last executing test programs: 47.419978167s ago: executing program 3 (id=2111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@minixdf}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 47.184137567s ago: executing program 3 (id=2115): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b70000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x72}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) 45.027511675s ago: executing program 3 (id=2132): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000500)=""/117, 0x75}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x5, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0xd209f6d814827b13) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 44.922616169s ago: executing program 3 (id=2134): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000900)=ANY=[], 0xe) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='36\x00\x00', @ANYRES16=r10, @ANYBLOB="05000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES8=r4, @ANYRES16=r11], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$getregs(0xe, r12, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) 44.570489974s ago: executing program 3 (id=2136): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800014000000000080002400000491f140000001100010000000000000000000800000a"], 0x68}}, 0x2000c044) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000480)={@multicast2, @rand_addr=0x64010100, 0x0, "23b68956f5a5c1009a76d44d36a0090608793d7d56db78315a06db0d71a027e2", 0x9, 0xc96, 0x2, 0xc0b}, 0x3c) 43.136256819s ago: executing program 3 (id=2142): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) r2 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$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") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, {[@generic={0xfe, 0x6, "7646a26e"}]}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r10, 0x0, 0xfffffffffffff001}, 0x18) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0x2, 0x9}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048014}, 0x4000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_netfilter(r12, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="04020000140201012dbd7000ffdbdf2502000001f8005680f2004c00b3872f4fa15d3cb48d4f8c54f4d5bee824d56f0d01e33eec211ccf64c3a93b6ab12c0d4634bedb4acf19300929711ed555d01e074a167ed303fdaaa99a52ef5a0fd1cb0443d43f1e568d52f5bb62a8c3e26ad63c967fdc337775ed8b6aa990b498f03446eae24887df8d57d0a74d00375f7774bca5c3f71143675141d883bc1ee00a8d998789333984face5a6e5418e67eec3df181049d6d346b39f914ec7378c042b278f7bb21bd0a8d0c62ebade148d1511f3f77ccc6dcf501e80afa2c76c6f1dc253b37c71716d4a2b1caf5e606cdd585b69a39f4bfdeef14bddbe2a702d4ebd9cad51a0f2b39a4a1918aafe20000347d5af0e6db79e892b123520c73a6ccbf6f68a44015ca36931280206f68af823887c15bf69fffd541a046f33aba2ec391546f81b73ec6d1282f54c65b57b95c74dfa37830e2daca635cbf5fce79f47c0708000100627066005f157a4eb812f921324f5f74f33e4c92fe3ce8f2e474232aa233e7832769bf931b4383df3d1c22c437c388dc3cc62774dff91f972146df5efb844cdea0aef504c6e8b6b99014ead20023faea45b98c1e5e14aa401034817aa2db58faf25579096b697b6e26fc89495f7e78883a1207b8a813d5929643f20a8b6d7b1400628004000180040034000400a58004003900"/513], 0x204}}, 0x8810) r13 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000000180)=[{&(0x7f0000006fc0)={0xc4, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x35}, @generic, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x5}, @nested={0xa8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="11a0f0a81e06c2dac4bade597f9c825c7fb3a08a708e548ef54fdd5b8bf171144387c47ea7846916605a3dfdad90511a9de31a30559c02ac305bf5b77a60ce8835e981fd31cad2a5660cfa7e6e73e98c3df4759b72940a27414801a3cd50baf8f37f8335bd1a8e43ec12f0cb22cc3478112571fa51ad753459c000156a7d2953", @nested={0x4, 0x145}, @nested={0x4, 0x8c}, @typed={0xf, 0xb9, 0x0, 0x0, @binary="645d20f2c7ee04a8fd8072"}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r3}]}]}, 0xc4}, {&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x10a0}, {&(0x7f00000000c0)={0x14, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0x129}]}, 0x14}, {&(0x7f0000001500)={0x33c, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x32b, 0xd1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r13}, @nested={0xc, 0x25, 0x0, 0x1, [@typed={0x4, 0x136}, @nested={0x4, 0xd8}]}, @nested={0x198, 0x4, 0x0, 0x1, [@generic="6bb5aa3f898cf17f71012064f7756e994fb3691b4433d02765924c25c011275cb1b85906d31f19d4e8fc5410635606f9131097434c69ab2826808d217d65", @generic="62b791538d7140ae789b7e270e519e8863553636117047a20cdc5ea37b058ca757b094ba532f8f68ca272a1d408e7b958f06ac354f83e4d3c305b42293ba7ebe242780026fb5ccbcd7798e324e0c1be77f14edb7aa4137a1f5c6eaad347201bfd1ade0d588037c82413e1ad35dda6166e6a1785c8ba8296bfc0e9bfd92c9", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r2}, @generic="3eb2e8505504906af200735cc4123838d60ab5db5846fa87e4d73cd3af331a86bbbd7257756e63a8063a9b09074b64c535e26074f8fe81eba32e571c38abb5a3383cd88bf73b21130e531c2c6117c1b2c0efd480bf04fc120117e962c99d6560b7b0195fe2bb8207566566b43ef3569688c37c91a4fa142c734dcb560e0d3270fb037498dbb2e7393e10f42c9004c595a301694995768b80af8ddd88c7a533669c7ff400c342a91eafb41882f10a9e32fb895f6b971634cf54962f8b", @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@empty}]}]}, @generic="331f1a0070e46723649044f88cb4793daa76ac0184cd7917ebbe00a56f775e7837e2bc47080b9cbab85a1070cd730218b74030bdcd5bfad0d8415be27b8a5c537518c857d4780bdaa1da3ba755c10e55019e871ca0e16f94f2bb83b8e0b4a0251b5d7e6ee5f85a3e94340acf2c24388b303719c029929c1abea0e1da8b7f28966b7da53317ad86e2745cdef62e3fb02f13c719", @generic, @typed={0xdf, 0x67, 0x0, 0x0, @binary="d759a0e68f49180a5054395a7176842c235c92e4d9da514b6ec199b4bbebf4789e204c5877a52fc69db601a10848c22dcb70ef73691fa5873ad1621dd28aa51639010b2ccc1866357a38e5e084facc38b7e6f7511337e1c257ab6f1a2b1915d6a600d0bfa10eb4d7f8a3f99eb9d37eddcdb9e7a093a0f2b8c0c6d4929574695970ea356066f81dc9af5122424ae33a2a3d513843144e78a136c19164d974a78542612a4a071ee942f5ebbef13556206b90b444f5d550f7c3ba2831e2b9e91828bae19f6808d7b698e4fba7c4c74f3d60fc6ec5b28bc930520c91e0"}]}]}, 0x33c}, {&(0x7f0000001340)={0x174, 0x3b, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="19ccd2436bc87a8330fa10b39f359c3628e9020d240690f7e500b43597cb60f795a71b345d674ec9e5fc347ca7a2a7643cc00ec684241128636b81e87172a643544aa58662d5da453cf49a2ef90b6b3dacf4d15ef426ef412102d056184d6d057a3ea7d053b1b489be17baea6259f65308e0f739af123d1f0309633e50e9bf240c4cbdeefd64aff859e486f77e2d8257156de10d9db2a63b9c65563e6f91778caa12d39560e5dc689d875da2cd9d3a8ff57126e5cd95e8edbedb14f53ec6ce07bb5cb5ee44ec527b3fdc9aa14336e1c521f812e1194876f7c01e5c7572d1c5", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x2d}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x84}]}, @nested={0x4, 0x54}, @nested={0x70, 0x1b, 0x0, 0x1, [@generic, @nested={0x4, 0x4b}, @generic, @typed={0x4, 0x116}, @generic, @generic="9193c5c241c53078dec164589b1539f1f6bf37d70d2b6fce4d07a0deed053c774841a051d833d8c8b00633d8971e2ca118c4b89f1a90a2993c2e6c411b5cb4fb50ecc6cd9d766adebddf0279cfdf454678bff658cc2fd0aac807c0e617e89f990cee6439"]}]}, 0x174}], 0x5}, 0x4) setfsuid(r2) 43.097625664s ago: executing program 32 (id=2142): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) r2 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$eJzs3V9rW+UfAPDvSZvu7++3DsZQL6SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdbDtwt14I0MQcSC+AO/Fq+EL0Fcx0MGQUfTCm8hJT7qsaZquy9ps+XzgtM9zzkm+5znnPE++JychAQyssfRPLuLliPg6iTjUsmw4soVjq+utPLw2nU5J1Ouf/pVEks1rrp9k/w9klZci4tcvI07k2uNWl5bniuVyaSGrj9fmL49Xl5ZPXpwvzpZmS5cmp6ZOvzU1+e47b/esra+f++e7T+5+ePqrYyvf/nT/8O0kzsTBbFlrO57CjdbKWIxl+yQfZ9atONGDYP0k2e0NYFuGsn6ej3QMOBRDWa8HXnzXI6LeKp8tqAMvvkRXhwHVzAOa1/Y9ug5+bjz4YPUCqL39w6vvjcTexrXR/pXksSuj9Hp3tAfx0xg//3nndjpFl/chrvcgHkDTjZsRcWp4uH38S7Lxb/tONd483tz6GIP2+gO76W6a/7yxUf6TW8t/oj3/qQ9t0He3o3v/z93vQZiO0vzvvQ3z37Wha3Qoq/2vkfPlkwsXy6VTEfH/iDge+T1pfbP7OadX7tU7LWvN/9Ipjd/MBbPtuD+85/HHzBRrxadpc6sHNyNeeZT/JtE2/u9t5Lrr8990f5zbYoyjpTuvdlrWvf3ZxjT0PgOu/xjx2obHP3ks+Cb3J8cb58N486xo9/eto793ir/F9j8z6fHfv3n7R5PW+7XVJ4/xw95/S52Wbff8H0k+a5RHsnlXi7XawkTESPJx+/zJR49t1pvrp+0/fmzz8W+j839fRHy+xfbfOnKr46r9cPxnnuj4P3nh3kdffN8p/taO/5uN0vFsTvfxb1/2v/sGbn/PAQAAAAAAQP/JRcTBSHKFtXIuVyisfof3SOzPlSvV2okLlcVLM9H4ruxo5HPNO92HWj4PMZF9HrZZn1xXn4qIwxHxzdC+Rr0wXSnP7HbjAQAAAAAAAAAAAAAAAAAAoE8c6PD9/9QfQ7u9dcAz5ye/YXB17f+9+KUnoC95/YfBpf/D4NL/YXDp/zC49H8YXPo/DC79HwaX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2XSqrzy8Np3WZ64sLc5VrpycKVXnCvOL04XpysLlwmylMlsuFaYr892er1ypXJ6YjMWr47VStTZeXVo+P19ZvFQ7f3G+OFs6X8rvSKsAAAAAAAAAAAAAAAAAAADg+VJdWp4rlsulhZ0o5GLnYvWw8H70/JmTnWxFsnaUf8l3aOCqbYUY7pfD9EwKv2W7ZmeCjuxGr+xQ2KUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA28F8AAAD//8YDIpQ=") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, {[@generic={0xfe, 0x6, "7646a26e"}]}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r10, 0x0, 0xfffffffffffff001}, 0x18) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0x2, 0x9}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048014}, 0x4000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_netfilter(r12, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/513], 0x204}}, 0x8810) r13 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000000180)=[{&(0x7f0000006fc0)={0xc4, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x35}, @generic, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x5}, @nested={0xa8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="11a0f0a81e06c2dac4bade597f9c825c7fb3a08a708e548ef54fdd5b8bf171144387c47ea7846916605a3dfdad90511a9de31a30559c02ac305bf5b77a60ce8835e981fd31cad2a5660cfa7e6e73e98c3df4759b72940a27414801a3cd50baf8f37f8335bd1a8e43ec12f0cb22cc3478112571fa51ad753459c000156a7d2953", @nested={0x4, 0x145}, @nested={0x4, 0x8c}, @typed={0xf, 0xb9, 0x0, 0x0, @binary="645d20f2c7ee04a8fd8072"}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r3}]}]}, 0xc4}, {&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x10a0}, {&(0x7f00000000c0)={0x14, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0x129}]}, 0x14}, {&(0x7f0000001500)={0x33c, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x32b, 0xd1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r13}, @nested={0xc, 0x25, 0x0, 0x1, [@typed={0x4, 0x136}, @nested={0x4, 0xd8}]}, @nested={0x198, 0x4, 0x0, 0x1, [@generic="6bb5aa3f898cf17f71012064f7756e994fb3691b4433d02765924c25c011275cb1b85906d31f19d4e8fc5410635606f9131097434c69ab2826808d217d65", @generic="62b791538d7140ae789b7e270e519e8863553636117047a20cdc5ea37b058ca757b094ba532f8f68ca272a1d408e7b958f06ac354f83e4d3c305b42293ba7ebe242780026fb5ccbcd7798e324e0c1be77f14edb7aa4137a1f5c6eaad347201bfd1ade0d588037c82413e1ad35dda6166e6a1785c8ba8296bfc0e9bfd92c9", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r2}, @generic="3eb2e8505504906af200735cc4123838d60ab5db5846fa87e4d73cd3af331a86bbbd7257756e63a8063a9b09074b64c535e26074f8fe81eba32e571c38abb5a3383cd88bf73b21130e531c2c6117c1b2c0efd480bf04fc120117e962c99d6560b7b0195fe2bb8207566566b43ef3569688c37c91a4fa142c734dcb560e0d3270fb037498dbb2e7393e10f42c9004c595a301694995768b80af8ddd88c7a533669c7ff400c342a91eafb41882f10a9e32fb895f6b971634cf54962f8b", @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@empty}]}]}, @generic="331f1a0070e46723649044f88cb4793daa76ac0184cd7917ebbe00a56f775e7837e2bc47080b9cbab85a1070cd730218b74030bdcd5bfad0d8415be27b8a5c537518c857d4780bdaa1da3ba755c10e55019e871ca0e16f94f2bb83b8e0b4a0251b5d7e6ee5f85a3e94340acf2c24388b303719c029929c1abea0e1da8b7f28966b7da53317ad86e2745cdef62e3fb02f13c719", @generic, @typed={0xdf, 0x67, 0x0, 0x0, @binary="d759a0e68f49180a5054395a7176842c235c92e4d9da514b6ec199b4bbebf4789e204c5877a52fc69db601a10848c22dcb70ef73691fa5873ad1621dd28aa51639010b2ccc1866357a38e5e084facc38b7e6f7511337e1c257ab6f1a2b1915d6a600d0bfa10eb4d7f8a3f99eb9d37eddcdb9e7a093a0f2b8c0c6d4929574695970ea356066f81dc9af5122424ae33a2a3d513843144e78a136c19164d974a78542612a4a071ee942f5ebbef13556206b90b444f5d550f7c3ba2831e2b9e91828bae19f6808d7b698e4fba7c4c74f3d60fc6ec5b28bc930520c91e0"}]}]}, 0x33c}, {&(0x7f0000001340)={0x174, 0x3b, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="19ccd2436bc87a8330fa10b39f359c3628e9020d240690f7e500b43597cb60f795a71b345d674ec9e5fc347ca7a2a7643cc00ec684241128636b81e87172a643544aa58662d5da453cf49a2ef90b6b3dacf4d15ef426ef412102d056184d6d057a3ea7d053b1b489be17baea6259f65308e0f739af123d1f0309633e50e9bf240c4cbdeefd64aff859e486f77e2d8257156de10d9db2a63b9c65563e6f91778caa12d39560e5dc689d875da2cd9d3a8ff57126e5cd95e8edbedb14f53ec6ce07bb5cb5ee44ec527b3fdc9aa14336e1c521f812e1194876f7c01e5c7572d1c5", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x2d}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x84}]}, @nested={0x4, 0x54}, @nested={0x70, 0x1b, 0x0, 0x1, [@generic, @nested={0x4, 0x4b}, @generic, @typed={0x4, 0x116}, @generic, @generic="9193c5c241c53078dec164589b1539f1f6bf37d70d2b6fce4d07a0deed053c774841a051d833d8c8b00633d8971e2ca118c4b89f1a90a2993c2e6c411b5cb4fb50ecc6cd9d766adebddf0279cfdf454678bff658cc2fd0aac807c0e617e89f990cee6439"]}]}, 0x174}], 0x5}, 0x4) setfsuid(r2) 3.56955847s ago: executing program 4 (id=2667): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb060018000000000000000000004ea1da71479c55b6328c7a0f9cdac7c0945800001ffeac9ea65cc58ce900000000"], 0x0, 0x1a, 0x0, 0x0, 0x40000001}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x60000094) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="19443479401b502145ee899b761ac5a0acae1766c4f7bb5c761e60637767384f78a42c3929fd1bb513d276b2", @ANYRESDEC, @ANYRESOCT=r3], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002000010325bd700400000002000008000b020000140000000000000000236900"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5, 0x0, 0x202}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f0000000500), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0xffffffffffffff7b, 0x0) dup3(r2, r2, 0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r10, &(0x7f0000000040)=""/190, 0xbe) 3.478863031s ago: executing program 4 (id=2669): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) 3.462800873s ago: executing program 4 (id=2671): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b70000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) 1.556869949s ago: executing program 5 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) 1.498630797s ago: executing program 5 (id=2702): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x1, 0x0, 0xf, 0x10022, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xb9b300000000000, 0xb1}, 0x0, 0x0, 0xfffffffc, 0x2, 0x9, 0x0, 0x7, 0x0, 0x800, 0x0, 0x4}, r0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003380), 0x8202, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.07995941s ago: executing program 4 (id=2705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002800500030032000000140007000000000000000000000000000000000108000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000380)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e22, @remote}}]}, 0xeff8852803e6d732) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0x0, 0x0) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) msgctl$IPC_RMID(r8, 0x0) 940.242599ms ago: executing program 2 (id=2707): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 860.656769ms ago: executing program 0 (id=2708): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="0000000000aa303e97380e90231bdbdaf6a4bd865726b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d0c", 0x5b}, {&(0x7f0000000d00)="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", 0x426}], 0x2}, 0x0) 755.970502ms ago: executing program 4 (id=2710): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c044) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000480)={@multicast2, @rand_addr=0x64010100, 0x0, "23b68956f5a5c1009a76d44d36a0090608793d7d56db78315a06db0d71a027e2", 0x9, 0xc96, 0x2, 0xc0b}, 0x3c) 745.161034ms ago: executing program 1 (id=2711): syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0xa95f, 0x4000, 0x1, 0x73}, &(0x7f0000000380), &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 743.459914ms ago: executing program 0 (id=2712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000000000005"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 684.126551ms ago: executing program 1 (id=2713): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r4, &(0x7f0000000640)=""/4110, 0x100e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a0000"]) linkat(r3, &(0x7f0000000280)='./file2\x00', r3, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}]}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0xee00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000010040)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$packet(0x11, 0x2, 0x300) 668.926213ms ago: executing program 2 (id=2714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 634.297908ms ago: executing program 5 (id=2715): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r4, &(0x7f0000000640)=""/4110, 0x100e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a0000"]) linkat(r3, &(0x7f0000000280)='./file2\x00', r3, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}]}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0xee00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000010040)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$packet(0x11, 0x2, 0x300) 515.471583ms ago: executing program 2 (id=2716): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) 493.795656ms ago: executing program 0 (id=2717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000000000005"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 393.216479ms ago: executing program 2 (id=2718): sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) 388.80809ms ago: executing program 0 (id=2719): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 370.553252ms ago: executing program 5 (id=2720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 360.721254ms ago: executing program 1 (id=2721): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7ff, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 360.489903ms ago: executing program 2 (id=2722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 229.97654ms ago: executing program 1 (id=2723): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb060018000000000000000000004ea1da71479c55b6328c7a0f9cdac7c0945800001ffeac9ea65cc58ce900000000"], 0x0, 0x1a, 0x0, 0x0, 0x40000001}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="19443479401b502145ee899b761ac5a0acae1766c4f7bb5c761e60637767384f78a42c3929fd1bb513d276b2", @ANYRESDEC, @ANYRESOCT=r2], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 207.252363ms ago: executing program 0 (id=2724): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 138.210272ms ago: executing program 0 (id=2725): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x20224, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xa}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) 106.966426ms ago: executing program 4 (id=2726): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000f0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) 105.782566ms ago: executing program 2 (id=2727): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 102.157457ms ago: executing program 1 (id=2728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x5, 0x12, 0x0, 0x9, 0x2, 0xaba, &(0x7f0000000140)="6db4"}) 68.506911ms ago: executing program 5 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 972.25µs ago: executing program 1 (id=2730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r4 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r4, &(0x7f0000000640)=""/4110, 0x100e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a0000"]) linkat(r3, &(0x7f0000000280)='./file2\x00', r3, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}]}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0xee00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000010040)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 5 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000160000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") kernel console output (not intermixed with test programs): 7339][T11306] loop0: detected capacity change from 0 to 512 [ 236.221928][T11306] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2224: EA inode hash validation failed [ 236.240481][T11303] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2223: corrupted inode contents [ 236.269708][T11306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2224: corrupted inode contents [ 236.282905][T11303] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2223: mark_inode_dirty error [ 236.307587][T11306] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.2224: mark_inode_dirty error [ 236.321378][T11303] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2223: corrupted inode contents [ 236.341398][T11306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2224: corrupted inode contents [ 236.359016][T11303] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2223: mark_inode_dirty error [ 236.381919][T11306] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.2224: mark_inode_dirty error [ 236.396402][T11303] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2223: mark inode dirty (error -117) [ 236.421423][T11306] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.2224: mark inode dirty (error -117) [ 236.439487][T11303] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 236.457723][T11303] EXT4-fs (loop2): 1 orphan inode deleted [ 236.466333][T11306] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 236.492291][T11306] EXT4-fs (loop0): 1 orphan inode deleted [ 236.831509][T11314] lo speed is unknown, defaulting to 1000 [ 237.005068][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.392566][T11334] lo speed is unknown, defaulting to 1000 [ 237.406975][T11336] loop0: detected capacity change from 0 to 512 [ 237.413444][T11336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.420297][T11336] ext4: Unknown parameter 'init_itable2measure' [ 237.478222][T11338] loop1: detected capacity change from 0 to 512 [ 237.517864][T11338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2232: bg 0: block 248: padding at end of block bitmap is not set [ 237.563666][T11338] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2232: Failed to acquire dquot type 1 [ 237.604830][T11338] EXT4-fs (loop1): 1 truncate cleaned up [ 237.618125][T11338] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.814319][T11344] FAULT_INJECTION: forcing a failure. [ 237.814319][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.827463][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.1.2234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.827531][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.827545][T11344] Call Trace: [ 237.827551][T11344] [ 237.827559][T11344] __dump_stack+0x1d/0x30 [ 237.827581][T11344] dump_stack_lvl+0x95/0xd0 [ 237.827654][T11344] dump_stack+0x15/0x1b [ 237.827712][T11344] should_fail_ex+0x265/0x280 [ 237.827738][T11344] should_fail+0xb/0x20 [ 237.827761][T11344] should_fail_usercopy+0x1a/0x20 [ 237.827852][T11344] _copy_from_iter+0xcf/0xe70 [ 237.827880][T11344] ? __alloc_skb+0x396/0x4b0 [ 237.827908][T11344] ? __alloc_skb+0x228/0x4b0 [ 237.827933][T11344] netlink_sendmsg+0x471/0x6b0 [ 237.828051][T11344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.828086][T11344] __sock_sendmsg+0x145/0x180 [ 237.828105][T11344] ____sys_sendmsg+0x31e/0x4a0 [ 237.828213][T11344] ___sys_sendmsg+0x17b/0x1d0 [ 237.828252][T11344] __x64_sys_sendmsg+0xd4/0x160 [ 237.828327][T11344] x64_sys_call+0x17ba/0x3000 [ 237.828356][T11344] do_syscall_64+0xca/0x2b0 [ 237.828433][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.828452][T11344] RIP: 0033:0x7f0a5699f749 [ 237.828466][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.828490][T11344] RSP: 002b:00007f0a553ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.828511][T11344] RAX: ffffffffffffffda RBX: 00007f0a56bf5fa0 RCX: 00007f0a5699f749 [ 237.828560][T11344] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 237.828574][T11344] RBP: 00007f0a553ff090 R08: 0000000000000000 R09: 0000000000000000 [ 237.828668][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.828683][T11344] R13: 00007f0a56bf6038 R14: 00007f0a56bf5fa0 R15: 00007ffe5d9c3f88 [ 237.828723][T11344] [ 237.833323][T11349] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 238.041156][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 238.041170][ T29] audit: type=1400 audit(1768338336.449:10168): avc: denied { create } for pid=11350 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.139259][T11349] loop4: detected capacity change from 0 to 2048 [ 238.158393][ T29] audit: type=1400 audit(1768338336.549:10169): avc: denied { read write } for pid=11347 comm="syz.4.2235" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.182702][ T29] audit: type=1400 audit(1768338336.549:10170): avc: denied { open } for pid=11347 comm="syz.4.2235" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.206907][ T29] audit: type=1400 audit(1768338336.549:10171): avc: denied { ioctl } for pid=11347 comm="syz.4.2235" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.232717][ T29] audit: type=1400 audit(1768338336.599:10172): avc: denied { prog_load } for pid=11350 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.252077][ T29] audit: type=1400 audit(1768338336.599:10173): avc: denied { bpf } for pid=11350 comm="syz.1.2236" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.272868][ T29] audit: type=1400 audit(1768338336.599:10174): avc: denied { perfmon } for pid=11350 comm="syz.1.2236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.343345][T11356] serio: Serial port ttyS3 [ 238.359389][ T29] audit: type=1400 audit(1768338336.769:10175): avc: denied { open } for pid=11350 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.378998][ T29] audit: type=1400 audit(1768338336.769:10176): avc: denied { kernel } for pid=11350 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.403680][T11314] Set syz1 is full, maxelem 65536 reached [ 238.413387][ T3886] Alternate GPT is invalid, using primary GPT. [ 238.419914][ T3886] loop4: p2 p3 p7 [ 238.463365][ T29] audit: type=1326 audit(1768338336.809:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.4.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4873f749 code=0x7ffc0000 [ 238.535862][T11349] Alternate GPT is invalid, using primary GPT. [ 238.542277][T11349] loop4: p2 p3 p7 [ 238.598997][ T3008] Alternate GPT is invalid, using primary GPT. [ 238.605503][ T3008] loop4: p2 p3 p7 [ 238.619574][T11362] loop2: detected capacity change from 0 to 512 [ 238.667321][T11369] program syz.0.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.721704][T11362] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.776624][T11375] loop0: detected capacity change from 0 to 128 [ 238.809073][T11375] bio_check_eod: 12 callbacks suppressed [ 238.809086][T11375] syz.0.2242: attempt to access beyond end of device [ 238.809086][T11375] loop0: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 238.866629][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 238.891863][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 238.903022][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 238.928546][T11377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2244: bg 0: block 248: padding at end of block bitmap is not set [ 238.964724][T11377] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2244: Failed to acquire dquot type 1 [ 239.018362][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 239.030008][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 239.041132][T11377] EXT4-fs (loop0): 1 truncate cleaned up [ 239.051258][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 239.074954][T11377] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.109205][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 239.110986][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2245'. [ 239.121686][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 239.139724][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 239.241826][T11391] delete_channel: no stack [ 239.264811][T11379] lo speed is unknown, defaulting to 1000 [ 239.276868][T11388] EXT4-fs: Ignoring removed orlov option [ 239.400046][T11402] vhci_hcd vhci_hcd.0: invalid port number 9 [ 239.406163][T11402] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 239.484081][T11405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2252: bg 0: block 248: padding at end of block bitmap is not set [ 239.499282][T11405] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2252: Failed to acquire dquot type 1 [ 239.514500][T11405] EXT4-fs (loop1): 1 truncate cleaned up [ 239.521880][T11405] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.566010][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2254'. [ 239.632999][T11414] EXT4-fs: inline encryption not supported [ 239.707683][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 239.716750][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 239.738054][T11424] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2258'. [ 239.771225][T11429] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 239.826305][ T9976] Alternate GPT is invalid, using primary GPT. [ 239.832736][ T9976] loop4: p2 p3 p7 [ 239.851736][T11429] Alternate GPT is invalid, using primary GPT. [ 239.858294][T11429] loop4: p2 p3 p7 [ 239.871629][T11431] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 239.888305][T11431] EXT4-fs (loop1): mount failed [ 239.941313][T11435] syz.1.2263: attempt to access beyond end of device [ 239.941313][T11435] loop1: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 240.045243][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 240.073662][T11444] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2267: EA inode hash validation failed [ 240.094593][T11444] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2267: corrupted inode contents [ 240.107175][T11444] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2267: mark_inode_dirty error [ 240.119111][T11444] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2267: corrupted inode contents [ 240.135090][T11444] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2267: mark_inode_dirty error [ 240.192898][T11444] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2267: mark inode dirty (error -117) [ 240.206079][T11444] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 240.215238][T11444] EXT4-fs (loop1): 1 orphan inode deleted [ 240.233590][T11440] lo speed is unknown, defaulting to 1000 [ 240.342360][T11458] set_capacity_and_notify: 8 callbacks suppressed [ 240.342450][T11458] loop1: detected capacity change from 0 to 2048 [ 240.363130][T11460] loop0: detected capacity change from 0 to 512 [ 240.373837][T11460] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2273: EA inode hash validation failed [ 240.393126][T11460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2273: corrupted inode contents [ 240.405315][T11460] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.2273: mark_inode_dirty error [ 240.416974][T11460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2273: corrupted inode contents [ 240.429799][T11458] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.444965][T11458] 9p: Bad value for 'wfdno' [ 240.449764][T11460] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.2273: mark_inode_dirty error [ 240.465518][T11458] bond0: (slave team0): Releasing backup interface [ 240.468408][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2275'. [ 240.487038][T11460] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.2273: mark inode dirty (error -117) [ 240.504292][T11460] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 240.512575][T11458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.513648][T11460] EXT4-fs (loop0): 1 orphan inode deleted [ 240.601876][T11474] loop2: detected capacity change from 0 to 1024 [ 240.614819][T11474] EXT4-fs: Ignoring removed orlov option [ 240.735339][T11483] loop1: detected capacity change from 0 to 2048 [ 240.757336][T11483] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.775212][T11483] 9p: Bad value for 'wfdno' [ 240.803941][T11483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.926667][T11492] loop1: detected capacity change from 0 to 512 [ 240.946393][T11492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2281: bg 0: block 248: padding at end of block bitmap is not set [ 240.961348][T11492] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2281: Failed to acquire dquot type 1 [ 240.976084][T11492] EXT4-fs (loop1): 1 truncate cleaned up [ 240.982562][T11492] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.061395][T11499] loop1: detected capacity change from 0 to 1024 [ 241.070681][T11499] EXT4-fs: inline encryption not supported [ 241.266708][T11524] loop4: detected capacity change from 0 to 512 [ 241.292977][T11524] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2287: EA inode hash validation failed [ 241.322905][T11530] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 241.339578][T11530] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 241.352316][T11524] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2287: corrupted inode contents [ 241.378054][T11524] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.2287: mark_inode_dirty error [ 241.396828][T11524] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2287: corrupted inode contents [ 241.434926][T11524] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.2287: mark_inode_dirty error [ 241.468699][T11538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 241.477725][T11538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 241.488244][T11524] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.2287: mark inode dirty (error -117) [ 241.512872][T11538] FAULT_INJECTION: forcing a failure. [ 241.512872][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 241.525584][T11538] CPU: 0 UID: 0 PID: 11538 Comm: syz.2.2291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.525675][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.525692][T11538] Call Trace: [ 241.525699][T11538] [ 241.525708][T11538] __dump_stack+0x1d/0x30 [ 241.525731][T11524] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 241.525849][T11538] dump_stack_lvl+0x95/0xd0 [ 241.525945][T11538] dump_stack+0x15/0x1b [ 241.526024][T11538] should_fail_ex+0x265/0x280 [ 241.526106][T11538] should_failslab+0x8c/0xb0 [ 241.526178][T11538] __kmalloc_cache_noprof+0x65/0x4c0 [ 241.526252][T11538] ? audit_log_d_path+0x8d/0x150 [ 241.526404][T11538] audit_log_d_path+0x8d/0x150 [ 241.526482][T11538] audit_log_d_path_exe+0x42/0x70 [ 241.526593][T11538] audit_log_task+0x1e9/0x250 [ 241.526698][T11538] ? kstrtouint+0x76/0xc0 [ 241.526812][T11538] audit_seccomp+0x61/0x100 [ 241.526903][T11538] ? __seccomp_filter+0x832/0x1260 [ 241.526986][T11538] __seccomp_filter+0x843/0x1260 [ 241.527107][T11538] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.527218][T11538] ? vfs_write+0x7e8/0x960 [ 241.527277][T11538] ? __rcu_read_unlock+0x4f/0x70 [ 241.527359][T11538] ? __fget_files+0x184/0x1c0 [ 241.527468][T11538] __secure_computing+0x82/0x150 [ 241.527612][T11538] syscall_trace_enter+0xcf/0x1e0 [ 241.527690][T11538] do_syscall_64+0xa4/0x2b0 [ 241.527801][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.527870][T11538] RIP: 0033:0x7f50b668f749 [ 241.527930][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.527991][T11538] RSP: 002b:00007f50b50f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.528051][T11538] RAX: ffffffffffffffda RBX: 00007f50b68e5fa0 RCX: 00007f50b668f749 [ 241.528085][T11538] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 241.528190][T11538] RBP: 00007f50b50f7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.528229][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.528249][T11538] R13: 00007f50b68e6038 R14: 00007f50b68e5fa0 R15: 00007ffd9b9d8f18 [ 241.528302][T11538] [ 241.534110][T11538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2291'. [ 241.556423][T11524] EXT4-fs (loop4): 1 orphan inode deleted [ 241.573653][T11547] loop5: detected capacity change from 0 to 512 [ 241.772551][T11547] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2293: EA inode hash validation failed [ 241.801255][T11547] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2293: corrupted inode contents [ 241.876662][T11547] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.2293: mark_inode_dirty error [ 241.890973][T11547] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2293: corrupted inode contents [ 241.920231][T11547] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2293: mark_inode_dirty error [ 241.953265][T11547] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2293: mark inode dirty (error -117) [ 241.971789][T11547] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 241.989904][T11547] EXT4-fs (loop5): 1 orphan inode deleted [ 241.999390][T11575] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 242.010871][T11575] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 242.064706][T11561] lo speed is unknown, defaulting to 1000 [ 242.147906][T11558] lo speed is unknown, defaulting to 1000 [ 242.376890][T11564] lo speed is unknown, defaulting to 1000 [ 242.553055][T11567] lo speed is unknown, defaulting to 1000 [ 242.693341][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 242.742688][T11561] Set syz1 is full, maxelem 65536 reached [ 242.896795][T11622] loop0: detected capacity change from 0 to 512 [ 242.919325][T11626] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 242.940474][T11622] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.972209][T11626] loop4: detected capacity change from 0 to 2048 [ 242.992591][T11622] EXT4-fs (loop0): mount failed [ 243.008599][T11624] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.020424][T11626] Alternate GPT is invalid, using primary GPT. [ 243.026851][T11626] loop4: p2 p3 p7 [ 243.033138][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 243.033151][ T29] audit: type=1326 audit(1768338347.448:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0a5699e497 code=0x7ffc0000 [ 243.096925][ T29] audit: type=1326 audit(1768338347.521:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a5699df90 code=0x7ffc0000 [ 243.120682][ T29] audit: type=1326 audit(1768338347.521:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 243.144307][ T29] audit: type=1326 audit(1768338347.521:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 243.169274][T11624] 9p: Bad value for 'wfdno' [ 243.181137][ T29] audit: type=1400 audit(1768338347.552:10948): avc: denied { write } for pid=11615 comm="syz.0.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.202022][ T29] audit: type=1326 audit(1768338347.552:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a5699df90 code=0x7ffc0000 [ 243.225649][ T29] audit: type=1326 audit(1768338347.552:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a5699df90 code=0x7ffc0000 [ 243.249482][ T29] audit: type=1326 audit(1768338347.552:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 243.273226][ T29] audit: type=1326 audit(1768338347.552:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 243.296899][ T29] audit: type=1326 audit(1768338347.573:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11623 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 243.314118][T11624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.370031][ T3008] Alternate GPT is invalid, using primary GPT. [ 243.376636][ T3008] loop4: p2 p3 p7 [ 243.537057][T11638] lo speed is unknown, defaulting to 1000 [ 243.589193][T11647] vhci_hcd vhci_hcd.0: invalid port number 9 [ 243.595363][T11647] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 243.678196][T11653] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2312: bg 0: block 248: padding at end of block bitmap is not set [ 243.728828][T11653] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2312: Failed to acquire dquot type 1 [ 243.746234][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 243.775869][T11653] EXT4-fs (loop1): 1 truncate cleaned up [ 243.782797][T11653] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.795804][T11651] Alternate GPT is invalid, using primary GPT. [ 243.802252][T11651] loop4: p2 p3 p7 [ 244.069501][T11665] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2317: EA inode hash validation failed [ 244.148807][T11663] lo speed is unknown, defaulting to 1000 [ 244.165205][T11665] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2317: corrupted inode contents [ 244.199667][T11636] Set syz1 is full, maxelem 65536 reached [ 244.206403][T11665] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2317: mark_inode_dirty error [ 244.219068][T11665] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2317: corrupted inode contents [ 244.245581][T11665] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2317: mark_inode_dirty error [ 244.260053][T11669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2319'. [ 244.282157][T11665] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2317: mark inode dirty (error -117) [ 244.344867][T11665] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 244.360275][T11671] EXT4-fs: Ignoring removed orlov option [ 244.367588][T11665] EXT4-fs (loop1): 1 orphan inode deleted [ 244.510927][T11681] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.603702][T11681] 9p: Bad value for 'wfdno' [ 244.627153][T11681] bridge_slave_0: left allmulticast mode [ 244.632879][T11681] bridge_slave_0: left promiscuous mode [ 244.638766][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.651249][T11691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2327'. [ 244.694614][T11681] bridge_slave_1: left allmulticast mode [ 244.700418][T11681] bridge_slave_1: left promiscuous mode [ 244.706161][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.735435][T11681] bond0: (slave bond_slave_0): Releasing backup interface [ 244.745209][T11695] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2328: bg 0: block 248: padding at end of block bitmap is not set [ 244.775599][T11695] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2328: Failed to acquire dquot type 1 [ 244.792033][T11681] bond0: (slave bond_slave_1): Releasing backup interface [ 244.802435][T11695] EXT4-fs (loop0): 1 truncate cleaned up [ 244.809752][T11695] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.890022][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2326'. [ 244.917893][T11681] team0: Port device team_slave_0 removed [ 244.931726][T11663] Set syz1 is full, maxelem 65536 reached [ 244.946069][T11681] team0: Port device team_slave_1 removed [ 244.960112][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.967696][T11681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.003113][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.010684][T11681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.021657][T11681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.122090][T11708] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2332: EA inode hash validation failed [ 245.144125][T11708] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2332: corrupted inode contents [ 245.156914][T11708] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.2332: mark_inode_dirty error [ 245.171428][T11708] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2332: corrupted inode contents [ 245.192159][T11708] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.2332: mark_inode_dirty error [ 245.205963][T11708] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.2332: mark inode dirty (error -117) [ 245.236959][T11708] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 245.263561][T11708] EXT4-fs (loop4): 1 orphan inode deleted [ 245.272247][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2335'. [ 245.323885][T11715] set_capacity_and_notify: 8 callbacks suppressed [ 245.323943][T11715] loop2: detected capacity change from 0 to 1024 [ 245.492847][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2341'. [ 245.564665][T11738] loop2: detected capacity change from 0 to 1024 [ 245.571456][T11738] EXT4-fs: Ignoring removed orlov option [ 245.623117][T11728] lo speed is unknown, defaulting to 1000 [ 245.723694][T11747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2343'. [ 245.963474][T11750] lo speed is unknown, defaulting to 1000 [ 246.021824][T11751] lo speed is unknown, defaulting to 1000 [ 246.269643][T11724] syz.5.2339 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 246.280773][T11724] CPU: 1 UID: 0 PID: 11724 Comm: syz.5.2339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.280807][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.280827][T11724] Call Trace: [ 246.280837][T11724] [ 246.280844][T11724] __dump_stack+0x1d/0x30 [ 246.280868][T11724] dump_stack_lvl+0x95/0xd0 [ 246.281009][T11724] dump_stack+0x15/0x1b [ 246.281045][T11724] dump_header+0x81/0x240 [ 246.281136][T11724] oom_kill_process+0x295/0x350 [ 246.281231][T11724] out_of_memory+0x97b/0xb80 [ 246.281259][T11724] try_charge_memcg+0x610/0xa10 [ 246.281310][T11724] charge_memcg+0x51/0xc0 [ 246.281341][T11724] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 246.281440][T11724] __read_swap_cache_async+0x17b/0x2d0 [ 246.281479][T11724] swap_cluster_readahead+0x262/0x3c0 [ 246.281519][T11724] swapin_readahead+0xde/0x820 [ 246.281616][T11724] ? __rcu_read_unlock+0x4f/0x70 [ 246.281637][T11724] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 246.281657][T11724] ? __list_add_valid_or_report+0x38/0xe0 [ 246.281684][T11724] ? __rcu_read_unlock+0x4f/0x70 [ 246.281741][T11724] ? swap_cache_get_folio+0x277/0x280 [ 246.281773][T11724] do_swap_page+0x2b4/0x21e0 [ 246.281847][T11724] ? _raw_spin_unlock+0x26/0x50 [ 246.281868][T11724] ? __schedule+0x85f/0xcd0 [ 246.281891][T11724] ? __pfx_default_wake_function+0x10/0x10 [ 246.281942][T11724] handle_mm_fault+0x9d8/0x2c60 [ 246.281979][T11724] do_user_addr_fault+0x630/0x1080 [ 246.282065][T11724] exc_page_fault+0x62/0xa0 [ 246.282092][T11724] asm_exc_page_fault+0x26/0x30 [ 246.282116][T11724] RIP: 0033:0x7f05341759ec [ 246.282134][T11724] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 246.282155][T11724] RSP: 002b:00007ffd8a1b7df0 EFLAGS: 00010206 [ 246.282180][T11724] RAX: 0000000000000000 RBX: 00007f05344f5fa0 RCX: 0000000000000000 [ 246.282191][T11724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555581de7808 [ 246.282201][T11724] RBP: 00007f05344f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 246.282212][T11724] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003c25a [ 246.282256][T11724] R13: 00007f05344f6180 R14: ffffffffffffffff R15: 00007ffd8a1b7f00 [ 246.282273][T11724] [ 246.505483][T11724] memory: usage 291080kB, limit 307200kB, failcnt 280 [ 246.512445][T11724] memory+swap: usage 291480kB, limit 9007199254740988kB, failcnt 0 [ 246.520516][T11724] kmem: usage 290924kB, limit 9007199254740988kB, failcnt 0 [ 246.527810][T11724] Memory cgroup stats for /syz5: [ 246.544532][T11724] cache 0 [ 246.552498][T11724] rss 0 [ 246.555427][T11724] shmem 0 [ 246.558422][T11724] mapped_file 0 [ 246.561884][T11724] dirty 0 [ 246.564837][T11724] writeback 8192 [ 246.568411][T11724] workingset_refault_anon 15 [ 246.573010][T11724] workingset_refault_file 0 [ 246.577555][T11724] swap 409600 [ 246.580885][T11724] swapcached 12288 [ 246.584617][T11724] pgpgin 16771 [ 246.588053][T11724] pgpgout 16766 [ 246.591519][T11724] pgfault 18213 [ 246.594996][T11724] pgmajfault 6 [ 246.598434][T11724] inactive_anon 12288 [ 246.602447][T11724] active_anon 0 [ 246.605987][T11724] inactive_file 8192 [ 246.609908][T11724] active_file 0 [ 246.613379][T11724] unevictable 0 [ 246.616866][T11724] hierarchical_memory_limit 314572800 [ 246.622261][T11724] hierarchical_memsw_limit 9223372036854771712 [ 246.628451][T11724] total_cache 0 [ 246.631919][T11724] total_rss 0 [ 246.635249][T11724] total_shmem 0 [ 246.638728][T11724] total_mapped_file 0 [ 246.642714][T11724] total_dirty 0 [ 246.646313][T11724] total_writeback 8192 [ 246.650396][T11724] total_workingset_refault_anon 15 [ 246.655611][T11724] total_workingset_refault_file 0 [ 246.660649][T11724] total_swap 409600 [ 246.664524][T11724] total_swapcached 12288 [ 246.668814][T11724] total_pgpgin 16771 [ 246.672815][T11724] total_pgpgout 16766 [ 246.676807][T11724] total_pgfault 18213 [ 246.680800][T11724] total_pgmajfault 6 [ 246.684721][T11724] total_inactive_anon 12288 [ 246.689230][T11724] total_active_anon 0 [ 246.693240][T11724] total_inactive_file 8192 [ 246.697666][T11724] total_active_file 0 [ 246.701699][T11724] total_unevictable 0 [ 246.705759][T11724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2339,pid=11724,uid=0 [ 246.720640][T11724] Memory cgroup out of memory: Killed process 11724 (syz.5.2339) total-vm:98336kB, anon-rss:1172kB, file-rss:26664kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 247.041464][T11761] loop2: detected capacity change from 0 to 2048 [ 247.174896][ T9976] Alternate GPT is invalid, using primary GPT. [ 247.181393][ T9976] loop2: p2 p3 p7 [ 247.251317][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2349'. [ 247.453420][T11761] Alternate GPT is invalid, using primary GPT. [ 247.459982][T11761] loop2: p2 p3 p7 [ 247.562220][ T6314] lo speed is unknown, defaulting to 1000 [ 247.563266][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 247.568104][ T6314] syz2: Port: 1 Link DOWN [ 247.569373][T11775] netlink: 'syz.2.2350': attribute type 13 has an invalid length. [ 247.590206][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 247.602483][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 247.618728][T11728] Set syz1 is full, maxelem 65536 reached [ 247.624763][T11775] gretap0: refused to change device tx_queue_len [ 247.631944][T11775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.648073][ T6314] lo speed is unknown, defaulting to 1000 [ 247.653880][ T6314] syz2: Port: 1 Link ACTIVE [ 247.658617][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 247.759826][T11783] loop2: detected capacity change from 0 to 1024 [ 247.769676][T11786] loop5: detected capacity change from 0 to 512 [ 247.782901][T11783] EXT4-fs: inline encryption not supported [ 247.796881][T11786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2354: bg 0: block 248: padding at end of block bitmap is not set [ 247.827261][T11786] __quota_error: 582 callbacks suppressed [ 247.827280][T11786] Quota error (device loop5): write_blk: dquota write failed [ 247.840543][T11786] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 247.871161][T11786] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2354: Failed to acquire dquot type 1 [ 247.883122][T11786] EXT4-fs (loop5): 1 truncate cleaned up [ 247.884903][ T29] audit: type=1400 audit(1768338352.550:11532): avc: denied { mount } for pid=11782 comm="syz.2.2353" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 247.889912][T11786] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.948571][ T29] audit: type=1400 audit(1768338352.582:11533): avc: denied { add_name } for pid=11782 comm="syz.2.2353" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.969586][ T29] audit: type=1400 audit(1768338352.582:11534): avc: denied { create } for pid=11782 comm="syz.2.2353" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 247.990355][ T29] audit: type=1400 audit(1768338352.582:11535): avc: denied { read write } for pid=11782 comm="syz.2.2353" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.013301][ T29] audit: type=1400 audit(1768338352.582:11536): avc: denied { open } for pid=11782 comm="syz.2.2353" path="/446/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.036589][ T29] audit: type=1400 audit(1768338352.592:11537): avc: denied { create } for pid=11790 comm="syz.4.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.057472][ T29] audit: type=1400 audit(1768338352.603:11538): avc: denied { unmount } for pid=10900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.078374][ T29] audit: type=1400 audit(1768338352.666:11539): avc: denied { ioctl } for pid=11782 comm="syz.2.2353" path="/446/file1/file1" dev="loop2" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.172181][T11795] vhci_hcd vhci_hcd.0: invalid port number 9 [ 248.178358][T11795] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 248.181915][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2358'. [ 248.245435][T11791] lo speed is unknown, defaulting to 1000 [ 248.280989][T11814] loop1: detected capacity change from 0 to 1024 [ 248.295844][T11814] EXT4-fs: Ignoring removed orlov option [ 248.352692][T11793] lo speed is unknown, defaulting to 1000 [ 248.436297][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2366'. [ 248.474713][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2365'. [ 248.483809][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2365'. [ 248.507637][T11821] loop4: detected capacity change from 0 to 1024 [ 248.599950][T11830] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 248.615240][T11828] loop4: detected capacity change from 0 to 512 [ 248.625621][T11830] bond9 (unregistering): Released all slaves [ 248.653836][T11828] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.677777][T11811] lo speed is unknown, defaulting to 1000 [ 248.711149][T11813] lo speed is unknown, defaulting to 1000 [ 248.956409][T11854] loop5: detected capacity change from 0 to 512 [ 248.980908][T11854] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 249.032060][T11854] EXT4-fs (loop5): mount failed [ 249.064966][T11858] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 249.096760][T11858] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 249.145148][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2377'. [ 249.187374][T11863] loop1: detected capacity change from 0 to 512 [ 249.257620][T11848] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2374'. [ 249.284674][T11863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2378: bg 0: block 248: padding at end of block bitmap is not set [ 249.316115][T11863] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2378: Failed to acquire dquot type 1 [ 249.330949][T11863] EXT4-fs (loop1): 1 truncate cleaned up [ 249.340376][T11863] EXT4-fs mount: 105 callbacks suppressed [ 249.340394][T11863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.366190][T11863] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.375560][T11861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.432578][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.453327][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.515798][T11871] EXT4-fs: inline encryption not supported [ 249.542579][T11842] syz.0.2372 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 249.553963][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.0.2372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.554006][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.554017][T11842] Call Trace: [ 249.554024][T11842] [ 249.554032][T11842] __dump_stack+0x1d/0x30 [ 249.554057][T11842] dump_stack_lvl+0x95/0xd0 [ 249.554116][T11842] dump_stack+0x15/0x1b [ 249.554140][T11842] dump_header+0x81/0x240 [ 249.554165][T11842] oom_kill_process+0x295/0x350 [ 249.554187][T11842] out_of_memory+0x97b/0xb80 [ 249.554222][T11842] try_charge_memcg+0x610/0xa10 [ 249.554267][T11842] charge_memcg+0x51/0xc0 [ 249.554381][T11842] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 249.554431][T11842] __read_swap_cache_async+0x17b/0x2d0 [ 249.554510][T11842] swap_cluster_readahead+0x262/0x3c0 [ 249.554552][T11842] swapin_readahead+0xde/0x820 [ 249.554587][T11842] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 249.554729][T11842] ? __rcu_read_unlock+0x34/0x70 [ 249.554748][T11842] ? __rcu_read_unlock+0x4f/0x70 [ 249.554766][T11842] ? swap_cache_get_folio+0x277/0x280 [ 249.554801][T11842] do_swap_page+0x2b4/0x21e0 [ 249.554848][T11842] ? __pfx_default_wake_function+0x10/0x10 [ 249.554901][T11842] handle_mm_fault+0x9d8/0x2c60 [ 249.554949][T11842] do_user_addr_fault+0x630/0x1080 [ 249.555043][T11842] exc_page_fault+0x62/0xa0 [ 249.555078][T11842] asm_exc_page_fault+0x26/0x30 [ 249.555179][T11842] RIP: 0033:0x7f1b9ba2f6a6 [ 249.555195][T11842] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 249.555214][T11842] RSP: 002b:00007ffe46f664e0 EFLAGS: 00010246 [ 249.555271][T11842] RAX: 000000000003cf83 RBX: 00007f1b9bc85fa0 RCX: 000000000003cca8 [ 249.555283][T11842] RDX: 00000000000002db RSI: 0000000000000000 RDI: 00000000000003e8 [ 249.555295][T11842] RBP: 00007f1b9bc87da0 R08: 000000002b9f6f62 R09: 7fffffffffffffff [ 249.555309][T11842] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000003d04e [ 249.555324][T11842] R13: 00007f1b9bc86180 R14: ffffffffffffffff R15: 00007ffe46f66620 [ 249.555348][T11842] [ 249.555356][T11842] memory: usage 307200kB, limit 307200kB, failcnt 5510 [ 249.770782][T11842] memory+swap: usage 307876kB, limit 9007199254740988kB, failcnt 0 [ 249.778803][T11842] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 249.786098][T11842] Memory cgroup stats for /syz0: [ 249.821974][T11871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.909389][T11842] cache 0 [ 249.912623][T11842] rss 0 [ 249.915558][T11842] shmem 0 [ 249.918540][T11842] mapped_file 0 [ 249.922108][T11842] dirty 0 [ 249.925135][T11842] writeback 0 [ 249.928493][T11842] workingset_refault_anon 74 [ 249.933241][T11842] workingset_refault_file 2365 [ 249.938032][T11842] swap 688128 [ 249.941357][T11842] swapcached 4096 [ 249.945021][T11842] pgpgin 329478 [ 249.948538][T11842] pgpgout 329472 [ 249.952112][T11842] pgfault 328741 [ 249.955690][T11842] pgmajfault 42 [ 249.959280][T11842] inactive_anon 0 [ 249.962932][T11842] active_anon 4096 [ 249.966698][T11842] inactive_file 20480 [ 249.970802][T11842] active_file 0 [ 249.974282][T11842] unevictable 0 [ 249.977783][T11842] hierarchical_memory_limit 314572800 [ 249.983158][T11842] hierarchical_memsw_limit 9223372036854771712 [ 249.989390][T11842] total_cache 0 [ 249.992876][T11842] total_rss 0 [ 249.996292][T11842] total_shmem 0 [ 249.999776][T11842] total_mapped_file 0 [ 250.003899][T11842] total_dirty 0 [ 250.007458][T11842] total_writeback 0 [ 250.011332][T11842] total_workingset_refault_anon 74 [ 250.016586][T11842] total_workingset_refault_file 2365 [ 250.021993][T11842] total_swap 688128 [ 250.025863][T11842] total_swapcached 4096 [ 250.030049][T11842] total_pgpgin 329478 [ 250.034138][T11842] total_pgpgout 329472 [ 250.038214][T11842] total_pgfault 328741 [ 250.042328][T11842] total_pgmajfault 42 [ 250.046354][T11842] total_inactive_anon 0 [ 250.050654][T11842] total_active_anon 4096 [ 250.054957][T11842] total_inactive_file 20480 [ 250.059496][T11842] total_active_file 0 [ 250.063672][T11842] total_unevictable 0 [ 250.067828][T11842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2372,pid=11842,uid=0 [ 250.082644][T11842] Memory cgroup out of memory: Killed process 11842 (syz.0.2372) total-vm:96148kB, anon-rss:1264kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 250.108352][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.186964][T11885] set_capacity_and_notify: 2 callbacks suppressed [ 250.187051][T11885] loop5: detected capacity change from 0 to 512 [ 250.233710][T11885] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2382: EA inode hash validation failed [ 250.248887][T11885] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2382: corrupted inode contents [ 250.262756][T11885] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.2382: mark_inode_dirty error [ 250.274538][T11885] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2382: corrupted inode contents [ 250.340187][T11885] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2382: mark_inode_dirty error [ 250.397370][T11885] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2382: mark inode dirty (error -117) [ 250.428242][T11893] loop2: detected capacity change from 0 to 512 [ 250.437004][T11885] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 250.451908][T11885] EXT4-fs (loop5): 1 orphan inode deleted [ 250.458105][T11885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.471526][T11893] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.480327][T11893] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.502969][T11893] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2387: Allocating blocks 41-42 which overlap fs metadata [ 250.532833][T11893] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2387: Failed to acquire dquot type 1 [ 250.544549][T11897] __nla_validate_parse: 3 callbacks suppressed [ 250.544561][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 250.559802][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 250.571293][T11893] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 250.586252][T11893] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2387: corrupted inode contents [ 250.598761][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.608545][T11893] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2387: mark_inode_dirty error [ 250.629583][T11893] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2387: corrupted inode contents [ 250.650833][T11893] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2387: mark_inode_dirty error [ 250.662975][T11893] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2387: corrupted inode contents [ 250.677542][T11893] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 250.706600][T11893] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2387: corrupted inode contents [ 250.718761][T11893] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2387: mark_inode_dirty error [ 250.730228][T11893] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 250.739453][T11893] EXT4-fs (loop2): 1 truncate cleaned up [ 250.745702][T11893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.771461][T11907] loop1: detected capacity change from 0 to 512 [ 250.834314][T11907] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2392: bg 0: block 248: padding at end of block bitmap is not set [ 250.909326][T11907] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2392: Failed to acquire dquot type 1 [ 250.924618][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 250.962796][T11907] EXT4-fs (loop1): 1 truncate cleaned up [ 250.969839][T11907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.982743][T11907] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.049290][T11893] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 251.097892][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.428358][T11917] loop1: detected capacity change from 0 to 1024 [ 251.511140][T11910] netlink: 380 bytes leftover after parsing attributes in process `syz.4.2393'. [ 251.521163][T11917] EXT4-fs: inline encryption not supported [ 251.539633][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.568749][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2393'. [ 251.585626][T11917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.755033][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.886478][T11926] loop2: detected capacity change from 0 to 2048 [ 251.944734][T11926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.979407][T11935] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 251.999422][T11926] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.007375][T11935] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 252.033297][T11926] 9p: Bad value for 'wfdno' [ 252.087819][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.097772][T11942] loop5: detected capacity change from 0 to 2048 [ 252.236207][ T9976] Alternate GPT is invalid, using primary GPT. [ 252.242660][ T9976] loop5: p2 p3 p7 [ 252.250934][T11947] loop2: detected capacity change from 0 to 2048 [ 252.442932][T11955] loop0: detected capacity change from 0 to 512 [ 252.451197][T11947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.474655][T11947] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.493901][T11942] Alternate GPT is invalid, using primary GPT. [ 252.500564][T11942] loop5: p2 p3 p7 [ 252.506280][T11955] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.530293][T11961] loop4: detected capacity change from 0 to 1024 [ 252.537023][T11961] EXT4-fs: inline encryption not supported [ 252.555198][T11955] EXT4-fs (loop0): mount failed [ 252.581482][T11947] 9p: Bad value for 'wfdno' [ 252.589122][T11961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.608013][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 252.608027][ T29] audit: type=1326 audit(1768338357.506:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.644365][ T29] audit: type=1326 audit(1768338357.537:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.668021][ T29] audit: type=1326 audit(1768338357.537:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.691700][ T29] audit: type=1326 audit(1768338357.537:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.715367][ T29] audit: type=1326 audit(1768338357.537:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.738974][ T29] audit: type=1326 audit(1768338357.537:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.762654][ T29] audit: type=1326 audit(1768338357.537:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.786290][ T29] audit: type=1326 audit(1768338357.537:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.810000][ T29] audit: type=1326 audit(1768338357.537:11973): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.828052][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 252.834234][ T29] audit: type=1326 audit(1768338357.537:11974): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50b668f749 code=0x7ffc0000 [ 252.847268][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 252.890063][T11966] loop5: detected capacity change from 0 to 512 [ 252.896587][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2409'. [ 252.907038][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 252.923816][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.971217][T11968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.980422][T11966] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2408: bg 0: block 248: padding at end of block bitmap is not set [ 253.016895][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.036801][T11966] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2408: Failed to acquire dquot type 1 [ 253.048876][T11966] EXT4-fs (loop5): 1 truncate cleaned up [ 253.055020][T11966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.067694][T11966] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.082620][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 253.094235][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 253.095778][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 253.104813][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.146982][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.289950][T11982] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 253.301756][T11982] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 253.352239][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 253.486416][T11984] netlink: 'syz.5.2414': attribute type 16 has an invalid length. [ 253.494362][T11984] netlink: 'syz.5.2414': attribute type 3 has an invalid length. [ 253.502272][T11984] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.2414'. [ 253.726205][T11996] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2416: bg 0: block 248: padding at end of block bitmap is not set [ 253.811970][T11976] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2411'. [ 253.822029][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2414'. [ 253.847812][T11996] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2416: Failed to acquire dquot type 1 [ 253.877796][T11996] EXT4-fs (loop0): 1 truncate cleaned up [ 253.890892][T11996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.919624][T11996] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.976779][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.178102][T12020] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.185989][T12023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 254.215623][T12020] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 254.244111][T12004] lo speed is unknown, defaulting to 1000 [ 254.282648][ T3323] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 254.378777][T12033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.387587][T12033] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.451178][T12018] lo speed is unknown, defaulting to 1000 [ 254.463670][T12033] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2430: Allocating blocks 41-42 which overlap fs metadata [ 254.492231][T12033] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2430: Allocating blocks 41-42 which overlap fs metadata [ 254.516019][T12033] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2430: Failed to acquire dquot type 1 [ 254.538394][T12039] lo speed is unknown, defaulting to 1000 [ 254.548222][T12033] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 254.567589][T12033] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2430: corrupted inode contents [ 254.587125][T12033] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2430: mark_inode_dirty error [ 254.599081][T12033] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2430: corrupted inode contents [ 254.615276][T12033] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2430: mark_inode_dirty error [ 254.626748][T12033] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2430: corrupted inode contents [ 254.645308][T12033] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 254.654853][T12033] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2430: corrupted inode contents [ 254.667027][T12033] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2430: mark_inode_dirty error [ 254.678391][T12033] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 254.687699][T12033] EXT4-fs (loop0): 1 truncate cleaned up [ 254.693892][T12033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.706858][T12033] FAULT_INJECTION: forcing a failure. [ 254.706858][T12033] name failslab, interval 1, probability 0, space 0, times 0 [ 254.719509][T12033] CPU: 0 UID: 0 PID: 12033 Comm: syz.0.2430 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.719540][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.719555][T12033] Call Trace: [ 254.719562][T12033] [ 254.719570][T12033] __dump_stack+0x1d/0x30 [ 254.719602][T12033] dump_stack_lvl+0x95/0xd0 [ 254.719655][T12033] dump_stack+0x15/0x1b [ 254.719688][T12033] should_fail_ex+0x265/0x280 [ 254.719718][T12033] should_failslab+0x8c/0xb0 [ 254.719746][T12033] kmem_cache_alloc_noprof+0x69/0x4b0 [ 254.719837][T12033] ? getname_flags+0x80/0x3b0 [ 254.719925][T12033] ? fput+0x8f/0xc0 [ 254.719960][T12033] getname_flags+0x80/0x3b0 [ 254.719998][T12033] __x64_sys_mkdirat+0x40/0x60 [ 254.720025][T12033] x64_sys_call+0x30c/0x3000 [ 254.720117][T12033] do_syscall_64+0xca/0x2b0 [ 254.720165][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.720193][T12033] RIP: 0033:0x7f1b9ba2de97 [ 254.720247][T12033] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.720271][T12033] RSP: 002b:00007f1b9a496e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 254.720296][T12033] RAX: ffffffffffffffda RBX: 00007f1b9a496ef0 RCX: 00007f1b9ba2de97 [ 254.720336][T12033] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 254.720367][T12033] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 254.720384][T12033] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 254.720467][T12033] R13: 00007f1b9a496eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 254.720489][T12033] [ 254.918023][T12033] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 254.979727][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.362893][T12004] Set syz1 is full, maxelem 65536 reached [ 255.396657][T12054] lo speed is unknown, defaulting to 1000 [ 255.499139][T12064] set_capacity_and_notify: 6 callbacks suppressed [ 255.499153][T12064] loop4: detected capacity change from 0 to 1024 [ 255.523893][T12064] EXT4-fs: inline encryption not supported [ 255.542703][T12064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.611713][T12066] lo speed is unknown, defaulting to 1000 [ 255.620534][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.726130][T12072] lo speed is unknown, defaulting to 1000 [ 255.779565][T12082] loop1: detected capacity change from 0 to 512 [ 255.820485][T12082] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 255.841789][T12082] EXT4-fs (loop1): mount failed [ 255.906989][T12088] loop2: detected capacity change from 0 to 2048 [ 255.941145][ T3886] Alternate GPT is invalid, using primary GPT. [ 255.947659][ T3886] loop2: p2 p3 p7 [ 255.971929][T12088] Alternate GPT is invalid, using primary GPT. [ 255.978451][T12088] loop2: p2 p3 p7 [ 255.989223][T12092] __nla_validate_parse: 2 callbacks suppressed [ 255.989237][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 256.077957][T12092] loop1: detected capacity change from 0 to 1024 [ 256.145536][T12092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.164431][T12106] loop5: detected capacity change from 0 to 512 [ 256.179597][T12106] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2450: bg 0: block 248: padding at end of block bitmap is not set [ 256.197239][T12106] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2450: Failed to acquire dquot type 1 [ 256.210590][T12105] loop2: detected capacity change from 0 to 512 [ 256.217704][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.236959][T12105] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2449: EA inode hash validation failed [ 256.264457][T12105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2449: corrupted inode contents [ 256.276979][T12105] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2449: mark_inode_dirty error [ 256.289247][T12105] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2449: corrupted inode contents [ 256.295491][T12106] EXT4-fs (loop5): 1 truncate cleaned up [ 256.308818][T12105] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2449: mark_inode_dirty error [ 256.326266][T12105] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2449: mark inode dirty (error -117) [ 256.339101][T12105] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 256.348250][T12105] EXT4-fs (loop2): 1 orphan inode deleted [ 256.349326][T12106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.355084][T12105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.369118][T12114] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 256.395576][T12106] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.409672][T12114] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 256.421463][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 256.422176][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 256.444546][T12116] loop1: detected capacity change from 0 to 512 [ 256.453905][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.464929][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 256.483806][T12116] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.555932][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.593288][T12112] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.648505][T12128] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 256.678257][T12128] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 256.698962][T12123] lo speed is unknown, defaulting to 1000 [ 256.736866][T12133] loop5: detected capacity change from 0 to 512 [ 256.757871][T12133] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2458: EA inode hash validation failed [ 256.777997][T12133] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2458: corrupted inode contents [ 256.790493][T12133] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.2458: mark_inode_dirty error [ 256.802824][T12133] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2458: corrupted inode contents [ 256.826506][T12133] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2458: mark_inode_dirty error [ 256.838823][T12133] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2458: mark inode dirty (error -117) [ 256.844921][ T3316] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 256.888368][T12133] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 256.916923][T12130] lo speed is unknown, defaulting to 1000 [ 256.927073][T12137] loop1: detected capacity change from 0 to 512 [ 256.941544][T12133] EXT4-fs (loop5): 1 orphan inode deleted [ 256.947860][T12133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.968585][T12126] lo speed is unknown, defaulting to 1000 [ 256.980548][T12137] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.026330][T12137] EXT4-fs (loop1): mount failed [ 257.048169][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.154681][T12152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2464'. [ 257.192656][T12154] loop5: detected capacity change from 0 to 512 [ 257.237745][T12154] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2465: bg 0: block 248: padding at end of block bitmap is not set [ 257.252714][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2457'. [ 257.253031][T12154] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2465: Failed to acquire dquot type 1 [ 257.275457][T12154] EXT4-fs (loop5): 1 truncate cleaned up [ 257.281626][T12154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.303904][T12154] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.326063][T12165] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2468: EA inode hash validation failed [ 257.339323][T12165] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2468: corrupted inode contents [ 257.351658][T12165] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2468: mark_inode_dirty error [ 257.363253][T12165] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2468: corrupted inode contents [ 257.375440][T12165] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2468: mark_inode_dirty error [ 257.390609][T12165] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2468: mark inode dirty (error -117) [ 257.406198][T12165] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 257.415388][T12165] EXT4-fs (loop1): 1 orphan inode deleted [ 257.424076][T12165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.463472][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.488776][T12159] lo speed is unknown, defaulting to 1000 [ 257.502062][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.536972][T12168] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2470: EA inode hash validation failed [ 257.550355][T12170] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2469'. [ 257.574818][T12172] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2471: EA inode hash validation failed [ 257.587815][T12172] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2471: corrupted inode contents [ 257.587963][T12168] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2470: corrupted inode contents [ 257.612545][T12170] ip6gre1: entered promiscuous mode [ 257.617817][T12170] ip6gre1: entered allmulticast mode [ 257.624171][T12172] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2471: mark_inode_dirty error [ 257.639440][T12172] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2471: corrupted inode contents [ 257.651331][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 257.651346][ T29] audit: type=1400 audit(1768338362.787:12473): avc: denied { create } for pid=12169 comm="syz.5.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 257.661901][T12172] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2471: mark_inode_dirty error [ 257.693457][T12172] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2471: mark inode dirty (error -117) [ 257.715488][T12172] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 257.725512][T12172] EXT4-fs (loop1): 1 orphan inode deleted [ 257.731817][T12172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.744329][T12168] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.2470: mark_inode_dirty error [ 257.761958][ T29] audit: type=1326 audit(1768338362.839:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.5.2469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053429f749 code=0x0 [ 257.767751][T12175] EXT4-fs: Ignoring removed orlov option [ 257.787153][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.801167][T12168] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2470: corrupted inode contents [ 257.813106][T12168] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.2470: mark_inode_dirty error [ 257.826000][T12168] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.2470: mark inode dirty (error -117) [ 257.841680][T12175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.866758][ T29] audit: type=1400 audit(1768338363.028:12475): avc: denied { create } for pid=12169 comm="syz.5.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 257.889506][T12168] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 257.913225][T12168] EXT4-fs (loop4): 1 orphan inode deleted [ 257.919538][T12168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.941690][ T29] audit: type=1400 audit(1768338363.102:12476): avc: denied { create } for pid=12180 comm="syz.1.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.963573][ T29] audit: type=1326 audit(1768338363.102:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 257.987208][ T29] audit: type=1326 audit(1768338363.102:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 258.011109][ T29] audit: type=1326 audit(1768338363.102:12479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 258.034749][ T29] audit: type=1326 audit(1768338363.102:12480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 258.058432][ T29] audit: type=1326 audit(1768338363.102:12481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 258.082237][ T29] audit: type=1326 audit(1768338363.102:12482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12180 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 258.128858][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2477'. [ 258.152020][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.188928][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2480'. [ 258.218534][T12196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.233664][T12197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2476: bg 0: block 248: padding at end of block bitmap is not set [ 258.282337][T12202] Invalid ELF header magic: != ELF [ 258.291678][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.301278][T12197] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2476: Failed to acquire dquot type 1 [ 258.318021][T12197] EXT4-fs (loop4): 1 truncate cleaned up [ 258.336639][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.373681][T12197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.391834][T12159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2467'. [ 258.406835][T12197] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.477180][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2485'. [ 258.486261][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2485'. [ 258.523298][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.544417][T12210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2485'. [ 258.602631][T12218] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 258.637837][T12214] FAULT_INJECTION: forcing a failure. [ 258.637837][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 258.650558][T12214] CPU: 0 UID: 0 PID: 12214 Comm: syz.0.2487 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.650624][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.650637][T12214] Call Trace: [ 258.650643][T12214] [ 258.650651][T12214] __dump_stack+0x1d/0x30 [ 258.650689][T12214] dump_stack_lvl+0x95/0xd0 [ 258.650718][T12214] dump_stack+0x15/0x1b [ 258.650790][T12214] should_fail_ex+0x265/0x280 [ 258.650814][T12214] should_failslab+0x8c/0xb0 [ 258.650842][T12214] kmem_cache_alloc_noprof+0x69/0x4b0 [ 258.650871][T12214] ? create_new_namespaces+0x3c/0x400 [ 258.650898][T12214] create_new_namespaces+0x3c/0x400 [ 258.650924][T12214] unshare_nsproxy_namespaces+0xe8/0x120 [ 258.651048][T12214] ksys_unshare+0x3d0/0x6d0 [ 258.651070][T12214] ? ksys_write+0x192/0x1a0 [ 258.651100][T12214] __x64_sys_unshare+0x1f/0x30 [ 258.651137][T12214] x64_sys_call+0x2ae6/0x3000 [ 258.651190][T12214] do_syscall_64+0xca/0x2b0 [ 258.651271][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.651299][T12214] RIP: 0033:0x7f1b9ba2f749 [ 258.651318][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.651341][T12214] RSP: 002b:00007f1b9a497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 258.651398][T12214] RAX: ffffffffffffffda RBX: 00007f1b9bc85fa0 RCX: 00007f1b9ba2f749 [ 258.651411][T12214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 258.651475][T12214] RBP: 00007f1b9a497090 R08: 0000000000000000 R09: 0000000000000000 [ 258.651488][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.651500][T12214] R13: 00007f1b9bc86038 R14: 00007f1b9bc85fa0 R15: 00007ffe46f663a8 [ 258.651521][T12214] [ 258.907181][T12231] EXT4-fs: inline encryption not supported [ 258.947932][T12236] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.965770][T12231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.984784][T12236] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.005094][T12244] vhci_hcd vhci_hcd.0: invalid port number 9 [ 259.011183][T12244] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 259.048515][T10900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.077339][T12246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2500: bg 0: block 248: padding at end of block bitmap is not set [ 259.096375][T12246] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2500: Failed to acquire dquot type 1 [ 259.108465][T12246] EXT4-fs (loop0): 1 truncate cleaned up [ 259.108809][ T3316] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 259.128487][T12248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2498: bg 0: block 248: padding at end of block bitmap is not set [ 259.134914][T12246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.164678][T12246] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.184747][T12248] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2498: Failed to acquire dquot type 1 [ 259.198108][T12256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.198919][T12248] EXT4-fs (loop2): 1 truncate cleaned up [ 259.208437][T12255] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.213275][T12248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.237228][T12248] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.265144][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.282093][T12255] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.2499: Directory hole found for htree leaf block 0 [ 259.305101][T12255] EXT4-fs (loop5): Remounting filesystem read-only [ 259.324635][T10920] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.388473][T12264] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.419563][T12264] 9p: Bad value for 'wfdno' [ 259.616189][T12276] EXT4-fs: inline encryption not supported [ 259.983452][T12288] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2511: EA inode hash validation failed [ 260.054304][T12288] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2511: corrupted inode contents [ 260.067463][T12288] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.2511: mark_inode_dirty error [ 260.080269][T12288] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.2511: corrupted inode contents [ 260.093165][T12288] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.2511: mark_inode_dirty error [ 260.105940][T12288] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.2511: mark inode dirty (error -117) [ 260.119031][T12288] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 260.128503][T12288] EXT4-fs (loop0): 1 orphan inode deleted [ 260.237792][T12297] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.365356][T12307] set_capacity_and_notify: 15 callbacks suppressed [ 260.365370][T12307] loop4: detected capacity change from 0 to 512 [ 260.390598][T12305] loop2: detected capacity change from 0 to 1024 [ 260.404399][T12309] vhci_hcd vhci_hcd.0: invalid port number 9 [ 260.410467][T12309] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 260.427465][T12307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2518: bg 0: block 248: padding at end of block bitmap is not set [ 260.469483][T12300] lo speed is unknown, defaulting to 1000 [ 260.515916][T12307] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2518: Failed to acquire dquot type 1 [ 260.535449][T12307] EXT4-fs (loop4): 1 truncate cleaned up [ 260.543443][T12307] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.683889][T12329] loop4: detected capacity change from 0 to 512 [ 260.721926][T12329] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 260.736793][T12333] loop2: detected capacity change from 0 to 512 [ 260.755702][T12333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 260.765839][T12329] EXT4-fs (loop4): mount failed [ 260.780239][T12339] loop0: detected capacity change from 0 to 512 [ 260.797688][T12333] EXT4-fs (loop2): 1 truncate cleaned up [ 260.807440][T12339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2529: bg 0: block 248: padding at end of block bitmap is not set [ 260.829245][T12339] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2529: Failed to acquire dquot type 1 [ 260.841006][T12339] EXT4-fs (loop0): 1 truncate cleaned up [ 260.859446][T12339] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.872782][T12348] __nla_validate_parse: 8 callbacks suppressed [ 260.872799][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2533'. [ 260.914208][T12348] loop4: detected capacity change from 0 to 2048 [ 260.941922][ T9976] Alternate GPT is invalid, using primary GPT. [ 260.948342][ T9976] loop4: p2 p3 p7 [ 260.956992][T12352] netlink: 'syz.1.2536': attribute type 4 has an invalid length. [ 260.972323][T12355] loop2: detected capacity change from 0 to 512 [ 260.994006][T12348] Alternate GPT is invalid, using primary GPT. [ 261.000439][T12348] loop4: p2 p3 p7 [ 261.022254][T12355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2535: bg 0: block 248: padding at end of block bitmap is not set [ 261.055097][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2537'. [ 261.064350][T12355] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2535: Failed to acquire dquot type 1 [ 261.093408][T12355] EXT4-fs (loop2): 1 truncate cleaned up [ 261.099743][T12355] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.138142][T12364] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 261.149747][T12364] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 261.174907][T12367] loop4: detected capacity change from 0 to 512 [ 261.211829][T12367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2539: bg 0: block 248: padding at end of block bitmap is not set [ 261.229598][T12367] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2539: Failed to acquire dquot type 1 [ 261.241666][T12367] EXT4-fs (loop4): 1 truncate cleaned up [ 261.252505][T12367] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.263626][T12370] loop0: detected capacity change from 0 to 512 [ 261.271634][T12375] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.283702][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.289913][T12370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.321988][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 261.337095][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 261.349267][T12370] EXT4-fs (loop0): 1 truncate cleaned up [ 261.373053][ T3885] udevd[3885]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 261.405524][T12368] lo speed is unknown, defaulting to 1000 [ 261.471794][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 261.474601][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 261.490276][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 261.518094][T12390] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.554368][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 261.625629][T12399] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 261.643057][T12399] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 261.692515][T12406] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.743463][T12409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2556'. [ 261.792552][T12412] loop4: detected capacity change from 0 to 512 [ 261.862149][T12417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 261.870902][T12417] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.916859][T12421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2560'. [ 261.925965][T12412] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.956221][T12417] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2559: Allocating blocks 41-42 which overlap fs metadata [ 261.970978][T12417] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2559: Failed to acquire dquot type 1 [ 261.985183][T12417] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 262.001686][T12423] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.003896][T12417] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2559: corrupted inode contents [ 262.025627][T12417] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2559: mark_inode_dirty error [ 262.037808][T12429] EXT4-fs: Ignoring removed orlov option [ 262.046497][T12417] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2559: corrupted inode contents [ 262.053339][T12423] 9p: Bad value for 'wfdno' [ 262.065140][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2561'. [ 262.083503][T12417] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2559: mark_inode_dirty error [ 262.096198][T12417] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2559: corrupted inode contents [ 262.108970][T12417] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 262.118221][T12417] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2559: corrupted inode contents [ 262.131064][T12417] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2559: mark_inode_dirty error [ 262.149836][T12417] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 262.159331][T12417] EXT4-fs (loop1): 1 truncate cleaned up [ 262.188297][T12417] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 262.215738][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2564'. [ 262.334205][T12434] netlink: 380 bytes leftover after parsing attributes in process `syz.5.2563'. [ 262.343381][T12434] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2563'. [ 262.365087][T12445] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 262.405959][T12448] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2568: EA inode hash validation failed [ 262.419195][T12448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2568: corrupted inode contents [ 262.440866][T12448] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2568: mark_inode_dirty error [ 262.444678][T12451] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2569: bg 0: block 248: padding at end of block bitmap is not set [ 262.466703][T12451] __quota_error: 531 callbacks suppressed [ 262.466716][T12451] Quota error (device loop0): write_blk: dquota write failed [ 262.479971][T12451] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 262.485042][T12448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2568: corrupted inode contents [ 262.489931][T12451] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2569: Failed to acquire dquot type 1 [ 262.513768][T12448] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.2568: mark_inode_dirty error [ 262.526128][T12451] EXT4-fs (loop0): 1 truncate cleaned up [ 262.532395][T12451] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.549158][T12448] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.2568: mark inode dirty (error -117) [ 262.562063][T12448] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 262.571180][T12448] EXT4-fs (loop1): 1 orphan inode deleted [ 262.663845][T12461] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 262.674402][T12461] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.680255][ T29] audit: type=1326 audit(1768338368.078:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.713655][ T29] audit: type=1326 audit(1768338368.089:12995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.737441][ T29] audit: type=1326 audit(1768338368.089:12996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.761176][ T29] audit: type=1326 audit(1768338368.099:12997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.784957][ T29] audit: type=1326 audit(1768338368.099:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.808854][ T29] audit: type=1326 audit(1768338368.099:12999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.832643][ T29] audit: type=1326 audit(1768338368.099:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5699f749 code=0x7ffc0000 [ 262.872077][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'. [ 262.906024][T12473] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 262.942306][T12473] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 262.951618][T12478] vhci_hcd vhci_hcd.0: invalid port number 9 [ 262.957670][T12478] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 262.983833][T12479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 263.006119][T12479] EXT4-fs (loop1): 1 truncate cleaned up [ 263.056625][T12482] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2581: bg 0: block 248: padding at end of block bitmap is not set [ 263.089040][T12482] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2581: Failed to acquire dquot type 1 [ 263.133118][T12482] EXT4-fs (loop2): 1 truncate cleaned up [ 263.158172][T12482] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.181708][T12494] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2586: bg 0: block 248: padding at end of block bitmap is not set [ 263.207376][T12494] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2586: Failed to acquire dquot type 1 [ 263.219866][T12494] EXT4-fs (loop1): 1 truncate cleaned up [ 263.226178][T12494] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.493778][T12509] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 263.515932][T12509] EXT4-fs (loop1): mount failed [ 263.524352][T12516] vhci_hcd vhci_hcd.0: invalid port number 9 [ 263.530446][T12516] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 263.785771][ T9976] Alternate GPT is invalid, using primary GPT. [ 263.792176][ T9976] loop4: p2 p3 p7 [ 263.820657][T12519] Alternate GPT is invalid, using primary GPT. [ 263.827201][T12519] loop4: p2 p3 p7 [ 264.037067][T12547] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 264.122746][T12558] EXT4-fs: inline encryption not supported [ 264.130181][T12555] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2609: bg 0: block 248: padding at end of block bitmap is not set [ 264.207963][T12566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.216832][T12566] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.228691][T12555] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2609: Failed to acquire dquot type 1 [ 264.252055][T12555] EXT4-fs (loop0): 1 truncate cleaned up [ 264.259046][T12555] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.272076][T12566] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2611: Allocating blocks 41-42 which overlap fs metadata [ 264.288227][T12566] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2611: Allocating blocks 41-42 which overlap fs metadata [ 264.302816][T12566] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2611: Failed to acquire dquot type 1 [ 264.314897][T12566] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 264.339635][T12566] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2611: corrupted inode contents [ 264.357422][T12566] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2611: mark_inode_dirty error [ 264.373592][T12566] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2611: corrupted inode contents [ 264.392186][T12566] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2611: mark_inode_dirty error [ 264.408317][T12566] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2611: corrupted inode contents [ 264.466951][T12566] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 264.480341][T12566] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2611: corrupted inode contents [ 264.493430][T12566] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2611: mark_inode_dirty error [ 264.499222][T12580] EXT4-fs: inline encryption not supported [ 264.540411][T12566] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 264.550757][T12566] EXT4-fs (loop4): 1 truncate cleaned up [ 264.573720][T12566] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 264.693927][T12595] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 264.750491][T12604] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.808727][T12611] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 264.864533][T12621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.873371][T12621] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.908400][T12623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.917179][T12623] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.935602][T12621] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2630: Allocating blocks 41-42 which overlap fs metadata [ 264.961906][T12623] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2631: Allocating blocks 41-42 which overlap fs metadata [ 264.986797][T12623] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2631: Failed to acquire dquot type 1 [ 265.008042][T12621] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2630: Failed to acquire dquot type 1 [ 265.019773][T12623] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 265.035526][T12621] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 265.036357][T12623] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2631: corrupted inode contents [ 265.055513][T12621] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2630: corrupted inode contents [ 265.069206][T12623] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2631: mark_inode_dirty error [ 265.077064][T12621] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2630: mark_inode_dirty error [ 265.085953][T12623] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2631: corrupted inode contents [ 265.098831][T12621] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2630: corrupted inode contents [ 265.108960][T12623] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2631: mark_inode_dirty error [ 265.121823][T12621] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2630: mark_inode_dirty error [ 265.132064][T12623] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2631: corrupted inode contents [ 265.155077][T12623] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 265.175146][T12621] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2630: corrupted inode contents [ 265.187473][T12623] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2631: corrupted inode contents [ 265.199791][T12621] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 265.212148][T12623] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2631: mark_inode_dirty error [ 265.223567][T12621] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2630: corrupted inode contents [ 265.232823][T12640] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 265.236090][T12623] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 265.249173][T12640] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 265.255109][T12621] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2630: mark_inode_dirty error [ 265.274764][T12623] EXT4-fs (loop2): 1 truncate cleaned up [ 265.281477][T12621] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 265.300200][T12623] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.308575][T12621] EXT4-fs (loop4): 1 truncate cleaned up [ 265.336790][T12621] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.365297][T12646] set_capacity_and_notify: 18 callbacks suppressed [ 265.365311][T12646] loop2: detected capacity change from 0 to 512 [ 265.438470][T12646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2639: bg 0: block 248: padding at end of block bitmap is not set [ 265.462655][T12642] lo speed is unknown, defaulting to 1000 [ 265.469187][T12653] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.497134][T12646] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2639: Failed to acquire dquot type 1 [ 265.509330][T12646] EXT4-fs (loop2): 1 truncate cleaned up [ 265.515553][T12646] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.561850][T12660] netlink: 'syz.4.2645': attribute type 4 has an invalid length. [ 265.657668][T12667] loop1: detected capacity change from 0 to 512 [ 265.697164][T12667] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.722242][T12680] loop2: detected capacity change from 0 to 512 [ 265.728689][T12679] loop0: detected capacity change from 0 to 1024 [ 265.756372][T12679] EXT4-fs: Ignoring removed orlov option [ 265.770988][T12680] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.2651: Directory hole found for htree leaf block 0 [ 265.788779][T12680] EXT4-fs (loop2): Remounting filesystem read-only [ 265.801723][T10898] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.834015][T12687] loop4: detected capacity change from 0 to 1024 [ 265.843689][T12687] EXT4-fs: inline encryption not supported [ 265.988727][T12697] loop4: detected capacity change from 0 to 512 [ 266.029876][T12697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2655: bg 0: block 248: padding at end of block bitmap is not set [ 266.092092][T12697] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2655: Failed to acquire dquot type 1 [ 266.159790][T12697] EXT4-fs (loop4): 1 truncate cleaned up [ 266.176373][T12697] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.310907][T12691] syz.1.2654 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 266.322061][T12691] CPU: 1 UID: 0 PID: 12691 Comm: syz.1.2654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.322092][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.322109][T12691] Call Trace: [ 266.322116][T12691] [ 266.322126][T12691] __dump_stack+0x1d/0x30 [ 266.322156][T12691] dump_stack_lvl+0x95/0xd0 [ 266.322179][T12691] dump_stack+0x15/0x1b [ 266.322268][T12691] dump_header+0x81/0x240 [ 266.322295][T12691] oom_kill_process+0x295/0x350 [ 266.322324][T12691] out_of_memory+0x97b/0xb80 [ 266.322350][T12691] try_charge_memcg+0x610/0xa10 [ 266.322437][T12691] charge_memcg+0x51/0xc0 [ 266.322476][T12691] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 266.322555][T12691] __read_swap_cache_async+0x17b/0x2d0 [ 266.322604][T12691] swap_cluster_readahead+0x262/0x3c0 [ 266.322650][T12691] swapin_readahead+0xde/0x820 [ 266.322723][T12691] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 266.322758][T12691] ? lruvec_stat_mod_folio+0xd6/0x120 [ 266.322789][T12691] ? __rcu_read_unlock+0x4f/0x70 [ 266.322815][T12691] ? swap_cache_get_folio+0x277/0x280 [ 266.322932][T12691] do_swap_page+0x2b4/0x21e0 [ 266.323000][T12691] ? __pfx_default_wake_function+0x10/0x10 [ 266.323046][T12691] handle_mm_fault+0x9d8/0x2c60 [ 266.323098][T12691] do_user_addr_fault+0x630/0x1080 [ 266.323212][T12691] exc_page_fault+0x62/0xa0 [ 266.323247][T12691] asm_exc_page_fault+0x26/0x30 [ 266.323271][T12691] RIP: 0033:0x7f0a568759ec [ 266.323360][T12691] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 266.323384][T12691] RSP: 002b:00007ffe5d9c40f0 EFLAGS: 00010206 [ 266.323404][T12691] RAX: 0000000000000000 RBX: 00007f0a56bf5fa0 RCX: 0000000000000000 [ 266.323420][T12691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559053b808 [ 266.323435][T12691] RBP: 00007f0a56bf7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 266.323451][T12691] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004163a [ 266.323467][T12691] R13: 00007f0a56bf6180 R14: ffffffffffffffff R15: 00007ffe5d9c4200 [ 266.323515][T12691] [ 266.323524][T12691] memory: usage 307200kB, limit 307200kB, failcnt 2930 [ 266.539425][T12691] memory+swap: usage 280040kB, limit 9007199254740988kB, failcnt 0 [ 266.547429][T12691] kmem: usage 274484kB, limit 9007199254740988kB, failcnt 0 [ 266.554815][T12691] Memory cgroup stats for /syz1: [ 266.558039][T12691] cache 0 [ 266.566079][T12691] rss 0 [ 266.568940][T12691] shmem 0 [ 266.571952][T12691] mapped_file 0 [ 266.575492][T12691] dirty 0 [ 266.578474][T12691] writeback 8192 [ 266.582046][T12691] workingset_refault_anon 10 [ 266.586645][T12691] workingset_refault_file 21 [ 266.591307][T12691] swap 1204224 [ 266.594724][T12691] swapcached 12288 [ 266.598485][T12691] pgpgin 367209 [ 266.601959][T12691] pgpgout 367189 [ 266.605520][T12691] pgfault 373605 [ 266.609111][T12691] pgmajfault 8 [ 266.612687][T12691] inactive_anon 8192 [ 266.616673][T12691] active_anon 0 [ 266.620158][T12691] inactive_file 69632 [ 266.624147][T12691] active_file 0 [ 266.627657][T12691] unevictable 0 [ 266.631141][T12691] hierarchical_memory_limit 314572800 [ 266.636540][T12691] hierarchical_memsw_limit 9223372036854771712 [ 266.642701][T12691] total_cache 0 [ 266.646217][T12691] total_rss 0 [ 266.649517][T12691] total_shmem 0 [ 266.653038][T12691] total_mapped_file 0 [ 266.657094][T12691] total_dirty 0 [ 266.660576][T12691] total_writeback 8192 [ 266.664680][T12691] total_workingset_refault_anon 10 [ 266.669866][T12691] total_workingset_refault_file 21 [ 266.675029][T12691] total_swap 1204224 [ 266.678926][T12691] total_swapcached 12288 [ 266.683298][T12691] total_pgpgin 367209 [ 266.687302][T12691] total_pgpgout 367189 [ 266.691384][T12691] total_pgfault 373605 [ 266.695685][T12691] total_pgmajfault 8 [ 266.699626][T12691] total_inactive_anon 8192 [ 266.704078][T12691] total_active_anon 0 [ 266.708075][T12691] total_inactive_file 69632 [ 266.712622][T12691] total_active_file 0 [ 266.716610][T12691] total_unevictable 0 [ 266.720611][T12691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2654,pid=12691,uid=0 [ 266.735358][T12691] Memory cgroup out of memory: Killed process 12691 (syz.1.2654) total-vm:94100kB, anon-rss:1136kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 266.802991][T12716] netlink: 'syz.0.2659': attribute type 4 has an invalid length. [ 266.994000][T12731] loop5: detected capacity change from 0 to 512 [ 267.010814][T12731] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2665: EA inode hash validation failed [ 267.027219][T12731] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2665: corrupted inode contents [ 267.039883][T12731] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.2665: mark_inode_dirty error [ 267.051759][T12731] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2665: corrupted inode contents [ 267.065351][T12731] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2665: mark_inode_dirty error [ 267.077978][T12731] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2665: mark inode dirty (error -117) [ 267.101687][T12731] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 267.125835][T12731] EXT4-fs (loop5): 1 orphan inode deleted [ 267.146729][T12736] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 267.165855][T12739] __nla_validate_parse: 5 callbacks suppressed [ 267.165945][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2668'. [ 267.242651][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 267.242666][ T29] audit: type=1326 audit(1768338372.866:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.0.2668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9ba2f749 code=0x0 [ 267.298027][T12747] loop0: detected capacity change from 0 to 1024 [ 267.312174][T12747] EXT4-fs: Ignoring removed orlov option [ 267.338282][T12752] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 267.770550][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 267.776637][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.802757][T12764] loop5: detected capacity change from 0 to 1024 [ 267.835621][T12764] EXT4-fs: inline encryption not supported [ 268.051127][T12774] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.095328][ T29] audit: type=1400 audit(1768338373.769:13393): avc: denied { perfmon } for pid=12769 comm="syz.5.2678" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.116516][ T29] audit: type=1400 audit(1768338373.769:13394): avc: denied { bpf } for pid=12769 comm="syz.5.2678" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.150293][ T29] audit: type=1400 audit(1768338373.821:13395): avc: denied { open } for pid=12769 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.170256][ T29] audit: type=1400 audit(1768338373.821:13396): avc: denied { kernel } for pid=12769 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.190239][T12774] loop0: detected capacity change from 0 to 2048 [ 268.196243][ T29] audit: type=1400 audit(1768338373.863:13397): avc: denied { read write } for pid=12773 comm="syz.0.2679" name="loop0" dev="devtmpfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.220929][ T29] audit: type=1400 audit(1768338373.863:13398): avc: denied { open } for pid=12773 comm="syz.0.2679" path="/dev/loop0" dev="devtmpfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.245169][ T29] audit: type=1400 audit(1768338373.863:13399): avc: denied { ioctl } for pid=12773 comm="syz.0.2679" path="/dev/loop0" dev="devtmpfs" ino=2553 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.271120][ T29] audit: type=1400 audit(1768338373.905:13400): avc: denied { map_create } for pid=12769 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.290648][ T29] audit: type=1400 audit(1768338373.905:13401): avc: denied { map_read map_write } for pid=12769 comm="syz.5.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.348628][ T9976] Alternate GPT is invalid, using primary GPT. [ 268.355213][ T9976] loop0: p2 p3 p7 [ 268.388359][T12774] Alternate GPT is invalid, using primary GPT. [ 268.394799][T12774] loop0: p2 p3 p7 [ 268.505089][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 268.516664][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 268.528008][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 268.543918][T12791] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 268.629522][T12796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2686: bg 0: block 248: padding at end of block bitmap is not set [ 268.674109][T12796] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2686: Failed to acquire dquot type 1 [ 268.687563][T12796] EXT4-fs (loop0): 1 truncate cleaned up [ 268.705822][T12796] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.717152][T12802] EXT4-fs: inline encryption not supported [ 268.772625][T12804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2689'. [ 268.838000][T12806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2690: bg 0: block 248: padding at end of block bitmap is not set [ 268.866587][T12816] EXT4-fs: Ignoring removed orlov option [ 268.883519][T12806] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2690: Failed to acquire dquot type 1 [ 268.923098][T12806] EXT4-fs (loop5): 1 truncate cleaned up [ 268.943359][T12806] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.136219][T12836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2700: bg 0: block 248: padding at end of block bitmap is not set [ 269.167672][T12836] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2700: Failed to acquire dquot type 1 [ 269.296835][T12836] EXT4-fs (loop0): 1 truncate cleaned up [ 269.303576][T12836] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.471841][T12847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 269.480684][T12847] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.505706][T12847] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2703: Allocating blocks 41-42 which overlap fs metadata [ 269.520269][T12847] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2703: Allocating blocks 41-42 which overlap fs metadata [ 269.534813][T12847] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2703: Failed to acquire dquot type 1 [ 269.546494][T12847] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 269.563558][T12847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2703: corrupted inode contents [ 269.575850][T12847] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2703: mark_inode_dirty error [ 269.587681][T12847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2703: corrupted inode contents [ 269.600509][T12847] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2703: mark_inode_dirty error [ 269.612417][T12847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2703: corrupted inode contents [ 269.626738][T12847] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 269.650471][T12847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2703: corrupted inode contents [ 269.663000][T12853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.683101][T12847] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2703: mark_inode_dirty error [ 269.694570][T12847] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 269.710490][T12847] EXT4-fs (loop0): 1 truncate cleaned up [ 269.724042][T12847] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 269.747381][ T9976] Alternate GPT is invalid, using primary GPT. [ 269.753865][ T9976] loop4: p2 p3 p7 [ 269.783642][T12853] Alternate GPT is invalid, using primary GPT. [ 269.790047][T12853] loop4: p2 p3 p7 [ 269.799700][T12858] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2707: bg 0: block 248: padding at end of block bitmap is not set [ 269.821411][T12856] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.826180][T12858] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2707: Failed to acquire dquot type 1 [ 269.845729][T12856] 9p: Bad value for 'wfdno' [ 269.882637][T12858] EXT4-fs (loop2): 1 truncate cleaned up [ 269.911966][T12858] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.955087][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 269.962389][ T9976] udevd[9976]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 269.984529][ T3886] udevd[3886]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 270.054891][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2712'. [ 270.066189][T12878] EXT4-fs: inline encryption not supported [ 270.100930][T12875] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.125436][T12869] lo speed is unknown, defaulting to 1000 [ 270.146637][T12880] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.167197][T12875] 9p: Bad value for 'wfdno' [ 270.180659][T12880] 9p: Bad value for 'wfdno' [ 270.188357][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 270.230458][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 270.251756][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2715'. [ 270.281353][T12873] lo speed is unknown, defaulting to 1000 [ 270.307084][T12895] set_capacity_and_notify: 12 callbacks suppressed [ 270.307099][T12895] loop0: detected capacity change from 0 to 512 [ 270.348150][T12895] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2719: bg 0: block 248: padding at end of block bitmap is not set [ 270.373649][T12902] loop5: detected capacity change from 0 to 512 [ 270.389402][T12895] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2719: Failed to acquire dquot type 1 [ 270.409269][T12895] EXT4-fs (loop0): 1 truncate cleaned up [ 270.415456][T12902] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2720: bg 0: block 248: padding at end of block bitmap is not set [ 270.417116][T12895] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.461829][T12902] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2720: Failed to acquire dquot type 1 [ 270.493347][T12907] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.501936][T12902] EXT4-fs (loop5): 1 truncate cleaned up [ 270.513436][T12902] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.593855][T12919] vhci_hcd vhci_hcd.0: invalid port number 9 [ 270.599931][T12919] vhci_hcd vhci_hcd.0: default hub control req: 0512 v0000 i0009 l2 [ 270.707225][T12927] loop5: detected capacity change from 0 to 512 [ 270.720499][T12916] lo speed is unknown, defaulting to 1000 [ 270.743781][T12927] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2731: EA inode hash validation failed [ 270.766569][T12927] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2731: corrupted inode contents [ 270.779045][ T3008] ================================================================== [ 270.787154][ T3008] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 270.794477][ T3008] [ 270.796815][ T3008] write to 0xffff88811b188780 of 4 bytes by task 9976 on cpu 1: [ 270.798395][T12927] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.2731: mark_inode_dirty error [ 270.804457][ T3008] d_make_discardable+0x4f/0xa0 [ 270.820680][ T3008] simple_unlink+0x68/0x80 [ 270.825132][ T3008] shmem_unlink+0x12d/0x140 [ 270.827659][T12927] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2731: corrupted inode contents [ 270.829687][ T3008] vfs_unlink+0x28b/0x440 [ 270.845838][ T3008] do_unlinkat+0x1cd/0x4b0 [ 270.850281][ T3008] __x64_sys_unlink+0x2e/0x40 [ 270.854990][ T3008] x64_sys_call+0x2f48/0x3000 [ 270.855357][T12926] loop1: detected capacity change from 0 to 2048 [ 270.859711][ T3008] do_syscall_64+0xca/0x2b0 [ 270.870607][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.876550][ T3008] [ 270.878888][ T3008] read to 0xffff88811b188780 of 4 bytes by task 3008 on cpu 0: [ 270.883772][T12927] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2731: mark_inode_dirty error [ 270.886437][ T3008] lookup_fast+0xf0/0x320 [ 270.886467][ T3008] path_lookupat+0x15c/0x500 [ 270.907267][ T3008] filename_lookup+0x147/0x340 [ 270.912056][ T3008] do_readlinkat+0x7d/0x320 [ 270.916596][ T3008] __x64_sys_readlink+0x47/0x60 [ 270.921480][ T3008] x64_sys_call+0x2af1/0x3000 [ 270.926192][ T3008] do_syscall_64+0xca/0x2b0 [ 270.930745][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.933089][T12927] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2731: mark inode dirty (error -117) [ 270.936673][ T3008] [ 270.936681][ T3008] value changed: 0x08300080 -> 0x00004080 [ 270.957229][ T3008] [ 270.959575][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 270.961596][T12927] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 270.965747][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.984058][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.994130][ T3008] ================================================================== [ 271.012012][T12927] EXT4-fs (loop5): 1 orphan inode deleted [ 271.019093][T12926] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.062667][T12926] 9p: Bad value for 'wfdno' [ 271.091432][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2730'.