last executing test programs: 1m2.213068085s ago: executing program 1 (id=79): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (fail_nth: 9) 1m1.831760587s ago: executing program 1 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xa010}, 0x20004000) 1m1.820963267s ago: executing program 1 (id=82): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={0x0}) 1m1.747499842s ago: executing program 1 (id=83): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0xfe, 0x0, 0x0, 0x7, 0x8b08a, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x520, 0x10000, 0x33f8, 0x9, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@lazytime}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, &(0x7f0000000580)=""/102377, &(0x7f0000000400)=0x18fe9) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) set_mempolicy(0x3, &(0x7f0000000200)=0x10001, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC=r0], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000240)={'wg2\x00', 0x400}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x692c, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_setup(0x1106, &(0x7f0000000140)={0x0, 0x5881, 0x0, 0x4, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_io_uring_submit(r8, r11, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x30, 0x2, r4, &(0x7f00000003c0), 0x0, 0x0, 0x80800, 0x1, {0x0, r9}}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.548851533s ago: executing program 1 (id=86): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x458, &(0x7f00000006c0)="$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") (fail_nth: 9) 1m0.824434815s ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0xffffffbb, 0x0, 0x0, 0x1], [0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x40000000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040851}, 0x0) 1m0.824235335s ago: executing program 32 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0xffffffbb, 0x0, 0x0, 0x1], [0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x40000000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040851}, 0x0) 11.196364816s ago: executing program 0 (id=1060): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x558}}, 0x40) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 11.145589999s ago: executing program 0 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4401e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0xa00a, 0x10000, 0x8, 0x8, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) sendto$inet6(r2, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = fsopen(&(0x7f0000000340)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x60) lseek(r7, 0x76f3, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2a00000004000000080200000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000080)=[{r9, 0x180}, {r6, 0x5}], 0x2, 0x8) close(r3) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r1, 0x0, 0x0, 0x2000}]) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 11.087071492s ago: executing program 0 (id=1064): socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x2ba69) 10.970874429s ago: executing program 0 (id=1068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c0000000000000000000200ffff60003618b5a128308b04803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd20000180070001007274000014000280080002400000000408000140000000030900010073797a31000000000900020073797a320000001a1400000011000100"/180], 0xb4}}, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x1ffffffffffffe2b, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001d80)=""/169}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r3) exit(0xffff) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) r4 = socket(0x29, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r5, @ANYBLOB="18000880"], 0x40}}, 0x880) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x8112, &(0x7f0000000080), 0x1, 0x50a, &(0x7f00000001c0)="$eJzs3d9rY1kdAPDvvW3mZ9d00Yd1wbW4K51FJ2m37m7xYXcF0acFdX2vpU1LadqUJp2dlkW6+AcIMqjgk0++CP4BgsyfIMKAvouKIs6M8+CLRm5yM9PExHZq0mDz+cBpzrkn937PScnNOTmX3AAm1lxEvBcR70bE6xFRzLeneYrjdsqe9/jRR2tZSqLZ/OBvSST5ts6xkvzxZr7btYj41tcj4mGz2Ru3fni0vVqtVvbzcrmxs1euHx7d3tpZ3axsVnaXlhbfWn57+c3lhXP37c6J/GxEvPPVP/3w+z/72ju/+uKHv1/5y63vJnn/o6cfw9R+TQqt16JjOiL2RxFsDKby/hSywr1xtwYAgNOk+Rjuc63xfzGmWqM5AAAA4DJpvjvTWrtpAgAAAJdWGhEzkaSl/FqAmUjTUql9De+n4kZardUbX9ioHeyuZ3URs1FIN7aqlYX8WuHZKCRZeTG/xrZTfqOnvBQRL0bEveL1Vrm0Vquuj/vLDwAAAJgQN3vm/0+K7fn/maQjbhwAAAAwPLPjbgAAAAAwcub/AAAAcPmZ/wMAAMCl9o33389Ss3P/6/U7hwfbtTu31yv17dLOwVpprba/V9qs1TZbv9m3c9rxqrXa3pdi9+BuuVGpN8r1w6OVndrBbmNlq+sW2AAAAMAFevGz93+XRMTxl6+3UiQRV/K6wpjbBozWc/2E5x+f5q6Moi3AxZoadwOAsZkedwOAsTHHB5JT6gdevPPr4bcFAAAYjflP96z/h/V/mBRu4QmTy/o/TK4+6/8uCYAJUTACgIk3+vX/ZvO5GgQAAAzdTCslaSlfC5yJNC2VIl5o3RagkGxsVSsLEfGJiPhtsXA1Ky+29kxOnTMAAAAAAAAAAAAAAAAAAAAAAAAAAG3NZhLNc3hynp0AAACAsYhI/5zk9/+aL7420/v9wJXkH8XWY0R8+JMPfnR3tdHYX8y2P3y6vfHjfPsbp3zZ4GbjAAAAMDrTz7KdeXpnHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/T40UdrnXSRcf/6lYiY7Rd/Oq61Hq9FISJu/D2J6RP7JRExNYT4xx9HxEv94idZs2I2b0Vv/DQiro85/s0hxIdJdj87/7zX7/2Xxlzrsf/7bzpP/6uT57/sdHAyfuf8NzXg/PfCGWO8/OAX5YHxP454ebr/+acTPxkQ/9WBEa92lb7z7aOjQc9s/jRivu/nT9IVq9zY2SvXD49ub+2sblY2K7tLS4tvLb+9/ObyQnljq1rJ//aN8YPP/PJfrUzav/83BsSfPaX/rw3sf7d/Prj76JPtbKFf/Fuvdsefy+teGhA/zT/7Pp/ns/r5Tv64nT/plZ//5pU8+x8fWVn89QH9P+3/f+uM/X/9m9/7wxmfCgBcgPrh0fZqtVrZH3lmrn9VZ0R0Uc2QOX8mGfIBV4rt//tUdFd1hv7nP3I2lcqO0F2VDVvH/Rr+32TGd04CAABG49mg/wxP7lpwvzq6RgEAAAAAAAAAAAAAAAAAAMCEuYifE+uNeTyergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Ff/DgAA//+L5Mex") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 10.052308743s ago: executing program 0 (id=1091): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x8, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x101000, 0x10001, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") 9.728857551s ago: executing program 0 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x4000) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r4 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x288}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.620063818s ago: executing program 4 (id=1227): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xfbff, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002140)=""/17, 0x11, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) 3.524378325s ago: executing program 4 (id=1230): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x558}}, 0x40) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.446529108s ago: executing program 4 (id=1233): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x85, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1ff}, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001c80)=0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x514, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 2.716109551s ago: executing program 4 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f08906", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6f75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) unshare(0x24050300) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f08906", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6f75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) unshare(0x24050300) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) (async) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000001040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) (async) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) 2.715723301s ago: executing program 4 (id=1245): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.597265968s ago: executing program 4 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 758.911606ms ago: executing program 5 (id=1277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000efff00000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000002dd6d1693"], 0xd4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 746.678947ms ago: executing program 2 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltclass={0x2c, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1d}, {0x2, 0x8}, {0x1c, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltclass={0x2c, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1d}, {0x2, 0x8}, {0x1c, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000080)=[0x3], 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000080)=[0x3], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3, 0x0, 0x0, 0x5, 0x0, 0x401}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1, 0xb, 0x10000, @value=r3}, 0x28) bind$can_raw(r2, &(0x7f0000000000), 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a030000000000000000000a0000060900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000100000a551120d7816992dbbae06e6cfba6d9245bf96fc8d34d293e21b5d8816c8fa82a6edfb8292ca5764908923595f2fa20ce5cfe250e0f9ee2b0"], 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) getsockname$inet(r2, 0x0, &(0x7f00000001c0)) socket(0x1e, 0x80000, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000040) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000040) 651.828292ms ago: executing program 2 (id=1281): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfc6d, 0x0, 0x4, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") 651.466282ms ago: executing program 3 (id=1282): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) socket(0x2, 0x80805, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000580)='./file0\x00', 0x4041, 0x148) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000500)={r4, 0x2, 0x3ff, 0x4e, 0x6, 0x2}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x58be, r4}, &(0x7f0000000100)=0x10) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4013, &(0x7f00000005c0)=ANY=[@ANYBLOB="75696c3dc274e21657f6b7b9cd3b336ba32e64b175f66fa393845c468ee1cdf950d5824ec811b63e5aefeb40bc2b123a4cf7737fc606f5ce9c014e634334597f7c47e622", @ANYBLOB=',seclabel']) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6df, 0x10300, 0x2, 0x253}, 0x0, 0x0) 651.226792ms ago: executing program 5 (id=1283): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$TIOCGISO7816(r2, 0x80285442, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") 538.625938ms ago: executing program 3 (id=1284): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 523.19397ms ago: executing program 3 (id=1285): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0xfbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002140)=""/17, 0x11, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) 452.490984ms ago: executing program 2 (id=1286): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) open(&(0x7f0000000100)='./file4\x00', 0x143142, 0x80) 451.956214ms ago: executing program 5 (id=1287): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@deltfilter={0x52c, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xb}, {0x7, 0x10}, {0x10, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f0, 0x2, [@TCA_BPF_ACT={0x4e4, 0x1, [@m_mpls={0x50, 0x1b, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xe8}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x1f4, 0x2, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x7, 0x7, 0x7}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x10000000, 0x7, 0xfffffff9}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x6, 0xff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xffffff41, 0x2, 0xffffffff, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x20000000, 0x7, 0x30}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x1, 0xce, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x1000, 0x10000000, 0x6, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x4, 0x3, 0x10000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x20000000, 0xb, 0x9}, 0xce6a}}]}, {0xc7, 0x6, "4b4fa29b6aebad8af69e2fdbdb67b3321f757846e951bf1052d3f82a27523ea236069ec439f223adf087e74eadc34ab0467ac793709e09688ed6fbdbc00f8e6e2cba4b564f544586d29e5027d3ec7c614d469abb2a0f631336149b8111bc902273d4a9461de2cca87d37ca4207f73205dfd4c9631a0c4db8b07dd7147985c6c4406e1a1df9de027112098d92656f30b42f34ad8b69cf4d0ef5114c629eeec72cc8614096d1f6ea940d1ca0f0857af09b1f72ec08f5897fc411b73fa33bf4def7a81bd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x180, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffffb, 0x10000000, 0x5, 0xd}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80d7, 0x20000000, 0x8, 0x1ff}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x741e, 0x10000, 0x1, 0xc3, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x690, 0xfffffffffffffff8, 0x0, 0x1}, 0xfff4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0xb, 0x6, 0x4, 0x47}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x80, 0x6, 0xfffffff7, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xca7, 0x7, 0x6, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0xd, 0xffff}, 0xfff8}}]}, {0x70, 0x6, "019965979e57184ad2a2eaa30c3fd6eae850245d2936a7dc1d2c9fdad86b4bf33f483edebbf474306a6e9746cddf3db65b65b0b54deddbf51eafbb9d6696b9ec5a69f09f2a08938ec9ac321778329d5cb287b06b92c583cd9b9d72528efd0b51184326b62cd63634ec4a06c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x11c, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9300}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb6664}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}, @TCA_MPLS_TTL={0x5, 0x7, 0x53}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xb8, 0x6, "9468ae46fac6c6e234d8ef9a2c33ff9d58deeb1b8da7f5785d3fba2d201cb916e62cd907fb81a86fa111f4d6b0e0748aa8ec5cfa909f38a6877cfb2030b77b19435d864b317f2bbd52de759395dba661c5e46f6a21f0f3e4d22edad3afaa16d740ecc0bbd8addda604dbd832a0c5948d44bb211e3d793b127366d118fe8c5b2761843879d6fb0619b12e9ce50327ae74f256949d2221724f47c00ccf182d1b73a9b205a11f65898ce48db186f31e7d8f60277075"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0xb, 0x5}}]}, 0x52c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0xfff3}, {0xd}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010101}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x200120}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x15, 0x0, 0x2, 0x5}, {0x6, 0x73, 0xa, 0xfffffff6}, {0x34, 0x7, 0x8, 0x372}, {0x6, 0x2, 0x4, 0xd3a8}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0xa8, 0xa8, 0xffffffff, 0x0, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@multicast2, @multicast1, 0xff, 0xffffff00, 'ip6tnl0\x00', 'bond0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x65}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'syzkaller1\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x12, @empty, @multicast1, @gre_key=0xd23b, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x3f4057640e92cba5, 0x5, 0x6, 0x1, 0x4], 0x3, 0x6}, {0x1, [0x0, 0x0, 0x4, 0x0, 0x3, 0x5], 0x6, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xffffffff, 0xffffffff, 'rose0\x00', 'lo\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x38}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0xe, [0x25, 0x36, 0x6, 0x1e, 0x13, 0x6, 0x2a, 0x1f, 0x12, 0x9, 0x2, 0xe, 0x10, 0x29, 0x34, 0x20], 0x0, 0x7, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x4, 0x4) syslog(0x2, &(0x7f0000000140)=""/41, 0x29) 443.576994ms ago: executing program 3 (id=1288): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap$usbmon(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000030c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, ',\vX', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x41a, {0x0, 0x6, "a30423", 0xfffa, 0x2b, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002ac0), 0x3ffffa4, 0x40, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x2ba69) 414.111126ms ago: executing program 2 (id=1289): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x2ba69) (fail_nth: 2) 352.22091ms ago: executing program 3 (id=1290): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x9}, 0x10) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000100) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0xca, 0x0, 0x1000, {[@md5sig={0x13, 0x8, "5a5b01018a1cee9105dd621d57e64173"}]}}}}}}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340), 0x7, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRESDEC=r4, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES8, @ANYBLOB="0000000000b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd08f5d4eccb8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5044a27f6cf718909"], 0x20000600}}, 0x0) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz89twjAcBeDnqHFSqWpG6LlTtEvAAJwYI2IVbszELkEOf0YADt8n6yfZz36Sw2vNJSX5Tj7vJ3Vd122bX9kNt6icj0mXIWNJe5akRUs+puQvv4/W+t/mNnOfw7DUn/XaOKWrrXu/lvfJ5vTczwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAe7oEAAD//+0nCLA=") 171.05099ms ago: executing program 5 (id=1291): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x8000000, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002140)=""/17, 0x11, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) 170.653451ms ago: executing program 2 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1f2, &(0x7f0000000080)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1b8, 0x3a, 0x0, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@dstopts={0x88}, @hopopts={0xc, 0x2f, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x12c, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x3, 0x0, 0x91bc, 0xffffffffffffffdf, 0x36cf8b49]}}, @hao={0xc9, 0x10, @private0}]}]}}}}}}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r0, 0x12574000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) 138.775532ms ago: executing program 2 (id=1293): clock_adjtime(0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f00000002c0)=0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$kcm(0x11, 0xa, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) clock_adjtime(0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fcntl$dupfd(r2, 0x406, r0) (async) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f00000002c0)=0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) (async) socket$kcm(0x11, 0xa, 0x300) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 36.507698ms ago: executing program 5 (id=1294): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e0000000000200021"], 0x58) sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x46000c48) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 15.852399ms ago: executing program 3 (id=1295): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 5 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffa9, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x507, &(0x7f0000000500)="$eJzs3c9vI1cdAPDvzMab7NbbbKEHQECXUljQss6PbaOqHNheQKiqhKiQkDhsQ+JGUex1FCelCTlkj9yRqMQJ/gRuHJB64sCNG9y4lAPSAhGoQeIwaMbTxE3sdegmcdf+fKTxzHvj+Puenfee5znOC2Bs3YiIvYi4HBFvRsR0mZ+UW9ztbPn9PtjfXTrY311KIsve+EdSnM/zoutnck+VjzkVEd//TsSPk5Nx29s7a4uNRn2jTM9sNtdn2ts7t1fTMmd+YW5h9uU7L82fWV2fa/7m4bdXX/vB7377hff/uPf1n+bFqv7sWnGuux5nqVP1SlS78iYi4rXzCDYkE+XvD0+evLV9KiKeL9r/dFwqXk0AYJRl2XRk091pAGDU5df/1UjSWjkXUI00rdU6c3jPxtW00Wpv3ppubd1fjmIO63pU0rdWG/XZcq7welSSPD1XHB+l54+l70TEMxHx88krRbq21GosD/ONDwCMsaeOjf//nuyM/wDAiJsadgEAgAtn/AeA8WP8B4Dx83+M/74dCAAjwvU/AIwf4z8AjJ+B4/+DiykHAHAhvvf66/mWHZT//3r57e2tb1bfvr1cb6/VmltLtaXWxnptpdVaadRrS1k26PEardb63IuHyfb2zr1ma+v+5r3V5uJK/V69cs71AQAGe+a59/6cRMTeK1eKLbrWcjBWw2hLP5LqsVAPMLIuDbsAwND4Pg+Mr1Nc45sGgBE36Mq/758IvWvxV3hS3fys+X8YV+mwCwAMzceb///WmZcDuHjm/2F8ZVlizX8AGDPm+IGP8/n/D6P8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGVLXYkrRWrAW+l9+mtVrEtYi4HpXkrdVGfTYino6IP01WJvP03LALDQA8pvRvSbn+183pF6rHz15O/jNZ7CPiJ7984xfvLG5ubszl+f88zN98t8yfvzyMCgAA3e6ezOqM0+W+60L+g/3dpQ+3iyziw1c7i4vmcQ/KrXNmIiaK/VRUIuLqv5Iy3ZG/X7l0BvH3HkTEZ47q/05XhGoxB9JZ+fR4/Dz2tXOIf/T8J5FlWXYUP/1I/LQoW76vFM/Fp8+gLDBu3nu100/m7e7K/m7exMr2l8aNYt+7/U8VPdTj+7D/OzjR/6WH/d+lE/GTos3fOEw/uiQPX/z9d09kZtOdcw8iPjfRK35yGD/p0/++cMo6/uXzX3y+37nsVxE3o3f8jmbRzc5sNtdn2ts7t1ebiyv1lfr9+fmFuYXZl++8ND9TzFF3bv/QK8bfX7n1dL/4ef2v9ok/NaD+Xzll/X/93zd/9KVHxP/al3u//s8+In4+Jn71lPEXr97ttXz3YfzlPvUf9PrfOmX89/+6s3zKuwIAF6C9vbO22GjUNwYc5O81B93HwZN5EHsRPU+l5xb0G1MRn4i6O+h3MOyeCThvR41+2CUBAAAAAAAAAAAAAAD6aW/vrE3G+X6daNh1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHT9LwAA//9agtBN") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x2, 0x3, 0x0, 0x70bd2c, 0x0, [@sadb_x_nat_t_port={0x1, 0x39, 0x4e23}]}, 0x18}, 0x19}, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) kernel console output (not intermixed with test programs): : unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=5952 comm=syz.5.717 [ 66.998887][ T5928] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.709: Failed to acquire dquot type 0 [ 67.007938][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=5952 comm=syz.5.717 [ 67.036922][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.049588][ T5957] set_capacity_and_notify: 2 callbacks suppressed [ 67.049606][ T5957] loop2: detected capacity change from 0 to 128 [ 67.071368][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 67.088715][ T5957] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.120221][ T5961] netlink: 204 bytes leftover after parsing attributes in process `syz.3.719'. [ 67.143979][ T5928] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.709: corrupted inode contents [ 67.162619][ T5928] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.709: mark_inode_dirty error [ 67.177102][ T5928] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.709: corrupted inode contents [ 67.203216][ T5928] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.709: mark_inode_dirty error [ 67.219025][ T5963] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.227137][ T5928] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.709: corrupted inode contents [ 67.241493][ T5950] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 67.248028][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.255705][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 67.265439][ T5928] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 67.274124][ T5964] vhci_hcd: connection closed [ 67.274514][ T37] vhci_hcd vhci_hcd.2: stop threads [ 67.276087][ T5928] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.709: corrupted inode contents [ 67.279238][ T37] vhci_hcd vhci_hcd.2: release socket [ 67.294593][ T5928] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.709: mark_inode_dirty error [ 67.296947][ T37] vhci_hcd vhci_hcd.2: disconnect device [ 67.302502][ T5928] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 67.339618][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 67.370776][ T5928] EXT4-fs (loop4): 1 truncate cleaned up [ 67.382910][ T5928] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.399924][ T5971] loop3: detected capacity change from 0 to 2048 [ 67.414084][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 67.444843][ T5971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.460048][ T5971] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 67.472627][ T5971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.472627][ T5971] [ 67.482500][ T5971] EXT4-fs (loop3): Total free blocks count 0 [ 67.488556][ T5971] EXT4-fs (loop3): Free/Dirty block details [ 67.494522][ T5971] EXT4-fs (loop3): free_blocks=2415919104 [ 67.500416][ T5971] EXT4-fs (loop3): dirty_blocks=32 [ 67.506133][ T5971] EXT4-fs (loop3): Block reservation details [ 67.512572][ T5971] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 67.519709][ T5979] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.532136][ T5979] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.532136][ T5979] [ 67.546381][ T5983] loop0: detected capacity change from 0 to 256 [ 67.613263][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 67.665611][ T5992] loop3: detected capacity change from 0 to 512 [ 67.675547][ T5994] loop5: detected capacity change from 0 to 1024 [ 67.706304][ T5992] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.725209][ T6004] loop4: detected capacity change from 0 to 512 [ 67.744002][ T5992] EXT4-fs (loop3): 1 orphan inode deleted [ 67.757985][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.732: corrupted inode contents [ 67.771147][ T6004] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #3: comm syz.4.732: mark_inode_dirty error [ 67.785260][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.732: corrupted inode contents [ 67.797402][ T6004] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.732: mark_inode_dirty error [ 67.811445][ T6004] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.732: Failed to acquire dquot type 0 [ 67.823296][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.732: corrupted inode contents [ 67.838564][ T6004] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.732: mark_inode_dirty error [ 67.872343][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.732: corrupted inode contents [ 67.957646][ T6004] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.732: mark_inode_dirty error [ 67.981739][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.732: corrupted inode contents [ 68.028054][ T6004] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 68.036387][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.739'. [ 68.038363][ T6004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.732: corrupted inode contents [ 68.068521][ T6004] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.732: mark_inode_dirty error [ 68.080144][ T6004] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 68.090226][ T6004] EXT4-fs (loop4): 1 truncate cleaned up [ 68.096404][ T6004] EXT4-fs mount: 66 callbacks suppressed [ 68.096421][ T6004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.116339][ T6045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6045 comm=syz.5.739 [ 68.130693][ T6004] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.230850][ T6004] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #12: block 13: comm syz.4.732: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 68.255164][ T3474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.331613][ T6062] loop3: detected capacity change from 0 to 512 [ 68.348002][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.367566][ T6062] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 68.401861][ T6062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.414138][ T6062] block device autoloading is deprecated and will be removed. [ 68.452446][ T6062] EXT4-fs (loop3): couldn't read superblock of external journal [ 68.465487][ T6080] debugfs: 'ttyS3' already exists in 'caif_serial' [ 68.480033][ T6083] loop5: detected capacity change from 0 to 128 [ 68.489277][ T6083] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.518278][ T6085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.749'. [ 68.640005][ T6095] loop2: detected capacity change from 0 to 1024 [ 68.674596][ T6095] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.689345][ T6095] JBD2: no valid journal superblock found [ 68.695314][ T6095] EXT4-fs (loop2): Could not load journal inode [ 68.809387][ T6123] loop0: detected capacity change from 0 to 256 [ 68.890810][ T6123] FAT-fs (loop0): codepage cp949 not found [ 68.911565][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.934722][ T6131] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.964878][ T6131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.975140][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.995332][ T6140] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.006850][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.764'. [ 69.076051][ T6140] EXT4-fs (loop3): shut down requested (1) [ 69.089635][ T6151] EXT4-fs: Ignoring removed oldalloc option [ 69.117218][ T6140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.166745][ T6164] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 69.174278][ T6140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.178727][ T6151] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.765: Parent and EA inode have the same ino 15 [ 69.183265][ T6140] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 69.201501][ T6164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.212890][ T6151] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.765: Parent and EA inode have the same ino 15 [ 69.240726][ T6164] bond2: (slave veth3): Enslaving as an active interface with a down link [ 69.270366][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.270736][ T6151] EXT4-fs (loop0): 1 orphan inode deleted [ 69.334770][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.340550][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.364973][ T6164] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 69.464017][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.466559][ T6179] FAULT_INJECTION: forcing a failure. [ 69.466559][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 69.486197][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.3.773 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.486239][ T6179] Tainted: [W]=WARN [ 69.486246][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.486259][ T6179] Call Trace: [ 69.486266][ T6179] [ 69.486275][ T6179] __dump_stack+0x1d/0x30 [ 69.486302][ T6179] dump_stack_lvl+0x95/0xd0 [ 69.486325][ T6179] dump_stack+0x15/0x1b [ 69.486351][ T6179] should_fail_ex+0x263/0x280 [ 69.486502][ T6179] should_failslab+0x8c/0xb0 [ 69.486530][ T6179] __kmalloc_cache_noprof+0x64/0x4a0 [ 69.486560][ T6179] ? alloc_netdev_mqs+0x7cc/0xa40 [ 69.486600][ T6179] alloc_netdev_mqs+0x7cc/0xa40 [ 69.486683][ T6179] ldisc_open+0x102/0x530 [ 69.486708][ T6179] ? __kmalloc_cache_noprof+0x245/0x4a0 [ 69.486738][ T6179] tty_ldisc_restore+0x11c/0x440 [ 69.486843][ T6179] tty_set_ldisc+0x209/0x380 [ 69.486870][ T6179] tiocsetd+0x51/0x60 [ 69.486898][ T6179] tty_ioctl+0xa78/0xb80 [ 69.486983][ T6179] ? __pfx_tty_ioctl+0x10/0x10 [ 69.487009][ T6179] __se_sys_ioctl+0xce/0x140 [ 69.487114][ T6179] __x64_sys_ioctl+0x43/0x50 [ 69.487152][ T6179] x64_sys_call+0x14b0/0x3000 [ 69.487178][ T6179] do_syscall_64+0xc0/0x2a0 [ 69.487211][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.487277][ T6179] RIP: 0033:0x7f1bcb2baeb9 [ 69.487330][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.487350][ T6179] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.487500][ T6179] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 69.487576][ T6179] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 69.487666][ T6179] RBP: 00007f1bc9d17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.487680][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.487694][ T6179] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 69.487715][ T6179] [ 69.496057][ T6179] Falling back ldisc for ttyS3. [ 69.541005][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'. [ 69.717941][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 69.717966][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 69.752562][ C1] I/O error, dev loop7, sector 640 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 69.820864][ T6203] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.826428][ T6203] EXT4-fs (loop4): 1 orphan inode deleted [ 69.826451][ T6203] EXT4-fs (loop4): 1 truncate cleaned up [ 69.826920][ T6203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.828700][ T6203] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.779: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 69.828894][ T6203] EXT4-fs (loop4): Remounting filesystem read-only [ 69.897079][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.029731][ T6224] EXT4-fs: Ignoring removed oldalloc option [ 70.053962][ T6224] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.785: Parent and EA inode have the same ino 15 [ 70.067747][ T6224] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.785: Parent and EA inode have the same ino 15 [ 70.208604][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 70.223961][ T6224] EXT4-fs (loop0): 1 orphan inode deleted [ 70.256088][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.338628][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.357551][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.515339][ T6240] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.629235][ T6240] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1512 with error 28 [ 70.641850][ T6240] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.641850][ T6240] [ 70.651623][ T6240] EXT4-fs (loop3): Total free blocks count 0 [ 70.657843][ T6240] EXT4-fs (loop3): Free/Dirty block details [ 70.663800][ T6240] EXT4-fs (loop3): free_blocks=68451041280 [ 70.669808][ T6240] EXT4-fs (loop3): dirty_blocks=1520 [ 70.675402][ T6240] EXT4-fs (loop3): Block reservation details [ 70.681396][ T6240] EXT4-fs (loop3): i_reserved_data_blocks=95 [ 70.785357][ T6288] FAULT_INJECTION: forcing a failure. [ 70.785357][ T6288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.798915][ T6288] CPU: 0 UID: 0 PID: 6288 Comm: syz.4.804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.798951][ T6288] Tainted: [W]=WARN [ 70.798960][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.799039][ T6288] Call Trace: [ 70.799047][ T6288] [ 70.799073][ T6288] __dump_stack+0x1d/0x30 [ 70.799102][ T6288] dump_stack_lvl+0x95/0xd0 [ 70.799129][ T6288] dump_stack+0x15/0x1b [ 70.799151][ T6288] should_fail_ex+0x263/0x280 [ 70.799213][ T6288] should_fail+0xb/0x20 [ 70.799241][ T6288] should_fail_usercopy+0x1a/0x20 [ 70.799271][ T6288] _copy_from_user+0x1c/0xb0 [ 70.799335][ T6288] __se_sys_file_setattr+0x142/0x4b0 [ 70.799360][ T6288] ? mutex_unlock+0x4e/0x90 [ 70.799386][ T6288] ? fput+0x8f/0xc0 [ 70.799414][ T6288] __x64_sys_file_setattr+0x67/0x80 [ 70.799495][ T6288] x64_sys_call+0x2fd7/0x3000 [ 70.799524][ T6288] do_syscall_64+0xc0/0x2a0 [ 70.799556][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.799578][ T6288] RIP: 0033:0x7fcac1f5aeb9 [ 70.799678][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.799696][ T6288] RSP: 002b:00007fcac09b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 70.799717][ T6288] RAX: ffffffffffffffda RBX: 00007fcac21d5fa0 RCX: 00007fcac1f5aeb9 [ 70.799734][ T6288] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 70.799802][ T6288] RBP: 00007fcac09b7090 R08: 0000000000001000 R09: 0000000000000000 [ 70.799816][ T6288] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 70.799865][ T6288] R13: 00007fcac21d6038 R14: 00007fcac21d5fa0 R15: 00007ffef5578d08 [ 70.799888][ T6288] [ 70.993284][ T6285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.006339][ T6285] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.030729][ T6285] EXT4-fs (loop5): shut down requested (1) [ 71.036456][ T6292] 9p: Bad value for 'wfdno' [ 71.041611][ T6292] xt_ecn: cannot match TCP bits for non-tcp packets [ 71.043988][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 71.071246][ T6294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6294 comm=syz.0.805 [ 71.106294][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 71.129106][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 71.129126][ T29] audit: type=1400 audit(1770306979.114:1023): avc: denied { bind } for pid=6293 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.164658][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 71.200952][ T29] audit: type=1400 audit(1770306979.184:1024): avc: denied { mount } for pid=6300 comm="syz.0.808" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.227824][ T6301] xt_hashlimit: max too large, truncated to 1048576 [ 71.254732][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.264790][ T6301] bond2 (unregistering): Released all slaves [ 71.279667][ T3450] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1512 with error 28 [ 71.336051][ T6314] @0Ù: renamed from dummy0 (while UP) [ 71.357688][ T6316] EXT4-fs: dax option not supported [ 71.456756][ T29] audit: type=1400 audit(1770306979.434:1025): avc: denied { validate_trans } for pid=6321 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.477665][ T29] audit: type=1400 audit(1770306979.434:1026): avc: denied { ioctl } for pid=6321 comm="syz.0.811" path="socket:[14156]" dev="sockfs" ino=14156 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.502478][ T29] audit: type=1400 audit(1770306979.434:1027): avc: denied { read } for pid=6321 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.521844][ T29] audit: type=1400 audit(1770306979.434:1028): avc: denied { getopt } for pid=6321 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.715339][ T29] audit: type=1326 audit(1770306979.554:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ec75aeb9 code=0x7ffc0000 [ 71.738914][ T29] audit: type=1326 audit(1770306979.554:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ec75aeb9 code=0x7ffc0000 [ 71.763381][ T29] audit: type=1326 audit(1770306979.554:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78ec75aeb9 code=0x7ffc0000 [ 71.787493][ T29] audit: type=1326 audit(1770306979.554:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ec75aeb9 code=0x7ffc0000 [ 71.840674][ T6274] syz.2.797 (6274) used greatest stack depth: 7232 bytes left [ 71.902053][ T6348] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 71.982522][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.013880][ T6359] bond1: (slave gretap1): making interface the new active one [ 72.022599][ T6359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 72.055093][ T6348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6348 comm=syz.3.815 [ 72.160901][ T6370] set_capacity_and_notify: 10 callbacks suppressed [ 72.160920][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.204893][ T6382] tipc: Enabling of bearer rejected, failed to enable media [ 72.236768][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.300463][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.378340][ T6398] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 72.390726][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.436389][ T6398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.464206][ T6405] bond2: (slave gretap2): making interface the new active one [ 72.472947][ T6405] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 72.493511][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.519318][ T6398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6398 comm=syz.0.831 [ 72.601650][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.635447][ T6412] loop2: detected capacity change from 0 to 764 [ 72.655292][ T6415] loop5: detected capacity change from 0 to 512 [ 72.682322][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.728786][ T6412] rock: directory entry would overflow storage [ 72.735057][ T6412] rock: sig=0x4f50, size=4, remaining=3 [ 72.740626][ T6412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 72.758253][ T6412] rock: directory entry would overflow storage [ 72.764516][ T6412] rock: sig=0x4f50, size=4, remaining=3 [ 72.770124][ T6412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 72.777977][ T6370] loop4: detected capacity change from 0 to 1024 [ 72.805020][ T6415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.851076][ T6415] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.951051][ T6415] EXT4-fs (loop5): shut down requested (2) [ 73.024841][ T6437] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.042112][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 73.052517][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 73.113320][ T6415] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 73.133944][ T6455] geneve2: entered promiscuous mode [ 73.152251][ T884] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 33502 - 0 [ 73.171234][ T884] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 33502 - 0 [ 73.193947][ T884] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 33502 - 0 [ 73.217075][ T884] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 33502 - 0 [ 73.269396][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.279561][ T6457] netlink: 'syz.0.848': attribute type 19 has an invalid length. [ 73.287646][ T6457] __nla_validate_parse: 2 callbacks suppressed [ 73.287700][ T6457] netlink: 55 bytes leftover after parsing attributes in process `syz.0.848'. [ 73.306771][ T6474] FAULT_INJECTION: forcing a failure. [ 73.306771][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.320121][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.2.854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.320190][ T6474] Tainted: [W]=WARN [ 73.320197][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.320240][ T6474] Call Trace: [ 73.320249][ T6474] [ 73.320259][ T6474] __dump_stack+0x1d/0x30 [ 73.320289][ T6474] dump_stack_lvl+0x95/0xd0 [ 73.320310][ T6474] dump_stack+0x15/0x1b [ 73.320340][ T6474] should_fail_ex+0x263/0x280 [ 73.320374][ T6474] should_fail+0xb/0x20 [ 73.320407][ T6474] should_fail_usercopy+0x1a/0x20 [ 73.320450][ T6474] _copy_from_user+0x1c/0xb0 [ 73.320474][ T6474] __se_sys_io_uring_setup+0x11f/0x1e0 [ 73.320558][ T6474] __x64_sys_io_uring_setup+0x31/0x40 [ 73.320602][ T6474] x64_sys_call+0x244c/0x3000 [ 73.320633][ T6474] do_syscall_64+0xc0/0x2a0 [ 73.320738][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.320766][ T6474] RIP: 0033:0x7fab2fb1aeb9 [ 73.320786][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.320809][ T6474] RSP: 002b:00007fab2e576fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 73.320910][ T6474] RAX: ffffffffffffffda RBX: 00007fab2fd95fa0 RCX: 00007fab2fb1aeb9 [ 73.320994][ T6474] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000ed0 [ 73.321010][ T6474] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 73.321037][ T6474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 73.321049][ T6474] R13: 0000000000000000 R14: 0000000000000ed0 R15: 0000000000000000 [ 73.321131][ T6474] [ 73.360316][ T6457] netlink: 72 bytes leftover after parsing attributes in process `syz.0.848'. [ 73.364763][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.462818][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 73.640826][ T6488] ext4: Unknown parameter 'smackfsroot' [ 73.670824][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.689065][ T6486] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.711665][ T6486] EXT4-fs (loop2): shut down requested (1) [ 73.721791][ T6486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 73.738541][ T6486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 73.757677][ T6486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 73.777520][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.788470][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.810555][ T6495] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.827049][ T6505] ext2: Unknown parameter '"' [ 73.831506][ T6495] EXT4-fs (loop3): shut down requested (1) [ 73.842498][ T6495] FAULT_INJECTION: forcing a failure. [ 73.842498][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 73.855238][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.3.861 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.855293][ T6495] Tainted: [W]=WARN [ 73.855301][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.855316][ T6495] Call Trace: [ 73.855325][ T6495] [ 73.855336][ T6495] __dump_stack+0x1d/0x30 [ 73.855363][ T6495] dump_stack_lvl+0x95/0xd0 [ 73.855455][ T6495] dump_stack+0x15/0x1b [ 73.855476][ T6495] should_fail_ex+0x263/0x280 [ 73.855508][ T6495] should_failslab+0x8c/0xb0 [ 73.855615][ T6495] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 73.855646][ T6495] ? __d_alloc+0x37/0x340 [ 73.855676][ T6495] __d_alloc+0x37/0x340 [ 73.855708][ T6495] d_alloc_parallel+0x54/0xce0 [ 73.855786][ T6495] ? lockref_get_not_dead+0x120/0x1c0 [ 73.855822][ T6495] ? __rcu_read_unlock+0x4e/0x70 [ 73.855990][ T6495] ? try_to_unlazy+0x3c0/0x5b0 [ 73.856018][ T6495] __lookup_slow+0x96/0x260 [ 73.856047][ T6495] lookup_slow+0x3c/0x60 [ 73.856101][ T6495] path_lookupat+0x2f7/0x500 [ 73.856201][ T6495] filename_lookup+0x190/0x390 [ 73.856240][ T6495] __se_sys_file_setattr+0x363/0x4b0 [ 73.856333][ T6495] __x64_sys_file_setattr+0x67/0x80 [ 73.856355][ T6495] x64_sys_call+0x2fd7/0x3000 [ 73.856412][ T6495] do_syscall_64+0xc0/0x2a0 [ 73.856475][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.856498][ T6495] RIP: 0033:0x7f1bcb2baeb9 [ 73.856515][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.856537][ T6495] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 73.856640][ T6495] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 73.856657][ T6495] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 73.856687][ T6495] RBP: 00007f1bc9d17090 R08: 0000000000001000 R09: 0000000000000000 [ 73.856701][ T6495] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 73.856717][ T6495] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 73.856740][ T6495] [ 74.078780][ T6507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.091737][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.100139][ T6507] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.115730][ T6507] EXT4-fs (loop4): shut down requested (1) [ 74.165928][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 74.177050][ T6518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 74.187135][ T6518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 74.194178][ T6515] bond_slave_0: entered promiscuous mode [ 74.201787][ T6515] bond_slave_1: entered promiscuous mode [ 74.231977][ T6515] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 74.246119][ T6518] 9p: Bad value for 'rfdno' [ 74.254846][ T6515] bond_slave_0: left promiscuous mode [ 74.260353][ T6515] bond_slave_1: left promiscuous mode [ 74.387984][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.510743][ T6536] FAULT_INJECTION: forcing a failure. [ 74.510743][ T6536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.524288][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.4.870 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.524393][ T6536] Tainted: [W]=WARN [ 74.524403][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.524417][ T6536] Call Trace: [ 74.524426][ T6536] [ 74.524436][ T6536] __dump_stack+0x1d/0x30 [ 74.524466][ T6536] dump_stack_lvl+0x95/0xd0 [ 74.524491][ T6536] dump_stack+0x15/0x1b [ 74.524551][ T6536] should_fail_ex+0x263/0x280 [ 74.524588][ T6536] should_fail_alloc_page+0xf2/0x100 [ 74.524619][ T6536] __alloc_frozen_pages_noprof+0x108/0x350 [ 74.524726][ T6536] alloc_pages_mpol+0xb3/0x260 [ 74.524763][ T6536] alloc_pages_noprof+0x8f/0x130 [ 74.524809][ T6536] pte_alloc_one+0x1e/0xd0 [ 74.524843][ T6536] __do_fault+0x7b/0x200 [ 74.524887][ T6536] handle_mm_fault+0x17f5/0x3030 [ 74.524965][ T6536] do_user_addr_fault+0x3fd/0x1050 [ 74.524998][ T6536] exc_page_fault+0x62/0xa0 [ 74.525026][ T6536] asm_exc_page_fault+0x26/0x30 [ 74.525111][ T6536] RIP: 0033:0x7fcac1e1073e [ 74.525129][ T6536] Code: 18 bf a9 01 00 00 48 89 74 24 10 48 89 54 24 08 48 89 0c 24 4c 8b 74 24 18 48 8b 6c 24 10 4c 8b 6c 24 08 44 89 f6 4c 8b 3c 24 <81> 65 08 ff f3 ff ff 48 89 ea e8 53 a7 14 00 8b 55 00 b9 01 80 00 [ 74.525148][ T6536] RSP: 002b:00007fcac09b6fc0 EFLAGS: 00010206 [ 74.525198][ T6536] RAX: 0000000000000000 RBX: 00007fcac21d5fa0 RCX: 0000000000000000 [ 74.525214][ T6536] RDX: 0000000000000000 RSI: 0000000000000ed0 RDI: 00000000000001a9 [ 74.525230][ T6536] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 74.525303][ T6536] R10: 0000000000000ed0 R11: 0000000000000000 R12: 0000000000000001 [ 74.525320][ T6536] R13: 0000000000000000 R14: 0000000000000ed0 R15: 0000000000000000 [ 74.525340][ T6536] [ 74.525355][ T6536] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 74.659020][ T6556] ext4: Bad value for 'mb_optimize_scan' [ 74.730520][ T6561] netlink: 204 bytes leftover after parsing attributes in process `syz.0.875'. [ 74.931893][ T6583] EXT4-fs: Ignoring removed oldalloc option [ 74.939056][ T6581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.969623][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'. [ 74.973384][ T6583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.881: Parent and EA inode have the same ino 15 [ 74.984144][ T6581] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.035649][ T6583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.881: Parent and EA inode have the same ino 15 [ 75.048600][ T6581] EXT4-fs (loop3): shut down requested (1) [ 75.061297][ T6595] EXT4-fs: Ignoring removed nobh option [ 75.087382][ T6583] EXT4-fs (loop0): 1 orphan inode deleted [ 75.094160][ T6583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.095746][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 75.134120][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 75.135638][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.153956][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 75.156680][ T6594] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.179157][ T6594] EXT4-fs (loop4): shut down requested (1) [ 75.183149][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.185298][ T6594] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.207055][ T6594] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.234425][ T6595] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.245399][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.268045][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.885'. [ 75.320497][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 75.453689][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.496151][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 75.533075][ T6581] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 75.535006][ T6609] netlink: 204 bytes leftover after parsing attributes in process `syz.0.888'. [ 75.613679][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.870177][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 75.923071][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.971542][ T6629] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.993926][ T6638] x_tables: duplicate underflow at hook 2 [ 76.057977][ T6629] EXT4-fs (loop3): shut down requested (1) [ 76.068523][ T6648] netlink: 204 bytes leftover after parsing attributes in process `syz.0.901'. [ 76.082280][ T6629] FAULT_INJECTION: forcing a failure. [ 76.082280][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 76.095532][ T6629] CPU: 1 UID: 0 PID: 6629 Comm: syz.3.896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.095643][ T6629] Tainted: [W]=WARN [ 76.095652][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.095666][ T6629] Call Trace: [ 76.095675][ T6629] [ 76.095684][ T6629] __dump_stack+0x1d/0x30 [ 76.095781][ T6629] dump_stack_lvl+0x95/0xd0 [ 76.095807][ T6629] dump_stack+0x15/0x1b [ 76.095830][ T6629] should_fail_ex+0x263/0x280 [ 76.095864][ T6629] should_failslab+0x8c/0xb0 [ 76.095901][ T6629] kmem_cache_alloc_noprof+0x68/0x490 [ 76.095930][ T6629] ? __es_insert_extent+0x508/0xee0 [ 76.096031][ T6629] __es_insert_extent+0x508/0xee0 [ 76.096066][ T6629] ? widen_string+0x98/0x210 [ 76.096093][ T6629] ext4_es_cache_extent+0x28d/0x390 [ 76.096135][ T6629] ext4_find_extent+0x336/0x7a0 [ 76.096193][ T6629] ext4_ext_map_blocks+0x128/0x38a0 [ 76.096224][ T6629] ? vsnprintf+0x7ee/0x860 [ 76.096266][ T6629] ? sprintf+0x88/0xb0 [ 76.096288][ T6629] ? number+0xa78/0xb90 [ 76.096308][ T6629] ? xas_load+0x413/0x430 [ 76.096340][ T6629] ? __rcu_read_unlock+0x4e/0x70 [ 76.096414][ T6629] ? css_rstat_updated+0xbb/0x280 [ 76.096448][ T6629] ext4_map_query_blocks+0xae/0x550 [ 76.096480][ T6629] ? ext4_es_lookup_extent+0x3ac/0x540 [ 76.096516][ T6629] ext4_map_blocks+0x398/0xd70 [ 76.096562][ T6629] ? xa_load+0xb1/0xe0 [ 76.096603][ T6629] ? __account_obj_stock+0x211/0x350 [ 76.096629][ T6629] ext4_getblk+0x128/0x530 [ 76.096667][ T6629] ext4_bread_batch+0x5c/0x320 [ 76.096702][ T6629] __ext4_find_entry+0x852/0xdf0 [ 76.096732][ T6629] ? __d_alloc+0x37/0x340 [ 76.096777][ T6629] ? d_alloc_parallel+0xc01/0xce0 [ 76.096812][ T6629] ext4_lookup+0xcd/0x3a0 [ 76.097036][ T6629] __lookup_slow+0x19d/0x260 [ 76.097067][ T6629] lookup_slow+0x3c/0x60 [ 76.097101][ T6629] path_lookupat+0x2f7/0x500 [ 76.097197][ T6629] filename_lookup+0x190/0x390 [ 76.097239][ T6629] __se_sys_file_setattr+0x363/0x4b0 [ 76.097293][ T6629] __x64_sys_file_setattr+0x67/0x80 [ 76.097319][ T6629] x64_sys_call+0x2fd7/0x3000 [ 76.097349][ T6629] do_syscall_64+0xc0/0x2a0 [ 76.097381][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.097406][ T6629] RIP: 0033:0x7f1bcb2baeb9 [ 76.097474][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.097498][ T6629] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 76.097526][ T6629] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 76.097544][ T6629] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 76.097561][ T6629] RBP: 00007f1bc9d17090 R08: 0000000000001000 R09: 0000000000000000 [ 76.097577][ T6629] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 76.097601][ T6629] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 76.097682][ T6629] [ 76.397291][ T6629] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 76.414048][ T6629] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 76.436864][ T6629] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 76.471416][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 76.471436][ T29] audit: type=1400 audit(1770306984.454:1130): avc: denied { read append } for pid=6661 comm="syz.0.906" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.501864][ T29] audit: type=1400 audit(1770306984.454:1131): avc: denied { open } for pid=6661 comm="syz.0.906" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.530030][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.544055][ T6658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.578681][ T6658] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.589839][ T29] audit: type=1400 audit(1770306984.564:1132): avc: denied { unlink } for pid=6592 comm="syz.5.884" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.613362][ T6658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.673648][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.686037][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.695596][ T29] audit: type=1400 audit(1770306984.684:1133): avc: denied { bind } for pid=6671 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.732327][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.746164][ T6662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.786117][ T29] audit: type=1400 audit(1770306984.774:1134): avc: denied { setopt } for pid=6679 comm="syz.4.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.818543][ T6662] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.906: Allocating blocks 385-513 which overlap fs metadata [ 76.846214][ T29] audit: type=1400 audit(1770306984.804:1135): avc: denied { map } for pid=6661 comm="syz.0.906" path="/179/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.869454][ T29] audit: type=1400 audit(1770306984.804:1136): avc: denied { execute } for pid=6661 comm="syz.0.906" path="/179/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.902285][ T6662] EXT4-fs (loop0): pa ffff888107e824d0: logic 16, phys. 129, len 24 [ 76.910498][ T6662] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 76.948028][ T6693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.962374][ T6690] FAULT_INJECTION: forcing a failure. [ 76.962374][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 76.964060][ T6693] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.975277][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.2.915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.975356][ T6690] Tainted: [W]=WARN [ 76.975364][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.975377][ T6690] Call Trace: [ 76.975385][ T6690] [ 76.975394][ T6690] __dump_stack+0x1d/0x30 [ 76.975501][ T6690] dump_stack_lvl+0x95/0xd0 [ 76.975525][ T6690] dump_stack+0x15/0x1b [ 76.975607][ T6690] should_fail_ex+0x263/0x280 [ 76.975639][ T6690] should_failslab+0x8c/0xb0 [ 76.975664][ T6690] __kvmalloc_node_noprof+0x148/0x680 [ 76.975705][ T6690] ? io_alloc_cache_init+0x36/0xb0 [ 76.975729][ T6690] io_alloc_cache_init+0x36/0xb0 [ 76.975792][ T6690] io_ring_ctx_alloc+0x2a3/0x660 [ 76.975822][ T6690] io_uring_create+0x50/0x4e0 [ 76.975851][ T6690] ? memchr_inv+0x30/0x2f0 [ 76.975897][ T6690] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 76.975932][ T6690] __x64_sys_io_uring_setup+0x31/0x40 [ 76.976038][ T6690] x64_sys_call+0x244c/0x3000 [ 76.976065][ T6690] do_syscall_64+0xc0/0x2a0 [ 76.976096][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.976128][ T6690] RIP: 0033:0x7fab2fb1aeb9 [ 76.976226][ T6690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.976246][ T6690] RSP: 002b:00007fab2e576fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 76.976269][ T6690] RAX: ffffffffffffffda RBX: 00007fab2fd95fa0 RCX: 00007fab2fb1aeb9 [ 76.976284][ T6690] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000ed0 [ 76.976299][ T6690] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 76.976458][ T6690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 76.976471][ T6690] R13: 0000000000000000 R14: 0000000000000ed0 R15: 0000000000000000 [ 76.976490][ T6690] [ 77.013377][ T6701] EXT4-fs: Ignoring removed bh option [ 77.097280][ T6693] EXT4-fs (loop4): shut down requested (1) [ 77.101290][ T6701] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.123327][ T6693] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.208053][ T6701] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 77.220285][ T6693] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.229201][ T6701] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 77.233969][ T6693] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.237714][ T6701] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.255245][ T6701] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 77.264955][ T6701] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 77.265492][ T6708] set_capacity_and_notify: 20 callbacks suppressed [ 77.265508][ T6708] loop3: detected capacity change from 0 to 256 [ 77.279063][ T6701] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.918: Failed to acquire dquot type 1 [ 77.284495][ T6708] vfat: Unknown parameter '0x0000000000000003' [ 77.288408][ T6701] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.918: Invalid block bitmap block 0 in block_group 0 [ 77.332613][ T6701] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.918: Invalid block bitmap block 0 in block_group 0 [ 77.348126][ T6701] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.918: Invalid block bitmap block 0 in block_group 0 [ 77.362013][ T6701] Quota error (device loop5): write_blk: dquota write failed [ 77.369514][ T6701] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.918: Failed to acquire dquot type 1 [ 77.386242][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.387911][ T6701] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.918: Failed to acquire dquot type 1 [ 77.388086][ T6701] EXT4-fs (loop5): 1 orphan inode deleted [ 77.388715][ T6701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.403693][ T6701] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.918: deleted inode referenced: 12 [ 77.426089][ T6708] loop3: detected capacity change from 0 to 8192 [ 77.466092][ T6712] loop4: detected capacity change from 0 to 512 [ 77.477707][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.491326][ T6708] vfat: Unknown parameter 's [ 77.491326][ T6708] comment [ 77.491326][ T6708] bpf [ 77.491326][ T6708] bpf [ 77.491326][ T6708] connmark [ 77.491326][ T6708] mark [ 77.491326][ T6708] rpfilter [ 77.491326][ T6708] ah [ 77.491326][ T6708] tcpmss [ 77.491326][ T6708] socke' [ 77.522007][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.562477][ T6712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.584262][ T6712] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.614127][ T6712] EXT4-fs (loop4): shut down requested (1) [ 77.620748][ T6712] FAULT_INJECTION: forcing a failure. [ 77.620748][ T6712] name failslab, interval 1, probability 0, space 0, times 0 [ 77.633885][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.4.920 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.633938][ T6712] Tainted: [W]=WARN [ 77.633946][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.633959][ T6712] Call Trace: [ 77.633967][ T6712] [ 77.633975][ T6712] __dump_stack+0x1d/0x30 [ 77.634004][ T6712] dump_stack_lvl+0x95/0xd0 [ 77.634094][ T6712] dump_stack+0x15/0x1b [ 77.634119][ T6712] should_fail_ex+0x263/0x280 [ 77.634183][ T6712] should_failslab+0x8c/0xb0 [ 77.634208][ T6712] kmem_cache_alloc_noprof+0x68/0x490 [ 77.634236][ T6712] ? __es_insert_extent+0x508/0xee0 [ 77.634330][ T6712] __es_insert_extent+0x508/0xee0 [ 77.634369][ T6712] ext4_es_insert_extent+0x467/0x1c70 [ 77.634443][ T6712] ? xas_load+0x413/0x430 [ 77.634550][ T6712] ext4_map_query_blocks+0x38e/0x550 [ 77.634586][ T6712] ? ext4_es_lookup_extent+0x3ac/0x540 [ 77.634619][ T6712] ext4_map_blocks+0x398/0xd70 [ 77.634721][ T6712] ? xa_load+0xb1/0xe0 [ 77.634754][ T6712] ? __account_obj_stock+0x211/0x350 [ 77.634783][ T6712] ext4_getblk+0x128/0x530 [ 77.634815][ T6712] ext4_bread_batch+0x5c/0x320 [ 77.634843][ T6712] __ext4_find_entry+0x852/0xdf0 [ 77.634880][ T6712] ? __d_alloc+0x37/0x340 [ 77.634931][ T6712] ? d_alloc_parallel+0xc01/0xce0 [ 77.635031][ T6712] ext4_lookup+0xcd/0x3a0 [ 77.635060][ T6712] __lookup_slow+0x19d/0x260 [ 77.635094][ T6712] lookup_slow+0x3c/0x60 [ 77.635182][ T6712] path_lookupat+0x2f7/0x500 [ 77.635216][ T6712] filename_lookup+0x190/0x390 [ 77.635295][ T6712] __se_sys_file_setattr+0x363/0x4b0 [ 77.635324][ T6712] __x64_sys_file_setattr+0x67/0x80 [ 77.635349][ T6712] x64_sys_call+0x2fd7/0x3000 [ 77.635398][ T6712] do_syscall_64+0xc0/0x2a0 [ 77.635431][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.635453][ T6712] RIP: 0033:0x7fcac1f5aeb9 [ 77.635469][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.635539][ T6712] RSP: 002b:00007fcac09b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 77.635558][ T6712] RAX: ffffffffffffffda RBX: 00007fcac21d5fa0 RCX: 00007fcac1f5aeb9 [ 77.635633][ T6712] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 77.635721][ T6712] RBP: 00007fcac09b7090 R08: 0000000000001000 R09: 0000000000000000 [ 77.635775][ T6712] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 77.635784][ T6712] R13: 00007fcac21d6038 R14: 00007fcac21d5fa0 R15: 00007ffef5578d08 [ 77.635797][ T6712] [ 77.896521][ T6725] loop0: detected capacity change from 0 to 512 [ 77.903363][ T6725] EXT4-fs: Ignoring removed oldalloc option [ 77.933761][ T6725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.925: Parent and EA inode have the same ino 15 [ 77.949140][ T6712] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.982806][ T6725] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.925: Parent and EA inode have the same ino 15 [ 78.004011][ T6712] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.027924][ T6712] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.039501][ T6736] loop2: detected capacity change from 0 to 512 [ 78.044221][ T6725] EXT4-fs (loop0): 1 orphan inode deleted [ 78.056773][ T6725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.084692][ T6740] batadv_slave_0: entered promiscuous mode [ 78.096980][ T6736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.136065][ T6736] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.147308][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.163531][ T6744] FAULT_INJECTION: forcing a failure. [ 78.163531][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.173423][ T6740] infiniband !yz!: set active [ 78.176642][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.5.934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.176757][ T6744] Tainted: [W]=WARN [ 78.176765][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.176897][ T6744] Call Trace: [ 78.176905][ T6744] [ 78.176914][ T6744] __dump_stack+0x1d/0x30 [ 78.176942][ T6744] dump_stack_lvl+0x95/0xd0 [ 78.176965][ T6744] dump_stack+0x15/0x1b [ 78.176986][ T6744] should_fail_ex+0x263/0x280 [ 78.177059][ T6744] should_fail+0xb/0x20 [ 78.177130][ T6744] should_fail_usercopy+0x1a/0x20 [ 78.177163][ T6744] _copy_from_iter+0xcf/0xea0 [ 78.177184][ T6744] ? __alloc_skb+0x397/0x4b0 [ 78.177231][ T6744] ? __alloc_skb+0x219/0x4b0 [ 78.177263][ T6744] netlink_sendmsg+0x4ae/0x6f0 [ 78.177286][ T6744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.177462][ T6744] ____sys_sendmsg+0x5af/0x600 [ 78.177486][ T6744] ___sys_sendmsg+0x195/0x1e0 [ 78.177517][ T6744] __x64_sys_sendmsg+0xd4/0x160 [ 78.177542][ T6744] x64_sys_call+0x17ba/0x3000 [ 78.177579][ T6744] do_syscall_64+0xc0/0x2a0 [ 78.177710][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.177734][ T6744] RIP: 0033:0x7f9a7282aeb9 [ 78.177759][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.177799][ T6744] RSP: 002b:00007f9a71287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.177823][ T6744] RAX: ffffffffffffffda RBX: 00007f9a72aa5fa0 RCX: 00007f9a7282aeb9 [ 78.177839][ T6744] RDX: 0000000004000054 RSI: 0000200000000140 RDI: 0000000000000003 [ 78.177854][ T6744] RBP: 00007f9a71287090 R08: 0000000000000000 R09: 0000000000000000 [ 78.177871][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.177884][ T6744] R13: 00007f9a72aa6038 R14: 00007f9a72aa5fa0 R15: 00007ffcebb755f8 [ 78.177905][ T6744] [ 78.206992][ T6736] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks [ 78.210145][ T6740] infiniband !yz!: added team_slave_0 [ 78.260879][ T6740] RDS/IB: !yz!: added [ 78.264745][ T6736] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 78.270038][ T6740] smc: adding ib device !yz! with port count 1 [ 78.299564][ T6749] loop5: detected capacity change from 0 to 512 [ 78.319132][ T6740] smc: ib device !yz! port 1 has no pnetid [ 78.392968][ T6736] 9p: Bad value for 'rfdno' [ 78.423090][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.467330][ T6749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.483795][ T6757] __nla_validate_parse: 3 callbacks suppressed [ 78.490181][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 78.493932][ T6749] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.551262][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.562170][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.599198][ T6769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6769 comm=syz.4.938 [ 78.624191][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 78.647821][ T6772] loop2: detected capacity change from 0 to 1024 [ 78.676562][ T6772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.826400][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.858312][ T6786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6786 comm=syz.2.946 [ 78.877724][ T6739] batadv_slave_0: left promiscuous mode [ 78.891794][ T6783] loop0: detected capacity change from 0 to 8192 [ 78.949577][ T6781] loop5: detected capacity change from 0 to 2048 [ 78.988154][ T6794] netlink: 204 bytes leftover after parsing attributes in process `syz.2.949'. [ 79.001579][ T6781] Alternate GPT is invalid, using primary GPT. [ 79.002208][ T6794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.949'. [ 79.009334][ T6781] loop5: p2 p3 p7 [ 79.077008][ T6797] loop2: detected capacity change from 0 to 512 [ 79.105265][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.124249][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.174045][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 79.183230][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 79.192517][ T6797] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.206622][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 79.216352][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 79.236500][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.275997][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.284960][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.398369][ T6817] batadv_slave_0: entered promiscuous mode [ 79.405494][ T6817] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 79.412742][ T6816] batadv_slave_0: left promiscuous mode [ 79.442770][ T6819] iso9660: Unknown parameter 'ioch„rset' [ 79.477039][ T6822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6822 comm=syz.0.960 [ 79.503676][ T6824] FAULT_INJECTION: forcing a failure. [ 79.503676][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 79.516496][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.4.961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.516522][ T6824] Tainted: [W]=WARN [ 79.516527][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.516536][ T6824] Call Trace: [ 79.516558][ T6824] [ 79.516564][ T6824] __dump_stack+0x1d/0x30 [ 79.516607][ T6824] dump_stack_lvl+0x95/0xd0 [ 79.516685][ T6824] dump_stack+0x15/0x1b [ 79.516699][ T6824] should_fail_ex+0x263/0x280 [ 79.516720][ T6824] should_failslab+0x8c/0xb0 [ 79.516737][ T6824] kmem_cache_alloc_noprof+0x68/0x490 [ 79.516756][ T6824] ? skb_clone+0x151/0x1f0 [ 79.516771][ T6824] skb_clone+0x151/0x1f0 [ 79.516783][ T6824] __netlink_deliver_tap+0x2c9/0x500 [ 79.516947][ T6824] netlink_unicast+0x66b/0x690 [ 79.516969][ T6824] netlink_sendmsg+0x5c8/0x6f0 [ 79.516984][ T6824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.517042][ T6824] ____sys_sendmsg+0x5af/0x600 [ 79.517069][ T6824] ___sys_sendmsg+0x195/0x1e0 [ 79.517090][ T6824] __x64_sys_sendmsg+0xd4/0x160 [ 79.517106][ T6824] x64_sys_call+0x17ba/0x3000 [ 79.517173][ T6824] do_syscall_64+0xc0/0x2a0 [ 79.517194][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.517210][ T6824] RIP: 0033:0x7fcac1f5aeb9 [ 79.517234][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.517255][ T6824] RSP: 002b:00007fcac09b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.517309][ T6824] RAX: ffffffffffffffda RBX: 00007fcac21d5fa0 RCX: 00007fcac1f5aeb9 [ 79.517320][ T6824] RDX: 0000000004000054 RSI: 0000200000000140 RDI: 0000000000000003 [ 79.517329][ T6824] RBP: 00007fcac09b7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.517338][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.517415][ T6824] R13: 00007fcac21d6038 R14: 00007fcac21d5fa0 R15: 00007ffef5578d08 [ 79.517429][ T6824] [ 79.517441][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 79.704651][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.742276][ T6826] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.753389][ T6826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.807713][ T6837] debugfs: 'ttyS3' already exists in 'caif_serial' [ 79.894775][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 80.005969][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.030297][ T6860] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.108349][ T6860] EXT4-fs (loop0): shut down requested (1) [ 80.162045][ T6860] FAULT_INJECTION: forcing a failure. [ 80.162045][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 80.162084][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.0.970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.162119][ T6860] Tainted: [W]=WARN [ 80.162127][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.162141][ T6860] Call Trace: [ 80.162201][ T6860] [ 80.162210][ T6860] __dump_stack+0x1d/0x30 [ 80.162240][ T6860] dump_stack_lvl+0x95/0xd0 [ 80.162341][ T6860] dump_stack+0x15/0x1b [ 80.162362][ T6860] should_fail_ex+0x263/0x280 [ 80.162398][ T6860] should_failslab+0x8c/0xb0 [ 80.162427][ T6860] kmem_cache_alloc_noprof+0x68/0x490 [ 80.162466][ T6860] ? security_inode_alloc+0x37/0x100 [ 80.162502][ T6860] security_inode_alloc+0x37/0x100 [ 80.162545][ T6860] inode_init_always_gfp+0x4b7/0x500 [ 80.162572][ T6860] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 80.162599][ T6860] alloc_inode+0x58/0x170 [ 80.162682][ T6860] iget_locked+0x101/0x440 [ 80.162714][ T6860] __ext4_iget+0x152/0x2350 [ 80.162755][ T6860] ext4_lookup+0x173/0x3a0 [ 80.162802][ T6860] __lookup_slow+0x19d/0x260 [ 80.162849][ T6860] lookup_slow+0x3c/0x60 [ 80.162883][ T6860] path_lookupat+0x2f7/0x500 [ 80.162912][ T6860] filename_lookup+0x190/0x390 [ 80.163010][ T6860] __se_sys_file_setattr+0x363/0x4b0 [ 80.163040][ T6860] __x64_sys_file_setattr+0x67/0x80 [ 80.163063][ T6860] x64_sys_call+0x2fd7/0x3000 [ 80.163152][ T6860] do_syscall_64+0xc0/0x2a0 [ 80.163186][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.163212][ T6860] RIP: 0033:0x7f78ec75aeb9 [ 80.163244][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.163302][ T6860] RSP: 002b:00007f78eb1b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 80.163382][ T6860] RAX: ffffffffffffffda RBX: 00007f78ec9d5fa0 RCX: 00007f78ec75aeb9 [ 80.163400][ T6860] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 80.163416][ T6860] RBP: 00007f78eb1b7090 R08: 0000000000001000 R09: 0000000000000000 [ 80.163493][ T6860] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 80.163506][ T6860] R13: 00007f78ec9d6038 R14: 00007f78ec9d5fa0 R15: 00007ffc265bc578 [ 80.163525][ T6860] [ 80.206445][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.244644][ T6891] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 80.278377][ T6899] EXT4-fs: Ignoring removed nobh option [ 80.285465][ T6899] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 80.364346][ T1037] delete_channel: no stack [ 80.373766][ T6899] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.977: inode has both inline data and extents flags [ 80.406219][ T6896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.446305][ T6899] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.977: couldn't read orphan inode 13 (err -117) [ 80.451599][ T6896] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.464754][ T6899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.582732][ T6896] EXT4-fs (loop0): shut down requested (1) [ 80.590060][ T6896] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 80.599464][ T6896] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 80.599882][ T3813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.608695][ T6896] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 80.744160][ T6918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.760744][ T6918] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.773817][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.797872][ T6918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.838208][ T6924] EXT4-fs: Ignoring removed oldalloc option [ 80.856676][ T6924] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.993: Parent and EA inode have the same ino 15 [ 80.881831][ T6924] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.993: Parent and EA inode have the same ino 15 [ 80.944486][ T6924] EXT4-fs (loop2): 1 orphan inode deleted [ 81.009042][ T6943] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.028918][ T6943] EXT4-fs (loop3): shut down requested (2) [ 81.076067][ T6943] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.085087][ T6943] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.094237][ T6943] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.107591][ T6944] delete_channel: no stack [ 81.130241][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.138613][ T6953] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.152453][ T6953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.169419][ T6954] netlink: 'syz.2.994': attribute type 21 has an invalid length. [ 81.212783][ T6953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 81.246759][ T6953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.254312][ T6953] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 81.303949][ T6953] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 81.313778][ T6953] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.333112][ T6972] program syz.5.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.342686][ T6953] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.994: couldn't read orphan inode 13 (err -117) [ 81.359006][ T6975] program syz.5.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.404991][ T6970] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.416999][ T6981] EXT4-fs: Ignoring removed oldalloc option [ 81.433731][ T6981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1004: Parent and EA inode have the same ino 15 [ 81.468164][ T6981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1004: Parent and EA inode have the same ino 15 [ 81.507108][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 81.507146][ T29] audit: type=1400 audit(1770306989.494:1167): avc: denied { name_connect } for pid=6986 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 81.510326][ T6981] EXT4-fs (loop0): 1 orphan inode deleted [ 81.627978][ T29] audit: type=1400 audit(1770306989.614:1168): avc: denied { map } for pid=6952 comm="syz.2.994" path="/dev/ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 81.652364][ T29] audit: type=1400 audit(1770306989.614:1169): avc: denied { execute } for pid=6952 comm="syz.2.994" path="/dev/ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 81.679477][ T29] audit: type=1400 audit(1770306989.644:1170): avc: denied { lock } for pid=6997 comm="syz.5.1009" path="socket:[15274]" dev="sockfs" ino=15274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.800127][ T7010] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.841957][ T7010] EXT4-fs (loop3): shut down requested (1) [ 81.862416][ T7010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.874089][ T7010] FAULT_INJECTION: forcing a failure. [ 81.874089][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 81.887134][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.3.1015 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.887168][ T7010] Tainted: [W]=WARN [ 81.887175][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.887187][ T7010] Call Trace: [ 81.887236][ T7010] [ 81.887243][ T7010] __dump_stack+0x1d/0x30 [ 81.887293][ T7010] dump_stack_lvl+0x95/0xd0 [ 81.887313][ T7010] dump_stack+0x15/0x1b [ 81.887339][ T7010] should_fail_ex+0x263/0x280 [ 81.887368][ T7010] should_failslab+0x8c/0xb0 [ 81.887414][ T7010] __kmalloc_cache_noprof+0x64/0x4a0 [ 81.887439][ T7010] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 81.887478][ T7010] inode_doinit_use_xattr+0x3c/0x2d0 [ 81.887617][ T7010] inode_doinit_with_dentry+0x595/0x7a0 [ 81.887678][ T7010] selinux_inode_file_getattr+0x108/0x210 [ 81.887704][ T7010] security_inode_file_getattr+0x3c/0x70 [ 81.887857][ T7010] vfs_fileattr_set+0xd4/0x6b0 [ 81.887896][ T7010] __se_sys_file_setattr+0x3f7/0x4b0 [ 81.887926][ T7010] __x64_sys_file_setattr+0x67/0x80 [ 81.887946][ T7010] x64_sys_call+0x2fd7/0x3000 [ 81.887991][ T7010] do_syscall_64+0xc0/0x2a0 [ 81.888021][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.888043][ T7010] RIP: 0033:0x7f1bcb2baeb9 [ 81.888060][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.888078][ T7010] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 81.888134][ T7010] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 81.888149][ T7010] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 81.888163][ T7010] RBP: 00007f1bc9d17090 R08: 0000000000001000 R09: 0000000000000000 [ 81.888176][ T7010] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 81.888195][ T7010] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 81.888231][ T7010] [ 81.893947][ T7010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 82.236526][ T7041] EXT4-fs: Ignoring removed oldalloc option [ 82.249661][ T7041] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1024: Parent and EA inode have the same ino 15 [ 82.313671][ T884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.317767][ T7041] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1024: Parent and EA inode have the same ino 15 [ 82.324213][ T884] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.334607][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.353462][ T884] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.370755][ T29] audit: type=1400 audit(1770306990.354:1171): avc: denied { setopt } for pid=7052 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.392406][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.413386][ T7041] EXT4-fs (loop4): 1 orphan inode deleted [ 82.425223][ T7062] set_capacity_and_notify: 14 callbacks suppressed [ 82.425279][ T7062] loop2: detected capacity change from 0 to 512 [ 82.471468][ T7062] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.474305][ T29] audit: type=1400 audit(1770306990.454:1172): avc: denied { write } for pid=7064 comm="syz.5.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.484636][ T7062] EXT4-fs (loop2): shut down requested (1) [ 82.501686][ T7068] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 82.523143][ T7062] FAULT_INJECTION: forcing a failure. [ 82.523143][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 82.536037][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.2.1031 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.536114][ T7062] Tainted: [W]=WARN [ 82.536122][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.536135][ T7062] Call Trace: [ 82.536142][ T7062] [ 82.536151][ T7062] __dump_stack+0x1d/0x30 [ 82.536182][ T7062] dump_stack_lvl+0x95/0xd0 [ 82.536279][ T7068] random: crng reseeded on system resumption [ 82.536277][ T7062] dump_stack+0x15/0x1b [ 82.536302][ T7062] should_fail_ex+0x263/0x280 [ 82.536333][ T7062] should_failslab+0x8c/0xb0 [ 82.536358][ T7062] __kmalloc_cache_noprof+0x64/0x4a0 [ 82.536452][ T7062] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 82.536488][ T7062] inode_doinit_use_xattr+0x3c/0x2d0 [ 82.536539][ T7062] inode_doinit_with_dentry+0x595/0x7a0 [ 82.536575][ T7062] selinux_d_instantiate+0x27/0x40 [ 82.536654][ T7062] security_d_instantiate+0x76/0x90 [ 82.536714][ T7062] d_splice_alias_ops+0x53/0x320 [ 82.536748][ T7062] d_splice_alias+0x1f/0x30 [ 82.536819][ T7062] ext4_lookup+0x1a6/0x3a0 [ 82.536847][ T7062] __lookup_slow+0x19d/0x260 [ 82.536886][ T7062] lookup_slow+0x3c/0x60 [ 82.536988][ T7062] path_lookupat+0x2f7/0x500 [ 82.537088][ T7062] filename_lookup+0x190/0x390 [ 82.537125][ T7062] __se_sys_file_setattr+0x363/0x4b0 [ 82.537204][ T7062] __x64_sys_file_setattr+0x67/0x80 [ 82.537227][ T7062] x64_sys_call+0x2fd7/0x3000 [ 82.537254][ T7062] do_syscall_64+0xc0/0x2a0 [ 82.537304][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.537328][ T7062] RIP: 0033:0x7fab2fb1aeb9 [ 82.537346][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.537431][ T7062] RSP: 002b:00007fab2e577028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 82.537468][ T7062] RAX: ffffffffffffffda RBX: 00007fab2fd95fa0 RCX: 00007fab2fb1aeb9 [ 82.537484][ T7062] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 82.537500][ T7062] RBP: 00007fab2e577090 R08: 0000000000001000 R09: 0000000000000000 [ 82.537527][ T7062] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 82.537542][ T7062] R13: 00007fab2fd96038 R14: 00007fab2fd95fa0 R15: 00007ffed08aaf98 [ 82.537563][ T7062] [ 82.564047][ T7062] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 82.613256][ T29] audit: type=1400 audit(1770306990.524:1173): avc: denied { write } for pid=7064 comm="syz.5.1033" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.660066][ T7062] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 82.661679][ T29] audit: type=1400 audit(1770306990.524:1174): avc: denied { open } for pid=7064 comm="syz.5.1033" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.682643][ T7081] netlink: 'syz.5.1033': attribute type 13 has an invalid length. [ 82.797375][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.806683][ T7081] syz_tun: refused to change device tx_queue_len [ 82.852778][ T7081] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 82.853370][ T7086] netlink: 'syz.4.1036': attribute type 2 has an invalid length. [ 82.938903][ T29] audit: type=1400 audit(1770306990.904:1175): avc: denied { ioctl } for pid=7064 comm="syz.5.1033" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.039715][ T7105] batadv_slave_1: entered promiscuous mode [ 83.045879][ T3450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.135056][ T29] audit: type=1326 audit(1770306991.124:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.3.1048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bcb2baeb9 code=0x0 [ 83.173794][ T7113] loop0: detected capacity change from 0 to 512 [ 83.188318][ T7113] EXT4-fs: Ignoring removed oldalloc option [ 83.226667][ T7113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1047: Parent and EA inode have the same ino 15 [ 83.246419][ T7116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.254710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.269227][ T7113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1047: Parent and EA inode have the same ino 15 [ 83.301799][ T7113] EXT4-fs (loop0): 1 orphan inode deleted [ 83.318850][ T7121] devtmpfs: Too few inodes for current use [ 83.458654][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.484496][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.492822][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.579428][ T7139] __nla_validate_parse: 33 callbacks suppressed [ 83.579449][ T7139] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1056'. [ 83.598049][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 83.612745][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'. [ 83.627381][ T7141] loop5: detected capacity change from 0 to 512 [ 83.634187][ T7141] vfat: Unknown parameter '§o¼‹˜ò0Î' [ 83.643997][ T7141] loop5: detected capacity change from 0 to 512 [ 83.660774][ T7141] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.691541][ T7141] EXT4-fs (loop5): shut down requested (1) [ 83.697762][ T7141] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 83.706781][ T7141] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 83.715827][ T7141] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 83.801940][ T7149] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1060'. [ 83.858352][ T7153] loop2: detected capacity change from 0 to 512 [ 83.877903][ T7104] batadv_slave_1: left promiscuous mode [ 83.896373][ T7153] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.924470][ T7153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 83.940476][ T7153] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.958074][ T7153] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.043154][ T7162] loop3: detected capacity change from 0 to 512 [ 84.084802][ T7153] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.093201][ T7162] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.113608][ T7153] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.140275][ T7170] loop0: detected capacity change from 0 to 512 [ 84.156825][ T7153] EXT4-fs (loop2): Remounting filesystem read-only [ 84.187360][ T7176] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1932423017 (only 1 groups) [ 84.199726][ T7153] EXT4-fs (loop2): 1 truncate cleaned up [ 84.304690][ T7188] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1070'. [ 84.314733][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 84.348168][ T7189] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1073'. [ 84.554051][ T7212] loop2: detected capacity change from 0 to 512 [ 84.566924][ T7215] loop3: detected capacity change from 0 to 512 [ 84.577773][ T7212] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 84.587392][ T7215] EXT4-fs: Ignoring removed oldalloc option [ 84.596281][ T7212] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 84.610914][ T7212] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.1082: corrupted inode contents [ 84.623390][ T7212] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #11: comm syz.2.1082: mark_inode_dirty error [ 84.635451][ T7212] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1082: invalid indirect mapped block 1 (level 1) [ 84.638937][ T7215] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1084: Parent and EA inode have the same ino 15 [ 84.662509][ T7212] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.1082: corrupted inode contents [ 84.675719][ T7212] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 84.697020][ T7215] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1084: Parent and EA inode have the same ino 15 [ 84.709735][ T7212] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.1082: corrupted inode contents [ 84.724104][ T7212] EXT4-fs error (device loop2): ext4_truncate:4635: inode #11: comm syz.2.1082: mark_inode_dirty error [ 84.735699][ T7215] EXT4-fs (loop3): 1 orphan inode deleted [ 84.742762][ T7212] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 84.756772][ T7212] EXT4-fs (loop2): 1 truncate cleaned up [ 84.768879][ T7212] loop2: detected capacity change from 0 to 128 [ 84.784752][ T7212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.828871][ T7225] futex_wake_op: syz.3.1087 tries to shift op by -3; fix this program [ 84.851340][ T7225] mmap: syz.3.1087 (7225): VmData 16474112 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 84.885608][ T884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.886447][ T7228] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1088'. [ 84.916801][ T7230] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 84.926013][ T7230] EXT4-fs (loop3): 1 truncate cleaned up [ 84.926357][ T7232] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1090'. [ 84.938827][ T7230] ext4: Unknown parameter '»ùÅ££Ú¡CüñcÚÿF—íÿßýÛ>ÐNóâ_~' [ 85.008097][ T7236] EXT4-fs: Ignoring removed oldalloc option [ 85.016188][ T7239] EXT4-fs: Mount option(s) incompatible with ext2 [ 85.039059][ T7236] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1091: Parent and EA inode have the same ino 15 [ 85.113591][ T7236] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1091: Parent and EA inode have the same ino 15 [ 85.156240][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'. [ 85.156276][ T7236] EXT4-fs (loop0): 1 orphan inode deleted [ 85.183243][ T7253] EXT4-fs: Ignoring removed oldalloc option [ 85.208553][ T7252] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.217779][ T7253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1097: Parent and EA inode have the same ino 15 [ 85.220767][ T7252] EXT4-fs (loop4): shut down requested (2) [ 85.254981][ T7252] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 85.283288][ T7252] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 85.283669][ T7258] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.303914][ T7253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1097: Parent and EA inode have the same ino 15 [ 85.308198][ T7260] FAT-fs (loop2): IO charset cp855 not found [ 85.339706][ T7252] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 85.345405][ T7265] netlink: 'syz.0.1102': attribute type 36 has an invalid length. [ 85.368671][ T7265] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.374121][ T7253] EXT4-fs (loop3): 1 orphan inode deleted [ 85.378600][ T7265] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 85.407314][ T7260] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #12: block 2: comm syz.2.1100: lblock 0 mapped to illegal pblock 2 (length 1) [ 85.411913][ T7270] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #12: block 2: comm syz.2.1100: lblock 0 mapped to illegal pblock 2 (length 1) [ 85.573542][ T5109] Alternate GPT is invalid, using primary GPT. [ 85.580162][ T5109] loop0: p1 p2 p3 [ 85.597663][ T7279] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.664437][ T7268] Alternate GPT is invalid, using primary GPT. [ 85.670836][ T7268] loop0: p1 p2 p3 [ 85.689024][ T7279] EXT4-fs (loop3): shut down requested (1) [ 85.717163][ T7279] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 85.744329][ T7279] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 85.794221][ T7279] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 85.942376][ T7312] xt_hashlimit: size too large, truncated to 1048576 [ 85.949253][ T7312] xt_hashlimit: max too large, truncated to 1048576 [ 85.951860][ T7310] EXT4-fs: Ignoring removed oldalloc option [ 85.957446][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.974313][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.975603][ T7310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1114: Parent and EA inode have the same ino 15 [ 85.999612][ T7310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1114: Parent and EA inode have the same ino 15 [ 86.013067][ T7310] EXT4-fs (loop4): 1 orphan inode deleted [ 86.167037][ T7330] Cannot find set identified by id 0 to match [ 86.226042][ T7332] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.261197][ T7332] EXT4-fs (loop3): shut down requested (1) [ 86.331761][ T3530] loop5: p1 < > [ 86.350823][ T7320] loop5: p1 < > [ 86.352331][ T7339] FAT-fs (loop3): Directory bread(block 64) failed [ 86.362084][ T7339] FAT-fs (loop3): Directory bread(block 65) failed [ 86.369336][ T7339] FAT-fs (loop3): Directory bread(block 66) failed [ 86.401291][ T7339] FAT-fs (loop3): Directory bread(block 67) failed [ 86.411286][ T7339] FAT-fs (loop3): Directory bread(block 68) failed [ 86.418304][ T7339] FAT-fs (loop3): Directory bread(block 69) failed [ 86.425045][ T7339] FAT-fs (loop3): Directory bread(block 70) failed [ 86.431669][ T7339] FAT-fs (loop3): Directory bread(block 71) failed [ 86.438801][ T7339] FAT-fs (loop3): Directory bread(block 72) failed [ 86.446393][ T7339] FAT-fs (loop3): Directory bread(block 73) failed [ 86.455634][ T7343] x_tables: duplicate underflow at hook 4 [ 86.515626][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 86.515644][ T29] audit: type=1326 audit(1770306994.504:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcac1f1b78e code=0x7ffc0000 [ 86.567908][ T29] audit: type=1326 audit(1770306994.504:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcac1f1b78e code=0x7ffc0000 [ 86.591730][ T29] audit: type=1326 audit(1770306994.514:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcac1f1b78e code=0x7ffc0000 [ 86.615180][ T29] audit: type=1326 audit(1770306994.524:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcac1f5aeb9 code=0x7ffc0000 [ 86.638674][ T29] audit: type=1326 audit(1770306994.524:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcac1f5aeb9 code=0x7ffc0000 [ 86.662342][ T29] audit: type=1326 audit(1770306994.514:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac1f5aeb9 code=0x7ffc0000 [ 86.685934][ T29] audit: type=1400 audit(1770306994.524:1362): avc: denied { setopt } for pid=7344 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.705716][ T29] audit: type=1400 audit(1770306994.534:1363): avc: denied { getattr } for pid=7344 comm="syz.5.1127" name="[io_uring]" dev="anon_inodefs" ino=17659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.850793][ T23] hid (null): unknown global tag 0xc [ 86.856285][ T23] hid (null): invalid report_size 1422492284 [ 86.862327][ T23] hid (null): global environment stack underflow [ 86.876580][ T29] audit: type=1400 audit(1770306994.834:1364): avc: denied { map } for pid=7363 comm="syz.5.1132" path="socket:[16853]" dev="sockfs" ino=16853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.900223][ T29] audit: type=1400 audit(1770306994.834:1365): avc: denied { read accept } for pid=7363 comm="syz.5.1132" path="socket:[16853]" dev="sockfs" ino=16853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.964010][ T23] hid-generic 0004:0004:0001.0003: collection stack underflow [ 86.971855][ T23] hid-generic 0004:0004:0001.0003: item 0 1 0 12 parsing failed [ 87.013397][ T7362] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.021099][ T23] hid-generic 0004:0004:0001.0003: probe with driver hid-generic failed with error -22 [ 87.383199][ T7396] net_ratelimit: 7 callbacks suppressed [ 87.383217][ T7396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.397466][ T7396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.406026][ T7396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.456636][ T7390] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 87.472652][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.494550][ T7396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.502934][ T7396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.687012][ T7407] set_capacity_and_notify: 17 callbacks suppressed [ 87.687035][ T7407] loop4: detected capacity change from 0 to 512 [ 87.711934][ T7407] EXT4-fs: Ignoring removed oldalloc option [ 87.759548][ T7407] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1147: Parent and EA inode have the same ino 15 [ 87.772264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.795816][ T7407] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1147: Parent and EA inode have the same ino 15 [ 87.874288][ T7407] EXT4-fs (loop4): 1 orphan inode deleted [ 87.933061][ T7419] FAULT_INJECTION: forcing a failure. [ 87.933061][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 87.946019][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.3.1151 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.946060][ T7419] Tainted: [W]=WARN [ 87.946068][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.946083][ T7419] Call Trace: [ 87.946132][ T7419] [ 87.946141][ T7419] __dump_stack+0x1d/0x30 [ 87.946169][ T7419] dump_stack_lvl+0x95/0xd0 [ 87.946194][ T7419] dump_stack+0x15/0x1b [ 87.946218][ T7419] should_fail_ex+0x263/0x280 [ 87.946276][ T7419] should_failslab+0x8c/0xb0 [ 87.946304][ T7419] __kvmalloc_node_noprof+0x148/0x680 [ 87.946336][ T7419] ? file_tty_write+0x1a3/0x690 [ 87.946364][ T7419] ? mutex_trylock+0x81/0xc0 [ 87.946477][ T7419] file_tty_write+0x1a3/0x690 [ 87.946507][ T7419] ? __pfx_tty_write+0x10/0x10 [ 87.946542][ T7419] tty_write+0x25/0x30 [ 87.946568][ T7419] vfs_write+0x5a6/0x9f0 [ 87.946595][ T7419] ksys_write+0xdc/0x1a0 [ 87.946700][ T7419] __x64_sys_write+0x40/0x50 [ 87.946720][ T7419] x64_sys_call+0x2847/0x3000 [ 87.946748][ T7419] do_syscall_64+0xc0/0x2a0 [ 87.946781][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.946853][ T7419] RIP: 0033:0x7f1bcb2baeb9 [ 87.946873][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.946941][ T7419] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.946967][ T7419] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 87.946984][ T7419] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 87.947000][ T7419] RBP: 00007f1bc9d17090 R08: 0000000000000000 R09: 0000000000000000 [ 87.947042][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.947057][ T7419] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 87.947079][ T7419] [ 88.248365][ T7423] loop5: detected capacity change from 0 to 512 [ 88.296942][ T7423] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.327163][ T7428] ipvlan2: entered promiscuous mode [ 88.332342][ T7423] EXT4-fs (loop5): shut down requested (1) [ 88.340295][ T7428] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 88.387563][ T7429] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 88.398674][ T7429] bond2 (unregistering): Released all slaves [ 88.481395][ T7434] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.489630][ T7437] loop2: detected capacity change from 0 to 512 [ 88.490427][ T7434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7434 comm=syz.5.1156 [ 88.509091][ T7438] loop4: detected capacity change from 0 to 512 [ 88.516236][ T7437] EXT4-fs: Ignoring removed orlov option [ 88.521986][ T7437] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.536060][ T7438] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.551842][ T7438] EXT4-fs (loop4): shut down requested (1) [ 88.560116][ T7437] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1157: corrupted in-inode xattr: e_value size too large [ 88.581707][ T7437] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1157: couldn't read orphan inode 15 (err -117) [ 88.626897][ T7443] loop5: detected capacity change from 0 to 512 [ 88.669035][ T7443] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.681178][ T7443] EXT4-fs (loop5): shut down requested (2) [ 88.707255][ T7443] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 88.716124][ T7443] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 88.726504][ T7443] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 88.734730][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.083004][ T7464] __nla_validate_parse: 17 callbacks suppressed [ 89.083098][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 89.098388][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 89.141756][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 89.166526][ T7461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1164'. [ 89.181714][ T7453] loop4: detected capacity change from 0 to 32768 [ 89.208543][ T7470] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1169'. [ 89.260456][ T7472] loop3: detected capacity change from 0 to 512 [ 89.298818][ T7472] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.311342][ T7472] EXT4-fs (loop3): shut down requested (1) [ 89.317511][ T7472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.326601][ T7472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.335558][ T7472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.391933][ T7479] loop3: detected capacity change from 0 to 512 [ 89.416557][ T7479] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.441179][ T7479] EXT4-fs (loop3): shut down requested (2) [ 89.470781][ T7479] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.481029][ T7479] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.493298][ T7479] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 89.540607][ T7489] loop2: detected capacity change from 0 to 128 [ 89.616988][ T7489] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.718805][ T7498] loop5: detected capacity change from 0 to 512 [ 89.748828][ T7498] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.786133][ T7498] EXT4-fs (loop5): shut down requested (1) [ 89.792427][ T7498] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 89.801691][ T7498] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 89.815514][ T7504] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1180'. [ 89.825008][ T7498] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 89.845337][ T7506] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 89.862247][ T7506] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 89.881959][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 89.905680][ T7506] EXT4-fs (loop3): 1 truncate cleaned up [ 90.004218][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.004310][ T7518] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.015383][ T884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.049806][ T7529] geneve2: entered promiscuous mode [ 90.055210][ T7529] geneve2: entered allmulticast mode [ 90.074151][ T7518] EXT4-fs (loop2): shut down requested (2) [ 90.074709][ T7527] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.108985][ T7518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.121422][ T7518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.133427][ T7518] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.149925][ T7537] EXT4-fs: Ignoring removed oldalloc option [ 90.163817][ T7537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1192: Parent and EA inode have the same ino 15 [ 90.180106][ T7537] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1192: Parent and EA inode have the same ino 15 [ 90.192838][ T7537] EXT4-fs (loop3): 1 orphan inode deleted [ 90.256679][ T7540] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.308618][ T7546] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1194'. [ 90.356179][ T7552] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.380704][ T7552] EXT4-fs (loop2): shut down requested (1) [ 90.387097][ T7552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.396524][ T7552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.417394][ T7552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.426587][ T7558] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 90.447147][ T7558] netlink: 'syz.4.1198': attribute type 3 has an invalid length. [ 90.572864][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 90.582055][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 90.607076][ T7573] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.641363][ T7573] EXT4-fs (loop2): shut down requested (2) [ 90.644569][ T7580] EXT4-fs: Ignoring removed oldalloc option [ 90.657269][ T7573] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.657280][ T7578] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.666275][ T7573] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.686795][ T7573] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.692048][ T7580] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1206: Parent and EA inode have the same ino 15 [ 90.713182][ T7580] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1206: Parent and EA inode have the same ino 15 [ 90.726364][ T7580] EXT4-fs (loop3): 1 orphan inode deleted [ 90.832780][ T7591] usb usb1: usbfs: process 7591 (syz.2.1210) did not claim interface 0 before use [ 90.857285][ T7594] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.889409][ T7594] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 90.897664][ T7594] SELinux: failed to load policy [ 91.068598][ T7610] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.101256][ T7610] EXT4-fs (loop3): shut down requested (2) [ 91.138229][ T7610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.150080][ T7615] EXT4-fs: Ignoring removed oldalloc option [ 91.157250][ T7599] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.170398][ T7610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.179862][ T7610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.199320][ T7615] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1219: Parent and EA inode have the same ino 15 [ 91.232544][ T7615] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1219: Parent and EA inode have the same ino 15 [ 91.246159][ T7615] EXT4-fs (loop4): 1 orphan inode deleted [ 91.263512][ T7599] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 3: comm syz.2.1213: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 91.528109][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 91.528125][ T29] audit: type=1326 audit(1770306999.514:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7282aeb9 code=0x7ffc0000 [ 91.566829][ T29] audit: type=1326 audit(1770306999.554:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7282aeb9 code=0x7ffc0000 [ 91.590611][ T29] audit: type=1326 audit(1770306999.554:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7282aeb9 code=0x7ffc0000 [ 91.615032][ T29] audit: type=1326 audit(1770306999.554:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9a7282aeb9 code=0x7ffc0000 [ 91.638857][ T29] audit: type=1326 audit(1770306999.604:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.662689][ T29] audit: type=1326 audit(1770306999.634:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.664461][ T7651] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.686424][ T29] audit: type=1326 audit(1770306999.634:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.708803][ T7651] EXT4-fs (loop3): shut down requested (2) [ 91.720613][ T29] audit: type=1326 audit(1770306999.634:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.732624][ T7651] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.750555][ T29] audit: type=1326 audit(1770306999.634:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.750599][ T29] audit: type=1326 audit(1770306999.634:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a727eb78e code=0x7ffc0000 [ 91.767301][ T7651] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.786682][ T7653] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.806937][ T7651] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 91.826927][ T7653] EXT4-fs (loop2): shut down requested (1) [ 91.842091][ T7655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.852581][ T7655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33502 - 0 [ 91.865407][ T7653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 91.874476][ T7653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 91.883689][ T7653] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 91.909051][ T7655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.919679][ T7655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33502 - 0 [ 91.974703][ T7655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.985396][ T7655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33502 - 0 [ 91.998590][ T7671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.007527][ T7671] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 92.022056][ T7671] EXT4-fs (loop3): 1 truncate cleaned up [ 92.033758][ T7674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=7674 comm=syz.2.1238 [ 92.058109][ T7655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.068828][ T7655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33502 - 0 [ 92.091131][ T7678] bridge0: entered promiscuous mode [ 92.097546][ T7678] ip6gretap0: entered promiscuous mode [ 92.122815][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 33502 - 0 [ 92.131347][ T60] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.144651][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 33502 - 0 [ 92.153039][ T60] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.170949][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 33502 - 0 [ 92.179528][ T60] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.192041][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 33502 - 0 [ 92.200422][ T60] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.268773][ T7688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1057 sclass=netlink_route_socket pid=7688 comm=syz.4.1244 [ 92.330228][ T7697] EXT4-fs: Ignoring removed oldalloc option [ 92.352923][ T7697] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1246: Parent and EA inode have the same ino 15 [ 92.371189][ T7697] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1246: Parent and EA inode have the same ino 15 [ 92.384534][ T7697] EXT4-fs (loop5): 1 orphan inode deleted [ 92.407524][ T7703] batadv_slave_1: entered promiscuous mode [ 92.428478][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.448909][ T7703] batadv_slave_1 (unregistering): left promiscuous mode [ 92.456445][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.475367][ T7706] FAULT_INJECTION: forcing a failure. [ 92.475367][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 92.488540][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: syz.5.1250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.488596][ T7706] Tainted: [W]=WARN [ 92.488605][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.488650][ T7706] Call Trace: [ 92.488659][ T7706] [ 92.488667][ T7706] __dump_stack+0x1d/0x30 [ 92.488693][ T7706] dump_stack_lvl+0x95/0xd0 [ 92.488719][ T7706] dump_stack+0x15/0x1b [ 92.488743][ T7706] should_fail_ex+0x263/0x280 [ 92.488845][ T7706] should_failslab+0x8c/0xb0 [ 92.488873][ T7706] kmem_cache_alloc_noprof+0x68/0x490 [ 92.488903][ T7706] ? skb_clone+0x151/0x1f0 [ 92.488997][ T7706] skb_clone+0x151/0x1f0 [ 92.489015][ T7706] __netlink_deliver_tap+0x2c9/0x500 [ 92.489050][ T7706] netlink_unicast+0x66b/0x690 [ 92.489090][ T7706] netlink_sendmsg+0x5c8/0x6f0 [ 92.489127][ T7706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.489148][ T7706] ____sys_sendmsg+0x5af/0x600 [ 92.489178][ T7706] ___sys_sendmsg+0x195/0x1e0 [ 92.489209][ T7706] __x64_sys_sendmsg+0xd4/0x160 [ 92.489231][ T7706] x64_sys_call+0x17ba/0x3000 [ 92.489256][ T7706] do_syscall_64+0xc0/0x2a0 [ 92.489330][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.489353][ T7706] RIP: 0033:0x7f9a7282aeb9 [ 92.489371][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.489394][ T7706] RSP: 002b:00007f9a71287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.489418][ T7706] RAX: ffffffffffffffda RBX: 00007f9a72aa5fa0 RCX: 00007f9a7282aeb9 [ 92.489434][ T7706] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 92.489448][ T7706] RBP: 00007f9a71287090 R08: 0000000000000000 R09: 0000000000000000 [ 92.489460][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.489547][ T7706] R13: 00007f9a72aa6038 R14: 00007f9a72aa5fa0 R15: 00007ffcebb755f8 [ 92.489570][ T7706] [ 92.596274][ T7712] io-wq is not configured for unbound workers [ 93.037816][ T7728] FAULT_INJECTION: forcing a failure. [ 93.037816][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 93.056965][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.3.1258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.056990][ T7728] Tainted: [W]=WARN [ 93.056995][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.057004][ T7728] Call Trace: [ 93.057058][ T7728] [ 93.057063][ T7728] __dump_stack+0x1d/0x30 [ 93.057146][ T7728] dump_stack_lvl+0x95/0xd0 [ 93.057161][ T7728] dump_stack+0x15/0x1b [ 93.057175][ T7728] should_fail_ex+0x263/0x280 [ 93.057258][ T7728] should_failslab+0x8c/0xb0 [ 93.057275][ T7728] __kmalloc_noprof+0xb8/0x580 [ 93.057292][ T7728] ? mon_bin_ioctl+0x416/0x960 [ 93.057346][ T7728] ? selinux_file_ioctl+0x5f7/0xcb0 [ 93.057438][ T7728] mon_bin_ioctl+0x416/0x960 [ 93.057523][ T7728] ? __fget_files+0x184/0x1c0 [ 93.057539][ T7728] ? mutex_lock+0x57/0x90 [ 93.057577][ T7728] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 93.057596][ T7728] __se_sys_ioctl+0xce/0x140 [ 93.057693][ T7728] __x64_sys_ioctl+0x43/0x50 [ 93.057714][ T7728] x64_sys_call+0x14b0/0x3000 [ 93.057753][ T7728] do_syscall_64+0xc0/0x2a0 [ 93.057790][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.057806][ T7728] RIP: 0033:0x7f1bcb2baeb9 [ 93.057818][ T7728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.057831][ T7728] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.057846][ T7728] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 93.057869][ T7728] RDX: 000000000002ba69 RSI: 0000000000009204 RDI: 0000000000000004 [ 93.057900][ T7728] RBP: 00007f1bc9d17090 R08: 0000000000000000 R09: 0000000000000000 [ 93.057915][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.057930][ T7728] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 93.058004][ T7728] [ 93.270627][ T7733] set_capacity_and_notify: 18 callbacks suppressed [ 93.270648][ T7733] loop5: detected capacity change from 0 to 512 [ 93.306972][ T7733] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.321551][ T7733] bridge0: entered promiscuous mode [ 93.327328][ T7733] bridge0: port 3(macsec1) entered blocking state [ 93.333907][ T7733] bridge0: port 3(macsec1) entered disabled state [ 93.340688][ T7733] macsec1: entered allmulticast mode [ 93.346132][ T7733] bridge0: entered allmulticast mode [ 93.351896][ T7733] macsec1: left allmulticast mode [ 93.357160][ T7733] bridge0: left allmulticast mode [ 93.363262][ T7733] bridge0: left promiscuous mode [ 93.382334][ T7738] team0: entered promiscuous mode [ 93.387451][ T7738] team_slave_0: entered promiscuous mode [ 93.393359][ T7738] team_slave_1: entered promiscuous mode [ 93.400446][ T7738] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.1259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 93.436339][ T7732] team0: left promiscuous mode [ 93.441298][ T7732] team_slave_0: left promiscuous mode [ 93.446894][ T7732] team_slave_1: left promiscuous mode [ 93.594599][ T7760] loop5: detected capacity change from 0 to 128 [ 93.638319][ T7762] loop3: detected capacity change from 0 to 512 [ 93.656632][ T7762] ext4 filesystem being mounted at /292/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.669808][ T7762] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1268: corrupted inode contents [ 93.682333][ T7762] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.1268: mark_inode_dirty error [ 93.697341][ T7762] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1268: corrupted inode contents [ 93.709790][ T7762] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1268: mark_inode_dirty error [ 93.721977][ T7762] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1268: Failed to acquire dquot type 1 [ 93.759067][ T7767] loop2: detected capacity change from 0 to 1024 [ 93.779049][ T7767] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.802897][ T7775] loop5: detected capacity change from 0 to 1024 [ 93.838465][ T7775] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.900226][ T7780] loop2: detected capacity change from 0 to 512 [ 93.916958][ T7780] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.929321][ T7780] EXT4-fs (loop2): shut down requested (2) [ 93.936970][ T7780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 93.948688][ T7780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 93.958379][ T7780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 93.977173][ T7784] FAULT_INJECTION: forcing a failure. [ 93.977173][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 93.990026][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.3.1273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.990051][ T7784] Tainted: [W]=WARN [ 93.990056][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.990067][ T7784] Call Trace: [ 93.990072][ T7784] [ 93.990078][ T7784] __dump_stack+0x1d/0x30 [ 93.990097][ T7784] dump_stack_lvl+0x95/0xd0 [ 93.990112][ T7784] dump_stack+0x15/0x1b [ 93.990126][ T7784] should_fail_ex+0x263/0x280 [ 93.990148][ T7784] should_failslab+0x8c/0xb0 [ 93.990195][ T7784] __kmalloc_noprof+0xb8/0x580 [ 93.990212][ T7784] ? mon_bin_ioctl+0x416/0x960 [ 93.990231][ T7784] ? selinux_file_ioctl+0x5f7/0xcb0 [ 93.990250][ T7784] mon_bin_ioctl+0x416/0x960 [ 93.990329][ T7784] ? __fget_files+0x184/0x1c0 [ 93.990344][ T7784] ? mutex_lock+0x57/0x90 [ 93.990370][ T7784] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 93.990390][ T7784] __se_sys_ioctl+0xce/0x140 [ 93.990411][ T7784] __x64_sys_ioctl+0x43/0x50 [ 93.990458][ T7784] x64_sys_call+0x14b0/0x3000 [ 93.990476][ T7784] do_syscall_64+0xc0/0x2a0 [ 93.990498][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.990583][ T7784] RIP: 0033:0x7f1bcb2baeb9 [ 93.990596][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.990609][ T7784] RSP: 002b:00007f1bc9d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.990677][ T7784] RAX: ffffffffffffffda RBX: 00007f1bcb535fa0 RCX: 00007f1bcb2baeb9 [ 93.990688][ T7784] RDX: 000000000002ba69 RSI: 0000000000009204 RDI: 0000000000000004 [ 93.990697][ T7784] RBP: 00007f1bc9d17090 R08: 0000000000000000 R09: 0000000000000000 [ 93.990706][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.990716][ T7784] R13: 00007f1bcb536038 R14: 00007f1bcb535fa0 R15: 00007ffc69b17a58 [ 93.990729][ T7784] [ 94.278022][ T7794] __nla_validate_parse: 20 callbacks suppressed [ 94.278042][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 94.293496][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 94.350242][ T7802] loop2: detected capacity change from 0 to 512 [ 94.372885][ T7802] EXT4-fs: Ignoring removed oldalloc option [ 94.390859][ T7806] loop5: detected capacity change from 0 to 1024 [ 94.401292][ T7802] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1281: Parent and EA inode have the same ino 15 [ 94.419450][ T7802] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1281: Parent and EA inode have the same ino 15 [ 94.432581][ T7802] EXT4-fs (loop2): 1 orphan inode deleted [ 94.440305][ T7806] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.610836][ T7824] FAULT_INJECTION: forcing a failure. [ 94.610836][ T7824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.624518][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.2.1289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.624621][ T7824] Tainted: [W]=WARN [ 94.624628][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.624640][ T7824] Call Trace: [ 94.624647][ T7824] [ 94.624656][ T7824] __dump_stack+0x1d/0x30 [ 94.624758][ T7824] dump_stack_lvl+0x95/0xd0 [ 94.624779][ T7824] dump_stack+0x15/0x1b [ 94.624873][ T7824] should_fail_ex+0x263/0x280 [ 94.624904][ T7824] should_fail_alloc_page+0xf2/0x100 [ 94.624928][ T7824] __alloc_frozen_pages_noprof+0x108/0x350 [ 94.624967][ T7824] alloc_pages_mpol+0xb3/0x260 [ 94.625025][ T7824] ? should_failslab+0x8c/0xb0 [ 94.625170][ T7824] alloc_pages_noprof+0x8f/0x130 [ 94.625289][ T7824] get_zeroed_page_noprof+0x1a/0x40 [ 94.625357][ T7824] mon_bin_ioctl+0x454/0x960 [ 94.625400][ T7824] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 94.625432][ T7824] __se_sys_ioctl+0xce/0x140 [ 94.625569][ T7824] __x64_sys_ioctl+0x43/0x50 [ 94.625638][ T7824] x64_sys_call+0x14b0/0x3000 [ 94.625668][ T7824] do_syscall_64+0xc0/0x2a0 [ 94.625702][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.625727][ T7824] RIP: 0033:0x7fab2fb1aeb9 [ 94.625771][ T7824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.625793][ T7824] RSP: 002b:00007fab2e577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.625816][ T7824] RAX: ffffffffffffffda RBX: 00007fab2fd95fa0 RCX: 00007fab2fb1aeb9 [ 94.625832][ T7824] RDX: 000000000002ba69 RSI: 0000000000009204 RDI: 0000000000000004 [ 94.625848][ T7824] RBP: 00007fab2e577090 R08: 0000000000000000 R09: 0000000000000000 [ 94.625862][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.625926][ T7824] R13: 00007fab2fd96038 R14: 00007fab2fd95fa0 R15: 00007ffed08aaf98 [ 94.625949][ T7824] [ 94.731238][ T7827] loop3: detected capacity change from 0 to 8192 [ 94.874403][ T7827] loop3: p1 p2 p3 p4 [ 94.878625][ T7827] loop3: p1 start 984064 is beyond EOD, truncated [ 94.885211][ T7827] loop3: p2 start 4195840 is beyond EOD, truncated [ 94.891755][ T7827] loop3: p3 start 458783 is beyond EOD, truncated [ 95.026654][ T7841] loop5: detected capacity change from 0 to 512 [ 95.038534][ T7836] ================================================================== [ 95.046658][ T7836] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 95.054874][ T7836] [ 95.057349][ T7836] write to 0xffff888115db6eb0 of 8 bytes by task 7838 on cpu 0: [ 95.065003][ T7836] cpu_map_kthread_run+0x4e7/0x1650 [ 95.070242][ T7836] kthread+0x488/0x510 [ 95.074362][ T7836] ret_from_fork+0x148/0x280 [ 95.078989][ T7836] ret_from_fork_asm+0x1a/0x30 [ 95.083876][ T7836] [ 95.086216][ T7836] read to 0xffff888115db6eb0 of 8 bytes by task 7836 on cpu 1: [ 95.093780][ T7836] bq_flush_to_queue+0x124/0x350 [ 95.098839][ T7836] __cpu_map_flush+0x38/0x80 [ 95.103516][ T7836] xdp_do_flush+0xf8/0x160 [ 95.108038][ T7836] bpf_test_run_xdp_live+0xe8a/0x1360 [ 95.113626][ T7836] bpf_prog_test_run_xdp+0x57b/0xa10 [ 95.118944][ T7836] bpf_prog_test_run+0x204/0x340 [ 95.123985][ T7836] __sys_bpf+0x4c0/0x7b0 [ 95.128239][ T7836] __x64_sys_bpf+0x41/0x50 [ 95.132665][ T7836] x64_sys_call+0x28e1/0x3000 [ 95.137350][ T7836] do_syscall_64+0xc0/0x2a0 [ 95.141953][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.147939][ T7836] [ 95.150309][ T7836] value changed: 0xffff888115ebb070 -> 0x0000000000000000 [ 95.158032][ T7836] [ 95.160365][ T7836] Reported by Kernel Concurrency Sanitizer on: [ 95.166530][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.2.1293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.177922][ T7836] Tainted: [W]=WARN [ 95.181738][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.191983][ T7836] ================================================================== [ 95.221402][ T7841] ext4 filesystem being mounted at /253/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.250553][ T7841] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1296: corrupted inode contents [ 95.262727][ T7841] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1296: mark_inode_dirty error [ 95.274501][ T7841] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1296: corrupted inode contents [ 95.286656][ T7841] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1296: mark_inode_dirty error [ 95.298071][ T7841] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1296: Failed to acquire dquot type 1 [ 95.764005][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.765366][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.774767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.524289][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.094591][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration