [ 114.685025][ T5015] netlink_sendmsg+0x5c8/0x6f0 [ 114.685051][ T5015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.685102][ T5015] ____sys_sendmsg+0x563/0x5b0 [ 114.685128][ T5015] ___sys_sendmsg+0x195/0x1e0 [ 114.685216][ T5015] __x64_sys_sendmsg+0xd4/0x160 [ 114.685287][ T5015] x64_sys_call+0x194c/0x3020 [ 114.685316][ T5015] do_syscall_64+0x12c/0x3b0 [ 114.685339][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.685378][ T5015] RIP: 0033:0x7f29ac78c819 [ 114.685396][ T5015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.685414][ T5015] RSP: 002b:00007f29ab1e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.685432][ T5015] RAX: ffffffffffffffda RBX: 00007f29aca05fa0 RCX: 00007f29ac78c819 [ 114.685444][ T5015] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 114.685455][ T5015] RBP: 00007f29ab1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.685514][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.685526][ T5015] R13: 00007f29aca06038 R14: 00007f29aca05fa0 R15: 00007ffce2ee4b98 [ 114.685543][ T5015] [ 115.073472][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.084314][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.100896][ T28] audit: type=1400 audit(1776187472.204:657): avc: denied { append } for pid=5022 comm="syz.2.481" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.128222][ T28] audit: type=1400 audit(1776187472.204:658): avc: denied { read } for pid=5022 comm="syz.2.481" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.156017][ T28] audit: type=1400 audit(1776187472.204:659): avc: denied { open } for pid=5022 comm="syz.2.481" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.157030][ T5027] loop4: detected capacity change from 0 to 1024 [ 115.183521][ T28] audit: type=1400 audit(1776187472.204:660): avc: denied { ioctl } for pid=5022 comm="syz.2.481" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.183549][ T28] audit: type=1400 audit(1776187472.254:661): avc: denied { map } for pid=5022 comm="syz.2.481" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.270242][ T5034] netlink: 'syz.2.487': attribute type 298 has an invalid length. [ 115.277903][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.331613][ T28] audit: type=1400 audit(1776187472.434:662): avc: denied { connect } for pid=5025 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.336450][ T5036] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 115.355354][ T28] audit: type=1400 audit(1776187472.434:663): avc: denied { write } for pid=5025 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.393722][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 115.472699][ T28] audit: type=1400 audit(1776187472.574:664): avc: denied { create } for pid=5046 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.496288][ T28] audit: type=1400 audit(1776187472.594:665): avc: denied { setopt } for pid=5046 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.580731][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 115.588394][ T5055] loop2: detected capacity change from 0 to 1024 [ 115.601343][ T5055] EXT4-fs: Ignoring removed i_version option [ 115.619440][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.625331][ T5056] loop3: detected capacity change from 0 to 2048 [ 115.787137][ T5063] loop1: detected capacity change from 0 to 512 [ 115.887079][ T5056] EXT4-fs (loop3): invalid inodes per group: 204800 [ 115.887079][ T5056] [ 115.952266][ T5063] EXT4-fs (loop1): 1 orphan inode deleted [ 115.966397][ T5063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.050651][ T5055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.205583][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.244164][ T5073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.501'. [ 116.259336][ T5076] netlink: 'syz.3.502': attribute type 298 has an invalid length. [ 116.266623][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 116.298513][ T5080] netlink: 204 bytes leftover after parsing attributes in process `syz.0.503'. [ 116.308664][ T5077] bond1: option primary_reselect: invalid value (5) [ 116.337502][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 116.350613][ T5077] bond1 (unregistering): Released all slaves [ 116.451202][ T5089] loop3: detected capacity change from 0 to 1024 [ 116.476315][ T5089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.510387][ T5095] loop2: detected capacity change from 0 to 1024 [ 116.513131][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.519336][ T5095] EXT4-fs: Ignoring removed i_version option [ 116.554101][ T5095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.672944][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.690647][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 116.702531][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.740997][ T5107] team0: entered promiscuous mode [ 116.751887][ T5107] team_slave_0: entered promiscuous mode [ 116.762494][ T5107] team_slave_1: entered promiscuous mode [ 116.770420][ T5107] team0: entered allmulticast mode [ 116.776614][ T5107] team_slave_0: entered allmulticast mode [ 116.784785][ T5107] team_slave_1: entered allmulticast mode [ 116.808257][ T5112] netlink: 56 bytes leftover after parsing attributes in process `syz.3.514'. [ 116.845590][ T5114] loop2: detected capacity change from 0 to 1024 [ 116.860710][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.883881][ T5114] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.016343][ T5127] ext4: Unknown parameter 'noacl' [ 117.055433][ T5114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.080690][ T5131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.100418][ T5133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.173427][ T5131] EXT4-fs (loop3): 1 orphan inode deleted [ 117.179902][ T5131] EXT4-fs (loop3): 1 truncate cleaned up [ 117.186508][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.201537][ T5133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.254219][ T5128] Set syz1 is full, maxelem 65536 reached [ 117.353752][ T5139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.686647][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.735788][ T5159] EXT4-fs: inline encryption not supported [ 117.780811][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.862531][ T5159] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.889223][ T5157] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.908764][ T5159] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.532: Freeing blocks not in datazone - block = 0, count = 16 [ 117.925117][ T5157] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 117.939790][ T5157] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.530: Corrupt directory, running e2fsck is recommended [ 117.972845][ T5157] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 117.984259][ T5157] EXT4-fs error (device loop4): ext4_iget_extra_inode:5042: inode #15: comm syz.4.530: corrupted in-inode xattr: e_name out of bounds [ 118.002985][ T5157] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.004973][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.008000][ T5157] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.530: couldn't read orphan inode 15 (err -117) [ 118.026792][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 118.026921][ C1] EXT4-fs (loop4): initial error at time 1776187475: ext4_iget_extra_inode:5042: inode 15 [ 118.027362][ C1] EXT4-fs (loop4): last error at time 1776187475: ext4_iget_extra_inode:5042: inode 15 [ 118.073611][ T5157] loop4: lost filesystem error report for type 5 error -117 [ 118.085398][ T5167] EXT4-fs: test_dummy_encryption option not supported [ 118.214877][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.226854][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.264112][ T5157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.460811][ T5168] __nla_validate_parse: 4 callbacks suppressed [ 118.460824][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.491361][ T5172] EXT4-fs (loop1): 1 orphan inode deleted [ 118.505951][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.524610][ T5172] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.609080][ T5172] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 118.666125][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.685276][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.719413][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.731375][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.761403][ T5179] set_capacity_and_notify: 7 callbacks suppressed [ 118.761429][ T5179] loop2: detected capacity change from 0 to 512 [ 118.778187][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.872187][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.882590][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.892717][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 119.114773][ T5183] program syz.0.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.150717][ T5185] FAULT_INJECTION: forcing a failure. [ 119.150717][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.166269][ T5185] CPU: 1 UID: 0 PID: 5185 Comm: syz.0.537 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.166355][ T5185] Tainted: [W]=WARN [ 119.166362][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.166381][ T5185] Call Trace: [ 119.166387][ T5185] [ 119.166395][ T5185] __dump_stack+0x1d/0x30 [ 119.166419][ T5185] dump_stack_lvl+0x95/0xd0 [ 119.166440][ T5185] dump_stack+0x15/0x1b [ 119.166462][ T5185] should_fail_ex+0x263/0x280 [ 119.166504][ T5185] should_fail+0xb/0x20 [ 119.166533][ T5185] should_fail_usercopy+0x1a/0x20 [ 119.166555][ T5185] _copy_from_iter+0xcf/0xea0 [ 119.166576][ T5185] ? __rcu_read_unlock+0x4e/0x70 [ 119.166610][ T5185] ? terminate_walk+0x1e6/0x210 [ 119.166634][ T5185] ? path_openat+0x1ab2/0x2050 [ 119.166650][ T5185] tun_get_user+0x15f/0x27c0 [ 119.166676][ T5185] ? ref_tracker_alloc+0x1eb/0x2f0 [ 119.166748][ T5185] ? selinux_file_permission+0x1e1/0x320 [ 119.166778][ T5185] tun_chr_write_iter+0x15e/0x210 [ 119.166819][ T5185] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.166848][ T5185] vfs_write+0x5a6/0x9f0 [ 119.166870][ T5185] ksys_write+0xdc/0x1a0 [ 119.166888][ T5185] __x64_sys_write+0x40/0x50 [ 119.166913][ T5185] x64_sys_call+0x27e1/0x3020 [ 119.166938][ T5185] do_syscall_64+0x12c/0x3b0 [ 119.166957][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.166980][ T5185] RIP: 0033:0x7fb3e2bbc819 [ 119.166998][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.167052][ T5185] RSP: 002b:00007fb3e160f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.167074][ T5185] RAX: ffffffffffffffda RBX: 00007fb3e2e35fa0 RCX: 00007fb3e2bbc819 [ 119.167089][ T5185] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 119.167198][ T5185] RBP: 00007fb3e160f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.167213][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.167226][ T5185] R13: 00007fb3e2e36038 R14: 00007fb3e2e35fa0 R15: 00007ffe7fb8b8f8 [ 119.167262][ T5185] [ 119.403343][ T36] __quota_error: 9 callbacks suppressed [ 119.403359][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.441837][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 119.486442][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 119.807664][ T28] audit: type=1400 audit(1776187476.914:675): avc: denied { nlmsg_read } for pid=5199 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.878807][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.902334][ T28] audit: type=1400 audit(1776187476.934:676): avc: denied { getopt } for pid=5199 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.024677][ T5213] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 120.224470][ T5234] syzkaller0: entered allmulticast mode [ 120.241400][ T5235] syzkaller0: entered promiscuous mode [ 120.250376][ T5235] syzkaller0: entered allmulticast mode [ 120.287534][ T28] audit: type=1400 audit(1776187477.394:677): avc: denied { getopt } for pid=5210 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.459619][ T5248] loop3: detected capacity change from 0 to 512 [ 120.470982][ T5248] ext2: Unknown parameter 'euid>00000000000000000000' [ 120.487184][ T28] audit: type=1400 audit(1776187477.584:678): avc: denied { create } for pid=5247 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.571734][ T5250] loop2: detected capacity change from 0 to 512 [ 120.653924][ T28] audit: type=1400 audit(1776187477.694:679): avc: denied { connect } for pid=5247 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.750702][ T28] audit: type=1400 audit(1776187477.854:680): avc: denied { getopt } for pid=5258 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.796198][ T5260] loop0: detected capacity change from 0 to 1024 [ 120.826504][ T5260] ext4: Unknown parameter 'noacl' [ 120.921641][ T5264] FAULT_INJECTION: forcing a failure. [ 120.921641][ T5264] name failslab, interval 1, probability 0, space 0, times 0 [ 120.941170][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.951597][ T28] audit: type=1400 audit(1776187478.024:681): avc: denied { create } for pid=5262 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.984931][ T5264] CPU: 0 UID: 0 PID: 5264 Comm: syz.1.567 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.984978][ T5264] Tainted: [W]=WARN [ 120.984984][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.985004][ T5264] Call Trace: [ 120.985011][ T5264] [ 120.985018][ T5264] __dump_stack+0x1d/0x30 [ 120.985046][ T5264] dump_stack_lvl+0x95/0xd0 [ 120.985069][ T5264] dump_stack+0x15/0x1b [ 120.985161][ T5264] should_fail_ex+0x263/0x280 [ 120.985192][ T5264] should_failslab+0x8c/0xb0 [ 120.985235][ T5264] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 120.985260][ T5264] ? sidtab_sid2str_get+0xa0/0x130 [ 120.985289][ T5264] kmemdup_noprof+0x2b/0x70 [ 120.985314][ T5264] sidtab_sid2str_get+0xa0/0x130 [ 120.985343][ T5264] security_sid_to_context_core+0x1eb/0x2e0 [ 120.985377][ T5264] security_sid_to_context+0x27/0x40 [ 120.985500][ T5264] avc_audit_post_callback+0x9d/0x540 [ 120.985529][ T5264] ? audit_log_lsm_data+0xb3e/0xbb0 [ 120.985555][ T5264] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 120.985676][ T5264] common_lsm_audit+0x1ba/0x230 [ 120.985699][ T5264] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 120.985731][ T5264] slow_avc_audit+0x14c/0x190 [ 120.985834][ T5264] avc_has_perm+0x144/0x190 [ 120.985926][ T5264] selinux_socket_connect_helper+0x1b0/0x4a0 [ 120.985965][ T5264] selinux_socket_connect+0x31/0x70 [ 120.985995][ T5264] security_socket_connect+0x44/0x80 [ 120.986018][ T5264] __sys_connect+0x180/0x2a0 [ 120.986046][ T5264] __x64_sys_connect+0x3f/0x50 [ 120.986070][ T5264] x64_sys_call+0x2df0/0x3020 [ 120.986099][ T5264] do_syscall_64+0x12c/0x3b0 [ 120.986122][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.986211][ T5264] RIP: 0033:0x7efd4a77c819 [ 120.986228][ T5264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.986243][ T5264] RSP: 002b:00007efd491d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 120.986262][ T5264] RAX: ffffffffffffffda RBX: 00007efd4a9f5fa0 RCX: 00007efd4a77c819 [ 120.986276][ T5264] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 120.986369][ T5264] RBP: 00007efd491d7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.986380][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.986391][ T5264] R13: 00007efd4a9f6038 R14: 00007efd4a9f5fa0 R15: 00007ffc076010b8 [ 120.986408][ T5264] [ 120.989955][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.004729][ T28] audit: type=1400 audit(1776187478.024:682): avc: denied { connect } for pid=5262 comm="syz.1.567" ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.032303][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.042006][ T5250] EXT4-fs (loop2): 1 orphan inode deleted [ 121.105121][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.114683][ T5250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.231635][ T28] audit: type=1400 audit(1776187478.184:683): avc: denied { bind } for pid=5268 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.366002][ T5279] syzkaller0: entered promiscuous mode [ 121.397722][ T5279] syzkaller0: entered allmulticast mode [ 121.577911][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.822520][ T5305] syzkaller0: entered promiscuous mode [ 121.857611][ T5305] syzkaller0: entered allmulticast mode [ 122.042052][ T5310] loop4: detected capacity change from 0 to 256 [ 122.138048][ T5310] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.152634][ T5314] syzkaller0: entered promiscuous mode [ 122.159346][ T5314] syzkaller0: entered allmulticast mode [ 122.381631][ T5322] 9p: Bad value for 'source' [ 122.547741][ T5334] loop0: detected capacity change from 0 to 512 [ 122.606859][ T5334] EXT4-fs (loop0): 1 orphan inode deleted [ 122.620170][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.816062][ T5338] loop4: detected capacity change from 0 to 256 [ 122.873961][ T5342] syzkaller0: entered promiscuous mode [ 123.009791][ T5342] syzkaller0: entered allmulticast mode [ 123.388493][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.726802][ T5359] __nla_validate_parse: 7 callbacks suppressed [ 123.726818][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 123.870489][ T5372] syzkaller0: entered promiscuous mode [ 123.877201][ T5372] syzkaller0: entered allmulticast mode [ 124.204174][ T5380] siw: device registration error -23 [ 124.263691][ T5380] loop1: detected capacity change from 0 to 512 [ 124.398833][ T5386] loop0: detected capacity change from 0 to 256 [ 124.553856][ T5380] EXT4-fs (loop1): 1 orphan inode deleted [ 124.699595][ T5380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.298465][ T5392] loop3: detected capacity change from 0 to 256 [ 125.333098][ T5392] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.554233][ T5394] Set syz1 is full, maxelem 65536 reached [ 125.750779][ T5408] serio: Serial port ttyS3 [ 125.783901][ T5410] syzkaller0: entered promiscuous mode [ 125.791141][ T5410] syzkaller0: entered allmulticast mode [ 125.802970][ T5408] FAULT_INJECTION: forcing a failure. [ 125.802970][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 125.817389][ T5408] CPU: 0 UID: 0 PID: 5408 Comm: syz.2.620 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.817422][ T5408] Tainted: [W]=WARN [ 125.817429][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.817441][ T5408] Call Trace: [ 125.817451][ T5408] [ 125.817460][ T5408] __dump_stack+0x1d/0x30 [ 125.817483][ T5408] dump_stack_lvl+0x95/0xd0 [ 125.817503][ T5408] dump_stack+0x15/0x1b [ 125.817522][ T5408] should_fail_ex+0x263/0x280 [ 125.817636][ T5408] should_failslab+0x8c/0xb0 [ 125.817659][ T5408] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 125.817685][ T5408] ? __alloc_skb+0x2d6/0x690 [ 125.817708][ T5408] __alloc_skb+0x2d6/0x690 [ 125.817799][ T5408] ? __alloc_skb+0x200/0x690 [ 125.817821][ T5408] alloc_uevent_skb+0x5c/0x120 [ 125.817910][ T5408] kobject_uevent_net_broadcast+0x23c/0x410 [ 125.817973][ T5408] kobject_uevent_env+0x43d/0x570 [ 125.818005][ T5408] kobject_uevent+0x1d/0x30 [ 125.818030][ T5408] device_del+0x70f/0x790 [ 125.818131][ T5408] serio_destroy_port+0x3c5/0x5a0 [ 125.818160][ T5408] ? device_release_driver_internal+0x4f8/0x520 [ 125.818240][ T5408] serio_unregister_port+0xe1/0x130 [ 125.818271][ T5408] serport_ldisc_read+0x2cd/0x300 [ 125.818298][ T5408] ? __pfx_autoremove_wake_function+0x10/0x10 [ 125.818401][ T5408] tty_read+0x154/0x490 [ 125.818468][ T5408] ? __import_iovec+0x428/0x530 [ 125.818492][ T5408] do_iter_readv_writev+0x4fd/0x5a0 [ 125.818519][ T5408] vfs_readv+0x1f4/0x6e0 [ 125.818554][ T5408] do_readv+0xe9/0x210 [ 125.818633][ T5408] __x64_sys_readv+0x45/0x50 [ 125.818661][ T5408] x64_sys_call+0x27c0/0x3020 [ 125.818689][ T5408] do_syscall_64+0x12c/0x3b0 [ 125.818713][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.818811][ T5408] RIP: 0033:0x7f4f9c0fc819 [ 125.818828][ T5408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.818847][ T5408] RSP: 002b:00007f4f9ab57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 125.818869][ T5408] RAX: ffffffffffffffda RBX: 00007f4f9c375fa0 RCX: 00007f4f9c0fc819 [ 125.819020][ T5408] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 125.819034][ T5408] RBP: 00007f4f9ab57090 R08: 0000000000000000 R09: 0000000000000000 [ 125.819129][ T5408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.819143][ T5408] R13: 00007f4f9c376038 R14: 00007f4f9c375fa0 R15: 00007ffe25ac3fd8 [ 125.819163][ T5408] [ 126.286102][ T5424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.626'. [ 126.302252][ T5424] netlink: 204 bytes leftover after parsing attributes in process `syz.4.626'. [ 126.313091][ T5419] loop2: detected capacity change from 0 to 2048 [ 126.347513][ T5419] EXT4-fs (loop2): invalid inodes per group: 204800 [ 126.347513][ T5419] [ 126.369524][ T5428] loop4: detected capacity change from 0 to 1024 [ 126.378723][ T5428] ext4: Unknown parameter 'noacl' [ 126.434244][ T5430] syzkaller0: entered promiscuous mode [ 126.442431][ T5430] syzkaller0: entered allmulticast mode [ 127.158223][ T5446] syzkaller0: entered promiscuous mode [ 127.176829][ T5446] syzkaller0: entered allmulticast mode [ 127.219629][ T5447] loop3: detected capacity change from 0 to 512 [ 127.237045][ T5447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.298084][ T5447] EXT4-fs (loop3): 1 orphan inode deleted [ 127.321803][ T5447] EXT4-fs (loop3): 1 truncate cleaned up [ 127.331159][ T5447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.442154][ T5451] loop0: detected capacity change from 0 to 512 [ 127.455848][ T5451] ext2: Unknown parameter 'euid>00000000000000000000' [ 127.459108][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.549063][ T5453] 9p: Bad value for 'rfdno' [ 127.564527][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 127.564545][ T28] audit: type=1400 audit(1776187484.654:686): avc: denied { watch watch_reads } for pid=5452 comm="syz.1.636" path="/131/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.588023][ T5455] netlink: 'syz.1.637': attribute type 7 has an invalid length. [ 127.609499][ T5455] netlink: 'syz.1.637': attribute type 8 has an invalid length. [ 127.707468][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 127.723765][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 127.734031][ T5458] netlink: 204 bytes leftover after parsing attributes in process `syz.1.638'. [ 127.807524][ T28] audit: type=1400 audit(1776187484.914:687): avc: denied { read } for pid=5461 comm="syz.1.640" lport=36982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.830003][ T5464] loop0: detected capacity change from 0 to 1024 [ 127.837767][ T5464] ext4: Unknown parameter 'noacl' [ 128.101029][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.815860][ T5482] siw: device registration error -23 [ 128.850254][ T5482] loop0: detected capacity change from 0 to 512 [ 129.235087][ T5482] EXT4-fs (loop0): 1 orphan inode deleted [ 129.248251][ T5482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.369224][ T5490] syzkaller0: entered promiscuous mode [ 129.395824][ T5490] syzkaller0: entered allmulticast mode [ 130.059203][ T5503] loop2: detected capacity change from 0 to 512 [ 130.107140][ T5503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.126819][ T5503] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.349081][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.487472][ T5514] 9p: Bad value for 'rfdno' [ 130.487625][ T5512] loop2: detected capacity change from 0 to 1024 [ 130.507766][ T5512] ext4: Unknown parameter 'noacl' [ 130.630508][ T28] audit: type=1400 audit(1776187487.734:688): avc: denied { write } for pid=5515 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 130.662998][ T5518] loop2: detected capacity change from 0 to 1024 [ 130.677039][ T5518] EXT4-fs: Ignoring removed i_version option [ 130.716854][ T5525] syzkaller0: entered promiscuous mode [ 130.735453][ T5518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.744856][ T5525] syzkaller0: entered allmulticast mode [ 130.783087][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.951381][ T5534] loop2: detected capacity change from 0 to 1024 [ 130.966748][ T5534] EXT4-fs: test_dummy_encryption option not supported [ 131.276479][ T5557] loop2: detected capacity change from 0 to 512 [ 131.373896][ T5557] EXT4-fs (loop2): 1 orphan inode deleted [ 131.387142][ T5557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.402262][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 131.414770][ T5557] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.524758][ T5557] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 131.570106][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:3: Failed to release dquot type 1 [ 132.614487][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.732964][ T5627] FAULT_INJECTION: forcing a failure. [ 132.732964][ T5627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.752073][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.787358][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz.0.669 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.787394][ T5627] Tainted: [W]=WARN [ 132.787401][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.787414][ T5627] Call Trace: [ 132.787422][ T5627] [ 132.787431][ T5627] __dump_stack+0x1d/0x30 [ 132.787489][ T5627] dump_stack_lvl+0x95/0xd0 [ 132.787513][ T5627] dump_stack+0x15/0x1b [ 132.787536][ T5627] should_fail_ex+0x263/0x280 [ 132.787570][ T5627] should_fail+0xb/0x20 [ 132.787610][ T5627] should_fail_usercopy+0x1a/0x20 [ 132.787630][ T5627] _copy_from_user+0x1c/0xb0 [ 132.787652][ T5627] ___sys_sendmsg+0xc1/0x1e0 [ 132.787757][ T5627] ? path_openat+0x1b01/0x2050 [ 132.787788][ T5627] __sys_sendmmsg+0x185/0x320 [ 132.787822][ T5627] __x64_sys_sendmmsg+0x57/0x70 [ 132.787905][ T5627] x64_sys_call+0x27aa/0x3020 [ 132.787932][ T5627] do_syscall_64+0x12c/0x3b0 [ 132.787956][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.787983][ T5627] RIP: 0033:0x7fb3e2bbc819 [ 132.788001][ T5627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.788085][ T5627] RSP: 002b:00007fb3e15ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.788162][ T5627] RAX: ffffffffffffffda RBX: 00007fb3e2e36090 RCX: 00007fb3e2bbc819 [ 132.788177][ T5627] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000008 [ 132.788191][ T5627] RBP: 00007fb3e15ee090 R08: 0000000000000000 R09: 0000000000000000 [ 132.788205][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.788219][ T5627] R13: 00007fb3e2e36128 R14: 00007fb3e2e36090 R15: 00007ffe7fb8b8f8 [ 132.788268][ T5627] [ 132.817809][ T5635] lo: left allmulticast mode [ 132.954800][ T5639] loop3: detected capacity change from 0 to 1024 [ 132.976285][ T5635] tunl0: left allmulticast mode [ 133.007828][ T5639] EXT4-fs: Ignoring removed i_version option [ 133.016057][ T5635] gre0: left allmulticast mode [ 133.022520][ T5635] gretap0: left allmulticast mode [ 133.028743][ T5635] erspan0: left allmulticast mode [ 133.034192][ T5635] ip_vti0: left allmulticast mode [ 133.040169][ T5635] ip6_vti0: left allmulticast mode [ 133.045834][ T5635] sit0: left allmulticast mode [ 133.051517][ T5635] ip6tnl0: left allmulticast mode [ 133.057732][ T5635] ip6gre0: left allmulticast mode [ 133.063524][ T5635] syz_tun: left allmulticast mode [ 133.070394][ T5635] ip6gretap0: left allmulticast mode [ 133.087787][ T5635] bridge0: left allmulticast mode [ 133.096098][ T5635] vcan0: left allmulticast mode [ 133.102302][ T5635] bond0: left allmulticast mode [ 133.109318][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.124023][ T5635] team0: left allmulticast mode [ 133.130037][ T5635] dummy0: left allmulticast mode [ 133.137908][ T5635] nlmon0: left allmulticast mode [ 133.143728][ T5635] caif0: left allmulticast mode [ 133.150664][ T5635] batadv0: left allmulticast mode [ 133.156769][ T5635] vxcan0: left allmulticast mode [ 133.163277][ T5635] vxcan1: left allmulticast mode [ 133.169668][ T5635] veth0: left allmulticast mode [ 133.177675][ T5635] veth1: left allmulticast mode [ 133.183990][ T5635] wg0: left allmulticast mode [ 133.189899][ T5635] wg1: left allmulticast mode [ 133.195337][ T5635] wg2: left allmulticast mode [ 133.201370][ T5635] veth0_to_bridge: left allmulticast mode [ 133.208003][ T5635] veth1_to_bridge: left allmulticast mode [ 133.214254][ T5635] veth0_to_bond: left allmulticast mode [ 133.221619][ T5635] bond_slave_0: left allmulticast mode [ 133.229144][ T5635] veth1_to_bond: left allmulticast mode [ 133.235702][ T5635] bond_slave_1: left allmulticast mode [ 133.243406][ T5635] veth0_to_team: left allmulticast mode [ 133.250522][ T5635] team_slave_0: left allmulticast mode [ 133.264855][ T5635] veth1_to_team: left allmulticast mode [ 133.272385][ T5635] team_slave_1: left allmulticast mode [ 133.285278][ T5635] veth0_to_batadv: left allmulticast mode [ 133.294366][ T5635] batadv_slave_0: left allmulticast mode [ 133.301637][ T5635] veth1_to_batadv: left allmulticast mode [ 133.308426][ T5635] batadv_slave_1: left allmulticast mode [ 133.314916][ T5635] xfrm0: left allmulticast mode [ 133.321727][ T5635] veth0_to_hsr: left allmulticast mode [ 133.328199][ T5635] veth1_to_hsr: left allmulticast mode [ 133.334959][ T5635] hsr0: left allmulticast mode [ 133.342636][ T5635] hsr_slave_0: left allmulticast mode [ 133.349344][ T5635] hsr_slave_1: left allmulticast mode [ 133.356304][ T5635] veth1_virt_wifi: left allmulticast mode [ 133.363632][ T5635] veth0_virt_wifi: left allmulticast mode [ 133.383105][ T5635] veth1_vlan: left allmulticast mode [ 133.393604][ T5635] vlan0: left allmulticast mode [ 133.399493][ T5635] vlan1: left allmulticast mode [ 133.406397][ T5635] macvlan0: left allmulticast mode [ 133.419042][ T5635] macvlan1: left allmulticast mode [ 133.426409][ T5635] ipvlan0: left allmulticast mode [ 133.441702][ T5635] ipvlan1: left allmulticast mode [ 133.456952][ T5635] veth0_vlan: left allmulticast mode [ 133.464716][ T5635] veth1_macvtap: left allmulticast mode [ 133.477417][ T5635] veth0_macvtap: left allmulticast mode [ 133.486300][ T5635] macvtap0: left allmulticast mode [ 133.492724][ T5635] macsec0: left allmulticast mode [ 133.556364][ T5635] geneve1: left allmulticast mode [ 133.611973][ T5726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.677'. [ 133.643127][ T5635] bond1: left promiscuous mode [ 133.653136][ T5635] bond1: left allmulticast mode [ 133.670619][ T5635] bond2: left promiscuous mode [ 133.711004][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.725130][ T5674] syzkaller0: entered promiscuous mode [ 133.737386][ T5674] syzkaller0: entered allmulticast mode [ 133.761402][ T28] audit: type=1400 audit(1776187490.854:689): avc: denied { setopt } for pid=5725 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.808151][ T5726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5726 comm=syz.0.677 [ 133.896842][ T5743] siw: device registration error -23 [ 133.932516][ T5743] loop1: detected capacity change from 0 to 512 [ 134.018812][ T5743] EXT4-fs (loop1): 1 orphan inode deleted [ 134.039306][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.393285][ T28] audit: type=1400 audit(1776187491.494:690): avc: denied { wake_alarm } for pid=5749 comm="syz.2.681" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.441266][ T5763] netlink: 'syz.2.681': attribute type 5 has an invalid length. [ 134.475407][ T28] audit: type=1400 audit(1776187491.564:691): avc: denied { ioctl } for pid=5749 comm="syz.2.681" path="socket:[11808]" dev="sockfs" ino=11808 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.577828][ T28] audit: type=1400 audit(1776187491.564:692): avc: denied { setopt } for pid=5749 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.683790][ T5809] syzkaller0: entered promiscuous mode [ 134.700285][ T5809] syzkaller0: entered allmulticast mode [ 134.721292][ T5811] syzkaller0: entered promiscuous mode [ 134.731096][ T5811] syzkaller0: entered allmulticast mode [ 134.794346][ T5818] loop0: detected capacity change from 0 to 512 [ 134.852228][ T5824] loop0: detected capacity change from 0 to 1024 [ 134.859589][ T5824] EXT4-fs: Ignoring removed i_version option [ 134.882142][ T5824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.924025][ T5830] sg_write: data in/out 441310/698 bytes for SCSI command 0x0-- guessing data in; [ 134.924025][ T5830] program syz.3.692 not setting count and/or reply_len properly [ 135.005012][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.041973][ T5835] loop0: detected capacity change from 0 to 1024 [ 135.074724][ T5833] loop3: detected capacity change from 0 to 512 [ 135.088627][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.097291][ T5833] EXT4-fs: Ignoring removed nobh option [ 135.139570][ T5833] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.191918][ T5833] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.693: EA inode hash validation failed [ 135.208814][ T28] audit: type=1400 audit(1776187492.314:693): avc: denied { map } for pid=5834 comm="syz.0.694" path="/118/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.224788][ T5833] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.254732][ T5833] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.693: corrupted inode contents [ 135.267395][ T28] audit: type=1400 audit(1776187492.314:694): avc: denied { execute } for pid=5834 comm="syz.0.694" path="/118/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.268639][ T5833] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.294658][ T5833] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #15: comm syz.3.693: mark_inode_dirty error [ 135.305199][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 135.305367][ C1] EXT4-fs (loop3): initial error at time 1776187492: ext4_do_update_inode:5604: inode 15 [ 135.305589][ C1] EXT4-fs (loop3): last error at time 1776187492: ext4_do_update_inode:5604: inode 15 [ 135.360583][ T5833] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.362394][ T5833] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.693: corrupted inode contents [ 135.362958][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.396888][ T5833] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.399947][ T5833] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.693: mark_inode_dirty error [ 135.427002][ T5833] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.428037][ T5833] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.693: mark inode dirty (error -117) [ 135.454632][ T5833] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.455975][ T5833] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 135.484713][ T5833] EXT4-fs (loop3): 1 orphan inode deleted [ 135.499641][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.543351][ T28] audit: type=1400 audit(1776187492.644:695): avc: denied { create } for pid=5844 comm="syz.0.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.575960][ T5845] loop0: detected capacity change from 0 to 512 [ 135.599465][ T5845] ext4: Unknown parameter 'i_version"noload' [ 135.599674][ T5833] netlink: 96 bytes leftover after parsing attributes in process `syz.3.693'. [ 135.617090][ T28] audit: type=1400 audit(1776187492.704:696): avc: denied { getopt } for pid=5832 comm="syz.3.693" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.708447][ T28] audit: type=1400 audit(1776187492.814:697): avc: denied { write } for pid=5844 comm="syz.0.697" path="socket:[11909]" dev="sockfs" ino=11909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.800507][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.815075][ T28] audit: type=1400 audit(1776187492.904:698): avc: denied { setopt } for pid=5844 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.844435][ T5855] netlink: 'syz.4.699': attribute type 5 has an invalid length. [ 135.970778][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 135.986849][ T5866] loop4: detected capacity change from 0 to 1024 [ 135.995250][ T5863] netlink: 204 bytes leftover after parsing attributes in process `syz.0.702'. [ 135.997279][ T5866] EXT4-fs: test_dummy_encryption option not supported [ 136.275070][ T5871] loop4: detected capacity change from 0 to 512 [ 136.425506][ T5871] EXT4-fs (loop4): 1 orphan inode deleted [ 136.438965][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.456425][ T5871] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.491382][ T5593] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:12: Failed to release dquot type 1 [ 137.137771][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.217432][ T5890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.711'. [ 137.822304][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.263427][ T5908] loop1: detected capacity change from 0 to 1024 [ 138.280034][ T5908] EXT4-fs: Ignoring removed i_version option [ 138.311520][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.328181][ T5908] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 138.355986][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.566900][ T5917] siw: device registration error -23 [ 138.605720][ T5917] loop1: detected capacity change from 0 to 512 [ 138.718766][ T5917] EXT4-fs (loop1): 1 orphan inode deleted [ 138.811504][ T5917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.062570][ T5922] netlink: 'syz.4.720': attribute type 2 has an invalid length. [ 139.109811][ T5922] netlink: 191880 bytes leftover after parsing attributes in process `syz.4.720'. [ 139.173555][ T5922] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 139.183703][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 139.183785][ T28] audit: type=1400 audit(1776187496.274:700): avc: denied { execute } for pid=5921 comm="syz.4.720" path="/143/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.218672][ T5922] ref_ctr increment failed for inode: 0x30b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104e5e540 [ 139.237137][ T5927] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 139.248219][ T5927] ref_ctr decrement failed for inode: 0x30b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104e5e540 [ 139.261617][ T5927] uprobe: syz.4.720:5927 failed to unregister, leaking uprobe [ 139.338441][ T5929] xt_hashlimit: size too large, truncated to 1048576 [ 139.480540][ T5937] loop4: detected capacity change from 0 to 1024 [ 139.505298][ T5937] EXT4-fs: test_dummy_encryption option not supported [ 139.605432][ T5941] netlink: 204 bytes leftover after parsing attributes in process `syz.3.726'. [ 139.785177][ T5946] loop4: detected capacity change from 0 to 512 [ 139.894764][ T5946] EXT4-fs (loop4): 1 orphan inode deleted [ 139.909247][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.932880][ T5946] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.977346][ T49] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 140.018803][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:3: Failed to release dquot type 1 [ 140.078963][ T5955] loop3: detected capacity change from 0 to 1024 [ 140.094250][ T5954] loop2: detected capacity change from 0 to 1024 [ 140.134784][ T5955] ext4: Unknown parameter 'noacl' [ 140.159521][ T5954] EXT4-fs: Ignoring removed i_version option [ 140.233532][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.289924][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.554252][ T5961] loop0: detected capacity change from 0 to 512 [ 140.563877][ T5961] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.608972][ T5961] EXT4-fs (loop0): 1 orphan inode deleted [ 140.627858][ T5961] EXT4-fs (loop0): 1 truncate cleaned up [ 140.639274][ T28] audit: type=1326 audit(1776187497.744:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 140.674962][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.707203][ T3393] Process accounting resumed [ 140.728788][ T5964] process 'syz.3.733' launched './file0' with NULL argv: empty string added [ 140.743539][ T5966] loop2: detected capacity change from 0 to 512 [ 140.782839][ T28] audit: type=1326 audit(1776187497.744:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 140.823524][ T5966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.860405][ T5966] EXT4-fs (loop2): 1 orphan inode deleted [ 140.871968][ T5966] EXT4-fs (loop2): 1 truncate cleaned up [ 140.887916][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.910954][ T28] audit: type=1326 audit(1776187497.744:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 140.990173][ T28] audit: type=1326 audit(1776187497.774:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 141.078273][ T28] audit: type=1326 audit(1776187497.774:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 141.158270][ T28] audit: type=1326 audit(1776187497.774:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 141.195693][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.228529][ T28] audit: type=1326 audit(1776187497.774:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 141.256384][ T28] audit: type=1326 audit(1776187497.774:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abb7bc819 code=0x7ffc0000 [ 141.418841][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 141.457329][ T5561] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 141.485236][ T5974] loop4: detected capacity change from 0 to 128 [ 141.493622][ T5978] netlink: 204 bytes leftover after parsing attributes in process `syz.3.738'. [ 141.564020][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.886862][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.739'. [ 142.046495][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.080426][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.116252][ T5974] FAT-fs (loop4): Filesystem has been set read-only [ 142.175300][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.188174][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.198888][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.209690][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.221458][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.234310][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.245388][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.258848][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.269567][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.279826][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.292117][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.301660][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.312391][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.325300][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.333371][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.335682][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.363833][ T5974] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.425911][ T5996] loop4: detected capacity change from 0 to 256 [ 142.752042][ T6000] loop3: detected capacity change from 0 to 512 [ 142.776795][ T6000] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.807083][ T6000] EXT4-fs (loop3): 1 truncate cleaned up [ 142.851004][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.241743][ T6005] loop1: detected capacity change from 0 to 1024 [ 143.269964][ T6005] EXT4-fs: test_dummy_encryption option not supported [ 144.242348][ T6010] loop1: detected capacity change from 0 to 512 [ 144.406504][ T6010] EXT4-fs (loop1): 1 orphan inode deleted [ 144.422279][ T6010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.440076][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.452242][ T6010] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.480191][ T6010] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 144.538280][ T49] __quota_error: 116 callbacks suppressed [ 144.538338][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 144.567569][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:3: Failed to release dquot type 1 [ 144.570071][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 145.497887][ T6021] netlink: 204 bytes leftover after parsing attributes in process `syz.0.749'. [ 145.563941][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.626185][ T6028] loop2: detected capacity change from 0 to 4096 [ 145.638447][ T6025] loop3: detected capacity change from 0 to 512 [ 145.661392][ T6034] loop0: detected capacity change from 0 to 512 [ 145.669203][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.696189][ T6025] EXT4-fs (loop3): 1 orphan inode deleted [ 145.707469][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.823263][ T28] audit: type=1400 audit(1776187502.924:825): avc: denied { create } for pid=6038 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.872583][ T6034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.095161][ T6034] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.753: bad orphan inode 15 [ 146.108534][ T6034] loop0: lost filesystem error report for type 5 error -117 [ 146.115035][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.151838][ T6042] loop4: detected capacity change from 0 to 512 [ 146.203905][ T6043] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 146.260683][ T6042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.368771][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.444842][ T6034] netlink: 64 bytes leftover after parsing attributes in process `syz.0.753'. [ 146.881780][ T6034] bond1 (unregistering): Released all slaves [ 146.904233][ T6052] loop1: detected capacity change from 0 to 256 [ 146.915741][ T28] audit: type=1400 audit(1776187503.974:826): avc: denied { read } for pid=6032 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.945453][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 146.963896][ T6046] bond1: (slave gretap1): making interface the new active one [ 146.989807][ T6046] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 147.028390][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.055783][ T6034] veth0_to_team: entered promiscuous mode [ 147.141063][ T6060] syzkaller0: entered promiscuous mode [ 147.160699][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.171501][ T6060] syzkaller0: entered allmulticast mode [ 147.342190][ T6071] loop0: detected capacity change from 0 to 1024 [ 147.359391][ T6071] EXT4-fs: test_dummy_encryption option not supported [ 147.377658][ T6072] loop2: detected capacity change from 0 to 512 [ 147.538361][ T6072] EXT4-fs: Ignoring removed nobh option [ 147.869917][ T6074] loop0: detected capacity change from 0 to 512 [ 147.949226][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.967807][ T6072] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.006245][ T6074] EXT4-fs (loop0): 1 orphan inode deleted [ 148.020386][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.039915][ T6074] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.123638][ T6074] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 148.157058][ T6072] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.761: EA inode hash validation failed [ 148.189264][ T6079] netlink: 204 bytes leftover after parsing attributes in process `syz.1.764'. [ 148.211416][ T6072] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.286457][ T6072] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #15: comm syz.2.761: corrupted inode contents [ 148.302217][ T6072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.302463][ T6072] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #15: comm syz.2.761: mark_inode_dirty error [ 148.312508][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 148.312527][ C1] EXT4-fs (loop2): initial error at time 1776187505: ext4_do_update_inode:5604: inode 15 [ 148.312558][ C1] EXT4-fs (loop2): last error at time 1776187505: ext4_do_update_inode:5604: inode 15 [ 148.788888][ T6072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.789388][ T6072] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #15: comm syz.2.761: corrupted inode contents [ 148.814478][ T6072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.814704][ T6072] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.761: mark_inode_dirty error [ 149.292655][ T6072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.296629][ T6072] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.761: mark inode dirty (error -117) [ 149.327039][ T6072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.327499][ T6072] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 149.348187][ T6072] EXT4-fs (loop2): 1 orphan inode deleted [ 149.356820][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.425936][ T6069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.761'. [ 149.432528][ T5597] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 149.448205][ T5597] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:14: Failed to release dquot type 1 [ 149.464487][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.488581][ T28] audit: type=1400 audit(1776187506.584:827): avc: denied { write } for pid=6084 comm="syz.1.767" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 149.521717][ T6088] loop0: detected capacity change from 0 to 1024 [ 149.528797][ T6088] EXT4-fs: Ignoring removed i_version option [ 149.547936][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.563029][ T6090] FAULT_INJECTION: forcing a failure. [ 149.563029][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 149.577956][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.4.763 Tainted: G W syzkaller #0 PREEMPT(full) [ 149.578068][ T6090] Tainted: [W]=WARN [ 149.578075][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.578117][ T6090] Call Trace: [ 149.578123][ T6090] [ 149.578130][ T6090] __dump_stack+0x1d/0x30 [ 149.578157][ T6090] dump_stack_lvl+0x95/0xd0 [ 149.578179][ T6090] dump_stack+0x15/0x1b [ 149.578243][ T6090] should_fail_ex+0x263/0x280 [ 149.578276][ T6090] ? alloc_pipe_info+0xad/0x340 [ 149.578295][ T6090] should_failslab+0x8c/0xb0 [ 149.578316][ T6090] __kmalloc_cache_noprof+0x5f/0x410 [ 149.578457][ T6090] alloc_pipe_info+0xad/0x340 [ 149.578533][ T6090] splice_direct_to_actor+0x591/0x670 [ 149.578558][ T6090] ? __pfx_direct_splice_actor+0x10/0x10 [ 149.578582][ T6090] ? selinux_file_permission+0xc8/0x320 [ 149.578611][ T6090] ? avc_policy_seqno+0x15/0x30 [ 149.578638][ T6090] ? selinux_file_permission+0x1e1/0x320 [ 149.578667][ T6090] do_splice_direct+0x119/0x1a0 [ 149.578708][ T6090] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 149.578738][ T6090] do_sendfile+0x382/0x650 [ 149.578768][ T6090] __x64_sys_sendfile64+0x105/0x150 [ 149.578872][ T6090] x64_sys_call+0x2dc4/0x3020 [ 149.578898][ T6090] do_syscall_64+0x12c/0x3b0 [ 149.578930][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.578951][ T6090] RIP: 0033:0x7f29ac78c819 [ 149.578996][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.579031][ T6090] RSP: 002b:00007f29ab1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.579050][ T6090] RAX: ffffffffffffffda RBX: 00007f29aca05fa0 RCX: 00007f29ac78c819 [ 149.579062][ T6090] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 149.579080][ T6090] RBP: 00007f29ab1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.579093][ T6090] R10: 000000000000fff2 R11: 0000000000000246 R12: 0000000000000001 [ 149.579105][ T6090] R13: 00007f29aca06038 R14: 00007f29aca05fa0 R15: 00007ffce2ee4b98 [ 149.579194][ T6090] [ 149.815597][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.818936][ T6091] loop1: detected capacity change from 0 to 1024 [ 149.832885][ T6091] EXT4-fs: test_dummy_encryption option not supported [ 149.853651][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.985284][ T6088] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.028480][ T6100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.061689][ T6100] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.771: bad orphan inode 15 [ 150.072959][ T6100] loop2: lost filesystem error report for type 5 error -117 [ 150.141492][ T6100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.221523][ T6108] EXT4-fs (loop1): 1 orphan inode deleted [ 150.235723][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.252192][ T6108] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.289736][ T6108] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 150.333655][ T6104] EXT4-fs: inline encryption not supported [ 150.548318][ T6104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.564496][ T6100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.771'. [ 150.574451][ T6104] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.593842][ T6100] bond2 (unregistering): Released all slaves [ 150.602462][ T6104] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 150.627353][ T28] audit: type=1400 audit(1776187507.704:828): avc: denied { setattr } for pid=6103 comm="syz.4.773" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.676623][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 150.770202][ T6100] veth0_to_team: entered promiscuous mode [ 150.978472][ T5721] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.990832][ T5721] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:20: Failed to release dquot type 1 [ 151.033718][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.053234][ T6104] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 151.064346][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.358294][ T6131] syzkaller0: entered promiscuous mode [ 151.487171][ T6131] syzkaller0: entered allmulticast mode [ 151.559115][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.671729][ T6135] set_capacity_and_notify: 3 callbacks suppressed [ 151.671769][ T6135] loop0: detected capacity change from 0 to 1024 [ 151.686557][ T6135] EXT4-fs: Ignoring removed i_version option [ 151.755453][ T6135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.858754][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.956848][ T6139] loop1: detected capacity change from 0 to 1024 [ 152.004469][ T6139] EXT4-fs: test_dummy_encryption option not supported [ 152.132171][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.272202][ T6150] loop1: detected capacity change from 0 to 512 [ 152.343149][ T6150] EXT4-fs (loop1): 1 orphan inode deleted [ 152.362605][ T6150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.392319][ T6150] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.499856][ T6150] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 152.545008][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 152.560827][ T6147] loop2: detected capacity change from 0 to 1024 [ 152.570359][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:3: Failed to release dquot type 1 [ 152.677971][ T6147] ext4: Unknown parameter 'noacl' [ 152.828726][ T6157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.837850][ T6157] IPv6: NLM_F_CREATE should be set when creating new route [ 152.887930][ T6155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 152.957896][ T6158] netlink: 240 bytes leftover after parsing attributes in process `syz.4.785'. [ 153.110073][ T6165] loop4: detected capacity change from 0 to 512 [ 153.141823][ T6165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.176791][ T6168] syzkaller0: entered promiscuous mode [ 153.225871][ T6168] syzkaller0: entered allmulticast mode [ 153.254426][ T6171] loop0: detected capacity change from 0 to 1024 [ 153.290803][ T6165] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.789: bad orphan inode 15 [ 153.302088][ T6171] EXT4-fs: Ignoring removed i_version option [ 153.324311][ T6165] loop4: lost filesystem error report for type 5 error -117 [ 153.324932][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.374921][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.412156][ T6177] loop2: detected capacity change from 0 to 512 [ 153.424699][ T6165] netlink: 64 bytes leftover after parsing attributes in process `syz.4.789'. [ 153.455969][ T6177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.506887][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.533901][ T6165] bond1 (unregistering): Released all slaves [ 153.549946][ T6177] EXT4-fs (loop2): 1 orphan inode deleted [ 153.568935][ T6177] EXT4-fs (loop2): 1 truncate cleaned up [ 153.579974][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 153.601053][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.749072][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.760311][ T6165] veth0_to_team: entered promiscuous mode [ 153.808205][ T6031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 153.900486][ T6193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.928597][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.012843][ T6195] loop0: detected capacity change from 0 to 1024 [ 154.033490][ T6193] loop1: detected capacity change from 0 to 512 [ 154.044159][ T6195] ext4: Unknown parameter 'noacl' [ 154.079491][ T6193] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 154.138853][ T6193] FAT-fs (loop1): Filesystem has been set read-only [ 154.431004][ T6203] loop1: detected capacity change from 0 to 1024 [ 154.460233][ T6203] ext4: Unknown parameter 'noacl' [ 154.599914][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.639748][ T28] audit: type=1326 audit(1776187511.734:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.681052][ T28] audit: type=1326 audit(1776187511.734:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.712938][ T28] audit: type=1326 audit(1776187511.734:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.748265][ T6212] syzkaller0: entered promiscuous mode [ 154.754526][ T6212] syzkaller0: entered allmulticast mode [ 154.768297][ T6214] EXT4-fs: Ignoring removed i_version option [ 154.787696][ T28] audit: type=1326 audit(1776187511.734:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.816675][ T6214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.831937][ T28] audit: type=1326 audit(1776187511.734:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.866118][ T28] audit: type=1326 audit(1776187511.734:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.884217][ T6209] Process accounting resumed [ 154.893948][ T28] audit: type=1326 audit(1776187511.734:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9c0fc819 code=0x7ffc0000 [ 154.930412][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.965559][ T6220] EXT4-fs: test_dummy_encryption option not supported [ 156.081169][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 156.081186][ T28] audit: type=1400 audit(1776187512.484:879): avc: denied { open } for pid=6217 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.124622][ T28] audit: type=1400 audit(1776187512.484:880): avc: denied { perfmon } for pid=6217 comm="syz.3.805" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.199325][ T28] audit: type=1400 audit(1776187512.484:881): avc: denied { kernel } for pid=6217 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.950231][ T6228] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 158.177914][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.319544][ T28] audit: type=1400 audit(1776187512.484:882): avc: denied { prog_load } for pid=6219 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.375486][ T28] audit: type=1400 audit(1776187512.484:883): avc: denied { bpf } for pid=6219 comm="syz.2.807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.475784][ T6241] set_capacity_and_notify: 3 callbacks suppressed [ 158.475801][ T6241] loop0: detected capacity change from 0 to 512 [ 158.502120][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.537173][ T28] audit: type=1400 audit(1776187512.644:884): avc: denied { prog_run } for pid=6219 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.547919][ T6241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.594277][ T6241] EXT4-fs (loop0): 1 orphan inode deleted [ 158.600711][ T6241] EXT4-fs (loop0): 1 truncate cleaned up [ 158.620152][ T28] audit: type=1400 audit(1776187512.874:885): avc: denied { write } for pid=6219 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.644113][ T28] audit: type=1400 audit(1776187512.984:886): avc: denied { read write } for pid=6217 comm="syz.3.805" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.674156][ T28] audit: type=1400 audit(1776187512.984:887): avc: denied { open } for pid=6217 comm="syz.3.805" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.702170][ T28] audit: type=1400 audit(1776187512.984:888): avc: denied { ioctl } for pid=6217 comm="syz.3.805" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.732028][ T6248] loop2: detected capacity change from 0 to 1024 [ 158.757844][ T6248] ext4: Unknown parameter 'noacl' [ 158.791644][ T6250] loop4: detected capacity change from 0 to 1024 [ 158.814347][ T6250] EXT4-fs: Ignoring removed i_version option [ 159.009734][ T6259] Process accounting resumed [ 159.177724][ T6278] loop4: detected capacity change from 0 to 1024 [ 159.196269][ T6278] EXT4-fs: test_dummy_encryption option not supported [ 159.475322][ T6283] loop4: detected capacity change from 0 to 512 [ 159.549098][ T6283] EXT4-fs (loop4): 1 orphan inode deleted [ 159.563689][ T6283] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.858107][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:1: Failed to release dquot type 1 [ 159.883832][ T6291] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 159.907313][ T6292] loop1: detected capacity change from 0 to 256 [ 159.918017][ T6292] msdos: Bad value for 'tz' [ 159.934547][ T6292] loop1: detected capacity change from 0 to 512 [ 159.944030][ T6292] EXT4-fs: Ignoring removed nobh option [ 159.962377][ T6292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.095205][ T6295] loop0: detected capacity change from 0 to 512 [ 160.145584][ T6292] EXT4-fs (loop1): 1 truncate cleaned up [ 160.165044][ T6295] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.264086][ T6295] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 160.287273][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 160.294306][ C0] EXT4-fs (loop0): initial error at time 1776187517: ext4_mb_generate_buddy:1317 [ 160.304882][ C0] EXT4-fs (loop0): last error at time 1776187517: ext4_mb_generate_buddy:1317 [ 160.321356][ T6297] loop3: detected capacity change from 0 to 1024 [ 160.412376][ T6295] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.828: Failed to acquire dquot type 1 [ 160.474867][ T6297] EXT4-fs: Ignoring removed i_version option [ 160.508522][ T6295] loop0: lost filesystem error report for type 5 error -28 [ 160.508784][ T6295] EXT4-fs (loop0): 1 truncate cleaned up [ 160.866574][ T6295] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 160.942302][ T6295] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 160.980641][ T6295] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 161.605353][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 161.605366][ T28] audit: type=1400 audit(1776187518.324:929): avc: denied { mount } for pid=6329 comm="syz.3.837" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 162.114890][ T6353] loop4: detected capacity change from 0 to 1024 [ 162.145163][ T6353] EXT4-fs: Ignoring removed i_version option [ 162.190524][ T6361] EXT4-fs: test_dummy_encryption option not supported [ 162.277496][ T6358] syzkaller0: entered promiscuous mode [ 162.283999][ T6358] syzkaller0: entered allmulticast mode [ 162.611948][ T6366] EXT4-fs (loop0): 1 orphan inode deleted [ 162.628377][ T6366] EXT4-fs mount: 13 callbacks suppressed [ 162.628449][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.656070][ T6366] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.768486][ T6366] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 162.794222][ T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.879886][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:2: Failed to release dquot type 1 [ 163.407342][ T28] audit: type=1400 audit(1776187520.504:930): avc: denied { create } for pid=6387 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.502520][ T28] audit: type=1400 audit(1776187520.534:931): avc: denied { setopt } for pid=6387 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.572387][ T6392] set_capacity_and_notify: 2 callbacks suppressed [ 163.572407][ T6392] loop4: detected capacity change from 0 to 1024 [ 163.654754][ T6392] EXT4-fs: test_dummy_encryption option not supported [ 163.883986][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.975711][ T6394] loop4: detected capacity change from 0 to 512 [ 164.026790][ T6394] EXT4-fs (loop4): 1 orphan inode deleted [ 164.041435][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.061946][ T6394] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.095577][ T5721] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.231692][ T5721] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:20: Failed to release dquot type 1 [ 164.374906][ T6401] loop3: detected capacity change from 0 to 1024 [ 164.457758][ T6401] EXT4-fs: Ignoring removed i_version option [ 164.528798][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.615502][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.368584][ T28] audit: type=1400 audit(1776187522.474:932): avc: denied { sqpoll } for pid=6380 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.433696][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.510033][ T28] audit: type=1400 audit(1776187522.614:933): avc: denied { create } for pid=6419 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.777613][ T6425] loop4: detected capacity change from 0 to 512 [ 165.837463][ T6425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.723650][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.324219][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.407720][ T6441] loop0: detected capacity change from 0 to 1024 [ 167.420747][ T6442] netlink: 44 bytes leftover after parsing attributes in process `syz.4.866'. [ 167.433443][ T6441] EXT4-fs: Ignoring removed i_version option [ 167.483351][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.538938][ T3315] ================================================================== [ 167.548739][ T3315] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 167.558173][ T3315] [ 167.560620][ T3315] read-write to 0xffff88811b904d60 of 8 bytes by task 6382 on cpu 1: [ 167.571329][ T3315] shmem_add_to_page_cache+0x4b2/0x5b0 [ 167.578132][ T3315] shmem_get_folio_gfp+0x4f3/0xd60 [ 167.583988][ T3315] shmem_write_begin+0xfc/0x1f0 [ 167.591203][ T3315] generic_perform_write+0x183/0x490 [ 167.597286][ T3315] shmem_file_write_iter+0xc5/0xf0 [ 167.603147][ T3315] __kernel_write_iter+0x319/0x590 [ 167.609420][ T3315] dump_user_range+0xa7d/0xdb0 [ 167.614900][ T3315] elf_core_dump+0x21a2/0x2330 [ 167.620454][ T3315] coredump_write+0xacc/0xdd0 [ 167.625925][ T3315] vfs_coredump+0x26dd/0x3210 [ 167.631339][ T3315] get_signal+0xd80/0xf60 [ 167.637103][ T3315] arch_do_signal_or_restart+0x96/0x450 [ 167.644597][ T3315] irqentry_exit+0xf7/0x520 [ 167.650178][ T3315] asm_exc_page_fault+0x26/0x30 [ 167.655837][ T3315] [ 167.658695][ T3315] read to 0xffff88811b904d60 of 8 bytes by task 3315 on cpu 0: [ 167.667383][ T3315] shmem_getattr+0x68/0x200 [ 167.673887][ T3315] vfs_getattr_nosec+0x146/0x1e0 [ 167.680108][ T3315] vfs_getattr+0x48/0x60 [ 167.685475][ T3315] vfs_statx_path+0x28/0x140 [ 167.691213][ T3315] vfs_statx+0xc4/0x170 [ 167.696095][ T3315] vfs_fstatat+0x118/0x170 [ 167.700999][ T3315] __se_sys_newfstatat+0x55/0x3e0 [ 167.708305][ T3315] __x64_sys_newfstatat+0x55/0x70 [ 167.715021][ T3315] x64_sys_call+0x2c64/0x3020 [ 167.720604][ T3315] do_syscall_64+0x12c/0x3b0 [ 167.726223][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.733094][ T3315] [ 167.736295][ T3315] value changed: 0x00000000000037d2 -> 0x00000000000037d4 [ 167.744204][ T3315] [ 167.746609][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 167.754167][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 167.769555][ T3315] Tainted: [W]=WARN [ 167.774028][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.785938][ T3315] ================================================================== [ 167.980160][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.