last executing test programs: 58.553690023s ago: executing program 2 (id=159): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/96) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000580)={0x0, &(0x7f0000010080)}) write$ppp(r4, &(0x7f0000000400)='k\'', 0x2) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x8}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x70, 0x29, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x9, 0xfff2}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x77}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x80000000, 0x6, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x0, 0x401}}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0xff}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x70}}, 0x20004880) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000000100e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x2e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x8, {0xa, 0x0, 0x4, @mcast1}}, 0x24) 58.551929353s ago: executing program 2 (id=164): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x0, 0xec}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x4be, &(0x7f0000000b00)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xffffff49, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x19bf1184093477a2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200020c0}, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000000000000000020000000000000000000d067c6d6c468b1309809b5ace9f202cf57a41ffd45f234a9ea2684f73f78858a6d1297cdf42fb02098938985c1962d8ab68329ef60308228508264f3b3fe45e01445aa5a710804a322e7421ad5b887e6d025ceab4eba1fc66a0503", @ANYRES32=0x0, @ANYBLOB="010b03000080000014001280090001007665746800000000040002800a00010000e3ffffff000000"], 0x40}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) 58.080189051s ago: executing program 2 (id=177): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000300030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 57.616316018s ago: executing program 2 (id=188): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x7, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r5 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r5, 0x0, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0) fallocate(r0, 0x2, 0x2, 0x3) ioprio_set$pid(0x2, 0x0, 0x0) r6 = socket(0x1d, 0x4, 0xb) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000400)=""/101) close(0x3) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0xb, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30f3ffffffffffff8300000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x7fff}, &(0x7f00000000c0)=0x8) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x42}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) 57.288446497s ago: executing program 2 (id=199): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0xfffffffe) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000003000000440000000010000080a20000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0100000001000000020000000200000000000000", @ANYRES32=r1, @ANYBLOB="000000005b50fc5ed4b24685364b6dd85988a651041874b2915a3460b91c76c4dea42f98d62b11d6cb0806a9c99b233454eda487c49e78"], 0x50) 56.944494977s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000040bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 56.942791297s ago: executing program 32 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000040bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 36.560136923s ago: executing program 1 (id=669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 36.559318503s ago: executing program 1 (id=672): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x60, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 36.42998217s ago: executing program 1 (id=678): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 36.350589745s ago: executing program 1 (id=681): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@shortname_mixed}, {@utf8}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x510d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x213300d, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 36.224298032s ago: executing program 1 (id=682): unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe5ff, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0]}, 0x94) 35.964330017s ago: executing program 1 (id=690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000847b971585000000ad00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7000000}, 0x94) 35.957322288s ago: executing program 33 (id=690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000847b971585000000ad00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7000000}, 0x94) 24.855250554s ago: executing program 4 (id=948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {}]}, 0x1, 0x56e, &(0x7f0000000880)="$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") (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffc}, 0x4000800) (async) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0xd5b4627622fff433}, 0x24000800) (async, rerun: 64) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) (rerun: 64) 24.776959639s ago: executing program 4 (id=949): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900020000000500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 24.578596409s ago: executing program 4 (id=953): unshare(0x2040400) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x8, {0xa, 0x0, 0x4, @mcast1}}, 0x24) (fail_nth: 1) 24.216897061s ago: executing program 4 (id=961): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 23.979094475s ago: executing program 4 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="8b33000000000000800005000000080003"], 0x28}}, 0x0) 23.523686422s ago: executing program 4 (id=968): syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') 8.525125664s ago: executing program 34 (id=968): syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') 2.23941234s ago: executing program 0 (id=1351): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d0425d467a78cd0767d8e5e0e48b01d8a5ba9921b8dc03be2199edadc1c1f20ea8c120b9f532f99c13b84929590146d8fa50c1521840ca7319390aaa194910b45e5cfc9a92ae7c2da42b6ea1fcf4c46ff6a3d180b0bda2b9506c8a0e837ebc47b48ccdb4f56f9d4155d8c55ed83e738b671e40eedc3f0e2e002933010a6e3d694ab3884c2401b0a7627437e931821ca9d6a73c97b008c9f960c5e38082493c9a7491bad7ec690f295092f003df58991d45ea5da87127f5e8e6346826c4bbe88849895dab09523466e26e0f3d3512e6612c8df3b9a5a644b17e94fd9810a2d5a118cb57e9bbd4211a9f95a21baae63abfba198cf4c8301907008a52a986d7d47984967a981be9cee3c27affd476c6faf86a35c844f306998779f6c520d984cb0364f7cde469", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) mlock2(&(0x7f0000b16000/0x1000)=nil, 0x1000, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x1}, 0x0, 0x4, 0x2, {0x4, 0x1}, 0x3, 0x801}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2407b8200500500", "4946115b8e1acab31d9a0ff818a4b70000ca00", "f728d519", "0cb42238c527085d"}, 0x38) sendfile(r1, r3, &(0x7f0000000100)=0xd11, 0xfffd) unshare(0x2040400) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x8, {0xa, 0x0, 0x4, @mcast1}}, 0x24) 2.100159618s ago: executing program 3 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000ffed", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x38, &(0x7f0000000000)=0x8003, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r11 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r11, 0x0, 0x0, 0x8800000) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x75}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc1) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r12 = syz_open_dev$hidraw(&(0x7f0000000000), 0x80000000, 0x2000) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8001, 0x7, 0xb1c}) shutdown(r9, 0x1) 2.081620979s ago: executing program 0 (id=1358): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f5ff000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.002034893s ago: executing program 0 (id=1360): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1.879756501s ago: executing program 0 (id=1365): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4002, 0x10000, 0x20000, 0x4, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0x1, 0x8, 0x3, {{0xb, 0x4, 0x1, 0x10, 0x2c, 0x68, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xb6, [@multicast1]}, @noop, @noop, @generic={0x94, 0x4, "0355"}, @end, @generic={0x94, 0x9, "927a60d6d60f81"}]}}}}}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) bind$nfc_llcp(r2, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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") syz_open_dev$tty1(0xc, 0x4, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x28200, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000012140100", @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, @fallback=0x2d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) r5 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xa3d, 0x4, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.573405518s ago: executing program 7 (id=1368): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x3, 0x5e, 0xc}}, 0xa) 1.318625043s ago: executing program 7 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket$inet6(0xa, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, r6}, 0x14) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)={0x14, r4, 0x1, 0xfffffffe}, 0x14}}, 0x84) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfdfc}}}}}]}, 0x3c}}, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newnexthop={0x1c, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002400048020000180080001006c6f6700140002800600014000030000070002"], 0x78}, 0x1, 0x0, 0x0, 0x4004840}, 0x24044010) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000001d000a38000000050a01030000000000000000020000020900010073797a30"], 0x58}}, 0x20000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 1.240381288s ago: executing program 7 (id=1370): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000001000000000000000001085100000060090ff18000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.107974776s ago: executing program 7 (id=1371): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000100000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 932.706086ms ago: executing program 7 (id=1373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0x80, 0x4) timer_getoverrun(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r4}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r4, @ANYBLOB="e02caa62893f7e332b8f2397f3a98d670aad"], 0x28}}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) 854.98442ms ago: executing program 5 (id=1375): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x101, 0x20, 0x7fff, 0x7}, &(0x7f0000000300)=0x18) 741.861677ms ago: executing program 5 (id=1377): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110020", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 607.556085ms ago: executing program 0 (id=1378): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) 564.256617ms ago: executing program 5 (id=1379): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x3, 0x5e, 0xc}}, 0xa) 562.424427ms ago: executing program 5 (id=1380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100002000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 521.31194ms ago: executing program 5 (id=1382): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000000000000003000500000b000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 398.570817ms ago: executing program 6 (id=1384): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000200000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 326.978421ms ago: executing program 3 (id=1385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 255.977435ms ago: executing program 6 (id=1386): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a", 0x49}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000001, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r2, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 255.701745ms ago: executing program 3 (id=1387): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x101, 0x20, 0x7fff, 0x7}, &(0x7f0000000300)=0x18) 255.186505ms ago: executing program 3 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000053c0002802c00018014000300ff0100000a000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000112c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000002400068014000400"], 0xb8}}, 0x0) 232.929876ms ago: executing program 6 (id=1389): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0), 0x0, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x2, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) (async) pipe(&(0x7f0000000440)) (async) vmsplice(r2, &(0x7f00000003c0), 0x0, 0x2) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.memory_spread_slab\x00', 0x2, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x2, 0x1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 193.959778ms ago: executing program 0 (id=1390): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110023", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 189.491919ms ago: executing program 35 (id=1390): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110023", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 141.609532ms ago: executing program 3 (id=1391): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x3, 0x5e, 0xc}}, 0xa) 141.320082ms ago: executing program 6 (id=1392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100004000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 140.982422ms ago: executing program 5 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x1, [{@broadcast, 0x4}, {@local, 0xffffffff}]}]}}}], 0x28}}], 0x1, 0x4000810) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000600000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_emit_ethernet(0xfffffffffffffec3, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0xa, 0x1, 0x100) syz_open_dev$tty1(0xc, 0x4, 0x2) 132.881582ms ago: executing program 6 (id=1394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 103.153744ms ago: executing program 3 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000fff0", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x38, &(0x7f0000000000)=0x8003, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r11 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r11, 0x0, 0x0, 0x8800000) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x75}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc1) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r12 = syz_open_dev$hidraw(&(0x7f0000000000), 0x80000000, 0x2000) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8001, 0x7, 0xb1c}) shutdown(r9, 0x1) 328.34µs ago: executing program 6 (id=1396): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000300000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 0s ago: executing program 7 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=ANY=[], 0x28}, 0x4004000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x8013, 0x6104f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x6c7de670}]}, 0x27}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): not started [ 63.366729][ T5149] loop1: detected capacity change from 0 to 512 [ 63.383882][ T5149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.425944][ T5149] EXT4-fs (loop1): 1 truncate cleaned up [ 63.439921][ T5158] loop5: detected capacity change from 0 to 512 [ 63.497104][ T5158] ext4: Unknown parameter 'euid' [ 63.528907][ T5176] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.640804][ T5194] loop5: detected capacity change from 0 to 512 [ 63.686945][ T5194] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 63.695742][ T5194] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.709275][ T5199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 63.750495][ T5194] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.538: corrupted inode contents [ 63.799178][ T5194] EXT4-fs (loop5): Remounting filesystem read-only [ 63.810864][ T5194] EXT4-fs (loop5): 1 truncate cleaned up [ 63.816775][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.827405][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.861006][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.885850][ T5225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.549'. [ 63.907860][ T5223] loop1: detected capacity change from 0 to 512 [ 63.933324][ T5223] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 64.009415][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.554'. [ 64.032923][ T5228] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.550: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 64.088244][ T5228] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.550: Bad quota inode: 3, type: 0 [ 64.100086][ T5228] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.122955][ T5228] EXT4-fs (loop0): mount failed [ 64.285010][ T5268] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.296936][ T5268] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 64.317764][ T5268] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.327050][ T5268] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.563: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.340919][ T5268] EXT4-fs (loop5): 1 orphan inode deleted [ 64.410760][ T5272] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 64.431888][ T5272] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.441913][ T5272] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.564: corrupted inode contents [ 64.456880][ T5272] EXT4-fs (loop5): Remounting filesystem read-only [ 64.463680][ T5272] EXT4-fs (loop5): 1 truncate cleaned up [ 64.469540][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.480175][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.510349][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 64.518455][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.687961][ T5305] xt_bpf: check failed: parse error [ 64.696586][ T5306] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.704311][ T5306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.731705][ T5310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.580'. [ 64.749782][ T5299] iso9660: Bad value for 'sbsector' [ 64.790567][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'. [ 64.845758][ T5322] netlink: 'syz.5.586': attribute type 1 has an invalid length. [ 64.878913][ T5322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.912031][ T5322] bond1: (slave ip6gretap1): making interface the new active one [ 64.925307][ T5322] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.214657][ T5362] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.232285][ T5362] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.267233][ T5362] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.293232][ T5362] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 65.313163][ T5362] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.602: corrupted inode contents [ 65.329539][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 65.329557][ T29] audit: type=1400 audit(1769365169.526:566): avc: denied { rmdir } for pid=5363 comm="syz.1.603" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.357740][ T29] audit: type=1400 audit(1769365169.526:567): avc: denied { write } for pid=5370 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.389914][ T5362] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.602: mark_inode_dirty error [ 65.405016][ T5362] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.602: corrupted inode contents [ 65.425385][ T5362] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.602: mark_inode_dirty error [ 65.447900][ T5362] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.602: corrupted inode contents [ 65.460111][ T5362] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 65.469372][ T5362] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.602: corrupted inode contents [ 65.481452][ T5362] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.602: mark_inode_dirty error [ 65.494235][ T5362] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 65.503861][ T5362] EXT4-fs (loop0): 1 truncate cleaned up [ 65.518657][ T5362] 9p: Bad value for 'rfdno' [ 65.543294][ T29] audit: type=1400 audit(1769365169.706:568): avc: denied { mounton } for pid=5361 comm="syz.0.602" path="/126/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.566703][ T29] audit: type=1326 audit(1769365169.726:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.590190][ T29] audit: type=1326 audit(1769365169.726:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.613545][ T29] audit: type=1326 audit(1769365169.726:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.637025][ T29] audit: type=1326 audit(1769365169.726:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.660293][ T29] audit: type=1326 audit(1769365169.726:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.683718][ T29] audit: type=1326 audit(1769365169.726:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.706871][ T29] audit: type=1326 audit(1769365169.726:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799b3dacb9 code=0x7ffc0000 [ 65.790832][ T5385] EXT4-fs: Ignoring removed i_version option [ 65.797194][ T5385] EXT4-fs: Ignoring removed bh option [ 65.828621][ T5385] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.093690][ T5413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=203 sclass=netlink_route_socket pid=5413 comm=syz.4.617 [ 66.132271][ T5416] EXT4-fs: Ignoring removed i_version option [ 66.138476][ T5416] EXT4-fs: Ignoring removed bh option [ 66.158259][ T5418] FAT-fs (loop0): invalid media value (0x00) [ 66.164524][ T5418] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 66.173907][ T5418] FAT-fs (loop0): Can't find a valid FAT filesystem [ 66.218524][ T5416] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.239183][ T5418] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 66.247454][ T5418] FAT-fs (loop0): Filesystem has been set read-only [ 66.269030][ T5426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37648 sclass=netlink_route_socket pid=5426 comm=syz.3.626 [ 66.283371][ T5418] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 66.400382][ T5442] vlan2: entered promiscuous mode [ 66.406320][ T5442] macvtap0: entered promiscuous mode [ 66.511680][ T5458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5458 comm=syz.4.638 [ 66.577294][ T5463] EXT4-fs: Ignoring removed i_version option [ 66.583479][ T5463] EXT4-fs: Ignoring removed bh option [ 66.607883][ T5465] __nla_validate_parse: 4 callbacks suppressed [ 66.607903][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.640'. [ 66.656513][ T5463] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.669130][ T5476] netlink: 104 bytes leftover after parsing attributes in process `syz.1.643'. [ 66.734635][ T5482] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.745790][ T5482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.754516][ T5482] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.645: corrupted inode contents [ 66.773052][ T5482] EXT4-fs (loop4): Remounting filesystem read-only [ 66.784722][ T5482] EXT4-fs (loop4): 1 truncate cleaned up [ 66.790604][ T5489] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.801265][ T5489] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.824066][ T5488] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.646'. [ 66.833327][ T5489] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 66.864046][ T5488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.888819][ T5488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.912645][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 66.979809][ T5504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5504 comm=syz.4.652 [ 67.015174][ T5508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.654'. [ 67.278443][ T5560] netlink: 104 bytes leftover after parsing attributes in process `syz.4.663'. [ 67.306463][ T5562] lo: entered allmulticast mode [ 67.355650][ T5566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5566 comm=syz.4.666 [ 67.393919][ T5569] netlink: 104 bytes leftover after parsing attributes in process `syz.1.668'. [ 67.502569][ T5578] xt_bpf: check failed: parse error [ 67.592681][ T3481] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 67.601960][ T5595] 9p: Bad value for 'rfdno' [ 67.643336][ T5597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5597 comm=syz.1.678 [ 67.656834][ T5597] netlink: 88 bytes leftover after parsing attributes in process `syz.1.678'. [ 67.714599][ T3481] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 67.739513][ T5605] set_capacity_and_notify: 13 callbacks suppressed [ 67.739542][ T5605] loop1: detected capacity change from 0 to 128 [ 67.845216][ T5607] netlink: 104 bytes leftover after parsing attributes in process `syz.4.683'. [ 67.972682][ T5620] netlink: 'syz.0.689': attribute type 20 has an invalid length. [ 67.980531][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 67.993336][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.994665][ T5620] netlink: 'syz.0.689': attribute type 20 has an invalid length. [ 68.002404][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.020487][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.030398][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.085696][ T5624] xt_bpf: check failed: parse error [ 68.118810][ T5526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.129274][ T5526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.147518][ T5629] loop4: detected capacity change from 0 to 512 [ 68.217687][ T5526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.228139][ T5526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.306318][ T5526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.316757][ T5526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.365477][ T5526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.376030][ T5526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.429626][ T5662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5662 comm=syz.3.704 [ 68.548446][ T5670] FAULT_INJECTION: forcing a failure. [ 68.548446][ T5670] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.561722][ T5670] CPU: 1 UID: 0 PID: 5670 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.561788][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.561804][ T5670] Call Trace: [ 68.561813][ T5670] [ 68.561930][ T5670] __dump_stack+0x1d/0x30 [ 68.561961][ T5670] dump_stack_lvl+0x95/0xd0 [ 68.561988][ T5670] dump_stack+0x15/0x1b [ 68.562160][ T5670] should_fail_ex+0x263/0x280 [ 68.562187][ T5670] should_fail+0xb/0x20 [ 68.562209][ T5670] should_fail_usercopy+0x1a/0x20 [ 68.562243][ T5670] _copy_from_user+0x1c/0xb0 [ 68.562296][ T5670] do_sock_getsockopt+0xf1/0x210 [ 68.562327][ T5670] __x64_sys_getsockopt+0x11d/0x1a0 [ 68.562360][ T5670] x64_sys_call+0x2dc7/0x3000 [ 68.562459][ T5670] do_syscall_64+0xc0/0x2a0 [ 68.562524][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.562553][ T5670] RIP: 0033:0x7f4baca5acb9 [ 68.562621][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.562645][ T5670] RSP: 002b:00007f4bab4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.562669][ T5670] RAX: ffffffffffffffda RBX: 00007f4baccd5fa0 RCX: 00007f4baca5acb9 [ 68.562687][ T5670] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 68.562719][ T5670] RBP: 00007f4bab4b7090 R08: 0000200000000400 R09: 0000000000000000 [ 68.562732][ T5670] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.562761][ T5670] R13: 00007f4baccd6038 R14: 00007f4baccd5fa0 R15: 00007ffd35595708 [ 68.562787][ T5670] [ 68.753183][ T5526] bridge_slave_1: left allmulticast mode [ 68.759179][ T5526] bridge_slave_1: left promiscuous mode [ 68.764969][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.792115][ T5526] bridge_slave_0: left allmulticast mode [ 68.798015][ T5526] bridge_slave_0: left promiscuous mode [ 68.803985][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.855392][ T5685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.988894][ T5694] loop4: detected capacity change from 0 to 164 [ 69.075492][ T5526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.085619][ T5526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.096136][ T5526] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 69.105756][ T5526] bond0 (unregistering): Released all slaves [ 69.113973][ T5526] team0: Port device bond1 removed [ 69.120527][ T5526] bond1 (unregistering): Released all slaves [ 69.230583][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.238053][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.246602][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.254059][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.270203][ T5526] hsr0: left allmulticast mode [ 69.281770][ T5526] veth1_macvtap: left promiscuous mode [ 69.297489][ T5526] veth0_macvtap: left promiscuous mode [ 69.307625][ T5526] veth1_vlan: left promiscuous mode [ 69.317834][ T5526] veth0_vlan: left promiscuous mode [ 69.404597][ T5526] team0 (unregistering): Port device team_slave_1 removed [ 69.415748][ T5526] team0 (unregistering): Port device team_slave_0 removed [ 69.466894][ T5630] chnl_net:caif_netlink_parms(): no params data found [ 69.577172][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.585081][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.618777][ T5630] bridge_slave_0: entered allmulticast mode [ 69.626477][ T5630] bridge_slave_0: entered promiscuous mode [ 69.634038][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.641200][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.651577][ T5630] bridge_slave_1: entered allmulticast mode [ 69.658343][ T5630] bridge_slave_1: entered promiscuous mode [ 69.761930][ T5741] loop4: detected capacity change from 0 to 256 [ 69.780807][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.843881][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.857675][ T5747] FAULT_INJECTION: forcing a failure. [ 69.857675][ T5747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.871143][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.5.719 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.871171][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.871184][ T5747] Call Trace: [ 69.871247][ T5747] [ 69.871254][ T5747] __dump_stack+0x1d/0x30 [ 69.871280][ T5747] dump_stack_lvl+0x95/0xd0 [ 69.871306][ T5747] dump_stack+0x15/0x1b [ 69.871369][ T5747] should_fail_ex+0x263/0x280 [ 69.871390][ T5747] should_fail+0xb/0x20 [ 69.871408][ T5747] should_fail_usercopy+0x1a/0x20 [ 69.871475][ T5747] _copy_from_user+0x1c/0xb0 [ 69.871509][ T5747] sctp_getsockopt_pf_expose+0x71/0x340 [ 69.871613][ T5747] sctp_getsockopt+0x40a/0xaa0 [ 69.871648][ T5747] sock_common_getsockopt+0x60/0x70 [ 69.871682][ T5747] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 69.871714][ T5747] do_sock_getsockopt+0x1c4/0x210 [ 69.871795][ T5747] __x64_sys_getsockopt+0x11d/0x1a0 [ 69.871828][ T5747] x64_sys_call+0x2dc7/0x3000 [ 69.871861][ T5747] do_syscall_64+0xc0/0x2a0 [ 69.871914][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.872005][ T5747] RIP: 0033:0x7f08b3a2acb9 [ 69.872025][ T5747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.872046][ T5747] RSP: 002b:00007f08b2466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 69.872067][ T5747] RAX: ffffffffffffffda RBX: 00007f08b3ca6090 RCX: 00007f08b3a2acb9 [ 69.872213][ T5747] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000004 [ 69.872226][ T5747] RBP: 00007f08b2466090 R08: 0000200000000400 R09: 0000000000000000 [ 69.872298][ T5747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.872315][ T5747] R13: 00007f08b3ca6128 R14: 00007f08b3ca6090 R15: 00007ffe4e42f048 [ 69.872340][ T5747] [ 69.885497][ T5630] team0: Port device team_slave_0 added [ 70.099058][ T5630] team0: Port device team_slave_1 added [ 70.129935][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.137061][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.164073][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.218008][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.225845][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.251957][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.433502][ T5630] hsr_slave_0: entered promiscuous mode [ 70.439831][ T5630] hsr_slave_1: entered promiscuous mode [ 70.447123][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 70.452921][ T5630] Cannot create hsr debugfs directory [ 70.629747][ T5796] loop4: detected capacity change from 0 to 512 [ 70.645106][ T5796] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.690821][ T5796] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.749114][ T5630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.757758][ T5796] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.735: corrupted inode contents [ 70.781875][ T5630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.789183][ T5796] EXT4-fs (loop4): Remounting filesystem read-only [ 70.812623][ T5796] EXT4-fs (loop4): 1 truncate cleaned up [ 70.820563][ T5535] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.831351][ T5535] __quota_error: 28 callbacks suppressed [ 70.831370][ T5535] Quota error (device loop4): write_blk: dquota write failed [ 70.845384][ T5535] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 70.855705][ T5535] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.867237][ T5535] Quota error (device loop4): write_blk: dquota write failed [ 70.875057][ T5535] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 70.889335][ T5630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.902741][ T5535] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.907141][ T5630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.913102][ T5535] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 70.929646][ T5535] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.940196][ T5796] EXT4-fs mount: 66 callbacks suppressed [ 70.940211][ T5796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.996820][ T5819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5819 comm=syz.0.740 [ 71.021576][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.045361][ T5816] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 71.126866][ T5816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.201254][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.213202][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.275435][ T5526] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.282607][ T5526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.313208][ T29] audit: type=1400 audit(1769365175.506:598): avc: denied { bind } for pid=5844 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.342832][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.350029][ T5526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.373587][ T5847] xt_bpf: check failed: parse error [ 71.439375][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.606626][ T5868] 9p: Bad value for 'rfdno' [ 71.619181][ T29] audit: type=1400 audit(1769365175.806:599): avc: denied { kexec_image_load } for pid=5867 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 71.805155][ T5890] __nla_validate_parse: 10 callbacks suppressed [ 71.805176][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.757'. [ 71.853575][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.861046][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.886610][ T5903] loop4: detected capacity change from 0 to 736 [ 71.894019][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.901453][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.937514][ T29] audit: type=1400 audit(1769365176.126:600): avc: denied { read } for pid=5902 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.026444][ T5915] loop4: detected capacity change from 0 to 512 [ 72.039803][ T5915] EXT4-fs: Ignoring removed i_version option [ 72.045928][ T5915] EXT4-fs: Ignoring removed bh option [ 72.073378][ T5630] veth0_vlan: entered promiscuous mode [ 72.081785][ T5630] veth1_vlan: entered promiscuous mode [ 72.100125][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.116280][ T5630] veth0_macvtap: entered promiscuous mode [ 72.124735][ T5630] veth1_macvtap: entered promiscuous mode [ 72.136014][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.143912][ T5915] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.157783][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.177600][ T5526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.210315][ T5526] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.220221][ T5526] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.229240][ T5526] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.231480][ T29] audit: type=1400 audit(1769365176.416:601): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/root/syzkaller.iYSw9k/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.248058][ T5924] netlink: 104 bytes leftover after parsing attributes in process `syz.5.764'. [ 72.317294][ T5927] FAULT_INJECTION: forcing a failure. [ 72.317294][ T5927] name failslab, interval 1, probability 0, space 0, times 1 [ 72.330306][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.330337][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.330424][ T5927] Call Trace: [ 72.330432][ T5927] [ 72.330441][ T5927] __dump_stack+0x1d/0x30 [ 72.330473][ T5927] dump_stack_lvl+0x95/0xd0 [ 72.330509][ T5927] dump_stack+0x15/0x1b [ 72.330585][ T5927] should_fail_ex+0x263/0x280 [ 72.330612][ T5927] should_failslab+0x8c/0xb0 [ 72.330638][ T5927] __kvmalloc_node_noprof+0x148/0x680 [ 72.330784][ T5927] ? traverse+0xa2/0x3a0 [ 72.330866][ T5927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.330914][ T5927] traverse+0xa2/0x3a0 [ 72.330968][ T5927] ? __fget_files+0x184/0x1c0 [ 72.330993][ T5927] seq_lseek+0xb5/0x170 [ 72.331030][ T5927] proc_reg_llseek+0x10c/0x180 [ 72.331066][ T5927] __x64_sys_lseek+0xe8/0x160 [ 72.331109][ T5927] x64_sys_call+0x285d/0x3000 [ 72.331142][ T5927] do_syscall_64+0xc0/0x2a0 [ 72.331187][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.331209][ T5927] RIP: 0033:0x7f799b3dacb9 [ 72.331224][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.331249][ T5927] RSP: 002b:00007f7999e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 72.331275][ T5927] RAX: ffffffffffffffda RBX: 00007f799b655fa0 RCX: 00007f799b3dacb9 [ 72.331294][ T5927] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 72.331310][ T5927] RBP: 00007f7999e37090 R08: 0000000000000000 R09: 0000000000000000 [ 72.331373][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.331385][ T5927] R13: 00007f799b656038 R14: 00007f799b655fa0 R15: 00007fff5c337878 [ 72.331411][ T5927] [ 72.557134][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.775736][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.778'. [ 72.799306][ T5958] loop4: detected capacity change from 0 to 512 [ 72.836476][ T5958] EXT4-fs: Ignoring removed i_version option [ 72.842738][ T5958] EXT4-fs: Ignoring removed bh option [ 72.885206][ T5962] bond1: Removing last ns target with arp_interval on [ 72.903492][ T5958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.946169][ T5958] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.958962][ T5970] FAULT_INJECTION: forcing a failure. [ 72.958962][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.972232][ T5970] CPU: 1 UID: 0 PID: 5970 Comm: syz.6.782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.972266][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.972319][ T5970] Call Trace: [ 72.972326][ T5970] [ 72.972336][ T5970] __dump_stack+0x1d/0x30 [ 72.972368][ T5970] dump_stack_lvl+0x95/0xd0 [ 72.972397][ T5970] dump_stack+0x15/0x1b [ 72.972435][ T5970] should_fail_ex+0x263/0x280 [ 72.972461][ T5970] should_fail+0xb/0x20 [ 72.972518][ T5970] should_fail_usercopy+0x1a/0x20 [ 72.972548][ T5970] _copy_to_user+0x20/0xa0 [ 72.972583][ T5970] simple_read_from_buffer+0xb5/0x130 [ 72.972637][ T5970] proc_fail_nth_read+0x10e/0x150 [ 72.972675][ T5970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.972712][ T5970] vfs_read+0x1ab/0x7f0 [ 72.972752][ T5970] ? __rcu_read_unlock+0x4e/0x70 [ 72.972822][ T5970] ? __fget_files+0x184/0x1c0 [ 72.972884][ T5970] ? mutex_lock+0x57/0x90 [ 72.972905][ T5970] ksys_read+0xdc/0x1a0 [ 72.972965][ T5970] __x64_sys_read+0x40/0x50 [ 72.973054][ T5970] x64_sys_call+0x2889/0x3000 [ 72.973094][ T5970] do_syscall_64+0xc0/0x2a0 [ 72.973126][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.973175][ T5970] RIP: 0033:0x7f38f8f1b58e [ 72.973205][ T5970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.973229][ T5970] RSP: 002b:00007f38f79b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.973255][ T5970] RAX: ffffffffffffffda RBX: 00007f38f79b76c0 RCX: 00007f38f8f1b58e [ 72.973274][ T5970] RDX: 000000000000000f RSI: 00007f38f79b70a0 RDI: 0000000000000004 [ 72.973287][ T5970] RBP: 00007f38f79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.973303][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.973337][ T5970] R13: 00007f38f91d6038 R14: 00007f38f91d5fa0 R15: 00007ffc517c9e58 [ 72.973359][ T5970] [ 73.183336][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.250291][ T5978] loop4: detected capacity change from 0 to 512 [ 73.295532][ T5981] tmpfs: Bad value for 'mpol' [ 73.320085][ T5978] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.332966][ T5978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.342967][ T5978] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.784: corrupted inode contents [ 73.359912][ T5936] loop5: detected capacity change from 0 to 1024 [ 73.379038][ T5978] EXT4-fs (loop4): Remounting filesystem read-only [ 73.399710][ T5936] EXT4-fs: Ignoring removed bh option [ 73.410563][ T5978] EXT4-fs (loop4): 1 truncate cleaned up [ 73.416839][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.427547][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.444908][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.456958][ T5936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.469070][ T5978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.515026][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.536436][ T5936] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.767: Allocating blocks 497-513 which overlap fs metadata [ 73.571300][ T5936] EXT4-fs (loop5): Remounting filesystem read-only [ 73.645390][ T6009] xt_bpf: check failed: parse error [ 73.684110][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.717228][ T6013] EXT4-fs (loop5): unable to read superblock [ 73.761245][ T6017] loop0: detected capacity change from 0 to 256 [ 73.810023][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.818724][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.838485][ T6019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 73.950999][ T6032] loop5: detected capacity change from 0 to 128 [ 73.969341][ T6035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 73.991381][ T6034] tipc: Started in network mode [ 73.996427][ T6034] tipc: Node identity 1ff, cluster identity 4069 [ 74.002866][ T6034] tipc: Node number set to 511 [ 74.046138][ T6032] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.069001][ T6032] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.141453][ T6049] macvlan1: entered promiscuous mode [ 74.158464][ T6049] macvlan1: left promiscuous mode [ 74.189609][ T4074] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.294305][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 74.294573][ T6062] process 'syz.4.814' launched '/dev/fd/4' with NULL argv: empty string added [ 74.391719][ T6072] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 74.499906][ T6088] loop5: detected capacity change from 0 to 128 [ 74.520934][ T6094] loop3: detected capacity change from 0 to 128 [ 74.538552][ T6088] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.560397][ T6099] pim6reg: entered allmulticast mode [ 74.573445][ T6097] pim6reg: left allmulticast mode [ 74.588845][ T6088] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.610776][ T6094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.626905][ T6094] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.679495][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.717075][ T6114] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 74.752451][ T6114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.782861][ T6114] bond3: (slave ip6gretap1): making interface the new active one [ 74.792035][ T6114] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 74.915770][ T6135] netlink: 144 bytes leftover after parsing attributes in process `syz.4.841'. [ 74.935329][ T6138] loop6: detected capacity change from 0 to 512 [ 74.955448][ T6138] EXT4-fs: Ignoring removed i_version option [ 74.961638][ T6138] EXT4-fs: Ignoring removed bh option [ 74.996802][ T6138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.016691][ T6133] SELinux: failed to load policy [ 75.089617][ T6138] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.150121][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.196346][ T6159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.847'. [ 75.251001][ T6163] loop6: detected capacity change from 0 to 512 [ 75.297048][ T6163] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 75.313619][ T6163] EXT4-fs (loop6): 1 truncate cleaned up [ 75.320477][ T6163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.361831][ T4074] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.436737][ T6170] loop5: detected capacity change from 0 to 512 [ 75.495025][ T6170] EXT4-fs: Ignoring removed i_version option [ 75.510732][ T6170] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 75.522030][ T6170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 75.532834][ T6170] System zones: 1-12 [ 75.537051][ T6170] EXT4-fs (loop5): orphan cleanup on readonly fs [ 75.544720][ T6170] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.852: invalid indirect mapped block 12 (level 1) [ 75.565413][ T6170] EXT4-fs (loop5): Remounting filesystem read-only [ 75.572208][ T6170] EXT4-fs (loop5): 1 truncate cleaned up [ 75.579503][ T6170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 75.614189][ T6170] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.852: error -117 reading directory block [ 75.648648][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 75.674471][ T6182] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 75.703023][ T6182] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.855: corrupted inode contents [ 75.718753][ T6182] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #11: comm syz.5.855: mark_inode_dirty error [ 75.731142][ T6182] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.855: invalid indirect mapped block 1 (level 1) [ 75.745193][ T6182] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.855: corrupted inode contents [ 75.758776][ T6182] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 75.767742][ T6182] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #11: comm syz.5.855: corrupted inode contents [ 75.779925][ T6182] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.855: mark_inode_dirty error [ 75.791925][ T6182] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 75.801080][ T6182] EXT4-fs (loop5): 1 truncate cleaned up [ 75.807380][ T6182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.864080][ T6182] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.855: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 75.928447][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.940675][ T6192] EXT4-fs: Ignoring removed i_version option [ 75.946899][ T6192] EXT4-fs: Ignoring removed bh option [ 75.986454][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 75.986469][ T29] audit: type=1400 audit(1769365180.176:622): avc: denied { relabelfrom } for pid=6195 comm="syz.5.858" name="NETLINK" dev="sockfs" ino=13813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.023314][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.041348][ T29] audit: type=1400 audit(1769365180.206:623): avc: denied { relabelto } for pid=6195 comm="syz.5.858" name="NETLINK" dev="sockfs" ino=13813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 76.092138][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.103248][ T6192] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.157212][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.235476][ T6208] xt_bpf: check failed: parse error [ 76.301939][ T29] audit: type=1400 audit(1769365180.486:624): avc: denied { create } for pid=6219 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 76.380170][ T29] audit: type=1326 audit(1769365180.526:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08b3a2acb9 code=0x7ffc0000 [ 76.403635][ T29] audit: type=1326 audit(1769365180.526:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08b3a2acb9 code=0x7ffc0000 [ 76.427215][ T29] audit: type=1326 audit(1769365180.526:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08b3a2acb9 code=0x7ffc0000 [ 76.450606][ T29] audit: type=1326 audit(1769365180.526:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08b3a2acb9 code=0x7ffc0000 [ 76.474055][ T29] audit: type=1326 audit(1769365180.526:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b3a2acb9 code=0x7ffc0000 [ 76.497454][ T29] audit: type=1326 audit(1769365180.526:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f08b3a2aa22 code=0x7ffc0000 [ 76.520733][ T29] audit: type=1326 audit(1769365180.526:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6219 comm="syz.5.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f08b3a2aab7 code=0x7ffc0000 [ 76.567750][ T6239] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 76.619739][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.876'. [ 76.629833][ T6239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 76.761961][ T6255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.784861][ T6255] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.816244][ T6266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6266 comm=syz.5.883 [ 76.895418][ T6266] netlink: 60 bytes leftover after parsing attributes in process `syz.5.883'. [ 76.908323][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.934320][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.941614][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.011661][ T6262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.021198][ T6262] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.039091][ T6262] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 77.083574][ T6272] EXT4-fs: inline encryption not supported [ 77.154751][ T6262] netlink: 'syz.4.882': attribute type 2 has an invalid length. [ 77.165907][ T6272] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 77.174373][ T6272] EXT4-fs (loop6): orphan cleanup on readonly fs [ 77.200381][ T6272] EXT4-fs (loop6): 1 orphan inode deleted [ 77.208311][ T5535] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 77.242732][ T6272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.263160][ T6272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.289778][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.887'. [ 77.500244][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'. [ 77.555812][ T6307] EXT4-fs: Ignoring removed i_version option [ 77.561900][ T6307] EXT4-fs: Ignoring removed bh option [ 77.587911][ T6307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.601701][ T6307] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.629129][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.644458][ T6311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6311 comm=syz.5.908 [ 77.657083][ T6311] netlink: 60 bytes leftover after parsing attributes in process `syz.5.908'. [ 77.721563][ T6315] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 77.793335][ T6315] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.898: corrupted inode contents [ 77.838009][ T6315] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #11: comm syz.4.898: mark_inode_dirty error [ 77.864655][ T6315] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.898: invalid indirect mapped block 1 (level 1) [ 77.894294][ T6315] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.898: corrupted inode contents [ 77.929309][ T6315] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 77.948170][ T6315] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #11: comm syz.4.898: corrupted inode contents [ 77.989174][ T6315] EXT4-fs error (device loop4): ext4_truncate:4635: inode #11: comm syz.4.898: mark_inode_dirty error [ 78.012795][ T6315] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 78.030218][ T6336] set_capacity_and_notify: 7 callbacks suppressed [ 78.030240][ T6336] loop0: detected capacity change from 0 to 512 [ 78.037573][ T6315] EXT4-fs (loop4): 1 truncate cleaned up [ 78.049957][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.5.910'. [ 78.062358][ T6315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.103597][ T6336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.111287][ T6336] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.131304][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6343 comm=syz.3.911 [ 78.131423][ T6343] netlink: 52 bytes leftover after parsing attributes in process `syz.3.911'. [ 78.173123][ T6315] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.898: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 78.210973][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.321894][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.380275][ T6366] netlink: 124 bytes leftover after parsing attributes in process `syz.0.916'. [ 78.455635][ T6371] netlink: 104 bytes leftover after parsing attributes in process `syz.3.918'. [ 78.536816][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 78.545732][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 78.604374][ T6381] tc_dump_action: action bad kind [ 78.724708][ T6390] xt_bpf: check failed: parse error [ 78.844480][ T6410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6410 comm=syz.6.934 [ 78.860076][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.867299][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.886251][ T6337] delete_channel: no stack [ 78.896843][ T6409] loop4: detected capacity change from 0 to 2048 [ 78.909737][ T6409] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 78.923283][ T6412] loop0: detected capacity change from 0 to 128 [ 78.961615][ T6412] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.961776][ T6412] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.019280][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.150736][ T6440] loop5: detected capacity change from 0 to 512 [ 79.171250][ T6440] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.943: iget: bad i_size value: 38620345925642 [ 79.199691][ T6444] macvtap1: entered promiscuous mode [ 79.205455][ T6444] bridge0: entered promiscuous mode [ 79.211024][ T6444] macvtap1: entered allmulticast mode [ 79.217214][ T6444] bridge0: entered allmulticast mode [ 79.227180][ T6444] bridge0: port 3(macvtap1) entered blocking state [ 79.228048][ T6440] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.943: couldn't read orphan inode 15 (err -117) [ 79.233802][ T6444] bridge0: port 3(macvtap1) entered disabled state [ 79.258478][ T6444] bridge0: left allmulticast mode [ 79.263648][ T6444] bridge0: left promiscuous mode [ 79.271766][ T6440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.303604][ T6454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6454 comm=syz.4.949 [ 79.316868][ T6452] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 79.325647][ T6427] bridge0: port 3(macvtap1) entered blocking state [ 79.332227][ T6427] bridge0: port 3(macvtap1) entered disabled state [ 79.339106][ T6427] macvtap1: entered allmulticast mode [ 79.345123][ T6427] bridge0: entered allmulticast mode [ 79.350873][ T6427] macvtap1: left allmulticast mode [ 79.356129][ T6427] bridge0: left allmulticast mode [ 79.366660][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.380963][ T6455] loop0: detected capacity change from 0 to 512 [ 79.397169][ T6457] loop6: detected capacity change from 0 to 128 [ 79.427878][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.428389][ T6455] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.463743][ T6455] EXT4-fs (loop0): mount failed [ 79.498438][ T6457] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.511448][ T6466] FAULT_INJECTION: forcing a failure. [ 79.511448][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.525329][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.4.953 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.525429][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.525446][ T6466] Call Trace: [ 79.525456][ T6466] [ 79.525466][ T6466] __dump_stack+0x1d/0x30 [ 79.525504][ T6466] dump_stack_lvl+0x95/0xd0 [ 79.525534][ T6466] dump_stack+0x15/0x1b [ 79.525569][ T6466] should_fail_ex+0x263/0x280 [ 79.525595][ T6466] should_fail+0xb/0x20 [ 79.525619][ T6466] should_fail_usercopy+0x1a/0x20 [ 79.525785][ T6466] _copy_from_user+0x1c/0xb0 [ 79.525830][ T6466] __sys_connect+0xd0/0x2a0 [ 79.525907][ T6466] __x64_sys_connect+0x3f/0x50 [ 79.526076][ T6466] x64_sys_call+0x2e09/0x3000 [ 79.526109][ T6466] do_syscall_64+0xc0/0x2a0 [ 79.526147][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.526175][ T6466] RIP: 0033:0x7fc4d875acb9 [ 79.526191][ T6466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.526261][ T6466] RSP: 002b:00007fc4d71b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 79.526287][ T6466] RAX: ffffffffffffffda RBX: 00007fc4d89d5fa0 RCX: 00007fc4d875acb9 [ 79.526371][ T6466] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000003 [ 79.526386][ T6466] RBP: 00007fc4d71b7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.526403][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.526419][ T6466] R13: 00007fc4d89d6038 R14: 00007fc4d89d5fa0 R15: 00007ffd2b0890e8 [ 79.526456][ T6466] [ 79.696871][ T6471] tmpfs: Bad value for 'mpol' [ 79.704123][ T6457] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.722208][ T6471] loop5: detected capacity change from 0 to 512 [ 79.834902][ T5630] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.879907][ T6488] loop6: detected capacity change from 0 to 512 [ 79.963289][ T6488] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 79.979814][ T6488] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.995776][ T6488] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.963: corrupted inode contents [ 80.028724][ T6488] EXT4-fs (loop6): Remounting filesystem read-only [ 80.040150][ T6488] EXT4-fs (loop6): 1 truncate cleaned up [ 80.047264][ T5535] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.057865][ T5535] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.099774][ T5535] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.111238][ T6488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.167133][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.296894][ T6501] loop6: detected capacity change from 0 to 1024 [ 80.319333][ T6501] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 80.329175][ T6501] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 80.355234][ T6501] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.386137][ T6501] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #5: comm syz.6.977: unexpected bad inode w/o EXT4_IGET_BAD [ 80.407101][ T6505] loop3: detected capacity change from 0 to 512 [ 80.414006][ T6505] EXT4-fs: inline encryption not supported [ 80.434129][ T6501] EXT4-fs (loop6): no journal found [ 80.439402][ T6501] EXT4-fs (loop6): can't get journal size [ 80.455881][ T6505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 80.465641][ T6501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.495987][ T6501] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.6.977: path /32/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 80.502741][ T6505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.543979][ T6505] EXT4-fs (loop3): 1 orphan inode deleted [ 80.549884][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 80.563506][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.577338][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.625857][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.763658][ T6517] FAULT_INJECTION: forcing a failure. [ 80.763658][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.776976][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.5.972 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.777009][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.777022][ T6517] Call Trace: [ 80.777028][ T6517] [ 80.777099][ T6517] __dump_stack+0x1d/0x30 [ 80.777134][ T6517] dump_stack_lvl+0x95/0xd0 [ 80.777177][ T6517] dump_stack+0x15/0x1b [ 80.777205][ T6517] should_fail_ex+0x263/0x280 [ 80.777277][ T6517] should_fail+0xb/0x20 [ 80.777301][ T6517] should_fail_usercopy+0x1a/0x20 [ 80.777332][ T6517] _copy_to_user+0x20/0xa0 [ 80.777367][ T6517] simple_read_from_buffer+0xb5/0x130 [ 80.777493][ T6517] proc_fail_nth_read+0x10e/0x150 [ 80.777599][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.777643][ T6517] vfs_read+0x1ab/0x7f0 [ 80.777687][ T6517] ? rxrpc_connect+0x161/0x300 [ 80.777741][ T6517] ? __pfx_rxrpc_connect+0x10/0x10 [ 80.777770][ T6517] ? __sys_connect+0x20a/0x2a0 [ 80.777793][ T6517] ksys_read+0xdc/0x1a0 [ 80.777853][ T6517] __x64_sys_read+0x40/0x50 [ 80.777898][ T6517] x64_sys_call+0x2889/0x3000 [ 80.777955][ T6517] do_syscall_64+0xc0/0x2a0 [ 80.778017][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.778039][ T6517] RIP: 0033:0x7f08b39eb58e [ 80.778059][ T6517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.778085][ T6517] RSP: 002b:00007f08b2486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.778139][ T6517] RAX: ffffffffffffffda RBX: 00007f08b24876c0 RCX: 00007f08b39eb58e [ 80.778159][ T6517] RDX: 000000000000000f RSI: 00007f08b24870a0 RDI: 0000000000000004 [ 80.778176][ T6517] RBP: 00007f08b2487090 R08: 0000000000000000 R09: 0000000000000000 [ 80.778194][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.778211][ T6517] R13: 00007f08b3ca6038 R14: 00007f08b3ca5fa0 R15: 00007ffe4e42f048 [ 80.778236][ T6517] [ 81.013859][ T6519] bond0: entered promiscuous mode [ 81.019064][ T6519] bond_slave_0: entered promiscuous mode [ 81.024947][ T6519] bond_slave_1: entered promiscuous mode [ 81.072582][ T6519] bond0: left promiscuous mode [ 81.077459][ T6519] bond_slave_0: left promiscuous mode [ 81.083083][ T6519] bond_slave_1: left promiscuous mode [ 81.197213][ T6525] netlink: 'syz.5.975': attribute type 1 has an invalid length. [ 81.258239][ T6527] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 81.278619][ T6527] EXT4-fs (loop6): orphan cleanup on readonly fs [ 81.286592][ T6525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.304985][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 81.305021][ T29] audit: type=1400 audit(1769365185.496:691): avc: denied { bind } for pid=6534 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.355313][ T6527] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.978: corrupted inode contents [ 81.376809][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.406698][ T6527] EXT4-fs (loop6): Remounting filesystem read-only [ 81.413714][ T6527] EXT4-fs (loop6): 1 truncate cleaned up [ 81.419642][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.431167][ T37] Quota error (device loop6): write_blk: dquota write failed [ 81.438936][ T37] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 81.449111][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.460452][ T37] Quota error (device loop6): write_blk: dquota write failed [ 81.468069][ T37] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 81.480444][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.491329][ T37] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 81.500422][ T37] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 81.510936][ T6527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.552690][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.614074][ T29] audit: type=1400 audit(1769365185.796:692): avc: denied { ioctl } for pid=6542 comm="syz.6.983" path="socket:[15577]" dev="sockfs" ino=15577 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.020189][ T29] audit: type=1400 audit(1769365186.206:693): avc: denied { getopt } for pid=6544 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.292290][ T29] audit: type=1326 audit(1769365186.476:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca5acb9 code=0x7ffc0000 [ 82.355801][ T6573] __nla_validate_parse: 9 callbacks suppressed [ 82.355818][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 82.391999][ T6573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.400196][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.411934][ T6585] FAT-fs (loop3): bogus number of FAT sectors [ 82.418585][ T6585] FAT-fs (loop3): Can't find a valid FAT filesystem [ 82.446929][ T6573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.454422][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.502022][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6590 comm=syz.6.990 [ 82.643028][ T6597] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.746469][ T6597] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.813351][ T6597] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 82.855909][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.968186][ T6624] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.996854][ T6624] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.104089][ T6633] set_capacity_and_notify: 7 callbacks suppressed [ 83.104129][ T6633] loop6: detected capacity change from 0 to 256 [ 83.169237][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.263416][ T6643] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1003'. [ 83.362782][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 83.385760][ T6653] netlink: 'syz.6.1005': attribute type 1 has an invalid length. [ 83.438941][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.493801][ T6662] bond1: (slave ip6gretap1): making interface the new active one [ 83.599397][ T6662] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 83.900692][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'. [ 84.206624][ T6701] bond3: Removing last ns target with arp_interval on [ 84.346607][ T6716] lo: entered allmulticast mode [ 84.398282][ T6716] lo: left allmulticast mode [ 84.538618][ T6725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6725 comm=syz.0.1025 [ 84.741447][ T6737] xt_bpf: check failed: parse error [ 84.825004][ T6735] loop0: detected capacity change from 0 to 512 [ 84.831673][ T6735] msdos: Bad value for 'umask' [ 85.206723][ T6752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6752 comm=syz.3.1037 [ 85.464535][ T6766] xt_bpf: check failed: parse error [ 85.524756][ T6765] loop6: detected capacity change from 0 to 8192 [ 85.529836][ T6728] syz.0.1026 (6728) used greatest stack depth: 7224 bytes left [ 85.555013][ T6770] loop3: detected capacity change from 0 to 512 [ 85.584954][ T3306] loop6: p2 p3 p4 < > [ 85.589552][ T3306] loop6: p2 size 590592 extends beyond EOD, truncated [ 85.598093][ T6770] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.608254][ T3306] loop6: p3 start 589824 is beyond EOD, truncated [ 85.626547][ T6765] loop6: p2 p3 p4 < > [ 85.627336][ T6770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.640999][ T6765] loop6: p2 size 590592 extends beyond EOD, truncated [ 85.657292][ T6765] loop6: p3 start 589824 is beyond EOD, truncated [ 85.665745][ T6770] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1046: corrupted inode contents [ 85.716165][ T6770] EXT4-fs (loop3): Remounting filesystem read-only [ 85.770319][ T6770] EXT4-fs (loop3): 1 truncate cleaned up [ 85.776244][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.786853][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.799494][ T6781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6781 comm=syz.6.1049 [ 85.800712][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 85.823568][ T3967] udevd[3967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 85.832742][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.870054][ T3967] udevd[3967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 85.882071][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 85.892444][ T6770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.994080][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.042674][ T6796] loop6: detected capacity change from 0 to 1024 [ 86.101599][ T6796] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1054: Failed to acquire dquot type 0 [ 86.141449][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'. [ 86.150998][ T6796] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 86.207241][ T6796] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.1054: corrupted inode contents [ 86.238696][ T6796] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #13: comm syz.6.1054: mark_inode_dirty error [ 86.254582][ T6796] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.1054: corrupted inode contents [ 86.272255][ T6796] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.1054: mark_inode_dirty error [ 86.310888][ T6814] loop3: detected capacity change from 0 to 128 [ 86.311502][ T6796] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.1054: corrupted inode contents [ 86.338058][ T6796] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 86.343245][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6816 comm=syz.5.1061 [ 86.360681][ T6796] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.1054: corrupted inode contents [ 86.388942][ T6814] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.415632][ T6796] EXT4-fs error (device loop6): ext4_truncate:4635: inode #13: comm syz.6.1054: mark_inode_dirty error [ 86.427430][ T6796] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 86.433050][ T6814] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.438134][ T6796] EXT4-fs (loop6): 1 truncate cleaned up [ 86.453694][ T6796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.510319][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.549244][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 86.549278][ T29] audit: type=1400 audit(1769365190.726:739): avc: denied { watch_reads } for pid=6822 comm="syz.0.1065" path="/230" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.599384][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.608760][ T6831] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1064'. [ 86.609090][ T6825] loop5: detected capacity change from 0 to 512 [ 86.651124][ T6833] loop0: detected capacity change from 0 to 128 [ 86.665720][ T6833] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.741140][ T6825] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 86.753385][ T6833] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.771834][ T6825] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.822232][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.832622][ T6825] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1066: corrupted inode contents [ 86.878143][ T29] audit: type=1400 audit(1769365191.056:740): avc: denied { connect } for pid=6844 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.898685][ T29] audit: type=1400 audit(1769365191.056:741): avc: denied { ioctl } for pid=6844 comm="syz.3.1071" path="socket:[16055]" dev="sockfs" ino=16055 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.924644][ T29] audit: type=1400 audit(1769365191.056:742): avc: denied { bind } for pid=6844 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.944177][ T29] audit: type=1400 audit(1769365191.066:743): avc: denied { create } for pid=6844 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 86.972032][ T6825] EXT4-fs (loop5): Remounting filesystem read-only [ 86.983436][ T29] audit: type=1400 audit(1769365191.176:744): avc: denied { setattr } for pid=6844 comm="syz.3.1071" name="NFC_RAW" dev="sockfs" ino=16876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.984000][ T6825] EXT4-fs (loop5): 1 truncate cleaned up [ 87.011996][ T410] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.022785][ T410] Quota error (device loop5): write_blk: dquota write failed [ 87.030542][ T410] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 87.041371][ T410] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.047297][ T6847] loop0: detected capacity change from 0 to 512 [ 87.052104][ T410] Quota error (device loop5): write_blk: dquota write failed [ 87.065830][ T6849] netlink: 'syz.6.1073': attribute type 1 has an invalid length. [ 87.074213][ T410] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 87.090992][ T6849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.130428][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1074'. [ 87.139838][ T6847] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.148041][ T6847] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.154240][ T410] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 87.157536][ T6847] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1072: Failed to acquire dquot type 1 [ 87.176465][ T6825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.196286][ T6847] EXT4-fs (loop0): Remounting filesystem read-only [ 87.203643][ T6847] EXT4-fs (loop0): 1 truncate cleaned up [ 87.232043][ T6847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.364876][ T6872] loop3: detected capacity change from 0 to 512 [ 87.416452][ T6872] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1078: invalid indirect mapped block 4294967295 (level 1) [ 87.431601][ T6872] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1078: invalid indirect mapped block 4294967295 (level 1) [ 87.452864][ T6872] EXT4-fs (loop3): 2 truncates cleaned up [ 87.496499][ T6872] EXT4-fs (loop3): shut down requested (0) [ 87.515141][ T6872] netlink: 'syz.3.1078': attribute type 2 has an invalid length. [ 87.974199][ T6901] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.976878][ T6906] xt_bpf: check failed: parse error [ 87.989265][ T6901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.997785][ T6901] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1090: corrupted inode contents [ 88.011817][ T6901] EXT4-fs (loop3): Remounting filesystem read-only [ 88.019037][ T6901] EXT4-fs (loop3): 1 truncate cleaned up [ 88.025006][ T5535] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.036342][ T5535] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.047530][ T5535] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.100513][ T6911] tmpfs: Bad value for 'mpol' [ 88.492108][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1111'. [ 88.603504][ T6945] FAULT_INJECTION: forcing a failure. [ 88.603504][ T6945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.616697][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.6.1103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.616726][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.616741][ T6945] Call Trace: [ 88.616750][ T6945] [ 88.616760][ T6945] __dump_stack+0x1d/0x30 [ 88.616794][ T6945] dump_stack_lvl+0x95/0xd0 [ 88.616877][ T6945] dump_stack+0x15/0x1b [ 88.616905][ T6945] should_fail_ex+0x263/0x280 [ 88.616934][ T6945] should_fail+0xb/0x20 [ 88.616953][ T6945] should_fail_usercopy+0x1a/0x20 [ 88.617008][ T6945] _copy_to_user+0x20/0xa0 [ 88.617039][ T6945] simple_read_from_buffer+0xb5/0x130 [ 88.617147][ T6945] proc_fail_nth_read+0x10e/0x150 [ 88.617176][ T6945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.617287][ T6945] vfs_read+0x1ab/0x7f0 [ 88.617332][ T6945] ? __rcu_read_unlock+0x4e/0x70 [ 88.617356][ T6945] ? __fget_files+0x184/0x1c0 [ 88.617387][ T6945] ? mutex_lock+0x57/0x90 [ 88.617416][ T6945] ksys_read+0xdc/0x1a0 [ 88.617493][ T6945] __x64_sys_read+0x40/0x50 [ 88.617536][ T6945] x64_sys_call+0x2889/0x3000 [ 88.617641][ T6945] do_syscall_64+0xc0/0x2a0 [ 88.617672][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.617694][ T6945] RIP: 0033:0x7f38f8f1b58e [ 88.617713][ T6945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.617800][ T6945] RSP: 002b:00007f38f79b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.617825][ T6945] RAX: ffffffffffffffda RBX: 00007f38f79b76c0 RCX: 00007f38f8f1b58e [ 88.617839][ T6945] RDX: 000000000000000f RSI: 00007f38f79b70a0 RDI: 0000000000000004 [ 88.617852][ T6945] RBP: 00007f38f79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.617866][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.617883][ T6945] R13: 00007f38f91d6038 R14: 00007f38f91d5fa0 R15: 00007ffc517c9e58 [ 88.617911][ T6945] [ 88.631616][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6947 comm=syz.3.1104 [ 88.828514][ T6947] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1104'. [ 88.884911][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 88.894421][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 88.927399][ T6955] syz.0.1108 (6955) used obsolete PPPIOCDETACH ioctl [ 88.943677][ T6951] netlink: 'syz.3.1106': attribute type 14 has an invalid length. [ 88.951570][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 89.047662][ T6960] set_capacity_and_notify: 1 callbacks suppressed [ 89.047681][ T6960] loop5: detected capacity change from 0 to 1764 [ 89.164697][ T6972] loop5: detected capacity change from 0 to 128 [ 89.197539][ T6972] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.395162][ T6991] loop6: detected capacity change from 0 to 512 [ 89.418058][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 89.426929][ T3373] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.450583][ T6991] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.492712][ T1030] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.505735][ T7001] fido_id[7001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.535998][ T1030] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.579896][ T7003] fido_id[7003]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.597897][ T7002] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 89.629955][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 89.673597][ T7010] loop3: detected capacity change from 0 to 128 [ 89.714598][ T7010] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.743687][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1130'. [ 89.841129][ T7017] syzkaller0: entered promiscuous mode [ 89.846841][ T7017] syzkaller0: entered allmulticast mode [ 89.860693][ T7023] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1135'. [ 89.906560][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 89.913266][ T7025] xt_bpf: check failed: parse error [ 89.933114][ T7017] vlan2: entered promiscuous mode [ 89.939998][ T7017] dummy0: entered promiscuous mode [ 89.948302][ T7029] loop5: detected capacity change from 0 to 136 [ 90.073560][ T7037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7037 comm=syz.0.1141 [ 90.101637][ T7040] loop5: detected capacity change from 0 to 256 [ 90.102752][ T7037] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1141'. [ 90.152892][ T7040] netlink: 'syz.5.1142': attribute type 12 has an invalid length. [ 90.225263][ T7046] loop0: detected capacity change from 0 to 256 [ 90.753209][ T7074] dvmrp0: entered allmulticast mode [ 90.768990][ T7077] loop3: detected capacity change from 0 to 512 [ 90.793282][ T7077] EXT4-fs: Ignoring removed i_version option [ 90.799339][ T7077] EXT4-fs: Ignoring removed bh option [ 90.845371][ T7077] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.012159][ T7088] loop0: detected capacity change from 0 to 512 [ 91.035549][ T7088] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 91.046182][ T7088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.065353][ T7088] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.1160: corrupted inode contents [ 91.077602][ T7088] EXT4-fs (loop0): Remounting filesystem read-only [ 91.084407][ T7088] EXT4-fs (loop0): 1 truncate cleaned up [ 91.090202][ T5526] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.101488][ T5526] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.112719][ T5526] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.126954][ T7093] 9p: Bad value for 'rfdno' [ 91.354096][ T7111] loop0: detected capacity change from 0 to 1024 [ 91.368481][ T7111] EXT4-fs: Ignoring removed bh option [ 91.380710][ T7111] EXT4-fs: inline encryption not supported [ 91.393678][ T7111] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.420550][ T7111] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1169: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.454307][ T7111] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1169: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.469607][ T7111] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1169: Failed to acquire dquot type 0 [ 91.483759][ T7111] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.493468][ T7111] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1169: mark_inode_dirty error [ 91.506017][ T7111] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 91.518152][ T7111] EXT4-fs (loop0): 1 orphan inode deleted [ 91.537795][ T5526] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.568697][ T5526] __quota_error: 31 callbacks suppressed [ 91.568783][ T5526] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 91.583061][ T5526] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 91.597263][ T7111] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm syz.0.1169: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.630165][ T7111] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 91.639233][ T7111] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 255 [ 91.648875][ T7111] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1169: Failed to acquire dquot type 0 [ 91.677655][ T3317] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.692017][ T3317] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.701808][ T3317] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 91.796134][ T7127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7127 comm=syz.0.1173 [ 91.875321][ T7128] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.956985][ T7139] EXT4-fs: Ignoring removed i_version option [ 91.963129][ T7139] EXT4-fs: Ignoring removed bh option [ 91.995534][ T7139] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.220366][ T29] audit: type=1400 audit(1769365196.406:758): avc: denied { ioctl } for pid=7157 comm="syz.6.1185" path="socket:[18538]" dev="sockfs" ino=18538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.271537][ T29] audit: type=1400 audit(1769365196.456:759): avc: denied { bind } for pid=7157 comm="syz.6.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.290970][ T29] audit: type=1400 audit(1769365196.456:760): avc: denied { write } for pid=7157 comm="syz.6.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.340372][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7167 comm=syz.6.1186 [ 92.663059][ T7181] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 92.755157][ T7187] EXT4-fs: Ignoring removed i_version option [ 92.761313][ T7187] EXT4-fs: Ignoring removed bh option [ 92.805008][ T7187] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.856059][ T29] audit: type=1400 audit(1769365197.046:761): avc: denied { connect } for pid=7189 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.875724][ T29] audit: type=1400 audit(1769365197.046:762): avc: denied { setopt } for pid=7189 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.895210][ T29] audit: type=1400 audit(1769365197.046:763): avc: denied { read } for pid=7189 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.912008][ T7199] xt_policy: neither incoming nor outgoing policy selected [ 92.944747][ T7202] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 92.967124][ T7201] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.999071][ T7202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.014748][ T7201] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 2: comm syz.6.1198: invalid block [ 93.055175][ T7198] EXT4-fs: Ignoring removed orlov option [ 93.065047][ T7202] bond2: (slave ip6gretap1): making interface the new active one [ 93.077285][ T7201] EXT4-fs (loop6): Remounting filesystem read-only [ 93.091565][ T7202] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 93.266944][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.275282][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.282917][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.290501][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.298484][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.306726][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.314226][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.321763][ T10] hid-generic 0005:5B44:0004.0008: unknown main item tag 0x0 [ 93.392572][ T29] audit: type=1400 audit(1769365197.556:764): avc: denied { ioctl } for pid=7217 comm="syz.6.1205" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.493143][ T10] hid-generic 0005:5B44:0004.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 94.062369][ T7247] set_capacity_and_notify: 7 callbacks suppressed [ 94.062388][ T7247] loop0: detected capacity change from 0 to 512 [ 94.138528][ T7247] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 94.150791][ T7247] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.171655][ T7247] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.1215: corrupted inode contents [ 94.198600][ T7247] EXT4-fs (loop0): Remounting filesystem read-only [ 94.209852][ T7247] EXT4-fs (loop0): 1 truncate cleaned up [ 94.215910][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.226546][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.288754][ T7261] loop5: detected capacity change from 0 to 512 [ 94.306685][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.359906][ T7261] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.379389][ T7261] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1220: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 94.416402][ T7261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 94.440424][ T7261] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1220: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 94.459053][ T7261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 94.468746][ T7267] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1220: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 94.487169][ T7261] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1220: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 94.507818][ T7267] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 94.517087][ T7261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 94.526961][ T7267] 9p: Bad value for 'rfdno' [ 94.532320][ T7261] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1220: bg 0: block 18: invalid block bitmap [ 94.546476][ T7261] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1220: Failed to acquire dquot type 1 [ 94.607392][ T7272] netlink: 'syz.5.1222': attribute type 1 has an invalid length. [ 94.634914][ T7272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.139284][ T7294] loop0: detected capacity change from 0 to 1024 [ 95.194413][ T7294] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.389620][ T7306] loop3: detected capacity change from 0 to 512 [ 95.474870][ T7306] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.523064][ T7306] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.555927][ T7306] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1232: corrupted inode contents [ 95.578464][ T7313] loop6: detected capacity change from 0 to 256 [ 95.639610][ T7306] EXT4-fs (loop3): Remounting filesystem read-only [ 95.679310][ T7306] EXT4-fs (loop3): 1 truncate cleaned up [ 95.692770][ T5535] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.704249][ T5535] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.737498][ T7322] loop0: detected capacity change from 0 to 1024 [ 95.742754][ T5535] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.765983][ T7313] FAT-fs (loop6): Directory bread(block 64) failed [ 95.792255][ T5539] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.792686][ T7313] FAT-fs (loop6): Directory bread(block 65) failed [ 95.803867][ T5539] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.842898][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 95.856599][ T7313] FAT-fs (loop6): Directory bread(block 66) failed [ 95.864805][ T7326] loop0: detected capacity change from 0 to 512 [ 95.903014][ T7326] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.925304][ T7313] FAT-fs (loop6): Directory bread(block 67) failed [ 95.936693][ T5539] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.946588][ T5539] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.966676][ T7326] __nla_validate_parse: 5 callbacks suppressed [ 95.966699][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 95.982396][ T7313] FAT-fs (loop6): Directory bread(block 68) failed [ 95.992603][ T7313] FAT-fs (loop6): Directory bread(block 69) failed [ 96.013301][ T7326] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 96.021288][ T7326] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 96.041292][ T7313] FAT-fs (loop6): Directory bread(block 70) failed [ 96.073641][ T7313] FAT-fs (loop6): Directory bread(block 71) failed [ 96.080270][ T7313] FAT-fs (loop6): Directory bread(block 72) failed [ 96.099740][ T5539] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.110325][ T5539] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.120320][ T7313] FAT-fs (loop6): Directory bread(block 73) failed [ 96.195877][ T5539] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.205831][ T5539] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.378193][ T7343] loop0: detected capacity change from 0 to 8192 [ 96.422546][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 96.504416][ T7350] gretap0: entered promiscuous mode [ 96.580783][ T5539] bridge_slave_1: left allmulticast mode [ 96.586558][ T5539] bridge_slave_1: left promiscuous mode [ 96.592296][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.623603][ T5539] bridge_slave_0: left allmulticast mode [ 96.629414][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.673831][ T7370] loop3: detected capacity change from 0 to 1024 [ 96.682087][ T7370] EXT4-fs: inline encryption not supported [ 96.722341][ T7370] EXT4-fs: old and new quota format mixing [ 96.729937][ T7373] FAULT_INJECTION: forcing a failure. [ 96.729937][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.743779][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.5.1250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.743818][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.743896][ T7373] Call Trace: [ 96.743903][ T7373] [ 96.743911][ T7373] __dump_stack+0x1d/0x30 [ 96.743944][ T7373] dump_stack_lvl+0x95/0xd0 [ 96.743974][ T7373] dump_stack+0x15/0x1b [ 96.744002][ T7373] should_fail_ex+0x263/0x280 [ 96.744030][ T7373] should_fail+0xb/0x20 [ 96.744182][ T7373] should_fail_usercopy+0x1a/0x20 [ 96.744206][ T7373] _copy_to_user+0x20/0xa0 [ 96.744233][ T7373] simple_read_from_buffer+0xb5/0x130 [ 96.744281][ T7373] proc_fail_nth_read+0x10e/0x150 [ 96.744358][ T7373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.744394][ T7373] vfs_read+0x1ab/0x7f0 [ 96.744429][ T7373] ? __fget_files+0x184/0x1c0 [ 96.744457][ T7373] ? __rcu_read_unlock+0x4e/0x70 [ 96.744547][ T7373] ? __fget_files+0x184/0x1c0 [ 96.744570][ T7373] ? mutex_lock+0x57/0x90 [ 96.744598][ T7373] ksys_read+0xdc/0x1a0 [ 96.744675][ T7373] __x64_sys_read+0x40/0x50 [ 96.744801][ T7373] x64_sys_call+0x2889/0x3000 [ 96.744836][ T7373] do_syscall_64+0xc0/0x2a0 [ 96.744893][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.744968][ T7373] RIP: 0033:0x7f08b39eb58e [ 96.744989][ T7373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.745014][ T7373] RSP: 002b:00007f08b2486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.745055][ T7373] RAX: ffffffffffffffda RBX: 00007f08b24876c0 RCX: 00007f08b39eb58e [ 96.745074][ T7373] RDX: 000000000000000f RSI: 00007f08b24870a0 RDI: 0000000000000006 [ 96.745092][ T7373] RBP: 00007f08b2487090 R08: 0000000000000000 R09: 0000000000000000 [ 96.745110][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.745183][ T7373] R13: 00007f08b3ca6038 R14: 00007f08b3ca5fa0 R15: 00007ffe4e42f048 [ 96.745205][ T7373] [ 97.055750][ T5539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.066669][ T5539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.078369][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 97.078389][ T29] audit: type=1400 audit(1769365201.276:846): avc: denied { map } for pid=7381 comm="syz.6.1254" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 97.082006][ T7382] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 97.086104][ T29] audit: type=1400 audit(1769365201.276:847): avc: denied { execute } for pid=7381 comm="syz.6.1254" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 97.142197][ T5539] bond0 (unregistering): Released all slaves [ 97.152892][ T5539] bond1 (unregistering): (slave veth3): Releasing active interface [ 97.161054][ T29] audit: type=1400 audit(1769365201.346:848): avc: denied { create } for pid=7379 comm="syz.5.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.183119][ T5539] bond1 (unregistering): Released all slaves [ 97.211199][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1253'. [ 97.224624][ T7385] bridge1: entered promiscuous mode [ 97.255822][ T7380] bond5: option min_links: invalid value (18446744073709551601) [ 97.263709][ T7380] bond5: option min_links: allowed values 0 - 2147483647 [ 97.273173][ T7380] bond5 (unregistering): Released all slaves [ 97.305042][ T5539] hsr_slave_0: left promiscuous mode [ 97.310959][ T5539] hsr_slave_1: left promiscuous mode [ 97.316954][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.325153][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.343922][ T5539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.352021][ T5539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.366944][ T5539] veth0_macvtap: left allmulticast mode [ 97.373416][ T5539] veth1_macvtap: left promiscuous mode [ 97.379198][ T5539] veth0_macvtap: left promiscuous mode [ 97.385956][ T5539] veth1_vlan: left promiscuous mode [ 97.391339][ T5539] veth0_vlan: left promiscuous mode [ 97.472460][ T7394] capability: warning: `syz.0.1257' uses deprecated v2 capabilities in a way that may be insecure [ 97.525843][ T5539] team0 (unregistering): Port device team_slave_1 removed [ 97.545356][ T5539] team0 (unregistering): Port device team_slave_0 removed [ 97.591501][ T7403] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 97.623740][ T7403] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.646046][ T29] audit: type=1400 audit(1769365201.836:849): avc: denied { map } for pid=7411 comm="syz.3.1263" path="socket:[19061]" dev="sockfs" ino=19061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 97.649363][ T7412] xt_connbytes: Forcing CT accounting to be enabled [ 97.730232][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.738835][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.749381][ T7316] bridge_slave_0: entered allmulticast mode [ 97.756846][ T7316] bridge_slave_0: entered promiscuous mode [ 97.764453][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.771722][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.779134][ T7316] bridge_slave_1: entered allmulticast mode [ 97.786080][ T7316] bridge_slave_1: entered promiscuous mode [ 97.809959][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.838160][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.858780][ T29] audit: type=1400 audit(1769365202.046:850): avc: denied { append } for pid=7421 comm="syz.3.1265" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 97.910923][ T7316] team0: Port device team_slave_0 added [ 97.919642][ T7316] team0: Port device team_slave_1 added [ 97.936447][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.943557][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.969556][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.991791][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.998828][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.025067][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.104278][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1268'. [ 98.171554][ T7316] hsr_slave_0: entered promiscuous mode [ 98.197057][ T7316] hsr_slave_1: entered promiscuous mode [ 98.262331][ T7449] loop5: detected capacity change from 0 to 256 [ 98.300592][ T7316] debugfs: 'hsr0' already exists in 'hsr' [ 98.307067][ T7316] Cannot create hsr debugfs directory [ 98.339026][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 98.531498][ T7316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.542121][ T3373] hid_parser_main: 161 callbacks suppressed [ 98.542212][ T3373] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 98.564612][ T7316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.574776][ T3373] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.583277][ T7316] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.611408][ T7316] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.636059][ T7475] fido_id[7475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.703347][ T7488] FAULT_INJECTION: forcing a failure. [ 98.703347][ T7488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.716628][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.6.1280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.716716][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.716733][ T7488] Call Trace: [ 98.716740][ T7488] [ 98.716749][ T7488] __dump_stack+0x1d/0x30 [ 98.716806][ T7488] dump_stack_lvl+0x95/0xd0 [ 98.716836][ T7488] dump_stack+0x15/0x1b [ 98.716946][ T7488] should_fail_ex+0x263/0x280 [ 98.717003][ T7488] should_fail+0xb/0x20 [ 98.717025][ T7488] should_fail_usercopy+0x1a/0x20 [ 98.717049][ T7488] _copy_from_user+0x1c/0xb0 [ 98.717079][ T7488] __sys_connect+0xd0/0x2a0 [ 98.717191][ T7488] __x64_sys_connect+0x3f/0x50 [ 98.717214][ T7488] x64_sys_call+0x2e09/0x3000 [ 98.717261][ T7488] do_syscall_64+0xc0/0x2a0 [ 98.717422][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.717508][ T7488] RIP: 0033:0x7f38f8f5acb9 [ 98.717526][ T7488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.717545][ T7488] RSP: 002b:00007f38f79b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 98.717571][ T7488] RAX: ffffffffffffffda RBX: 00007f38f91d5fa0 RCX: 00007f38f8f5acb9 [ 98.717589][ T7488] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000003 [ 98.717651][ T7488] RBP: 00007f38f79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.717667][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.717684][ T7488] R13: 00007f38f91d6038 R14: 00007f38f91d5fa0 R15: 00007ffc517c9e58 [ 98.717710][ T7488] [ 98.804679][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.836014][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1281'. [ 98.901324][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.912099][ T7493] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 98.929516][ T7316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.939986][ T7316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.954198][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.955580][ T29] audit: type=1400 audit(1769365203.106:851): avc: denied { create } for pid=7492 comm="syz.6.1282" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.961352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.982283][ T29] audit: type=1400 audit(1769365203.106:852): avc: denied { read } for pid=7492 comm="syz.6.1282" name="file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.011450][ T29] audit: type=1400 audit(1769365203.106:853): avc: denied { open } for pid=7492 comm="syz.6.1282" path="/112/file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.034368][ T29] audit: type=1400 audit(1769365203.116:854): avc: denied { relabelto } for pid=7492 comm="syz.6.1282" name="file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 99.062963][ T29] audit: type=1400 audit(1769365203.116:855): avc: denied { associate } for pid=7492 comm="syz.6.1282" name="file0" dev="tmpfs" ino=600 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 99.092350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.099476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.298195][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.307137][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 99.328859][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.394542][ T7520] fido_id[7520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.431987][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 99.484172][ T7534] xt_hashlimit: overflow, try lower: 3/0 [ 99.500031][ T7539] loop0: detected capacity change from 0 to 512 [ 99.657166][ T7550] FAULT_INJECTION: forcing a failure. [ 99.657166][ T7550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.670336][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.3.1293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.670387][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.670520][ T7550] Call Trace: [ 99.670530][ T7550] [ 99.670541][ T7550] __dump_stack+0x1d/0x30 [ 99.670699][ T7550] dump_stack_lvl+0x95/0xd0 [ 99.670727][ T7550] dump_stack+0x15/0x1b [ 99.670751][ T7550] should_fail_ex+0x263/0x280 [ 99.670779][ T7550] should_fail+0xb/0x20 [ 99.670853][ T7550] should_fail_usercopy+0x1a/0x20 [ 99.670885][ T7550] _copy_to_user+0x20/0xa0 [ 99.670916][ T7550] simple_read_from_buffer+0xb5/0x130 [ 99.671024][ T7550] proc_fail_nth_read+0x10e/0x150 [ 99.671062][ T7550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.671089][ T7550] vfs_read+0x1ab/0x7f0 [ 99.671122][ T7550] ? rxrpc_connect+0x1b5/0x300 [ 99.671179][ T7550] ? __pfx_rxrpc_connect+0x10/0x10 [ 99.671210][ T7550] ? __sys_connect+0x20a/0x2a0 [ 99.671315][ T7550] ksys_read+0xdc/0x1a0 [ 99.671394][ T7550] __x64_sys_read+0x40/0x50 [ 99.671434][ T7550] x64_sys_call+0x2889/0x3000 [ 99.671477][ T7550] do_syscall_64+0xc0/0x2a0 [ 99.671524][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.671566][ T7550] RIP: 0033:0x7f4baca1b58e [ 99.671587][ T7550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.671681][ T7550] RSP: 002b:00007f4bab4b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.671704][ T7550] RAX: ffffffffffffffda RBX: 00007f4bab4b76c0 RCX: 00007f4baca1b58e [ 99.671720][ T7550] RDX: 000000000000000f RSI: 00007f4bab4b70a0 RDI: 0000000000000004 [ 99.671778][ T7550] RBP: 00007f4bab4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.671792][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.671805][ T7550] R13: 00007f4baccd6038 R14: 00007f4baccd5fa0 R15: 00007ffd35595708 [ 99.671825][ T7550] [ 99.966070][ T7316] veth0_vlan: entered promiscuous mode [ 99.983624][ T7316] veth1_vlan: entered promiscuous mode [ 99.996199][ T7561] loop0: detected capacity change from 0 to 512 [ 100.022342][ T7316] veth0_macvtap: entered promiscuous mode [ 100.031994][ T7316] veth1_macvtap: entered promiscuous mode [ 100.039922][ T7561] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1294: couldn't read orphan inode 26 (err -116) [ 100.049774][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.062059][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.072400][ T7561] EXT4-fs (loop0): Remounting filesystem read-only [ 100.079616][ T7561] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.106182][ T5535] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.116072][ T7566] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 100.176645][ T5535] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.202374][ T5535] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.226813][ T5535] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243847][ T7575] loop5: detected capacity change from 0 to 512 [ 100.311074][ T7575] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.326732][ T7575] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.378948][ T7575] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1299: corrupted inode contents [ 100.433076][ T7601] netlink: 'syz.3.1306': attribute type 11 has an invalid length. [ 100.443192][ T7575] EXT4-fs (loop5): Remounting filesystem read-only [ 100.464825][ T7575] EXT4-fs (loop5): 1 truncate cleaned up [ 100.471489][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.482287][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.503540][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 100.533787][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 100.548519][ T7609] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 100.556394][ T7609] netlink: 'syz.0.1308': attribute type 2 has an invalid length. [ 100.571858][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 100.580833][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 100.586726][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 100.702028][ T7616] loop6: detected capacity change from 0 to 2048 [ 100.896687][ T7637] loop6: detected capacity change from 0 to 512 [ 100.906111][ T7639] netlink: 'syz.0.1320': attribute type 21 has an invalid length. [ 100.914301][ T7639] netlink: 'syz.0.1320': attribute type 5 has an invalid length. [ 100.922057][ T7639] netlink: 'syz.0.1320': attribute type 6 has an invalid length. [ 100.949017][ T7644] loop5: detected capacity change from 0 to 512 [ 100.964346][ T7637] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 100.988841][ T7637] EXT4-fs (loop6): orphan cleanup on readonly fs [ 101.052960][ T7637] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1321: corrupted inode contents [ 101.065472][ T7637] EXT4-fs (loop6): Remounting filesystem read-only [ 101.072766][ T7637] EXT4-fs (loop6): 1 truncate cleaned up [ 101.082722][ T5535] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.094044][ T5535] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.161277][ T5535] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.181833][ T7637] EXT4-fs mount: 40 callbacks suppressed [ 101.181850][ T7637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.266585][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.381066][ T7683] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 101.439722][ T7692] bond_slave_0: entered promiscuous mode [ 101.445480][ T7692] bond_slave_1: entered promiscuous mode [ 101.451802][ T7688] bond_slave_0: left promiscuous mode [ 101.457331][ T7688] bond_slave_1: left promiscuous mode [ 101.516367][ T7703] loop7: detected capacity change from 0 to 512 [ 101.543505][ T7706] loop6: detected capacity change from 0 to 512 [ 101.556699][ T7703] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1345: invalid indirect mapped block 256 (level 2) [ 101.588278][ T7703] EXT4-fs (loop7): 2 truncates cleaned up [ 101.594892][ T7703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.608634][ T7706] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 101.627074][ T7706] EXT4-fs (loop6): orphan cleanup on readonly fs [ 101.652005][ T7706] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1346: corrupted inode contents [ 101.679002][ T7706] EXT4-fs (loop6): Remounting filesystem read-only [ 101.686306][ T7706] EXT4-fs (loop6): 1 truncate cleaned up [ 101.695691][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.706374][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.724484][ T7718] __nla_validate_parse: 4 callbacks suppressed [ 101.724505][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'. [ 101.742989][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.755063][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'. [ 101.764750][ T7706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.782223][ T7316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.819859][ T7721] loop3: detected capacity change from 0 to 1024 [ 101.826841][ T7721] EXT4-fs: Ignoring removed nobh option [ 101.860345][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.897131][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.945683][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.995113][ T7742] netlink: 'syz.3.1356': attribute type 1 has an invalid length. [ 102.017260][ T7740] loop6: detected capacity change from 0 to 512 [ 102.054668][ T7742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 102.099065][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.1355: corrupted inode contents [ 102.143491][ T7740] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.1355: mark_inode_dirty error [ 102.182992][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.1355: corrupted inode contents [ 102.195322][ T7740] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1355: mark_inode_dirty error [ 102.217530][ T7740] __quota_error: 33 callbacks suppressed [ 102.217550][ T7740] Quota error (device loop6): write_blk: dquota write failed [ 102.241516][ T7740] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 102.272859][ T7740] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1355: Failed to acquire dquot type 0 [ 102.358008][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1355: corrupted inode contents [ 102.380330][ T7740] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.1355: mark_inode_dirty error [ 102.425535][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1355: corrupted inode contents [ 102.438817][ T7740] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1355: mark_inode_dirty error [ 102.481842][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1355: corrupted inode contents [ 102.505331][ T7740] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 102.534558][ T7740] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1355: corrupted inode contents [ 102.548267][ T7740] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.1355: mark_inode_dirty error [ 102.578213][ T7768] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 102.586367][ T7768] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.593623][ T7740] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 102.605392][ T7768] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1367: corrupted inode contents [ 102.768923][ T7768] EXT4-fs (loop5): Remounting filesystem read-only [ 102.788477][ T7768] EXT4-fs (loop5): 1 truncate cleaned up [ 102.795232][ T5552] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.806568][ T5552] Quota error (device loop5): write_blk: dquota write failed [ 102.814011][ T5552] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 102.824044][ T5552] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.835298][ T5552] Quota error (device loop5): write_blk: dquota write failed [ 102.843148][ T5552] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 102.854144][ T5552] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 102.865128][ T5552] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 102.875211][ T5552] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.877618][ T7740] EXT4-fs (loop6): 1 truncate cleaned up [ 102.891298][ T7768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.908511][ T7740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.952763][ T7740] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.966019][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.989997][ T7763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.042405][ T7763] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1365'. [ 103.085666][ T29] audit: type=1326 audit(1769365463.278:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baee3acb9 code=0x7ffc0000 [ 103.117787][ T29] audit: type=1326 audit(1769365463.278:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.7.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baee3acb9 code=0x7ffc0000 [ 103.198647][ T5630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.418150][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /312/file1: bad entry in directory: inode out of bounds - offset=92, inode=196624, rec_len=16, size=1024 fake=0 [ 103.559250][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1383'. [ 103.568302][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1383'. [ 103.583372][ T7813] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 103.602521][ T7813] EXT4-fs (loop5): orphan cleanup on readonly fs [ 103.604839][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'. [ 103.620334][ T7813] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1382: corrupted inode contents [ 103.660243][ T7813] EXT4-fs (loop5): Remounting filesystem read-only [ 103.668704][ T7813] EXT4-fs (loop5): 1 truncate cleaned up [ 103.675708][ T5535] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.686395][ T5535] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.697439][ T5535] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 103.727125][ T7813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.770173][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 103.781411][ T7803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.791900][ T5535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.802420][ T5535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.858031][ T5535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.868707][ T5535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.895062][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.955417][ T5535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.966000][ T5535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.977586][ T7843] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 103.984727][ T7844] EXT4-fs: Ignoring removed i_version option [ 103.991441][ T7844] EXT4-fs: Ignoring removed bh option [ 104.006822][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.019936][ T7844] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.038886][ T7843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 104.057634][ T3001] ================================================================== [ 104.065792][ T3001] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 104.074162][ T3001] [ 104.076540][ T3001] write to 0xffff8881162a7538 of 8 bytes by task 3303 on cpu 0: [ 104.084188][ T3001] inode_set_ctime_current+0x592/0x810 [ 104.089791][ T3001] simple_unlink+0x2d/0x80 [ 104.094263][ T3001] shmem_unlink+0x12d/0x140 [ 104.098815][ T3001] vfs_unlink+0x28b/0x440 [ 104.103166][ T3001] do_unlinkat+0x1e2/0x4b0 [ 104.107604][ T3001] __x64_sys_unlink+0x2e/0x40 [ 104.112309][ T3001] x64_sys_call+0x2f48/0x3000 [ 104.117036][ T3001] do_syscall_64+0xc0/0x2a0 [ 104.121585][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.127508][ T3001] [ 104.129857][ T3001] read to 0xffff8881162a7538 of 8 bytes by task 3001 on cpu 1: [ 104.137442][ T3001] atime_needs_update+0x2ef/0x3e0 [ 104.142505][ T3001] touch_atime+0x4a/0x340 [ 104.146871][ T3001] do_readlinkat+0x13d/0x340 [ 104.151606][ T3001] __x64_sys_readlink+0x47/0x60 [ 104.156508][ T3001] x64_sys_call+0x2af1/0x3000 [ 104.161224][ T3001] do_syscall_64+0xc0/0x2a0 [ 104.165763][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.171690][ T3001] [ 104.174036][ T3001] value changed: 0x0000000069765fd7 -> 0x0000000069765fd8 [ 104.181158][ T3001] [ 104.183502][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 104.189679][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.199093][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.209175][ T3001] ================================================================== [ 104.302242][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.320150][ T5535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.330676][ T5535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.421691][ T5535] bridge_slave_1: left allmulticast mode [ 104.427480][ T5535] bridge_slave_1: left promiscuous mode [ 104.433219][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.442495][ T5535] bridge_slave_0: left allmulticast mode [ 104.448181][ T5535] bridge_slave_0: left promiscuous mode [ 104.454023][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.505086][ T5535] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 104.587214][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.597438][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.607587][ T5535] bond0 (unregistering): Released all slaves [ 104.615819][ T5535] bond1 (unregistering): Released all slaves [ 104.625387][ T5535] bond2 (unregistering): Released all slaves [ 104.634754][ T5535] bond3 (unregistering): Released all slaves [ 104.694501][ T5535] tipc: Left network mode [ 104.742510][ T5535] hsr_slave_0: left promiscuous mode [ 104.750547][ T5535] hsr_slave_1: left promiscuous mode [ 104.759765][ T5535] veth0_macvtap: left allmulticast mode [ 104.765656][ T5535] veth1_macvtap: left promiscuous mode [ 104.771448][ T5535] veth0_macvtap: left promiscuous mode [ 104.777125][ T5535] veth1_vlan: left promiscuous mode [ 104.782823][ T5535] veth0_vlan: left promiscuous mode [ 105.107938][ T5535] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.135404][ T5535] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.195338][ T5535] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.234717][ T5535] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.320164][ T5535] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.374553][ T5535] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.424795][ T5535] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.474426][ T5535] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.556739][ T5535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.607379][ T5535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.664462][ T5535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.704409][ T5535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.779153][ T5535] bridge_slave_1: left allmulticast mode [ 105.784994][ T5535] bridge_slave_1: left promiscuous mode [ 105.790719][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.798583][ T5535] bridge_slave_0: left allmulticast mode [ 105.804326][ T5535] bridge_slave_0: left promiscuous mode [ 105.810016][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.818919][ T5535] bridge_slave_1: left allmulticast mode [ 105.824771][ T5535] bridge_slave_1: left promiscuous mode [ 105.830630][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.838536][ T5535] bridge_slave_0: left allmulticast mode [ 105.844241][ T5535] bridge_slave_0: left promiscuous mode [ 105.849959][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.859222][ T5535] bridge_slave_1: left allmulticast mode [ 105.865001][ T5535] bridge_slave_1: left promiscuous mode [ 105.870802][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.878824][ T5535] bridge_slave_0: left allmulticast mode [ 105.884566][ T5535] bridge_slave_0: left promiscuous mode [ 105.890259][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.975112][ T5535] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 105.997332][ T5535] dvmrp0 (unregistering): left allmulticast mode [ 106.053758][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.063757][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.073386][ T5535] bond0 (unregistering): Released all slaves [ 106.081234][ T5535] bond1 (unregistering): Released all slaves [ 106.089939][ T5535] bond2 (unregistering): Released all slaves [ 106.100928][ T5535] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 106.273284][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.283481][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.293100][ T5535] bond0 (unregistering): Released all slaves [ 106.300956][ T5535] bond1 (unregistering): Released all slaves [ 106.309729][ T5535] bond2 (unregistering): Released all slaves [ 106.318547][ T5535] bond3 (unregistering): Released all slaves [ 106.327558][ T5535] bond4 (unregistering): Released all slaves [ 106.393496][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.403933][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.413719][ T5535] bond0 (unregistering): Released all slaves [ 106.463083][ T5535] hsr_slave_0: left promiscuous mode [ 106.468977][ T5535] hsr_slave_1: left promiscuous mode [ 106.475479][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.482944][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.491776][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.499247][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.508995][ T5535] hsr_slave_0: left promiscuous mode [ 106.515126][ T5535] hsr_slave_1: left promiscuous mode [ 106.522978][ T5535] hsr_slave_0: left promiscuous mode [ 106.528788][ T5535] hsr_slave_1: left promiscuous mode [ 106.534882][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.542447][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.550243][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.557690][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.575473][ T5535] veth1_macvtap: left promiscuous mode [ 106.581124][ T5535] veth0_macvtap: left promiscuous mode [ 106.586870][ T5535] veth1_vlan: left promiscuous mode [ 106.592550][ T5535] veth0_vlan: left promiscuous mode [ 106.598478][ T5535] veth1_macvtap: left promiscuous mode [ 106.604534][ T5535] veth0_macvtap: left promiscuous mode [ 106.610088][ T5535] veth1_vlan: left promiscuous mode [ 106.615672][ T5535] veth0_vlan: left promiscuous mode [ 106.621783][ T5535] veth1_macvtap: left promiscuous mode [ 106.627308][ T5535] veth0_macvtap: left promiscuous mode [ 106.633267][ T5535] veth1_vlan: left promiscuous mode [ 106.638694][ T5535] veth0_vlan: left promiscuous mode [ 106.778442][ T5535] team0 (unregistering): Port device team_slave_1 removed [ 106.788162][ T5535] team0 (unregistering): Port device team_slave_0 removed [ 106.849834][ T5535] team0 (unregistering): Port device team_slave_1 removed [ 106.859505][ T5535] team0 (unregistering): Port device team_slave_0 removed [ 106.916721][ T5535] team0 (unregistering): Port device team_slave_1 removed [ 106.927275][ T5535] team0 (unregistering): Port device team_slave_0 removed