last executing test programs: 3.262621414s ago: executing program 3 (id=1384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x12c) semop(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x113002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080002", @ANYRES8=r1, @ANYRESOCT=r3, @ANYRESDEC, @ANYRESHEX=r2, @ANYRESHEX], 0xe8}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup2(r4, r7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r10}, 0x10) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0xf14313adf1c13017) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYBLOB="02000100969aa8102afa01f9f208025c9ddda7e643d484d7f24f7649d41135"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000300)={0x0, 0x43}, 0xfffffffffffffe9b) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r6, 0x10001, 0x20}, 0xc) r11 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x4, 0x8, 0x7, 0xa, 0x0, 0x8, 0x80040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x59c, 0x4, @perf_config_ext={0x7, 0x9}, 0x186b8, 0x8000, 0x3, 0x2, 0x80000000000, 0x2, 0x1, 0x0, 0x3ca2, 0x0, 0x95}, r11, 0x3, r8, 0x11) 3.206507027s ago: executing program 3 (id=1385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400080000000000000000008500000083000000bf090000000000002a995c0a00000000950000000000bf91000000000000b7020000000000008500000085000095000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000003) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) chmod(&(0x7f00000004c0)='./file1\x00', 0x186) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200}, 0x18) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000001018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000700850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x3}, 0x18) remap_file_pages(&(0x7f00007be000/0x1000)=nil, 0x1000, 0x0, 0x602, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.013213976s ago: executing program 3 (id=1389): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_clone(0x88288111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="13002abd03faedb569d44528c5751832a3e6e6d8700480000000000000000000bb4d7646cb8c000001675202bca19d3c697ad0ac2987c1a76dc3abc2726df9e7731d478edb9c580a128451a224758ca33bb1ade376be1b1f0da9396015d27d76dd08a0acefdf4ed27e8c47bc6d2cf62fab9a6bf957f89f61988735fa9371746c28c227b28f07fb4d65c137585084a4f1885feca9f0e26b479227c61487d228486bf4665022a9c5743f9810cb117ab5a80a7e7041456e61ede1f27aa8f3696d7d17ae55eab9cbcea0439c6f6888cc753878334ae64e105bce738fafa62008ecd2c7950ec5cc350023f69f291f3f1f4ee5c7e207fcbd816f2d1696ef"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x48404) syz_pidfd_open(r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbb00000000000190780a010102ac1414aa05009078e0000002470000000000000000110000ac14140064010100440c0001000000000000000000000001e0000001000000000000000000000000ac141400000000000000ffffffff00000000ac1e000100000000ac141400"/128], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.897271845s ago: executing program 0 (id=1400): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x20048004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 1.856271407s ago: executing program 3 (id=1401): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1.620567208s ago: executing program 0 (id=1403): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='hugepage_set_pmd\x00', r0, 0x0, 0x80000000}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x80900) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x101000, 0x9c) socket$inet_udp(0x2, 0x2, 0x0) gettid() capget(0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=tcp']) 1.619726927s ago: executing program 4 (id=1404): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x401}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000000, 0x2}, 0x50) creat(&(0x7f0000000780)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x4400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000001, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x10, 0xfc, 0x9, 0x0, 0x400, 0xfffe, 0x80, 0x0, 0x40000045, [0x7]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.595774869s ago: executing program 0 (id=1405): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xd76}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r10 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @multicast1, 0xf}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.362041099s ago: executing program 3 (id=1406): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x401}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000000, 0x2}, 0x50) creat(&(0x7f0000000780)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x4400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000001, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x10, 0xfc, 0x9, 0x0, 0x400, 0xfffe, 0x80, 0x0, 0x40000045, [0x7]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.283900453s ago: executing program 4 (id=1407): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000009739dc3625c97a87929191d3ecfa0000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153931c2cd61d56b67a39de054ec09823dbb5cb65f38d09e23d150e526c9f104668c779391815e8cffdf5d1c4d1e4fcac799428e4721e2d72b3a2bd2c67cdd2ca20c8f3634982b4cf8736a4e2cf9"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x8000000}, 0x10}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x490080, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x6) r7 = dup(r6) fcntl$setstatus(r7, 0x4, 0x42000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r8 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0xb, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r7, 0x1) open(0x0, 0x2782, 0x1c0) inotify_init1(0x0) getdents64(r8, &(0x7f0000000fc0)=""/224, 0xe0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r9, 0x3305) 1.151356499s ago: executing program 4 (id=1410): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0xf5}, {&(0x7f0000000680)="5ffc", 0x2}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000009739dc3625c97a87929191d3ecfa0000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153931c2cd61d56b67a39de054ec09823dbb5cb65f38d09e23d150e526c9f104668c779391815e8cffdf5d1c4d1e4fcac799428e4721e2d72b3a2bd2c67cdd2ca20c8f3634982b4cf8736a4e2cf9800fbc676ad34e0cfbe2eae4bc4a20c3a5e63c494c49420e554faf419a4651886944a7b066cfba971338d151e518c05882bb337b8abedb8a05f5a9457c02aa0857192f4dc6fa2c8bae49c74ac8d9ee53337e7aa1829053f2ea04912200d2dc0587944f19e1"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x8000000}, 0x10}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x490080, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x6) r6 = dup(0xffffffffffffffff) fcntl$setstatus(r6, 0x4, 0x42000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}}) chdir(&(0x7f0000000140)='./file0\x00') open(0x0, 0x2782, 0x1c0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000440)='.\x00', 0x20000000) close(r7) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r8, 0x3305) 1.081166492s ago: executing program 0 (id=1412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d", 0x89}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000001800)) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:power_device_t:s0\x00', 0x24, 0x0) 992.726805ms ago: executing program 1 (id=1414): perf_event_open(&(0x7f0000000040)={0x2, 0xc5, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7d82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x7, @perf_config_ext, 0x5040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2004c810) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0xa1ff, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 875.846551ms ago: executing program 0 (id=1417): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 874.665951ms ago: executing program 1 (id=1418): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x401}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000000, 0x2}, 0x50) creat(&(0x7f0000000780)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x4400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000001, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x10, 0xfc, 0x9, 0x0, 0x400, 0xfffe, 0x80, 0x0, 0x40000045, [0x7]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 794.035925ms ago: executing program 2 (id=1419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x80000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x200, 0x12, 0x9, 0x19, "3396c5d017663351d8c941198f5524b1453e49ba73d1693eb811c926b40edf811b3726926f31911e13c86bcf45639efcbfe15cf25e1cac3282016470f134a826", "4aa073aa61666e7674181e6df30a63f3b9452e207840356d4e05227e6fe8719c", [0x800, 0x8001]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11ed, &(0x7f0000000900)=ANY=[], 0x0) 792.013745ms ago: executing program 0 (id=1420): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000009739dc3625c97a87929191d3ecfa0000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000153931c2cd61d56b67a39de054ec09823dbb5cb65f38d09e23d150e526c9f104668c779391815e8cffdf5d1c4d1e4fcac799428e4721e2d72b3a2bd2c67cdd2ca20c8f3634982b4cf8736a4e2cf9"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x8000000}, 0x10}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x490080, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x6) r7 = dup(r6) fcntl$setstatus(r7, 0x4, 0x42000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") chdir(&(0x7f0000000140)='./file0\x00') r8 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0xb, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r7, 0x1) open(0x0, 0x2782, 0x1c0) inotify_init1(0x0) getdents64(r8, &(0x7f0000000fc0)=""/224, 0xe0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r9, 0x3305) 653.143701ms ago: executing program 3 (id=1421): syz_emit_ethernet(0x23, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x280003, 0x19) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101081) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0x20}, 0x18) socket$kcm(0x10, 0x2, 0x10) lstat(0x0, &(0x7f0000000540)) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 540.657696ms ago: executing program 1 (id=1422): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 292.553907ms ago: executing program 2 (id=1423): syz_emit_ethernet(0x11ed, &(0x7f0000000900)=ANY=[], 0x0) 247.903799ms ago: executing program 2 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280"], 0x118}}, 0x80) 219.14392ms ago: executing program 1 (id=1425): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2, 0x0, 0x800000000006}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 153.503073ms ago: executing program 4 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') 146.744643ms ago: executing program 2 (id=1427): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000023b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46024, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x8}, 0x4000, 0xfffffffffffffffb, 0x0, 0x0, 0x80000001, 0x0, 0x39, 0x0, 0x1fd}, 0x0, 0xb, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mq_getsetattr(r3, &(0x7f0000000040)={0x9, 0xffff, 0x4, 0x8}, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 124.298404ms ago: executing program 4 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec799", 0xa0}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000001800)) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:power_device_t:s0\x00', 0x24, 0x0) 82.104426ms ago: executing program 2 (id=1429): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0xf, 0x0, 0x81, 0x4, 0x405}) r0 = getpid() capset(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0x6, 0x0, 0x1000, 0x0, 0x60, 0x1c15}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000008000000060000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="030000000100000000000000090000000000670194ddbc180af037278d2969034600000000000000aa695d7221e57b7f06742091d8abcc0dbddcdd2395079d8d2636a49c1c628b2de17f977b7e3e11c46ddff8f7e7cd12ba2818908b47bd825b0c70a6c6a20086bc16068f9b9e107effe6e62a079672432436b5b825"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000800000040000000000000", @ANYRES32], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$SG_IO(r7, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="020027bd700002dcdf250100000000000000024100000073b75dbd5f5d9df135681d55095b2b1000136574683a6970766c616e300002e5d011114c77d50cede0362c699484c6bba8d2f448036d7b31d508035bf4dd9ce868a5871521b5044426bf70e269785b181236611192a14e28"], 0x2c}, 0x1, 0x0, 0x0, 0x8040041}, 0x840) 81.645536ms ago: executing program 1 (id=1430): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 52.923718ms ago: executing program 4 (id=1431): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0xfffffffffffffcab, 0x3f) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b5"], 0xc8) sendfile(r4, r2, 0x0, 0x10000a007) 35.417758ms ago: executing program 2 (id=1432): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000300)={0x20, 0x14, 0x4, "b885383f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x800, 0x3, 0x3, 0x732, 0x16, "b0f725dac19d9815"}) 0s ago: executing program 1 (id=1433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x40, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x43) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x4000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0xf5d, 0x1d45bd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x1, 0x0, 0x1}, {0x2}, 0xfe, 0xff}], 0x20) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x34}}], [{@euid_gt={'euid>', r7}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@dont_hash}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}]}}) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x1, 0xffffffffb453b2a9, 0x80000000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) kernel console output (not intermixed with test programs): p is not set [ 121.464618][ T5089] EXT4-fs (loop4): Remounting filesystem read-only [ 121.547187][ T6711] loop4: detected capacity change from 0 to 128 [ 121.550792][ T6709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.570804][ T6711] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.595439][ T6711] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.990: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 121.615822][ T6711] EXT4-fs (loop4): Remounting filesystem read-only [ 121.650398][ T6718] loop4: detected capacity change from 0 to 512 [ 121.659860][ T6718] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.672955][ T6718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.683103][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 121.689332][ T29] audit: type=1400 audit(1764797067.266:13829): avc: denied { read } for pid=6715 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.700269][ T6718] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.995: invalid indirect mapped block 4294967295 (level 0) [ 121.730116][ T29] audit: type=1400 audit(1764797067.306:13830): avc: denied { read write } for pid=6715 comm="syz.2.994" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.749781][ T6718] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.995: invalid indirect mapped block 4294967295 (level 1) [ 121.754246][ T29] audit: type=1400 audit(1764797067.306:13831): avc: denied { ioctl open } for pid=6715 comm="syz.2.994" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.768423][ T6718] EXT4-fs (loop4): 1 orphan inode deleted [ 121.792388][ T29] audit: type=1400 audit(1764797067.306:13832): avc: denied { create } for pid=6715 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.798043][ T6718] EXT4-fs (loop4): 1 truncate cleaned up [ 121.840523][ T29] audit: type=1326 audit(1764797067.426:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 121.864567][ T29] audit: type=1326 audit(1764797067.426:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 121.888010][ T29] audit: type=1326 audit(1764797067.426:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 121.911470][ T29] audit: type=1326 audit(1764797067.426:13836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 121.935069][ T29] audit: type=1326 audit(1764797067.426:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 121.958444][ T29] audit: type=1326 audit(1764797067.426:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906632f749 code=0x7ffc0000 [ 122.067739][ T6728] Process accounting resumed [ 122.079480][ T6732] loop0: detected capacity change from 0 to 128 [ 122.183677][ T6732] bio_check_eod: 91 callbacks suppressed [ 122.183690][ T6732] syz.0.998: attempt to access beyond end of device [ 122.183690][ T6732] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 122.229401][ T6743] loop4: detected capacity change from 0 to 1024 [ 122.279120][ T6732] syz.0.998: attempt to access beyond end of device [ 122.279120][ T6732] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 122.297210][ T6732] syz.0.998: attempt to access beyond end of device [ 122.297210][ T6732] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 122.310864][ T6732] syz.0.998: attempt to access beyond end of device [ 122.310864][ T6732] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 122.322461][ T6743] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.1000: path /198/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 122.324265][ T6732] syz.0.998: attempt to access beyond end of device [ 122.324265][ T6732] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 122.359290][ T6732] syz.0.998: attempt to access beyond end of device [ 122.359290][ T6732] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 122.373935][ T6732] syz.0.998: attempt to access beyond end of device [ 122.373935][ T6732] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 122.387622][ T6732] syz.0.998: attempt to access beyond end of device [ 122.387622][ T6732] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 122.408369][ T6732] syz.0.998: attempt to access beyond end of device [ 122.408369][ T6732] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 122.421881][ T6732] syz.0.998: attempt to access beyond end of device [ 122.421881][ T6732] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 122.456283][ T6752] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1001'. [ 122.529831][ T187] Bluetooth: hci1: Frame reassembly failed (-90) [ 122.609559][ T3725] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.777448][ T6768] loop3: detected capacity change from 0 to 1024 [ 122.843617][ T6768] EXT4-fs error (device loop3): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.3.1009: path /221/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 123.014088][ T6778] Process accounting resumed [ 123.069393][ T6782] loop4: detected capacity change from 0 to 128 [ 123.140785][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 123.476379][ T6796] loop2: detected capacity change from 0 to 2048 [ 123.508338][ T6796] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.520204][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 123.529110][ T6799] netlink: 'syz.3.1019': attribute type 30 has an invalid length. [ 123.546894][ T5091] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.566748][ T5091] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.587558][ T6800] loop1: detected capacity change from 0 to 2048 [ 123.603457][ T6799] geneve2: entered promiscuous mode [ 123.608772][ T6799] geneve2: entered allmulticast mode [ 123.621148][ T5091] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.630072][ T5091] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.634592][ T6796] loop2: detected capacity change from 0 to 512 [ 123.645993][ T6800] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.655583][ T6806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6806 comm=syz.3.1019 [ 123.669236][ T6796] EXT4-fs: Ignoring removed oldalloc option [ 123.945843][ T5091] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 345: padding at end of block bitmap is not set [ 123.966494][ T6815] x_tables: duplicate underflow at hook 2 [ 123.976370][ T5091] EXT4-fs (loop1): Remounting filesystem read-only [ 124.059137][ T6819] process 'syz.1.1024' launched '/dev/fd/3' with NULL argv: empty string added [ 124.253573][ T6826] loop2: detected capacity change from 0 to 512 [ 124.261294][ T6826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.272918][ T6826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 124.288069][ T6826] EXT4-fs (loop2): 1 truncate cleaned up [ 124.296839][ T6826] Illegal XDP return value 4014854200 on prog (id 691) dev syz_tun, expect packet loss! [ 124.403106][ T6832] netlink: 'syz.2.1029': attribute type 13 has an invalid length. [ 124.415313][ T6832] syz_tun: entered allmulticast mode [ 124.421598][ T6831] syz_tun: left allmulticast mode [ 124.444984][ T6834] loop2: detected capacity change from 0 to 512 [ 124.456541][ T6834] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1030: EA inode hash validation failed [ 124.469711][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.1030: corrupted inode contents [ 124.481984][ T6834] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #15: comm syz.2.1030: mark_inode_dirty error [ 124.493688][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.1030: corrupted inode contents [ 124.505981][ T6834] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1030: mark_inode_dirty error [ 124.518090][ T6834] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1030: mark inode dirty (error -117) [ 124.530945][ T6834] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 124.540043][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.540174][ T6834] EXT4-fs (loop2): 1 orphan inode deleted [ 124.558547][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 124.575332][ T6838] loop0: detected capacity change from 0 to 1024 [ 124.582742][ T6838] EXT4-fs: Ignoring removed bh option [ 124.588550][ T6838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.597481][ T6838] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.608987][ T6838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 124.618439][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 2: comm syz.0.1031: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.632640][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.1031: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.646967][ T6838] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1031: Failed to acquire dquot type 0 [ 124.663915][ T6838] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 124.673855][ T6838] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1031: mark_inode_dirty error [ 124.685712][ T6838] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 124.696421][ T6838] EXT4-fs (loop0): 1 orphan inode deleted [ 124.706368][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1031: lblock 0 mapped to illegal pblock 16 (length 1) [ 124.707989][ T6840] Process accounting resumed [ 124.726916][ T5077] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.739306][ T6838] xt_hashlimit: max too large, truncated to 1048576 [ 124.751484][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1031: lblock 0 mapped to illegal pblock 16 (length 1) [ 124.756447][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 124.774829][ T6845] loop2: detected capacity change from 0 to 164 [ 124.774862][ T5077] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 124.823598][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.843443][ T6845] iso9660: Unknown parameter 'check' [ 124.861429][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 124.880064][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 124.905643][ T6848] FAULT_INJECTION: forcing a failure. [ 124.905643][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 124.918414][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.918478][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.918490][ T6848] Call Trace: [ 124.918495][ T6848] [ 124.918545][ T6848] __dump_stack+0x1d/0x30 [ 124.918568][ T6848] dump_stack_lvl+0xe8/0x140 [ 124.918590][ T6848] dump_stack+0x15/0x1b [ 124.918654][ T6848] should_fail_ex+0x265/0x280 [ 124.918678][ T6848] should_failslab+0x8c/0xb0 [ 124.918701][ T6848] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 124.918725][ T6848] ? __get_vm_area_node+0x106/0x1d0 [ 124.918826][ T6848] __get_vm_area_node+0x106/0x1d0 [ 124.918883][ T6848] __vmalloc_node_range_noprof+0x28c/0xed0 [ 124.918912][ T6848] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.918947][ T6848] ? cred_has_capability+0x210/0x280 [ 124.918986][ T6848] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.919013][ T6848] __vmalloc_noprof+0x83/0xc0 [ 124.919052][ T6848] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 124.919076][ T6848] bpf_prog_alloc_no_stats+0x47/0x390 [ 124.919101][ T6848] ? bpf_prog_alloc+0x2a/0x150 [ 124.919176][ T6848] bpf_prog_alloc+0x3c/0x150 [ 124.919198][ T6848] bpf_prog_load+0x506/0x1100 [ 124.919228][ T6848] ? security_bpf+0x2b/0x90 [ 124.919310][ T6848] __sys_bpf+0x469/0x7c0 [ 124.919343][ T6848] __x64_sys_bpf+0x41/0x50 [ 124.919470][ T6848] x64_sys_call+0x28e1/0x3000 [ 124.919566][ T6848] do_syscall_64+0xd8/0x2a0 [ 124.919589][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.919609][ T6848] RIP: 0033:0x7f906632f749 [ 124.919633][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.919651][ T6848] RSP: 002b:00007f9064d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.919672][ T6848] RAX: ffffffffffffffda RBX: 00007f9066585fa0 RCX: 00007f906632f749 [ 124.919685][ T6848] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 124.919698][ T6848] RBP: 00007f9064d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.919710][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.919722][ T6848] R13: 00007f9066586038 R14: 00007f9066585fa0 R15: 00007ffdd1e4d6a8 [ 124.919739][ T6848] [ 125.138345][ T6848] syz.2.1037: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 125.151484][ T6849] Process accounting resumed [ 125.154392][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.154436][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.154447][ T6848] Call Trace: [ 125.154455][ T6848] [ 125.154470][ T6848] __dump_stack+0x1d/0x30 [ 125.154537][ T6848] dump_stack_lvl+0xe8/0x140 [ 125.154557][ T6848] dump_stack+0x15/0x1b [ 125.154575][ T6848] warn_alloc+0x12b/0x1a0 [ 125.154657][ T6848] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 125.154691][ T6848] ? cred_has_capability+0x210/0x280 [ 125.154722][ T6848] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 125.154791][ T6848] __vmalloc_noprof+0x83/0xc0 [ 125.154823][ T6848] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 125.154850][ T6848] bpf_prog_alloc_no_stats+0x47/0x390 [ 125.154948][ T6848] ? bpf_prog_alloc+0x2a/0x150 [ 125.154973][ T6848] bpf_prog_alloc+0x3c/0x150 [ 125.155037][ T6848] bpf_prog_load+0x506/0x1100 [ 125.155071][ T6848] ? security_bpf+0x2b/0x90 [ 125.155141][ T6848] __sys_bpf+0x469/0x7c0 [ 125.155174][ T6848] __x64_sys_bpf+0x41/0x50 [ 125.155197][ T6848] x64_sys_call+0x28e1/0x3000 [ 125.155271][ T6848] do_syscall_64+0xd8/0x2a0 [ 125.155293][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.155314][ T6848] RIP: 0033:0x7f906632f749 [ 125.155329][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.155424][ T6848] RSP: 002b:00007f9064d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.155443][ T6848] RAX: ffffffffffffffda RBX: 00007f9066585fa0 RCX: 00007f906632f749 [ 125.155524][ T6848] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 125.155537][ T6848] RBP: 00007f9064d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.155549][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.155562][ T6848] R13: 00007f9066586038 R14: 00007f9066585fa0 R15: 00007ffdd1e4d6a8 [ 125.155654][ T6848] [ 125.155661][ T6848] Mem-Info: [ 125.347486][ T6855] loop0: detected capacity change from 0 to 1024 [ 125.349586][ T6848] active_anon:7476 inactive_anon:25 isolated_anon:0 [ 125.349586][ T6848] active_file:19811 inactive_file:7007 isolated_file:0 [ 125.349586][ T6848] unevictable:0 dirty:474 writeback:0 [ 125.349586][ T6848] slab_reclaimable:3299 slab_unreclaimable:148018 [ 125.349586][ T6848] mapped:29501 shmem:305 pagetables:1135 [ 125.349586][ T6848] sec_pagetables:0 bounce:0 [ 125.349586][ T6848] kernel_misc_reclaimable:0 [ 125.349586][ T6848] free:1650102 free_pcp:16922 free_cma:0 [ 125.365187][ T6855] EXT4-fs: Ignoring removed bh option [ 125.407122][ T6848] Node 0 active_anon:30484kB inactive_anon:100kB active_file:79244kB inactive_file:28028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118004kB dirty:1896kB writeback:0kB shmem:1220kB kernel_stack:4592kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.439991][ T6848] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.440125][ T6848] lowmem_reserve[]: 0 2880 7859 7859 [ 125.440188][ T6848] Node 0 DMA32 free:2946364kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949892kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 125.440242][ T6848] lowmem_reserve[]: 0 0 4978 4978 [ 125.440290][ T6848] Node 0 Normal free:3637788kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30484kB inactive_anon:100kB active_file:79244kB inactive_file:28028kB unevictable:0kB writepending:1896kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63552kB local_pcp:31496kB free_cma:0kB [ 125.440351][ T6848] lowmem_reserve[]: 0 0 0 0 [ 125.440472][ T6848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.440632][ T6848] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 1*32kB (M) 5*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2946364kB [ 125.440831][ T6848] Node 0 Normal: 1249*4kB (UM) 739*8kB (UME) 482*16kB (UM) 329*32kB (UME) 235*64kB (UM) 274*128kB (UME) 138*256kB (UME) 107*512kB (UME) 81*1024kB (UME) 9*2048kB (UME) 822*4096kB (UME) = 3637660kB [ 125.441074][ T6848] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 125.441109][ T6848] 27133 total pagecache pages [ 125.441156][ T6848] 35 pages in swap cache [ 125.441163][ T6848] Free swap = 124656kB [ 125.441170][ T6848] Total swap = 124996kB [ 125.441241][ T6848] 2097051 pages RAM [ 125.441248][ T6848] 0 pages HighMem/MovableOnly [ 125.441255][ T6848] 81178 pages reserved [ 125.501034][ T6855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.501182][ T6855] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.643596][ T6861] loop2: detected capacity change from 0 to 128 [ 125.658363][ T6861] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.676762][ T6861] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1039: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 125.677092][ T6861] EXT4-fs (loop2): Remounting filesystem read-only [ 125.699903][ T6855] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 125.807592][ T6855] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 2: comm syz.0.1036: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.838448][ T6855] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.1036: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.841173][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 125.852834][ T6855] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1036: Failed to acquire dquot type 0 [ 125.861618][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 125.882666][ T6855] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 125.892470][ T6855] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1036: mark_inode_dirty error [ 125.903957][ T6855] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 125.914542][ T6855] EXT4-fs (loop0): 1 orphan inode deleted [ 125.928323][ T6855] EXT4-fs mount: 38 callbacks suppressed [ 125.928337][ T6855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.946586][ T5077] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.967550][ T5077] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 126.004128][ T6852] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1036: lblock 0 mapped to illegal pblock 16 (length 1) [ 126.021068][ T6852] xt_hashlimit: max too large, truncated to 1048576 [ 126.028373][ T6852] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1036: lblock 0 mapped to illegal pblock 16 (length 1) [ 126.042973][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 126.049253][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.087978][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.093602][ T6877] Process accounting resumed [ 126.099370][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.114631][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 126.124148][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 126.171660][ T6887] loop0: detected capacity change from 0 to 1024 [ 126.178409][ T6887] EXT4-fs: Ignoring removed bh option [ 126.184445][ T6887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.194307][ T6887] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.205548][ T6887] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 126.214841][ T6887] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 2: comm syz.0.1047: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.229322][ T6887] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.1047: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.243714][ T6887] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1047: Failed to acquire dquot type 0 [ 126.255180][ T6887] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 126.264809][ T6887] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1047: mark_inode_dirty error [ 126.276289][ T6887] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 126.286696][ T6887] EXT4-fs (loop0): 1 orphan inode deleted [ 126.292724][ T6887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.305206][ T5065] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.319730][ T5065] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 126.320162][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.340176][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.359370][ T6892] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1047: lblock 0 mapped to illegal pblock 16 (length 1) [ 126.374414][ T6892] xt_hashlimit: max too large, truncated to 1048576 [ 126.381645][ T6892] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1047: lblock 0 mapped to illegal pblock 16 (length 1) [ 126.409224][ T6891] loop1: detected capacity change from 0 to 2048 [ 126.420942][ T6891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.433088][ T6891] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.592815][ T6897] FAULT_INJECTION: forcing a failure. [ 126.592815][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.605937][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.4.1049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.605973][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.605980][ T6897] Call Trace: [ 126.605985][ T6897] [ 126.605990][ T6897] __dump_stack+0x1d/0x30 [ 126.606005][ T6897] dump_stack_lvl+0xe8/0x140 [ 126.606016][ T6897] dump_stack+0x15/0x1b [ 126.606025][ T6897] should_fail_ex+0x265/0x280 [ 126.606038][ T6897] should_fail+0xb/0x20 [ 126.606096][ T6897] should_fail_usercopy+0x1a/0x20 [ 126.606109][ T6897] _copy_to_user+0x20/0xa0 [ 126.606124][ T6897] simple_read_from_buffer+0xb5/0x130 [ 126.606138][ T6897] proc_fail_nth_read+0x10e/0x150 [ 126.606252][ T6897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.606268][ T6897] vfs_read+0x1a8/0x770 [ 126.606296][ T6897] ? __sys_bpf+0x650/0x7c0 [ 126.606353][ T6897] ksys_read+0xda/0x1a0 [ 126.606379][ T6897] __x64_sys_read+0x40/0x50 [ 126.606391][ T6897] x64_sys_call+0x2889/0x3000 [ 126.606404][ T6897] do_syscall_64+0xd8/0x2a0 [ 126.606417][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.606428][ T6897] RIP: 0033:0x7fca9894e15c [ 126.606505][ T6897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.606515][ T6897] RSP: 002b:00007fca973af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.606601][ T6897] RAX: ffffffffffffffda RBX: 00007fca98ba5fa0 RCX: 00007fca9894e15c [ 126.606608][ T6897] RDX: 000000000000000f RSI: 00007fca973af0a0 RDI: 0000000000000003 [ 126.606615][ T6897] RBP: 00007fca973af090 R08: 0000000000000000 R09: 0000000000000000 [ 126.606622][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.606628][ T6897] R13: 00007fca98ba6038 R14: 00007fca98ba5fa0 R15: 00007ffdad299c78 [ 126.606639][ T6897] [ 126.854920][ T6900] capability: warning: `syz.4.1050' uses deprecated v2 capabilities in a way that may be insecure [ 126.870252][ T29] kauditd_printk_skb: 1122 callbacks suppressed [ 126.870315][ T29] audit: type=1400 audit(1764797072.456:14952): avc: denied { create } for pid=6898 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.928610][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.931408][ T6904] loop3: detected capacity change from 0 to 128 [ 126.942662][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.962499][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 126.962606][ T6904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.984313][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 126.984728][ T6904] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.028960][ T6904] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1051: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 127.059686][ T6904] EXT4-fs (loop3): Remounting filesystem read-only [ 127.077267][ T3330] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.097629][ T29] audit: type=1400 audit(1764797072.676:14953): avc: denied { create } for pid=6910 comm="syz.0.1053" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.119990][ T5077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 345: padding at end of block bitmap is not set [ 127.119995][ T29] audit: type=1400 audit(1764797072.706:14954): avc: denied { map } for pid=6910 comm="syz.0.1053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.138022][ T6913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.159114][ T29] audit: type=1400 audit(1764797072.706:14955): avc: denied { read write } for pid=6910 comm="syz.0.1053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.191590][ T29] audit: type=1400 audit(1764797072.726:14956): avc: denied { create } for pid=6912 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.198266][ T5077] EXT4-fs (loop1): Remounting filesystem read-only [ 127.211085][ T29] audit: type=1400 audit(1764797072.726:14957): avc: denied { read } for pid=6912 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.239151][ T29] audit: type=1400 audit(1764797072.816:14958): avc: denied { create } for pid=6910 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.272714][ T29] audit: type=1400 audit(1764797072.816:14959): avc: denied { getopt } for pid=6910 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.292409][ T29] audit: type=1400 audit(1764797072.816:14960): avc: denied { create } for pid=6910 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.295856][ T6918] Process accounting resumed [ 127.331987][ T6922] dns_resolver: Unsupported content type (231) [ 127.355333][ T29] audit: type=1326 audit(1764797072.936:14961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.3.1061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa11811f749 code=0x0 [ 127.357225][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.527179][ T6935] loop2: detected capacity change from 0 to 1024 [ 127.533966][ T6935] EXT4-fs: Ignoring removed bh option [ 127.539915][ T6935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.548763][ T6935] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.560052][ T6935] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 127.569161][ T6935] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 2: comm syz.2.1063: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.583233][ T6935] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 48: comm syz.2.1063: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.597528][ T6935] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1063: Failed to acquire dquot type 0 [ 127.609012][ T6935] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 127.618610][ T6935] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1063: mark_inode_dirty error [ 127.630101][ T6935] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 127.640326][ T6935] EXT4-fs (loop2): 1 orphan inode deleted [ 127.646512][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.659663][ T187] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.674003][ T187] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 127.715430][ T6938] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #2: block 16: comm syz.2.1063: lblock 0 mapped to illegal pblock 16 (length 1) [ 127.730110][ T6938] xt_hashlimit: max too large, truncated to 1048576 [ 127.737320][ T6938] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #2: block 16: comm syz.2.1063: lblock 0 mapped to illegal pblock 16 (length 1) [ 127.965108][ T6942] loop0: detected capacity change from 0 to 512 [ 127.971903][ T6942] EXT4-fs: Ignoring removed oldalloc option [ 127.980349][ T6942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.004304][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.014041][ T6944] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 128.036478][ T6944] SELinux: Context is not valid (left unmapped). [ 128.142735][ T6947] loop0: detected capacity change from 0 to 2048 [ 128.160955][ T6947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.173152][ T6947] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.302043][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.330965][ T3332] EXT4-fs error (device loop2): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.348864][ T6959] loop1: detected capacity change from 0 to 128 [ 128.364465][ T3332] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 128.377493][ T6959] FAT-fs (loop1): invalid media value (0x00) [ 128.384483][ T6959] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 128.394353][ T6959] FAT-fs (loop1): Can't find a valid FAT filesystem [ 128.401448][ T3332] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 128.423590][ T6963] loop4: detected capacity change from 0 to 128 [ 128.431746][ T6963] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.447361][ T6963] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.464029][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.476072][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1070'. [ 128.479962][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.505353][ T6963] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.1073: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 128.511099][ T6965] Process accounting resumed [ 128.535763][ T6963] EXT4-fs (loop4): Remounting filesystem read-only [ 128.541586][ T6968] loop1: detected capacity change from 0 to 128 [ 128.564758][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.585330][ T5065] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 345: padding at end of block bitmap is not set [ 128.604319][ T5065] EXT4-fs (loop0): Remounting filesystem read-only [ 128.642687][ T6975] bio_check_eod: 13291 callbacks suppressed [ 128.642703][ T6975] syz.1.1074: attempt to access beyond end of device [ 128.642703][ T6975] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 128.702934][ T6978] loop4: detected capacity change from 0 to 164 [ 128.709589][ T6978] iso9660: Unknown parameter 'check' [ 128.736188][ T6975] syz.1.1074: attempt to access beyond end of device [ 128.736188][ T6975] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 128.768799][ T6985] FAULT_INJECTION: forcing a failure. [ 128.768799][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 128.781517][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.4.1080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.781540][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.781551][ T6985] Call Trace: [ 128.781557][ T6985] [ 128.781563][ T6985] __dump_stack+0x1d/0x30 [ 128.781596][ T6985] dump_stack_lvl+0xe8/0x140 [ 128.781616][ T6985] dump_stack+0x15/0x1b [ 128.781633][ T6985] should_fail_ex+0x265/0x280 [ 128.781719][ T6985] ? tcf_pedit_init+0x448/0x9a0 [ 128.781743][ T6985] should_failslab+0x8c/0xb0 [ 128.781766][ T6985] __kmalloc_cache_noprof+0x4c/0x4a0 [ 128.781795][ T6985] tcf_pedit_init+0x448/0x9a0 [ 128.781818][ T6985] ? should_fail_ex+0xdb/0x280 [ 128.781883][ T6985] tcf_action_init_1+0x36a/0x4a0 [ 128.781992][ T6985] tcf_action_init+0x267/0x6d0 [ 128.782107][ T6985] tc_ctl_action+0x291/0x830 [ 128.782175][ T6985] ? __pfx_tc_ctl_action+0x10/0x10 [ 128.782205][ T6985] rtnetlink_rcv_msg+0x65a/0x6d0 [ 128.782250][ T6985] ? avc_has_perm_noaudit+0x1b1/0x200 [ 128.782272][ T6985] netlink_rcv_skb+0x123/0x220 [ 128.782295][ T6985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.782328][ T6985] rtnetlink_rcv+0x1c/0x30 [ 128.782367][ T6985] netlink_unicast+0x5c0/0x690 [ 128.782389][ T6985] netlink_sendmsg+0x58b/0x6b0 [ 128.782411][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.782433][ T6985] __sock_sendmsg+0x145/0x180 [ 128.782514][ T6985] ____sys_sendmsg+0x31e/0x4a0 [ 128.782537][ T6985] ___sys_sendmsg+0x17b/0x1d0 [ 128.782571][ T6985] __x64_sys_sendmsg+0xd4/0x160 [ 128.782665][ T6985] x64_sys_call+0x17ba/0x3000 [ 128.782688][ T6985] do_syscall_64+0xd8/0x2a0 [ 128.782707][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.782812][ T6985] RIP: 0033:0x7fca9894f749 [ 128.782828][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.782845][ T6985] RSP: 002b:00007fca973af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.782865][ T6985] RAX: ffffffffffffffda RBX: 00007fca98ba5fa0 RCX: 00007fca9894f749 [ 128.782877][ T6985] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 128.782890][ T6985] RBP: 00007fca973af090 R08: 0000000000000000 R09: 0000000000000000 [ 128.782938][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.782948][ T6985] R13: 00007fca98ba6038 R14: 00007fca98ba5fa0 R15: 00007ffdad299c78 [ 128.782964][ T6985] [ 128.800527][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.810735][ T6975] syz.1.1074: attempt to access beyond end of device [ 128.810735][ T6975] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 129.048888][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.048888][ T6975] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 129.072204][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.072204][ T6975] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 129.085768][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.085768][ T6975] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 129.101160][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.101160][ T6975] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 129.114748][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.114748][ T6975] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 129.128212][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.128212][ T6975] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 129.140586][ T6994] loop3: detected capacity change from 0 to 512 [ 129.141975][ T6975] syz.1.1074: attempt to access beyond end of device [ 129.141975][ T6975] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 129.163435][ T6994] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1082: EA inode hash validation failed [ 129.189807][ T6994] EXT4-fs error (device loop3): ext4_do_update_inode:5628: inode #15: comm syz.3.1082: corrupted inode contents [ 129.217298][ T6994] EXT4-fs error (device loop3): ext4_dirty_inode:6513: inode #15: comm syz.3.1082: mark_inode_dirty error [ 129.229375][ T6994] EXT4-fs error (device loop3): ext4_do_update_inode:5628: inode #15: comm syz.3.1082: corrupted inode contents [ 129.252267][ T6994] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1082: mark_inode_dirty error [ 129.264667][ T6994] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1082: mark inode dirty (error -117) [ 129.280600][ T6994] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 129.289768][ T6994] EXT4-fs (loop3): 1 orphan inode deleted [ 129.295991][ T6994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.320480][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 129.343206][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.383691][ T7005] loop3: detected capacity change from 0 to 128 [ 129.399983][ T7005] FAT-fs (loop3): invalid media value (0x00) [ 129.406482][ T7005] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 129.416380][ T7005] FAT-fs (loop3): Can't find a valid FAT filesystem [ 129.453857][ T7007] loop2: detected capacity change from 0 to 128 [ 129.464854][ T7005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1084'. [ 129.560656][ T7013] loop3: detected capacity change from 0 to 128 [ 130.042136][ T7023] Process accounting resumed [ 130.065829][ T7028] siw: device registration error -23 [ 130.185308][ T7029] loop1: detected capacity change from 0 to 1024 [ 130.274983][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.291935][ T7029] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1090: missing EA_INODE flag [ 130.304168][ T7029] EXT4-fs (loop1): Remounting filesystem read-only [ 130.310746][ T7029] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.1.1090: ea_inode dec ref err=-30 [ 130.323622][ T7029] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 130.446825][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.530525][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.095125][ T7045] loop0: detected capacity change from 0 to 164 [ 131.126076][ T7045] iso9660: Unknown parameter 'check' [ 131.156774][ T7043] loop3: detected capacity change from 0 to 512 [ 131.253240][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.306700][ T7043] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.388316][ T7059] loop2: detected capacity change from 0 to 512 [ 131.419836][ T7059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.477251][ T7059] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 131.580630][ T7059] EXT4-fs (loop2): 1 truncate cleaned up [ 131.603335][ T7065] Process accounting resumed [ 131.608413][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.654917][ T7067] netlink: 'syz.0.1105': attribute type 13 has an invalid length. [ 131.699746][ T7067] syz_tun: entered allmulticast mode [ 131.817006][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.865318][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.920506][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.944575][ T7073] Process accounting resumed [ 131.967693][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 131.967708][ T29] audit: type=1400 audit(1764797077.546:15135): avc: denied { name_bind } for pid=7079 comm="syz.1.1110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.076064][ T29] audit: type=1400 audit(1764797077.546:15136): avc: denied { bind } for pid=7079 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.096238][ T29] audit: type=1400 audit(1764797077.546:15137): avc: denied { write } for pid=7079 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.163955][ T7093] FAULT_INJECTION: forcing a failure. [ 132.163955][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.177256][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.3.1113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.177290][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.177344][ T7093] Call Trace: [ 132.177351][ T7093] [ 132.177359][ T7093] __dump_stack+0x1d/0x30 [ 132.177424][ T7093] dump_stack_lvl+0xe8/0x140 [ 132.177442][ T7093] dump_stack+0x15/0x1b [ 132.177461][ T7093] should_fail_ex+0x265/0x280 [ 132.177554][ T7093] should_fail+0xb/0x20 [ 132.177573][ T7093] should_fail_usercopy+0x1a/0x20 [ 132.177597][ T7093] _copy_from_user+0x1c/0xb0 [ 132.177624][ T7093] kstrtouint_from_user+0x69/0xf0 [ 132.177683][ T7093] ? 0xffffffff81000000 [ 132.177701][ T7093] ? selinux_file_permission+0x1e4/0x320 [ 132.177781][ T7093] proc_fail_nth_write+0x50/0x160 [ 132.177806][ T7093] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.177834][ T7093] vfs_write+0x269/0x960 [ 132.177934][ T7093] ? vfs_read+0x4e6/0x770 [ 132.177955][ T7093] ? __rcu_read_unlock+0x4f/0x70 [ 132.178031][ T7093] ? __fget_files+0x184/0x1c0 [ 132.178084][ T7093] ? mutex_lock+0x58/0x90 [ 132.178170][ T7093] ksys_write+0xda/0x1a0 [ 132.178194][ T7093] __x64_sys_write+0x40/0x50 [ 132.178217][ T7093] x64_sys_call+0x2847/0x3000 [ 132.178241][ T7093] do_syscall_64+0xd8/0x2a0 [ 132.178288][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.178311][ T7093] RIP: 0033:0x7fa11811e1ff [ 132.178327][ T7093] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.178349][ T7093] RSP: 002b:00007fa116b7f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.178369][ T7093] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa11811e1ff [ 132.178383][ T7093] RDX: 0000000000000001 RSI: 00007fa116b7f0a0 RDI: 0000000000000004 [ 132.178396][ T7093] RBP: 00007fa116b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.178409][ T7093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 132.178423][ T7093] R13: 00007fa118376038 R14: 00007fa118375fa0 R15: 00007ffe150e5fe8 [ 132.178476][ T7093] [ 132.209740][ T29] audit: type=1326 audit(1764797077.656:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.408237][ T29] audit: type=1326 audit(1764797077.656:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.431731][ T29] audit: type=1326 audit(1764797077.656:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.455137][ T29] audit: type=1326 audit(1764797077.656:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.478627][ T29] audit: type=1326 audit(1764797077.656:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.502368][ T29] audit: type=1326 audit(1764797077.656:15143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.525037][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.525968][ T29] audit: type=1326 audit(1764797077.656:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 132.578217][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.635661][ T7099] loop3: detected capacity change from 0 to 128 [ 132.730351][ T7101] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1116'. [ 133.088953][ T7114] loop1: detected capacity change from 0 to 1024 [ 133.426725][ T7120] loop2: detected capacity change from 0 to 512 [ 133.481389][ T7120] EXT4-fs: Ignoring removed oldalloc option [ 133.666700][ T5077] bio_check_eod: 15805 callbacks suppressed [ 133.666790][ T5077] kworker/u8:37: attempt to access beyond end of device [ 133.666790][ T5077] loop3: rw=1, sector=848, nr_sectors = 1 limit=128 [ 133.686125][ T5077] Buffer I/O error on dev loop3, logical block 848, lost async page write [ 133.856742][ T7125] syz_tun: entered allmulticast mode [ 133.919217][ T7122] syz_tun: left allmulticast mode [ 133.957031][ T7114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.973051][ T7114] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1120: missing EA_INODE flag [ 133.985155][ T7114] EXT4-fs (loop1): Remounting filesystem read-only [ 133.991761][ T7114] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.1.1120: ea_inode dec ref err=-30 [ 134.004542][ T7114] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 134.016321][ T7120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.114198][ T7130] Process accounting resumed [ 134.131471][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.172885][ T7134] loop4: detected capacity change from 0 to 164 [ 134.217611][ T7134] iso9660: Unknown parameter 'check' [ 134.658944][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.000156][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.011652][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.578998][ T7170] loop1: detected capacity change from 0 to 128 [ 135.597750][ T7173] pimreg: tun_chr_ioctl cmd 2147767520 [ 135.605359][ T5077] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.938031][ T7188] loop0: detected capacity change from 0 to 1024 [ 135.946803][ T7188] EXT4-fs: Ignoring removed bh option [ 135.956283][ T7188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.966020][ T7188] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.977718][ T7188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 135.988386][ T7191] random: crng reseeded on system resumption [ 136.002770][ T7188] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 2: comm syz.0.1143: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.019325][ T7188] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 48: comm syz.0.1143: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.033799][ T7188] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1143: Failed to acquire dquot type 0 [ 136.045449][ T7188] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 136.055226][ T7188] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1143: mark_inode_dirty error [ 136.066670][ T7188] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 136.077004][ T7188] EXT4-fs (loop0): 1 orphan inode deleted [ 136.083158][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.096029][ T5077] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.110357][ T5077] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 136.157852][ T7192] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1143: lblock 0 mapped to illegal pblock 16 (length 1) [ 136.172658][ T7192] xt_hashlimit: max too large, truncated to 1048576 [ 136.180009][ T7192] EXT4-fs error (device loop0): ext4_map_blocks:777: inode #2: block 16: comm syz.0.1143: lblock 0 mapped to illegal pblock 16 (length 1) [ 136.456088][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.465494][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.478758][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 136.488256][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 136.528227][ T7200] loop3: detected capacity change from 0 to 2048 [ 136.551192][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.563996][ T7200] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.575282][ T7200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.615198][ T7200] loop3: detected capacity change from 0 to 512 [ 136.622137][ T7200] EXT4-fs: Ignoring removed oldalloc option [ 136.630731][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.833104][ T7220] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1151'. [ 136.843011][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1151'. [ 137.098031][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 137.098078][ T29] audit: type=1400 audit(1764797082.676:15898): avc: denied { read } for pid=7221 comm="syz.4.1152" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.127869][ T29] audit: type=1400 audit(1764797082.676:15899): avc: denied { open } for pid=7221 comm="syz.4.1152" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.155915][ T29] audit: type=1400 audit(1764797082.736:15900): avc: denied { ioctl } for pid=7221 comm="syz.4.1152" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.181414][ T29] audit: type=1400 audit(1764797082.736:15901): avc: denied { create } for pid=7221 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.202280][ T29] audit: type=1400 audit(1764797082.736:15902): avc: denied { write } for pid=7221 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.222898][ T29] audit: type=1400 audit(1764797082.736:15903): avc: denied { create } for pid=7221 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.242676][ T29] audit: type=1400 audit(1764797082.736:15904): avc: denied { connect } for pid=7221 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.280546][ T29] audit: type=1400 audit(1764797082.856:15905): avc: denied { create } for pid=7223 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.300673][ T29] audit: type=1400 audit(1764797082.856:15906): avc: denied { bind } for pid=7223 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.320546][ T29] audit: type=1400 audit(1764797082.856:15907): avc: denied { sys_module } for pid=7223 comm="syz.4.1153" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.376223][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.444323][ T7237] loop3: detected capacity change from 0 to 2048 [ 137.471589][ T7237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.483933][ T7237] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.639627][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 137.645910][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.759742][ T5057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 137.790504][ T5057] EXT4-fs (loop3): Remounting filesystem read-only [ 137.800981][ T7252] Process accounting resumed [ 137.872104][ T7257] loop4: detected capacity change from 0 to 1024 [ 137.884316][ T7257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.896677][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.915105][ T7261] loop1: detected capacity change from 0 to 2048 [ 137.931919][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.952662][ T7257] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.1158: path /231/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 137.987303][ T7267] loop3: detected capacity change from 0 to 128 [ 137.993699][ T7261] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.073752][ T7267] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.086680][ T7261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.096299][ T7267] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.135717][ T7261] loop1: detected capacity change from 0 to 512 [ 138.143615][ T7261] EXT4-fs: Ignoring removed oldalloc option [ 138.146158][ T7267] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1162: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 138.172534][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.187181][ T7267] EXT4-fs (loop3): Remounting filesystem read-only [ 138.208618][ T3330] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.267784][ T7272] Process accounting resumed [ 138.349721][ T7276] loop0: detected capacity change from 0 to 2048 [ 138.370709][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.383671][ T7276] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.395073][ T7276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.429382][ T7276] loop0: detected capacity change from 0 to 512 [ 138.438381][ T7276] EXT4-fs: Ignoring removed oldalloc option [ 138.455418][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.590446][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.663795][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.705400][ T7281] loop4: detected capacity change from 0 to 2048 [ 138.731968][ T7286] x_tables: duplicate underflow at hook 2 [ 138.741252][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.755558][ T7281] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.197926][ T7297] loop3: detected capacity change from 0 to 1024 [ 139.278554][ T7299] Process accounting resumed [ 139.321402][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.339161][ T7297] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1173: missing EA_INODE flag [ 139.351518][ T7297] EXT4-fs (loop3): Remounting filesystem read-only [ 139.358152][ T7297] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.3.1173: ea_inode dec ref err=-30 [ 139.370969][ T7297] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 139.421114][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.470579][ T5077] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 345: padding at end of block bitmap is not set [ 139.523423][ T7304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.536024][ T5077] EXT4-fs (loop4): Remounting filesystem read-only [ 139.685175][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.137037][ T7314] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 140.211411][ T7317] random: crng reseeded on system resumption [ 140.519593][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.530954][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.759566][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 140.765918][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.051714][ T7326] loop1: detected capacity change from 0 to 512 [ 141.075985][ T7334] loop4: detected capacity change from 0 to 128 [ 141.090121][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.103192][ T7326] ext4 filesystem being mounted at /239/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.160335][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.176276][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.176276][ T7334] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 141.193044][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.193044][ T7334] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 141.211392][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.211392][ T7334] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 141.226757][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.235268][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.235268][ T7334] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 141.238630][ T7339] loop3: detected capacity change from 0 to 128 [ 141.249334][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.259252][ T7339] FAT-fs (loop3): invalid media value (0x00) [ 141.270097][ T7339] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.279785][ T7339] FAT-fs (loop3): Can't find a valid FAT filesystem [ 141.310900][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1188'. [ 141.311529][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.311529][ T7334] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 141.341898][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.341898][ T7334] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 141.362925][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.362925][ T7334] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 141.377836][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.377836][ T7334] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 141.379600][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.391449][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.391449][ T7334] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 141.412651][ T7334] syz.4.1187: attempt to access beyond end of device [ 141.412651][ T7334] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 141.438239][ T7347] loop3: detected capacity change from 0 to 128 [ 141.456010][ T7347] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.468450][ T7347] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.481934][ T7347] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1192: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 141.505971][ T7347] EXT4-fs (loop3): Remounting filesystem read-only [ 141.525034][ T7350] loop4: detected capacity change from 0 to 2048 [ 141.535125][ T3330] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.553862][ T7350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.568578][ T7350] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.631060][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.678217][ T7358] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 141.714844][ T7360] loop1: detected capacity change from 0 to 128 [ 142.356976][ T7366] loop0: detected capacity change from 0 to 1024 [ 142.450609][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.474039][ T7366] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1197: missing EA_INODE flag [ 142.486429][ T7366] EXT4-fs (loop0): Remounting filesystem read-only [ 142.493007][ T7366] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.0.1197: ea_inode dec ref err=-30 [ 142.505745][ T7366] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 142.703423][ T7371] loop1: detected capacity change from 0 to 512 [ 142.762541][ T7371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.972104][ T29] kauditd_printk_skb: 1625 callbacks suppressed [ 142.972119][ T29] audit: type=1400 audit(1764797090.562:17533): avc: denied { mounton } for pid=7372 comm="syz.2.1200" path="/239/file0" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 143.004945][ T7375] loop3: detected capacity change from 0 to 128 [ 143.014505][ T7371] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.056371][ T7375] FAT-fs (loop3): invalid media value (0x00) [ 143.062879][ T7375] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 143.072911][ T7375] FAT-fs (loop3): Can't find a valid FAT filesystem [ 143.096913][ T7128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 143.111992][ T7128] EXT4-fs (loop4): Remounting filesystem read-only [ 143.132523][ T29] audit: type=1400 audit(1764797090.722:17534): avc: denied { ioctl } for pid=7374 comm="syz.3.1201" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.167801][ T7381] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1198: corrupted xattr block 6: invalid header [ 143.256869][ T7381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 143.271044][ T7383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1201'. [ 143.320395][ T29] audit: type=1400 audit(1764797090.782:17535): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.340167][ T29] audit: type=1400 audit(1764797090.792:17536): avc: denied { prog_load } for pid=7374 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.359392][ T29] audit: type=1400 audit(1764797090.792:17537): avc: denied { bpf } for pid=7374 comm="syz.3.1201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.379987][ T29] audit: type=1400 audit(1764797090.792:17538): avc: denied { perfmon } for pid=7374 comm="syz.3.1201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.401023][ T29] audit: type=1400 audit(1764797090.852:17539): avc: denied { map_create } for pid=7374 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.420307][ T29] audit: type=1400 audit(1764797090.862:17540): avc: denied { create } for pid=7374 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.421630][ T7387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.439810][ T29] audit: type=1400 audit(1764797090.862:17541): avc: denied { write } for pid=7374 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.466306][ T29] audit: type=1400 audit(1764797090.872:17542): avc: denied { prog_run } for pid=7374 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.549980][ T7381] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1198: corrupted xattr block 6: invalid header [ 143.610793][ T7381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 143.649629][ T7381] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1198: corrupted xattr block 6: invalid header [ 143.685658][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.712666][ T7381] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 143.738941][ T7392] loop3: detected capacity change from 0 to 128 [ 143.761426][ T7392] FAT-fs (loop3): invalid media value (0x00) [ 143.767778][ T7392] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 143.777143][ T7392] FAT-fs (loop3): Can't find a valid FAT filesystem [ 143.856023][ T7392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1205'. [ 143.935707][ T7406] loop3: detected capacity change from 0 to 128 [ 143.972868][ T7404] SELinux: failed to load policy [ 143.989415][ T7404] netlink: 'syz.2.1209': attribute type 39 has an invalid length. [ 144.070525][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.090162][ T7410] loop4: detected capacity change from 0 to 1024 [ 144.098806][ T7410] EXT4-fs: Ignoring removed bh option [ 144.136497][ T7410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.145898][ T7410] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.158147][ T7410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 144.173050][ T7415] loop2: detected capacity change from 0 to 2048 [ 144.180932][ T7410] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 2: comm syz.4.1202: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.199733][ T7410] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 48: comm syz.4.1202: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.215143][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.230351][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.238979][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.239488][ T7415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.258811][ T7410] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1202: Failed to acquire dquot type 0 [ 144.270368][ T7410] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 144.279900][ T7410] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1202: mark_inode_dirty error [ 144.291339][ T7410] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 144.299125][ T7415] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.329591][ T7410] EXT4-fs (loop4): 1 orphan inode deleted [ 144.345919][ T7410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.358625][ T5091] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:49: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.392946][ T7410] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #2: block 16: comm syz.4.1202: lblock 0 mapped to illegal pblock 16 (length 1) [ 144.395352][ T5091] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:49: Failed to release dquot type 0 [ 144.436951][ T7410] xt_hashlimit: max too large, truncated to 1048576 [ 144.465474][ T7410] EXT4-fs error (device loop4): ext4_map_blocks:777: inode #2: block 16: comm syz.4.1202: lblock 0 mapped to illegal pblock 16 (length 1) [ 144.508277][ T7431] loop1: detected capacity change from 0 to 164 [ 144.534743][ T7431] iso9660: Unknown parameter 'check' [ 144.652523][ T3323] EXT4-fs error (device loop4): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 144.680424][ T3323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 144.701864][ T3323] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 144.757044][ T187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 144.771734][ T187] EXT4-fs (loop2): Remounting filesystem read-only [ 144.779612][ T7440] loop4: detected capacity change from 1024 to 1023 [ 144.832480][ T7440] loop1: detected capacity change from 0 to 512 [ 144.848452][ T7440] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.886578][ T7440] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 144.915150][ T7440] EXT4-fs (loop1): 1 truncate cleaned up [ 144.958638][ T7451] loop3: detected capacity change from 0 to 164 [ 144.983618][ T7451] iso9660: Unknown parameter 'check' [ 145.037944][ T7457] bpf: Bad value for 'uid' [ 145.050836][ T7455] loop2: detected capacity change from 0 to 1024 [ 145.105044][ T7455] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.2.1220: path /245/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 145.367245][ T7472] loop4: detected capacity change from 0 to 164 [ 145.374047][ T7472] iso9660: Unknown parameter 'check' [ 145.446263][ T7479] loop4: detected capacity change from 0 to 2048 [ 145.461290][ T7479] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.638256][ T187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 145.652909][ T187] EXT4-fs (loop4): Remounting filesystem read-only [ 145.725098][ T7486] Process accounting resumed [ 145.790865][ T7490] loop2: detected capacity change from 0 to 512 [ 145.797763][ T7490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.810043][ T7490] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 145.825195][ T7490] EXT4-fs (loop2): 1 truncate cleaned up [ 145.881654][ T7494] loop2: detected capacity change from 0 to 512 [ 145.901293][ T7494] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.905834][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.928308][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.947844][ T7500] mmap: syz.1.1235 (7500) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.986810][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 146.061395][ T7511] FAULT_INJECTION: forcing a failure. [ 146.061395][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 146.074083][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.2.1236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.074106][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.074117][ T7511] Call Trace: [ 146.074123][ T7511] [ 146.074132][ T7511] __dump_stack+0x1d/0x30 [ 146.074154][ T7511] dump_stack_lvl+0xe8/0x140 [ 146.074171][ T7511] dump_stack+0x15/0x1b [ 146.074255][ T7511] should_fail_ex+0x265/0x280 [ 146.074277][ T7511] should_failslab+0x8c/0xb0 [ 146.074303][ T7511] kmem_cache_alloc_noprof+0x50/0x480 [ 146.074440][ T7511] ? dst_alloc+0xbd/0x100 [ 146.074465][ T7511] dst_alloc+0xbd/0x100 [ 146.074545][ T7511] ? ip_vs_ftp_in+0x3e2/0x730 [ 146.074605][ T7511] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 146.074625][ T7511] ip_route_output_flow+0x65/0x110 [ 146.074728][ T7511] udp_sendmsg+0x11b0/0x13c0 [ 146.074762][ T7511] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 146.074833][ T7511] ? __rcu_read_unlock+0x4f/0x70 [ 146.074864][ T7511] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 146.074897][ T7511] ? __pfx_udp_sendmsg+0x10/0x10 [ 146.074998][ T7511] inet_sendmsg+0xac/0xd0 [ 146.075093][ T7511] __sock_sendmsg+0x102/0x180 [ 146.075121][ T7511] ____sys_sendmsg+0x345/0x4a0 [ 146.075143][ T7511] ___sys_sendmsg+0x17b/0x1d0 [ 146.075299][ T7511] __sys_sendmmsg+0x178/0x300 [ 146.075332][ T7511] __x64_sys_sendmmsg+0x57/0x70 [ 146.075395][ T7511] x64_sys_call+0x1e28/0x3000 [ 146.075416][ T7511] do_syscall_64+0xd8/0x2a0 [ 146.075439][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.075538][ T7511] RIP: 0033:0x7f906632f749 [ 146.075552][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.075567][ T7511] RSP: 002b:00007f9064d6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.075585][ T7511] RAX: ffffffffffffffda RBX: 00007f9066586090 RCX: 00007f906632f749 [ 146.075599][ T7511] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 000000000000000b [ 146.075610][ T7511] RBP: 00007f9064d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 146.075620][ T7511] R10: 0000000004000804 R11: 0000000000000246 R12: 0000000000000001 [ 146.075669][ T7511] R13: 00007f9066586128 R14: 00007f9066586090 R15: 00007ffdd1e4d6a8 [ 146.075685][ T7511] [ 146.076325][ T7511] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1236: corrupted xattr block 6: invalid header [ 146.313113][ T7511] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 146.322298][ T7511] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1236: corrupted xattr block 6: invalid header [ 146.331515][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.335672][ T7511] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 146.352939][ T7511] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.1236: corrupted xattr block 6: invalid header [ 146.366294][ T7511] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 146.376559][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.410848][ T7512] loop1: detected capacity change from 0 to 512 [ 146.429024][ T7512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.447597][ T7512] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 146.481790][ T7512] EXT4-fs (loop1): 1 truncate cleaned up [ 146.485662][ T5091] Bluetooth: hci0: Frame reassembly failed (-90) [ 146.636711][ T7525] loop2: detected capacity change from 0 to 128 [ 146.671677][ T7526] loop4: detected capacity change from 0 to 1024 [ 146.730047][ T7528] loop4: detected capacity change from 1024 to 1023 [ 146.737462][ T7526] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 64 [ 146.779796][ T7525] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.805844][ T7528] loop1: detected capacity change from 0 to 512 [ 146.829591][ T7528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.840179][ T7525] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1245: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 146.867288][ T7525] EXT4-fs (loop2): Remounting filesystem read-only [ 146.880183][ T7528] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 146.920974][ T7528] EXT4-fs (loop1): 1 truncate cleaned up [ 146.943384][ T7535] loop3: detected capacity change from 0 to 512 [ 146.982876][ T7535] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.005260][ T7540] loop1: detected capacity change from 0 to 128 [ 147.015133][ T7540] FAT-fs (loop1): invalid media value (0x00) [ 147.022529][ T7540] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 147.032129][ T7540] FAT-fs (loop1): Can't find a valid FAT filesystem [ 147.072512][ T7540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1249'. [ 147.099920][ T7541] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1248: corrupted xattr block 6: invalid header [ 147.114252][ T7541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 147.116356][ T7543] loop1: detected capacity change from 0 to 128 [ 147.123726][ T7541] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1248: corrupted xattr block 6: invalid header [ 147.123897][ T7541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 147.124024][ T7541] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.1248: corrupted xattr block 6: invalid header [ 147.124150][ T7541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 147.184164][ T7543] FAT-fs (loop1): invalid media value (0x00) [ 147.190511][ T7543] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 147.200035][ T7543] FAT-fs (loop1): Can't find a valid FAT filesystem [ 147.233635][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1250'. [ 148.109338][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 148.109354][ T29] audit: type=1400 audit(1764797098.688:17740): avc: denied { read } for pid=7565 comm="syz.1.1258" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.137074][ T29] audit: type=1400 audit(1764797098.688:17741): avc: denied { open } for pid=7565 comm="syz.1.1258" path="net:[4026532627]" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 148.160410][ T29] audit: type=1400 audit(1764797098.688:17742): avc: denied { create } for pid=7565 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.183625][ T29] audit: type=1400 audit(1764797098.768:17743): avc: denied { bind } for pid=7565 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.203952][ T29] audit: type=1400 audit(1764797098.768:17744): avc: denied { block_suspend } for pid=7565 comm="syz.1.1258" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.225570][ T29] audit: type=1400 audit(1764797098.768:17745): avc: denied { sys_module } for pid=7565 comm="syz.1.1258" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.246824][ T29] audit: type=1400 audit(1764797098.768:17746): avc: denied { module_load } for pid=7565 comm="syz.1.1258" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 148.272871][ T29] audit: type=1400 audit(1764797098.858:17747): avc: denied { write } for pid=7565 comm="syz.1.1258" path="socket:[14907]" dev="sockfs" ino=14907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.330799][ T7569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.363672][ T29] audit: type=1400 audit(1764797098.948:17748): avc: denied { write } for pid=7565 comm="syz.1.1258" name="packet" dev="proc" ino=4026532840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 148.471809][ T29] audit: type=1400 audit(1764797099.058:17749): avc: denied { read write } for pid=7574 comm="syz.4.1262" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.498756][ T7571] loop3: detected capacity change from 0 to 128 [ 148.515052][ T7571] FAT-fs (loop3): invalid media value (0x00) [ 148.521800][ T7571] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 148.531407][ T7571] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.539640][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 148.547211][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.632592][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1260'. [ 148.817985][ T7597] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 148.854796][ T7592] loop2: detected capacity change from 0 to 512 [ 148.890196][ T7592] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1268: EA inode hash validation failed [ 148.905524][ T7592] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.1268: corrupted inode contents [ 148.921216][ T7592] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #15: comm syz.2.1268: mark_inode_dirty error [ 148.934775][ T7592] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.1268: corrupted inode contents [ 148.948694][ T7592] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1268: mark_inode_dirty error [ 148.957031][ T7603] random: crng reseeded on system resumption [ 148.962816][ T7592] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1268: mark inode dirty (error -117) [ 148.980818][ T7592] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 148.990929][ T7592] EXT4-fs (loop2): 1 orphan inode deleted [ 149.151931][ T7607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.295695][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 149.369440][ T7628] loop1: detected capacity change from 0 to 1024 [ 149.379856][ T7628] EXT4-fs: Ignoring removed bh option [ 149.386707][ T7627] loop2: detected capacity change from 0 to 128 [ 149.402009][ T7627] FAT-fs (loop2): invalid media value (0x00) [ 149.408208][ T7627] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 149.419268][ T7627] FAT-fs (loop2): Can't find a valid FAT filesystem [ 149.450495][ T7628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.453604][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1277'. [ 149.490286][ T7628] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.512756][ T7628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 149.530431][ T7628] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 2: comm syz.1.1276: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.545041][ T7628] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 48: comm syz.1.1276: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.562327][ T7628] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1276: Failed to acquire dquot type 0 [ 149.598882][ T7628] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 149.605918][ T7649] Process accounting resumed [ 149.610050][ T7628] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1276: mark_inode_dirty error [ 149.624578][ T7628] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 149.626977][ T7654] loop2: detected capacity change from 0 to 128 [ 149.634874][ T7628] EXT4-fs (loop1): 1 orphan inode deleted [ 149.649718][ T5089] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.669886][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 149.672694][ T7628] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #2: block 16: comm syz.1.1276: lblock 0 mapped to illegal pblock 16 (length 1) [ 149.684469][ T5089] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:48: Failed to release dquot type 0 [ 149.728852][ T7628] xt_hashlimit: max too large, truncated to 1048576 [ 149.736070][ T7628] EXT4-fs error (device loop1): ext4_map_blocks:777: inode #2: block 16: comm syz.1.1276: lblock 0 mapped to illegal pblock 16 (length 1) [ 149.773610][ T3325] EXT4-fs error (device loop1): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 149.787084][ T3325] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 149.805757][ T3325] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 149.817472][ T7666] loop4: detected capacity change from 0 to 2048 [ 149.838526][ T7666] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.894015][ T7675] loop3: detected capacity change from 0 to 1024 [ 149.898948][ T7666] loop4: detected capacity change from 0 to 512 [ 149.908242][ T7666] EXT4-fs: Ignoring removed oldalloc option [ 149.935060][ T7675] EXT4-fs error (device loop3): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.3.1291: path /280/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 150.155645][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 150.170875][ T7698] random: crng reseeded on system resumption [ 150.196239][ T7700] No such timeout policy "syz0" [ 150.209359][ T7700] SELinux: Context system_u:object_r:setfiles_exec_t:s0 is not valid (left unmapped). [ 150.609086][ T7710] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 150.650939][ T36] IPVS: starting estimator thread 0... [ 150.656634][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 150.749643][ T7715] IPVS: using max 2544 ests per chain, 127200 per kthread [ 150.845245][ T7737] Process accounting resumed [ 150.877202][ T7743] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 151.097752][ T7761] loop3: detected capacity change from 0 to 128 [ 151.192743][ T7767] bio_check_eod: 16004 callbacks suppressed [ 151.192777][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.192777][ T7767] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 151.233288][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.233288][ T7767] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 151.249824][ T7771] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 151.283306][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.283306][ T7767] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 151.322723][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.322723][ T7767] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 151.342636][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.342636][ T7767] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 151.433829][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.433829][ T7767] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 151.471690][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.471690][ T7767] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 151.503135][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.503135][ T7767] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 151.557002][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.557002][ T7767] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 151.625835][ T7767] syz.3.1326: attempt to access beyond end of device [ 151.625835][ T7767] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 151.646065][ T7781] random: crng reseeded on system resumption [ 151.692534][ T7783] loop1: detected capacity change from 0 to 128 [ 151.728655][ T7744] syz.0.1319 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 151.739705][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.0.1319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.739734][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.739747][ T7744] Call Trace: [ 151.739755][ T7744] [ 151.739763][ T7744] __dump_stack+0x1d/0x30 [ 151.739836][ T7744] dump_stack_lvl+0xe8/0x140 [ 151.739865][ T7744] dump_stack+0x15/0x1b [ 151.739883][ T7744] dump_header+0x81/0x220 [ 151.739903][ T7744] oom_kill_process+0x342/0x400 [ 151.739931][ T7744] out_of_memory+0x979/0xb80 [ 151.739966][ T7744] try_charge_memcg+0x610/0xa10 [ 151.739996][ T7744] charge_memcg+0x51/0xc0 [ 151.740017][ T7744] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 151.740071][ T7744] __read_swap_cache_async+0x17b/0x2d0 [ 151.740093][ T7744] swap_cluster_readahead+0x262/0x3c0 [ 151.740185][ T7744] swapin_readahead+0xde/0x800 [ 151.740213][ T7744] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 151.740274][ T7744] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 151.740302][ T7744] ? __rcu_read_unlock+0x4f/0x70 [ 151.740333][ T7744] ? swap_cache_get_folio+0x277/0x280 [ 151.740435][ T7744] do_swap_page+0x2ae/0x2370 [ 151.740457][ T7744] ? css_rstat_updated+0xb7/0x240 [ 151.740561][ T7744] ? __pfx_default_wake_function+0x10/0x10 [ 151.740588][ T7744] handle_mm_fault+0x9a5/0x2be0 [ 151.740633][ T7744] do_user_addr_fault+0x630/0x1080 [ 151.740662][ T7744] exc_page_fault+0x62/0xa0 [ 151.740687][ T7744] asm_exc_page_fault+0x26/0x30 [ 151.740730][ T7744] RIP: 0033:0x7fef608f59ec [ 151.740746][ T7744] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 151.740841][ T7744] RSP: 002b:00007fff750253f0 EFLAGS: 00010206 [ 151.740860][ T7744] RAX: 0000000000000000 RBX: 00007fef60c75fa0 RCX: 0000000000000000 [ 151.740871][ T7744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555572fe6808 [ 151.740881][ T7744] RBP: 00007fef60c77da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 151.740892][ T7744] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000250a5 [ 151.740905][ T7744] R13: 00007fff750254e0 R14: ffffffffffffffff R15: 00007fff75025500 [ 151.740972][ T7744] [ 151.740978][ T7744] memory: usage 307200kB, limit 307200kB, failcnt 650 [ 151.919932][ T7790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.930470][ T7783] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.936018][ T7744] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 151.987165][ T7744] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 151.994505][ T7744] Memory cgroup stats for /syz0: [ 152.008894][ T7783] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.1.1335: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 152.029819][ T7744] cache 0 [ 152.036894][ T7744] rss 0 [ 152.039705][ T7744] shmem 0 [ 152.042636][ T7744] mapped_file 0 [ 152.046091][ T7744] dirty 0 [ 152.049025][ T7744] writeback 0 [ 152.052375][ T7744] workingset_refault_anon 88 [ 152.057013][ T7744] workingset_refault_file 3183 [ 152.061862][ T7744] swap 196608 [ 152.065128][ T7744] swapcached 0 [ 152.068489][ T7744] pgpgin 248593 [ 152.071986][ T7744] pgpgout 248588 [ 152.075578][ T7744] pgfault 202110 [ 152.079160][ T7744] pgmajfault 70 [ 152.082634][ T7744] inactive_anon 0 [ 152.086301][ T7744] active_anon 0 [ 152.089806][ T7744] inactive_file 0 [ 152.093420][ T7744] active_file 20480 [ 152.097263][ T7744] unevictable 0 [ 152.100721][ T7744] hierarchical_memory_limit 314572800 [ 152.106080][ T7744] hierarchical_memsw_limit 9223372036854771712 [ 152.112253][ T7744] total_cache 0 [ 152.115739][ T7744] total_rss 0 [ 152.119009][ T7744] total_shmem 0 [ 152.122491][ T7744] total_mapped_file 0 [ 152.126597][ T7744] total_dirty 0 [ 152.130096][ T7744] total_writeback 0 [ 152.133893][ T7744] total_workingset_refault_anon 88 [ 152.138989][ T7744] total_workingset_refault_file 3183 [ 152.144291][ T7744] total_swap 196608 [ 152.148084][ T7744] total_swapcached 0 [ 152.152016][ T7744] total_pgpgin 248593 [ 152.155985][ T7744] total_pgpgout 248588 [ 152.160080][ T7744] total_pgfault 202110 [ 152.164140][ T7744] total_pgmajfault 70 [ 152.168115][ T7744] total_inactive_anon 0 [ 152.173330][ T7744] total_active_anon 0 [ 152.177295][ T7744] total_inactive_file 0 [ 152.181487][ T7744] total_active_file 20480 [ 152.185800][ T7744] total_unevictable 0 [ 152.189814][ T7744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1319,pid=7744,uid=0 [ 152.201406][ T7783] EXT4-fs (loop1): Remounting filesystem read-only [ 152.204537][ T7744] Memory cgroup out of memory: Killed process 7744 (syz.0.1319) total-vm:93836kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 152.248135][ T7795] loop3: detected capacity change from 0 to 1024 [ 152.264191][ T7797] loop4: detected capacity change from 0 to 512 [ 152.307554][ T7799] loop3: detected capacity change from 0 to 164 [ 152.323113][ T7797] EXT4-fs: Ignoring removed oldalloc option [ 152.437653][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 152.576915][ T7833] loop3: detected capacity change from 0 to 512 [ 152.596082][ T7833] EXT4-fs: Ignoring removed oldalloc option [ 152.729277][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.759711][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.821896][ T7844] loop2: detected capacity change from 0 to 512 [ 152.858618][ T7844] ------------[ cut here ]------------ [ 152.864152][ T7844] EA inode 11 i_nlink=2 [ 152.864182][ T7844] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#1: syz.2.1355/7844 [ 152.876279][ T7844] Modules linked in: [ 152.880291][ T7844] CPU: 1 UID: 0 PID: 7844 Comm: syz.2.1355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.890133][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.900222][ T7844] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 152.906886][ T7844] Code: a1 61 9d ff 4c 8d 2d ba 3e 21 05 49 8d 7e 40 e8 e1 a2 b8 ff 49 8b 6e 40 4c 89 e7 e8 f5 9d b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c 63 b5 03 66 66 66 2e 0f 1f 84 [ 152.926562][ T7844] RSP: 0018:ffffc90014b83590 EFLAGS: 00010246 [ 152.932740][ T7844] RAX: ffff888104181b10 RBX: ffff88811a9d7170 RCX: ffffffff81ba87eb [ 152.940748][ T7844] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dbc690 [ 152.948801][ T7844] RBP: 000000000000000b R08: 000188811a9d7123 R09: 0000000000000000 [ 152.956888][ T7844] R10: ffffc90014b834c0 R11: 0001c90014b834c0 R12: ffff88811a9d7120 [ 152.965040][ T7844] R13: ffffffff86dbc690 R14: ffff88811a9d70d8 R15: 0000000000000001 [ 152.973053][ T7844] FS: 00007f9064d8f6c0(0000) GS:ffff8882aeef1000(0000) knlGS:0000000000000000 [ 152.982009][ T7844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.988731][ T7844] CR2: 00007f4c8d589000 CR3: 000000011c384000 CR4: 00000000003506f0 [ 152.996814][ T7844] Call Trace: [ 153.000182][ T7844] [ 153.003114][ T7844] ext4_xattr_set_entry+0x77f/0x1020 [ 153.008422][ T7844] ext4_xattr_ibody_set+0x184/0x3c0 [ 153.013719][ T7844] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 153.019625][ T7844] __ext4_expand_extra_isize+0x246/0x280 [ 153.025328][ T7844] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 153.030888][ T7844] ext4_evict_inode+0x7c4/0xd40 [ 153.035748][ T7844] ? __pfx_ext4_evict_inode+0x10/0x10 [ 153.041217][ T7844] evict+0x2af/0x510 [ 153.045104][ T7844] ? __dquot_initialize+0x146/0x7c0 [ 153.050348][ T7844] iput+0x4bd/0x650 [ 153.054156][ T7844] ext4_process_orphan+0x1a9/0x1c0 [ 153.059305][ T7844] ext4_orphan_cleanup+0x6a8/0xa00 [ 153.064466][ T7844] ext4_fill_super+0x3475/0x3800 [ 153.069409][ T7844] ? snprintf+0x86/0xb0 [ 153.073661][ T7844] ? set_blocksize+0x1a8/0x310 [ 153.078428][ T7844] ? sb_set_blocksize+0xfc/0x170 [ 153.083406][ T7844] ? setup_bdev_super+0x30e/0x370 [ 153.088461][ T7844] ? __pfx_ext4_fill_super+0x10/0x10 [ 153.093918][ T7844] get_tree_bdev_flags+0x291/0x300 [ 153.099111][ T7844] ? __pfx_ext4_fill_super+0x10/0x10 [ 153.104447][ T7844] get_tree_bdev+0x1f/0x30 [ 153.108945][ T7844] ext4_get_tree+0x1c/0x30 [ 153.113422][ T7844] vfs_get_tree+0x57/0x1d0 [ 153.117909][ T7844] do_new_mount+0x24d/0x6a0 [ 153.122474][ T7844] path_mount+0x4ab/0xb80 [ 153.126813][ T7844] ? user_path_at+0xbf/0x130 [ 153.131456][ T7844] __se_sys_mount+0x28c/0x2e0 [ 153.136140][ T7844] __x64_sys_mount+0x67/0x80 [ 153.140827][ T7844] x64_sys_call+0x2cca/0x3000 [ 153.145524][ T7844] do_syscall_64+0xd8/0x2a0 [ 153.150046][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.155939][ T7844] RIP: 0033:0x7f9066330eea [ 153.160447][ T7844] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.180081][ T7844] RSP: 002b:00007f9064d8ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.180105][ T7844] RAX: ffffffffffffffda RBX: 00007f9064d8eef0 RCX: 00007f9066330eea [ 153.196522][ T7844] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9064d8eeb0 [ 153.204528][ T7844] RBP: 0000200000000180 R08: 00007f9064d8eef0 R09: 0000000000800700 [ 153.212529][ T7844] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 153.220309][ T29] kauditd_printk_skb: 1049 callbacks suppressed [ 153.220324][ T29] audit: type=1400 audit(1764797106.803:18796): avc: denied { kexec_image_load } for pid=7853 comm="syz.0.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 153.220575][ T7844] R13: 00007f9064d8eeb0 R14: 000000000000046f R15: 000000000000002c [ 153.253538][ T7854] xt_hashlimit: max too large, truncated to 1048576 [ 153.254776][ T7844] [ 153.264321][ T7844] ---[ end trace 0000000000000000 ]--- [ 153.309690][ T7844] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1355: iget: bad extra_isize 90 (inode size 256) [ 153.345354][ T29] audit: type=1400 audit(1764797106.923:18797): avc: denied { create } for pid=7857 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.443410][ T7862] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 153.479904][ T7844] EXT4-fs (loop2): Remounting filesystem read-only [ 153.501109][ T29] audit: type=1326 audit(1764797107.083:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.530833][ T7844] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 153.552626][ T29] audit: type=1326 audit(1764797107.103:18799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.576284][ T29] audit: type=1326 audit(1764797107.103:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.599839][ T29] audit: type=1326 audit(1764797107.103:18801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.623375][ T29] audit: type=1326 audit(1764797107.103:18802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.625116][ T7844] EXT4-fs (loop2): 1 orphan inode deleted [ 153.646912][ T29] audit: type=1326 audit(1764797107.103:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf03f749 code=0x7ffc0000 [ 153.752825][ T7883] loop4: detected capacity change from 0 to 512 [ 153.836740][ T29] audit: type=1400 audit(1764797107.273:18804): avc: denied { connect } for pid=7865 comm="syz.0.1364" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.896396][ T29] audit: type=1400 audit(1764797107.413:18805): avc: denied { mounton } for pid=7878 comm="syz.0.1366" path="/239/file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 153.935578][ T7883] EXT4-fs: Ignoring removed oldalloc option [ 154.007607][ T7892] loop3: detected capacity change from 0 to 128 [ 154.088344][ T7892] FAULT_INJECTION: forcing a failure. [ 154.088344][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.101721][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.3.1370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.101870][ T7892] Tainted: [W]=WARN [ 154.101876][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.101886][ T7892] Call Trace: [ 154.101893][ T7892] [ 154.101900][ T7892] __dump_stack+0x1d/0x30 [ 154.101924][ T7892] dump_stack_lvl+0xe8/0x140 [ 154.101944][ T7892] dump_stack+0x15/0x1b [ 154.101963][ T7892] should_fail_ex+0x265/0x280 [ 154.102057][ T7892] should_fail+0xb/0x20 [ 154.102077][ T7892] should_fail_usercopy+0x1a/0x20 [ 154.102100][ T7892] copy_folio_from_iter_atomic+0x26a/0x1150 [ 154.102125][ T7892] ? strcmp+0x22/0x50 [ 154.102145][ T7892] ? fat_write_begin+0x4f/0xe0 [ 154.102214][ T7892] ? __pfx_fat_get_block+0x10/0x10 [ 154.102235][ T7892] generic_perform_write+0x2c2/0x490 [ 154.102269][ T7892] __generic_file_write_iter+0x9e/0x120 [ 154.102313][ T7892] ? __pfx_generic_file_write_iter+0x10/0x10 [ 154.102338][ T7892] generic_file_write_iter+0x8d/0x2f0 [ 154.102356][ T7892] ? _parse_integer_limit+0x170/0x190 [ 154.102378][ T7892] ? _parse_integer+0x27/0x40 [ 154.102471][ T7892] ? kstrtoull+0x111/0x140 [ 154.102486][ T7892] ? kstrtouint+0x76/0xc0 [ 154.102504][ T7892] ? kstrtouint_from_user+0x9f/0xf0 [ 154.102641][ T7892] ? avc_policy_seqno+0x15/0x30 [ 154.102658][ T7892] ? selinux_file_permission+0x1e4/0x320 [ 154.102691][ T7892] ? __pfx_generic_file_write_iter+0x10/0x10 [ 154.102845][ T7892] vfs_write+0x52a/0x960 [ 154.102873][ T7892] ksys_write+0xda/0x1a0 [ 154.102963][ T7892] __x64_sys_write+0x40/0x50 [ 154.102985][ T7892] x64_sys_call+0x2847/0x3000 [ 154.103037][ T7892] do_syscall_64+0xd8/0x2a0 [ 154.103138][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.103159][ T7892] RIP: 0033:0x7fa11811f749 [ 154.103236][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.103251][ T7892] RSP: 002b:00007fa116b7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.103296][ T7892] RAX: ffffffffffffffda RBX: 00007fa118375fa0 RCX: 00007fa11811f749 [ 154.103309][ T7892] RDX: 000000000208e24b RSI: 00002000000004c0 RDI: 0000000000000004 [ 154.103323][ T7892] RBP: 00007fa116b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.103336][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.103349][ T7892] R13: 00007fa118376038 R14: 00007fa118375fa0 R15: 00007ffe150e5fe8 [ 154.103392][ T7892] [ 154.382678][ T7892] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 154.414743][ T7892] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 154.464583][ T7892] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 154.466726][ T7897] loop4: detected capacity change from 0 to 128 [ 154.504194][ T7892] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 154.533317][ T7892] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 154.576698][ T7892] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 154.588951][ T7897] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 154.622730][ T7892] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 154.622982][ T7897] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 154.649742][ T7892] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 154.659759][ T7899] netlink: 'syz.2.1371': attribute type 13 has an invalid length. [ 154.841827][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.859325][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.931667][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 154.941788][ T7911] team0: Port device team_slave_1 removed [ 154.999337][ T7913] loop2: detected capacity change from 0 to 1024 [ 155.018456][ T7911] loop3: detected capacity change from 0 to 512 [ 155.036194][ T7911] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.045488][ T7913] EXT4-fs: Ignoring removed bh option [ 155.057249][ T7913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.077676][ T7913] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.084036][ T7919] loop4: detected capacity change from 0 to 1024 [ 155.098046][ T7913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 155.110375][ T7913] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 2: comm syz.2.1378: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.134314][ T7913] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 48: comm syz.2.1378: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.142467][ T7919] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 155.157048][ T7913] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1378: Failed to acquire dquot type 0 [ 155.180710][ T7913] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 155.194521][ T7922] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 155.224077][ T7924] FAULT_INJECTION: forcing a failure. [ 155.224077][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 155.236782][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.3.1380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.236816][ T7924] Tainted: [W]=WARN [ 155.236823][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.236835][ T7924] Call Trace: [ 155.236842][ T7924] [ 155.236851][ T7924] __dump_stack+0x1d/0x30 [ 155.236873][ T7924] dump_stack_lvl+0xe8/0x140 [ 155.236890][ T7924] dump_stack+0x15/0x1b [ 155.236905][ T7924] should_fail_ex+0x265/0x280 [ 155.236924][ T7924] should_failslab+0x8c/0xb0 [ 155.237012][ T7924] kmem_cache_alloc_noprof+0x50/0x480 [ 155.237083][ T7924] ? getname_kernel+0x3c/0x1f0 [ 155.237110][ T7924] getname_kernel+0x3c/0x1f0 [ 155.237136][ T7924] kern_path+0x23/0x130 [ 155.237166][ T7924] create_local_trace_uprobe+0x53/0x2c0 [ 155.237253][ T7924] perf_uprobe_init+0xc0/0x150 [ 155.237273][ T7924] perf_uprobe_event_init+0xc4/0x140 [ 155.237292][ T7924] perf_try_init_event+0xd9/0x540 [ 155.237369][ T7924] ? perf_event_alloc+0xb2f/0x18d0 [ 155.237392][ T7924] perf_event_alloc+0xb3a/0x18d0 [ 155.237417][ T7924] ? __fget_files+0x184/0x1c0 [ 155.237459][ T7924] __se_sys_perf_event_open+0x490/0x1210 [ 155.237481][ T7924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 155.237574][ T7924] __x64_sys_perf_event_open+0x67/0x80 [ 155.237668][ T7924] x64_sys_call+0x78c/0x3000 [ 155.237696][ T7924] do_syscall_64+0xd8/0x2a0 [ 155.237716][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.237739][ T7924] RIP: 0033:0x7fa11811f749 [ 155.237824][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.237842][ T7924] RSP: 002b:00007fa116b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 155.237864][ T7924] RAX: ffffffffffffffda RBX: 00007fa118375fa0 RCX: 00007fa11811f749 [ 155.237877][ T7924] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 155.237891][ T7924] RBP: 00007fa116b7f090 R08: 0000000000000009 R09: 0000000000000000 [ 155.237903][ T7924] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 155.237914][ T7924] R13: 00007fa118376038 R14: 00007fa118375fa0 R15: 00007ffe150e5fe8 [ 155.237983][ T7924] [ 155.454908][ T7913] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1378: mark_inode_dirty error [ 155.488312][ T7913] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 155.509083][ T7913] EXT4-fs (loop2): 1 orphan inode deleted [ 155.521058][ T5312] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:66: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.535561][ T5312] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:66: Failed to release dquot type 0 [ 155.580302][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 155.597575][ T7913] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #2: block 16: comm syz.2.1378: lblock 0 mapped to illegal pblock 16 (length 1) [ 155.648154][ T7933] xt_hashlimit: max too large, truncated to 1048576 [ 155.686087][ T7933] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #2: block 16: comm syz.2.1378: lblock 0 mapped to illegal pblock 16 (length 1) [ 155.770863][ T7938] loop3: detected capacity change from 0 to 2048 [ 155.843410][ T3332] EXT4-fs error (device loop2): __ext4_get_inode_loc:4828: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 155.864646][ T3332] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 156.002266][ T7949] loop1: detected capacity change from 0 to 1024 [ 156.081080][ T3332] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 156.094011][ T7949] EXT4-fs mount: 46 callbacks suppressed [ 156.094027][ T7949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.123927][ T7949] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1382: missing EA_INODE flag [ 156.135969][ T7949] EXT4-fs (loop1): Remounting filesystem read-only [ 156.142589][ T7949] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.1.1382: ea_inode dec ref err=-30 [ 156.155371][ T7949] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 156.198772][ T7954] loop4: detected capacity change from 0 to 164 [ 156.267399][ T7954] iso9660: Unknown parameter 'check' [ 156.408579][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 156.645667][ T7960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7960 comm=syz.4.1394 [ 156.923091][ T7980] xt_hashlimit: max too large, truncated to 1048576 [ 157.045547][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 157.071328][ T7978] loop2: detected capacity change from 0 to 512 [ 157.139153][ T7978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.192260][ T7978] ext4 filesystem being mounted at /276/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.217830][ T7986] Process accounting resumed [ 157.373185][ T8000] loop4: detected capacity change from 0 to 2048 [ 157.395525][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.395584][ T8000] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.395940][ T8000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.435786][ T3013] udevd[3013]: worker [3647] terminated by signal 33 (Unknown signal 33) [ 157.614853][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.636351][ T8009] loop3: detected capacity change from 0 to 2048 [ 157.668813][ T8008] loop4: detected capacity change from 0 to 1024 [ 157.677788][ T8008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.691492][ T8008] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.1407: path /282/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 157.734157][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.752778][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.766431][ T7999] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 157.778785][ T8009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.808011][ T8009] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.944532][ T8009] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.080102][ T8043] loop1: detected capacity change from 0 to 2048 [ 158.110475][ T8043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.123339][ T8043] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.134421][ T8043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.229738][ T29] kauditd_printk_skb: 846 callbacks suppressed [ 158.229800][ T29] audit: type=1400 audit(1764797113.813:19649): avc: denied { create } for pid=8051 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.268080][ T29] audit: type=1400 audit(1764797113.843:19650): avc: denied { create } for pid=8051 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.288921][ T29] audit: type=1400 audit(1764797113.843:19651): avc: denied { write } for pid=8051 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.359696][ T8055] loop1: detected capacity change from 0 to 512 [ 158.374199][ T29] audit: type=1400 audit(1764797113.843:19652): avc: denied { open } for pid=8044 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.393550][ T29] audit: type=1400 audit(1764797113.843:19653): avc: denied { kernel } for pid=8044 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.401194][ T8055] EXT4-fs: Ignoring removed oldalloc option [ 158.413216][ T29] audit: type=1400 audit(1764797113.893:19654): avc: denied { tracepoint } for pid=8048 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.438854][ T29] audit: type=1400 audit(1764797113.893:19655): avc: denied { perfmon } for pid=8048 comm="syz.2.1419" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.459841][ T29] audit: type=1400 audit(1764797113.903:19656): avc: denied { map_create } for pid=8048 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.479215][ T29] audit: type=1400 audit(1764797113.903:19657): avc: denied { map_read map_write } for pid=8048 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.499160][ T29] audit: type=1400 audit(1764797113.903:19658): avc: denied { prog_load } for pid=8048 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.550576][ T8055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.665897][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.711498][ T8060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1424'. [ 158.750931][ T8067] Process accounting resumed [ 158.820859][ T8077] loop1: detected capacity change from 0 to 512 [ 158.827654][ T8077] EXT4-fs: Ignoring removed oldalloc option [ 158.846588][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.870702][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.899869][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1432'. [ 158.987134][ T8052] ================================================================== [ 158.995226][ T8052] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 159.003014][ T8052] [ 159.005314][ T8052] write to 0xffffea0004f2d8d8 of 8 bytes by task 7981 on cpu 1: [ 159.012913][ T8052] __filemap_remove_folio+0x1a5/0x2a0 [ 159.018261][ T8052] filemap_remove_folio+0x6d/0x1d0 [ 159.023349][ T8052] truncate_inode_folio+0x42/0x50 [ 159.028358][ T8052] shmem_undo_range+0x244/0xa80 [ 159.033204][ T8052] shmem_evict_inode+0x134/0x520 [ 159.038114][ T8052] evict+0x2af/0x510 [ 159.041978][ T8052] iput+0x4bd/0x650 [ 159.045760][ T8052] dentry_unlink_inode+0x24f/0x260 [ 159.050843][ T8052] __dentry_kill+0x18d/0x4b0 [ 159.055410][ T8052] dput+0x5e/0xd0 [ 159.059019][ T8052] __fput+0x444/0x650 [ 159.062979][ T8052] ____fput+0x1c/0x30 [ 159.066939][ T8052] task_work_run+0x131/0x1a0 [ 159.071511][ T8052] do_exit+0x493/0x15d0 [ 159.075639][ T8052] do_group_exit+0xff/0x140 [ 159.080118][ T8052] get_signal+0xe58/0xf70 [ 159.084422][ T8052] arch_do_signal_or_restart+0x96/0x450 [ 159.089938][ T8052] irqentry_exit+0xfb/0x560 [ 159.094418][ T8052] asm_exc_page_fault+0x26/0x30 [ 159.099247][ T8052] [ 159.101555][ T8052] read to 0xffffea0004f2d8d8 of 8 bytes by task 8052 on cpu 0: [ 159.109082][ T8052] folio_mapping+0xa1/0xe0 [ 159.113489][ T8052] evict_folios+0xe05/0x3590 [ 159.118060][ T8052] try_to_shrink_lruvec+0x5b5/0x950 [ 159.123243][ T8052] shrink_lruvec+0x22e/0x1b50 [ 159.127893][ T8052] shrink_node+0x686/0x2120 [ 159.132371][ T8052] do_try_to_free_pages+0x3f6/0xcd0 [ 159.137543][ T8052] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 159.143408][ T8052] try_charge_memcg+0x383/0xa10 [ 159.148231][ T8052] obj_cgroup_charge_pages+0xa6/0x150 [ 159.153579][ T8052] __memcg_kmem_charge_page+0x9f/0x170 [ 159.159016][ T8052] __alloc_frozen_pages_noprof+0x188/0x360 [ 159.164798][ T8052] alloc_pages_mpol+0xb3/0x260 [ 159.169537][ T8052] alloc_pages_noprof+0x90/0x130 [ 159.174535][ T8052] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 159.180339][ T8052] __kvmalloc_node_noprof+0x483/0x670 [ 159.185708][ T8052] ip_set_alloc+0x24/0x30 [ 159.190014][ T8052] hash_netiface_create+0x282/0x740 [ 159.195190][ T8052] ip_set_create+0x3cc/0x970 [ 159.199784][ T8052] nfnetlink_rcv_msg+0x4c6/0x590 [ 159.204698][ T8052] netlink_rcv_skb+0x123/0x220 [ 159.209437][ T8052] nfnetlink_rcv+0x167/0x16c0 [ 159.214093][ T8052] netlink_unicast+0x5c0/0x690 [ 159.218830][ T8052] netlink_sendmsg+0x58b/0x6b0 [ 159.223570][ T8052] __sock_sendmsg+0x145/0x180 [ 159.228224][ T8052] ____sys_sendmsg+0x31e/0x4a0 [ 159.232975][ T8052] ___sys_sendmsg+0x17b/0x1d0 [ 159.237639][ T8052] __x64_sys_sendmsg+0xd4/0x160 [ 159.242472][ T8052] x64_sys_call+0x17ba/0x3000 [ 159.247127][ T8052] do_syscall_64+0xd8/0x2a0 [ 159.251610][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.257486][ T8052] [ 159.259784][ T8052] value changed: 0xffff88811b8bed88 -> 0x0000000000000000 [ 159.266952][ T8052] [ 159.269250][ T8052] Reported by Kernel Concurrency Sanitizer on: [ 159.275375][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.3.1421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.286629][ T8052] Tainted: [W]=WARN [ 159.290404][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.300436][ T8052] ================================================================== [ 159.733080][ T8052] syz.3.1421 (8052) used greatest stack depth: 6168 bytes left