last executing test programs: 2m50.179686305s ago: executing program 1 (id=60): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x0, 0x0, 0x4007) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x28, 0x5, 0x9) connect$vsock_stream(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400000000000000000b000000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c00128009000100626f6e64000000001c000280050001000600000008000500060000000800040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 52.418216534s ago: executing program 1 (id=66): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x1e01, 0x487, 0x0, 0x0) 52.417350264s ago: executing program 1 (id=68): r0 = socket(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000600)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'virt_wifi0\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 52.414999204s ago: executing program 1 (id=71): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() kcmp$KCMP_EPOLL_TFD(r8, r7, 0x7, r6, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x8}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x4}, 0x1c) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) gettid() fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 51.247967871s ago: executing program 1 (id=88): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x200000000000009b, 0x0, 0x0, 0x0, 0x56, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x30c, 0x12, 0x8, 0x0, 0x10}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 50.931995821s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) creat(0x0, 0x99) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ptrace$setsig(0x4203, r1, 0xb7c3, &(0x7f0000000080)={0xd, 0x4, 0x7}) sync() read(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{r2, r3+60000000}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000340)='fd\xca/\xc8\x8b\x0fe6\xbcge\x94pm8H\xa3\x8b#\xc0\x80\xd8\x16\xc8\xf5f\xea7\xf0\aU(\x96`\xab\xa5\xc99\xc8\x1ft\xedY*W\xe4\xa1D\xe50\x01e\x9d\x90\x9a\x13\b\xceG\x84U\xaf\x81\x9a\x8b\x1d\t\xde.\xc5\xd8\xd5\x7f\xfa\x049x\xedp\xa4\xf8aB\xe2\xbb\xca\xb9\xbb\x9b!\xea\xd6grv\x99Uf}0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{r2, r3+60000000}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000340)='fd\xca/\xc8\x8b\x0fe6\xbcge\x94pm8H\xa3\x8b#\xc0\x80\xd8\x16\xc8\xf5f\xea7\xf0\aU(\x96`\xab\xa5\xc99\xc8\x1ft\xedY*W\xe4\xa1D\xe50\x01e\x9d\x90\x9a\x13\b\xceG\x84U\xaf\x81\x9a\x8b\x1d\t\xde.\xc5\xd8\xd5\x7f\xfa\x049x\xedp\xa4\xf8aB\xe2\xbb\xca\xb9\xbb\x9b!\xea\xd6grv\x99Uf}0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r6, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 44.124621417s ago: executing program 2 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x639, 0x8001) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) bind$bt_sco(r2, &(0x7f0000000040), 0x8) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0xa866, 0x800a}, {0xeb4, 0xa207}, 0x10000004, 0x7}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r7, 0xff) listen(r2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x629, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) 43.577867185s ago: executing program 2 (id=132): ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000001140)={0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000009740)={0xf, 0x0, 0x7fff, 0x9, 0x8, 0x47, 0x1c, "70b07f053a2c84516a992d3ebd0d76bf78c66ab3", "111dde0a001907a90600000000000001ffff00"}) 43.243763035s ago: executing program 2 (id=139): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) signalfd(r0, &(0x7f0000000000)={[0xd1e2]}, 0x8) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r1, 0x4, 0xf, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r4, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 43.240554686s ago: executing program 33 (id=139): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) signalfd(r0, &(0x7f0000000000)={[0xd1e2]}, 0x8) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r1, 0x4, 0xf, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r4, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 7.491984841s ago: executing program 6 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000010280)={{r0}, r1, 0x0, @unused=[0x6, 0x6f3, 0x0, 0x8], @name="9af48fc14202d269dfb6af8d22d969aa02c7eda90907f10ed75d31053efbe85dc5b02320900a2494c05b83759a5c20c008b59c223511e059830078e422e0398ab5b13f9127b6f66c6a332ee8c98bc25adc3e12443db0983093ed4bc8dd3e768930869a33f9cedf7c0600ec9812a9214d2292e9b8e2f18d32f8f271bc614b757d33f3b7d419ce1f939f0bbb23f61908f6aa79135cdbf8b0538440618b6d27d777e3137a3f8a9eb61238a7dc98604ffa91d1c5660f5e6d3c68d8ed64f4ee8b9e0fa1e263f38f391c7d1a647dd839f89a837524d01055f6c241225573887ed9b881c40e6d49352cd498ef8b20bb47aafd4c5cbc0c1dc81cb172129944ef65d385f17f7ddbbc3742046aaa71d2abe3bb5e5fa14d664052e7bbc367d31457aa4edab372f87953bc118caf7376d6f31f076f5cd8ca39ef064c04700b12c5af1545969b6d7f3037674321d8d0dc0a394f6ad77389d5e4b85ef656e49f70356f399d755a7a98bee0ca931fd9a76a72120977e8ce0cc0911b1c4ba1c7e98c45ad89785b15ce27f101f71df893dacbe9551bd0c001d0af6f1b02185c8a1b756f43eb9a8c55304f714cae16b537857c1e09f1e9d320dae5d9488214e6b4a30a31307d0e572797f5fdf34ebe2d63ce178f0d680b7ce1f85a9cdd12fabad0c220180534576d84a36bd0b0523c2f7254a021e9e92306eac6693c08bb3734d255436eb3969496d1281cc4f6517940c302b0ac75ca7f0b89e63f3e6223c17ef426218e1709342aa529b59230d7fa08454a8b1c2bf47a08cb456fb69ad7f6f08794a5781aafe827a8b8b1f03d814f9ff495cb4e7aa98384d99add9fc338bae3162bc55eb601380c7267189726bb315f359a4efe5748a24778216741c8e7bba2f736d86fb10ef1d4ae7e2fe1212541df62236c02e00aa93964ca6a492712d7767c9352af0b35555b76b3104097d1f885c7be495d38ceadf469944393aefd47474924d044fc48677303a77419d3176290ecb58fa243d99f5c7aba81addfe5dbf125553fd4f159de89b0d5af2eb5ab328e59dc7d440f1f3d4e18feb7c8aca9038fb4b2b62c8e11c19be9fd41a9c7a6714a6c7a31dbce03902567968e2c22638de119b067a49a01698fad6c4a33ce9c3f3f9958a3fac810a3b7a0c9fac6e8269a3c2b9abd139a05acfbccdab3b8ecc6ab8fe012b561c0c4ac348465c4cfb85a33c1b28ed9bbb44e2e740357769ad6053c258d88fd7041726097adbfce59e90d77f4c609afa6a8a62256b9709bbafdd9736a166e0ccb8fb87e4dad78b81ee86d29b1eb74e81b1825a044a7e4faa2b16a34b047599e8bff760cc8e44c98c89f8d27dc2438f3b997d544086e0152235e411d20eeb397e24d7331357fc43890361eb8297a79fb3d2cbc35b42aa2ac83a5fcde6fcbf03f95efc11adf595f45ca30ce08bca9ce4bc02fa9ac937f676f0477c25e3b1530d1c01d78e4e275cfd78a2bdc8c26ed76ab6259dc5bb8bd5c94827ae191f1b03040740ca67e4a8707082746c8561001b970a92f1f7e285b0b9aaa1925560d91cbbba7fdbe0c96c23617bb7424fa7ee4248069f7545b7e5da029bb20319bf6c3623b4f86345ab85b4396d9bd9884304caf17157a769c05c06352fe31e416bc3f5125da9a23aeee9b28273691f4cafbffbce7277b78e027055e69f6a0370d1e47b7c362c59ba97adf8483beda6c4e4adb0cb7558d37827e2ffde4bf84d0ec5d7773364b023a1dbc2ad6421a0b19e41457c72348f13f48dfb4afa559b577fe1a4de67cdb48d5f5997f94ebd3967d735a031ea04bca451d9193699fdc9c2953d07af32c848fdd9e1627c2fb1d01be0aa760e575cd0884ebe789eae9aaa18d6d79dc7d19ef3cf839d5723f0a736856d2b747f00532ceea2f2e203736bdd37857b0ec7ffe80c96c6d962612d346531cb50abf47f74ab9be59f59304dfdf62e66e67f816ff4f6c887ac214eccc4c1fae13b4a72a07d651efc30724a5776475fdd81d88f0a9df261e2d3cceba2a3b24cc204157fc65c0e0471f7bc94fe114fc3d84aa0db41da7ec28ac648cca2d2150d3f9bfac207378b0f40fadd2561e5ac31791dcd2d97df9c7edce303efd56ceccfbc4b366261adff22590d72dc59140f47f84fa826493b3016f8df5586dcd8dc6de29ea8f35019401e81a9c7e7a379d3eca2dbab3a1a99fc1d70d01dd2b323e69c40578086eadc45ad4e60d1779e6595f1edef85bf7c8c24139ba6babc27a1fc959b7e7f3d7ba45ab71ad63771ec2b07046c59da88685f5f4e8ca898e6502678cdc35017f38402e2a76ffecfe95174a09b257ca3b900715c39da0cec46a8e0bbbef0c5cdea479582bc740371fa96f472db0a0c3e5e89f137cd03a4b0f2cccbd2dcc0ddad7f999d8fea4468948696543617ad9b10d13a4627eecdde1b1e10b5638f7bb69ce8e1d15fb47a60a05b6854e53ebcabc22e770f9ac0aad6af0692fdcf24748dd8beaeef76f64f28f9491fb88b2e3b803058c01b502a1132cff55fc2335be7a84b6698b0e2be1969354c1636ec5d4fc70a15298c730ab63fa20013811098c1409c76bf737d744563cfec2eab60f56217deb3fb9affe779110e35a94f173433336c07e40b90289196f1b511b2f97c87404cd70b3021ba10b2cf863f2582de4a1c8bb48d1503a11795df22d429e90dfacb0f4acbcd00cc88c26aff9b31809135ab8b0b05e0f99ae852ab9ae152f992869e8d9f794b551659db3762a1cd79eff67e7b4ea1a6dfdabff5b8245ea9f36847cf959d57a63456c3a6c9c1cafb960168599f9045d5e21d8e271e690c06d3ca65fb480cedd8a9e750abaf6d203a5fd679f72e729bec2e97012d20f67cda5d9cb65d1cd35c914159da0c14abecd2054d3240f006b4ce2fc211cdd7be169f860b9698839d3117836d846235d82e3b442be93a99114cb49bb3f5836503f5cfc289b69e7e24464bf24a674953a5590b7b2d40988a4051eacd48f4ebfd6759b8871f83db59a53314129907f71dce8dee20ec0b2043acf05b4eb363d89a62f0131225b9f556a65e8922747125789256cac639657b51ea27017a5f2d5a4a095531337e80cb5af78739f49541a30ec33cdde8950105cc0943d3f27fec814d238db8d1e649c106d39df0e55c8358dc084ad777c6c85fb329a04a4da45593902b366b96bb8e0c12a001a21fbc1a7a7dc749c7b5c49033d59f9270951dfad2a64651a30559d2a845a873d3a9224bc21fedc25fa72e6a53cca670ec8b85c27e92baf022e9a2e853122a5cdcbcfd903cdbe8637a1f01c22381657e90cbfdce24bd9e3d0379f0d7bb691020e775369aa499f801b4f447179f4d2d13cd4231735082636de439a6ad80f14a5ba214de8bc4e14d298d047eb7cf41f26615d22bf23d3334057a4b60b315457d29635604f305e8bdf410bbd376466c0629cc0d67d84111973dc7c02841443f5d8516f8e3602b9ff3587c6576a1ecc33ef32762863c33582086364a6fe55ddcd739759e1332bc178c4910971bf2d58583e8a191fcf2527bb03233e56291c7aa8ef6b106c676b0933b6cc70cdc57090728810b3d080eb6055f1a435a4c532dd35edae786eef922354803db82fbd84df6e75f43be6917f3e67e97c5b7fefe0ff1244cb5435f3c8c305db68624420c77e368003eea4b14ae95e7ef4744850d1a207f4e18782ca97d91ddd88ce9e3f7f62e04fc4f7e8663bb9b06d26f51aa942472a9be65171c4d97fc7f4563316be79d97a6187b64369c537307dcbf989b173b5c8309e983568e2815516f499624ab5c268221b5274b886819ee8db6aa6261f47ab2521c1664b13be67a92b8e500b0db849148426ffddf5d92e9abef8be9520b92065315b06a7d4a01e60ea722559028facd22783901fbcd1f079f5b364111498be41d1b1613127ae4d27af86d4aedf3a1c18061003420b0c9e86c90358d97b2009e5275a08eab1d89423cf2d85b422f271732dd6773703645c2f0e5b1dcccdf1194e834a031b1f3fc31560f8c704eb129916e9a6998e2dcb776c94d41b25e1f27f50a1ffb04b58275efafa51bd4b8d2b9b2efd336630f4fb3e370dde6bc9c3daea1d8a571ba4883a95d56799dbbfe50cae39639fad98ad042fc922f1629bf09b7f472d5690463784be671fbc16acea8a0db13d5e7417b4bc65264d94a6dd0146c4779a6fbb1e012602ba371fdb1f1bf118e7f944d99c5439f445edc5f8281b225d0436d10fbb2b0aabc76b06e43b893fdf82c2531b297b07e17604a17e56ad5a61430887d3c07d48b03185b3ebc977d5fa5b01a82fe543402229a4b10be8f1d4126e88954606fc0b41264c206d76a6af103c5c50bdcc2033e0f888762cdb92f06509cc0e09a2f87c29ee38801a4a252630a367a21a2943da43e653b721e47f93020527560d0597608143dc619a8bb6537a8f0471809cacae18022f9f17ef28c2184aa76c22f953487c7bf03d9cf0a8324fde5871e99ae3f0241231e788bcbef7517a8d9892765cb2df982c67112a1a261c8236d108db309502b3dc680ce84ff27eee39c0290bf1d299edf4ebd32640e196896f82d5f7d8b29329af51c81d66468cfe396b08b21c1c2e4a78038471019583e5bb793bd4f35c8877c1f5b758f051707e1af7bcfdabd01ed60f67ec3319167c7c967d4059421c308c9b2bda0a1022fa1b1c67f342a3aaea4db7f4bd18a03ae9969487723cdf2ba6001f0bb58d2fc714419762f8926d3f94cb6aadcf2f6a3fc38d8c5c2dc674e9f61ea19d912fe2e3670155c9d441d79002f26d2765001e9bab08152b98191136e64a46343b15acc039a2ea0c5b327440d1e830b55339e29a3545201fa3265eb0788ad70e0a69e2c181d3295b8c08daa605840af9eb73cf580e3b202627bf41d41e746d488cf31c9977bd82e71c61028e90fd049ab49913eb217c22a0f01d072f0aa6cc60b497002aff20e08b275e316e88fbc28b10ae2a157ff09de704b5b74be6503bda9f740d80dcb03c4bc07258b2c4a733d7a1a2e2fd03aedd8e0f70ba10f76b6bb644ed7add8d17eb529c427f45d667ab764bf6fc290af45ff504487c98efd712af1dd83afe3e1f68a3429e468bf2110604463ecd0f49d794b38c739a4fb5996ce8037c89cb83cb155f1dab0e251a7bd28d670905dd3e68aa84ae1881fabaa6a3781057d5310a339e5b319524535d336bb4abe2c4bcfc96f2a8d97c655438595e5c90e62a47a4025429c29ca3879eb10bf25830901265e8764384d0e21d8d583c2cdd6b06d15d35912d2bbf20c317fad607d3434796297b2e0283c80f1a90bf9c1b8add5c2b35c9e94499446683abfae468505cca50095791c9250a4e5580bae24b47cfa57c900c89305d606896e412b74d04ba9b290313814427f0085b65a00f3fbff09461ec3c6e069a004353feeb573edd84cf1067fc9ac14974f4136e85b97493b23c8827435f68a82064aae368db97211e6dbee4fa98a37835face02b306bd5c37903d8e63cf51b03744b925c401591c1d920648194856b960c73fb1b6a7ac97772bfff85bd09dc752c26c47719a6091b192bec79fbb109811c0ca537d3f2141dba9d9fd94f8eb3a46bbfa1fa2062e8cfb25edd5315f82ef368599a6404f9c213b13f714bab14b855c61e40ffb80a12dfc07b2d972602a473df5060e5e2f111d8003803913878a35f809e103c175f0556c77917156e88d6bf7f5de0e8308eed2321e4b23"}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x20, {0xfffffff7, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000000000020"], 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 7.253671949s ago: executing program 6 (id=461): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd1e2]}, 0x8) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r4, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) 6.89543157s ago: executing program 6 (id=462): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$qrtr(0x2a, 0x2, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet6_sctp(0xa, 0x801, 0x84) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 3.651516763s ago: executing program 3 (id=486): socket$inet(0x2, 0x3, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 3.613210314s ago: executing program 3 (id=487): io_setup(0x239f, &(0x7f0000000380)=0x0) (async, rerun: 64) r1 = eventfd2(0x2, 0x80800) (rerun: 64) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "3138eed99a1365"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0x12, [0x1, 0x0, 0xfffffffa, 0x9fd]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}]}}}}}}}}, 0x0) 3.469293419s ago: executing program 3 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) 3.040111003s ago: executing program 5 (id=492): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) (fail_nth: 5) 2.412142722s ago: executing program 3 (id=496): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456c1c8c4a4fc84fea7cabb001968d0d3591bee2f2c93453aa0e750a0b57ffb2d9eeba407a2e8b16c7b6bbeb5ff7fd5fc6c95c4169ffd42357bc6dfbcb88ca559d001460faf3504f22c5853ffa0860ad22946569f51608372adbc094dafdd94e8cc7eeb17d679ca2466e36ae023e13fb304a68f95dc1c56fd365fcf5af0a961b9a7e79e615d6c7daa97af0dca88191b4547239725d1dec265fcced6f805f894c1abdf83b56759ee877f9f220c1ef112adae061e7b6ba836f436d4d3af", @ANYRES16, @ANYRES16], 0xff, 0x2b6, &(0x7f0000001240)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLJSY1+f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGEn9dQ97O593sj1DY3XnRpvnZR1DRKb+WFN7ezgjAgAAw3R4/p+Mzmnn/8nu/F/kmPz/XXjW7Ke+5/+GRPl/0W3m/1Wvrs5zpxDP/3Eke7Ez/188Ua/kvxsQTivRiFXudIQ8LzvVuxP5PwAAAAAAAAAAAAAAAAAAAAAA/4P9IJgLgmDu4JgQkSCsmyJixOo9uvKE+AiIr38Qe5nhAh+x/hgBsQf30iLfGzW7Zieax1Z8+V5uaUGbYg/+7dVqthHFr7fi2hmflOkwnukZT8nVK634Qezug1w8vlWzp2S9a6xGR63Rz9sAAAAAAMBIszQyHzWmJdrfW5aa0h1v7t+bhQkRaf8+0LW/n5CLEwOcCAAAAAAAOJRff1N0SiXXG0zBGOB7nbogcrruNwOzL8MwRCTWYoZLFT8nvyLSvymn5Ngp64kuaIrbHu1gF+5r9tDQ4jHd02fkU3fCwq2+XTBIiLRaJsM16/oWAAAAABgtv/cDwx4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjaxB/XTbsOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnxa8AAAD//0PNsrU=") socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xdd4bdbd28a5a06e2, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x5, 0x3, 0x6, 0x4dcc}, {0xcb86, 0x2, 0x8, 0x962}, {0x3, 0x26, 0x3, 0x9}, {0x4, 0x10, 0x6, 0x80}, {0x228, 0x9, 0x7, 0x3}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x30, &(0x7f0000000540)={0x1a, 0x6, 0x80}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x2, 0x70000004, 0x4, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 2.409683523s ago: executing program 4 (id=497): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x105000, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r2) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0xfffffffffffffffc) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x3, 0x200000) creat(0x0, 0x99) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sync() read(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{r5, r6+60000000}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000340)='fd\xca/\xc8\x8b\x0fe6\xbcge\x94pm8H\xa3\x8b#\xc0\x80\xd8\x16\xc8\xf5f\xea7\xf0\aU(\x96`\xab\xa5\xc99\xc8\x1ft\xedY*W\xe4\xa1D\xe50\x01e\x9d\x90\x9a\x13\b\xceG\x84U\xaf\x81\x9a\x8b\x1d\t\xde.\xc5\xd8\xd5\x7f\xfa\x049x\xedp\xa4\xf8aB\xe2\xbb\xca\xb9\xbb\x9b!\xea\xd6grv\x99Uf}0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 1.989508386s ago: executing program 0 (id=503): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00e326bd7000ffdbdf271500001e0dfd3a593c7aa8f2e95d3a267b000300", @ANYRES32=r4, @ANYBLOB="0c002b800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setfsuid(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.196372101s ago: executing program 4 (id=504): socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) socket$inet6(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nogrpid}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@i_version}]}, 0x3, 0x45a, &(0x7f0000000700)="$eJzs3M+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEQQ2ejDHxbjz6L3jSizGeTLzq3ZAQwwXwVDPtDNuWtrClpbr9fJKB92be8N63b177Zl5LACNrKvsjidgaEX9ExEQ921xgqv7X1ctnF65dPruQRLX69t9JrdyVy2cXiqLFeVvyzHQakX6exO429a6cPnN8vlJZOpXnZ1dPfDC7cvrMc8dOzB9dOrp0cv+hQwcPzL34wv7n+xJn1qYruz5e3rPzjfe+fvPwl03xt8TRJ1PdDj5Zrfa5uuHa1pBOxobYENalFBFZd5Vr438iSrHWeRPx+qdDbRwwUNVqtbql8+FzVWADS6I5b8jDqCg+6LP732JrnQS8PLjpx9BdeqV+A5TFfTXf6kfGIs3LlFvub/tpKiLePffPt9kWg3kOAQDQ5Mds/vNsu/lfGg80lLsnXxuajIh7I2J7RNwXETsi4v6IWtkHI+Khddbfukhy4/wnvdhTYLcom/+9lK9tNc//itlfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp9e+/2rTsca53/ZltVfzAXzdlwc29R8zuL86vztxNzo0vmIXWPt4k+urwQkEbEzInb1WMexp7/f0+nYzePvog/rTNXvIp6q9/+5aIm/kHRfn5y9KypL+2aLq+JGv/524a1O9d9W/H2Q9f/dba//6/FPJo3rtSvrr+PCn190vKfp9fofT96ppcfzfR/Nr66emosYTw7XG924f//auUW+KJ/FP723/fjfHmuvxO6IyC7ihyPikYh4NG/7YxHxeETs7RL/L68+8X7v8Q9WFv/iuvp/LTEerXvaJ0rHf/6hqdLJG+K/1r3/D9ZS0/meW3n/u5V29XY1AwAAwP9PGhFbI0lnrqfTdGam/n35HRFpZXll9Zkjyx+eXKz/RmAyymnxpGui4XnoXH5bX8+fj4j6VwuK4wfy58bflDbX8jMLy5XFYQcPI25Lh/Gf+as07NYBAzcWm4fdBGBIuqyjp3eyHcCd5/faMLqMfxhdbca/BwIwItp9/n8yhHYAd17L+LfsByPE/T+Mro7jfyP/zz9Ajc9/GEkrm+PmP5Lvmij+pR5P37CJKP8nmnEbic/qfVpN2nZupMNvocTgEsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//3Bjf8Q==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xd, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0x9, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x380, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b0f, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x1, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x2, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0x0, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x8, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x10000, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0xfffeffff, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x5e, 0x2003, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80001000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0xedad, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x8, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0xd, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x1, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x0, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xffffffde, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0x1, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x8, 0x5, 0x7ff, 0x6, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x5, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x1, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x3, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x6, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$eJzs3b2LY1UUAPDzZvKlFklhJYIP3MLGZWdbmwyShWAqJYVa6OLugkyCsAsDfmDcytbG0r9AEOz8J2ws7AVbwc4FF568r0myvmQ3g5lR9/crZu7ce8675965M8MUuXn/xfnJrTTu3P/sl+j1kjgYxjAeJDGIg6h9EWuGXwUA8F/2IMvi96y0PpJszctHe/stDQDYk81//zf4fu8lAQB79tbb77xxPJmM3kzTXtyYf3k6zf+zzz+X48d34sOYxe24Fv14GJGdKds3sixbtNLcIK7MF6fTPHP+3o/V849/iyjyj6Ifg6JrPX88GR2lpZX8RV7Hs9X8wzz/evTj+Yb5x5PR9Yb8mHbilZdX6r8a/fjpg/goZnGrKKLIf/XP8WT0+VGavp59/cen7+bl5fnJ4nTaLeKWssML/tYAAAAAAAAAAAAAAAAAAAAAAPA/djVNu5EWHwZxZZ53VffvHD7Mv2hHWhus389T5p/dEvzI/UCLLL6p7+e5lqZpVgUu81vxQital7NqAAAAAAAAAAAAAAAAAAAA+He59/EnJzdns9t3/5FGfRtA/bL+8z5nuNLzUjTEDOKsp7uc8qCadsuT47COSSK2lpE/cafi24+ffUPjmU1Z336369b1Hh/TPkeFOzbq03VyM2new27UPb36kPywGtOJJ5yrs2ko2+n4dRqH+juvvfNc0VhsiYlkW2Gv/VruXNWTPLqKTrGrjentqlH+LDSdjZ3O899/VyRu6wAAAAAAAAAAAAAAAAAAgL1avui3YfD+hqSfx+Wb/Mdgz9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMVYvv//Do1FlfwEwZ24e++SlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBT4K8AAAD//y8+YYw=") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 1.097012754s ago: executing program 0 (id=505): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000000000a140069ea00000000000000000000000000000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xf0, 0xc0, 0x9, 0x0, 0x0, 0x10, 0x102, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x100, 0x101, 0x10000, 0x7, 0x10000, 0x3, 0x7, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0xcc) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x40000002, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x5411, 0x0) 1.074172805s ago: executing program 4 (id=506): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") lsetxattr$security_capability(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) (fail_nth: 1) 1.000117858s ago: executing program 3 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) 959.260609ms ago: executing program 4 (id=508): r0 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001840)={0x90000001}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000c50000040000000407000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000002180)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r4]}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x50) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000100)}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000880)="580000001400192340834b80040d8c5602a647623eff5bab4e250200000058006f543bc2945f640094f96a0325010ebc806200000014008000f0fffeffe84d3ac561fff5dd0000001000020004000800000000000000000036813d0f3eb5dc602b4acca0ca1db6d57f64d1ac0db62bae2dccc0aed4639e3ce2bb652cd3295ee3ec02d4f23d1791e1f90cbc2744971e6c3a1a360cadcdd3fe80ef68e14dfe1e525a", 0xa1}], 0x1) getpid() syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2810812, &(0x7f00000008c0)=ANY=[@ANYBLOB="00af892b6b3832ec8e2ab357f0d58c3340fcb8e76d3aa52bd74d80e98023c4bdb7440a01f141795e480cc900d829b675c85e94a432d64cd2aff03a2784fe8991ab6cc69576731c388ec7df400a74487111ea098fee2d145906847b394587ca1ae67351a8fe952e054e924e994b7e15f4fc0034ac1bb5bf849addb13cdfa2c19017c3353a90c506ec776171752da789e58c05491b0513b0f34999d70d8075df9516f1278db6e8fa7391f382ca5f642e568e43c00b7254722e803e1c9c2474af8441af23be949bd7d7270720f7eb9848b8fc0f9c2c92352b0573d217feea09b455cf89e29817c31a952d8c321f673a14415d16473f1cc67fb4b4012e2ba232eb2cdf5228a5da25d76cf9"], 0x1, 0xa2b, &(0x7f0000000d80)="$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") mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) socket$nl_generic(0x10, 0x3, 0x10) 499.958584ms ago: executing program 6 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="6b68f521ff15d0ae646da8168e684df86c66c63bead31661010fc3c922a21583212ee33fab9fb4a18a1bbfb8aaae24693220f9d112f0a86c972ea75021fc0e4002349a6b0dd1a4405f59c941667e63d8f20444bdce49bb06315835b778fa175a34d1784f6ef1f526ef7bf28201bfca35f228c893fc5845581221fd41e6b4d6039e2b152219acbf89b400000000000000000000009adecce0d80a4ee85f4b6a2c"], 0x58}}, 0x8000) 365.155248ms ago: executing program 6 (id=510): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@snap={0xaa, 0xab, "59cb", "80bb14", 0xa01, "2dc2282adac0ab10d18e212e9e55e5dae847006695d634cf68698e2ca6d2592507663c60b848f924c395b3870261909dc957d0629255d569cc3b33e7eb1bb431416843ed2126e45840d7362704490c316bb0228083aa42"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x28e, 0x7e, 0xc32, 0x485]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6c5c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000003380), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) unshare(0x22020600) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x7, &(0x7f0000000000)=r3, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dfdb266, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3b6d}, 0x25ab, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x200, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xb}, 0xc0, 0x9, 0x6, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) 364.287568ms ago: executing program 5 (id=511): ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) r4 = syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) (async) writev(r3, &(0x7f0000000780)=[{&(0x7f00000000c0)="4d2e2e7c8bdc018d531b710a78ed2ce8e3298297c11cd0d6371dbfdb7a91885dd2e6fc18a41fe4ac1b", 0x29}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r7 = socket(0x840000000002, 0x3, 0xff) (rerun: 32) sendmmsg$inet(r7, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x2c}], 0x1}}], 0x1, 0x24004044) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000200)="201064414d65af6dabca84da06e7eea01290879483af69d778ee39af46e3f9e1a799a7535857a8b6f4", 0x29) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async, rerun: 64) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0xff}, 0x106200, 0x10004, 0x20db, 0x9, 0xa, 0x20005, 0x2676, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) sendmsg$rds(0xffffffffffffffff, 0x0, 0x815) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 260.090151ms ago: executing program 5 (id=512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020800001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) recvmmsg(r3, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001440)=""/4096, 0x5c}, {0x0}], 0x2}, 0x40}], 0x1, 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0xa01f, 0x100000110) (fail_nth: 2) 201.897943ms ago: executing program 4 (id=513): r0 = inotify_init1(0x0) fcntl$setlease(r0, 0x400, 0x1) (async) r1 = socket(0x25, 0x803, 0x4) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xb6, &(0x7f0000000880)=ANY=[@ANYRESOCT], 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x9, 0x80, 0x0, 0xa9, 0x9, 0x25, 0xe, "e08a93a026834a917cbed6ecfb3727c34c26116a", "4e626b72b68869b18fbd462874ee05025aee8a3c"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bfffb601288763"], 0xffdd) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xa, 0x4}, {0xc, 0xe}, {0xe, 0xa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x4008c10) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 167.521454ms ago: executing program 0 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000010280)={{r0}, r1, 0x0, @unused=[0x6, 0x6f3, 0x0, 0x8], @name="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"}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x20, {0xfffffff7, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 122.474125ms ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) 95.916016ms ago: executing program 6 (id=516): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00e326bd7000ffdbdf271500001e0dfd3a593c7aa8f2e95d3a267b000300", @ANYRES32=r4, @ANYBLOB="0c002b800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setfsuid(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 60.728887ms ago: executing program 3 (id=517): socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) socket$inet6(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nogrpid}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@i_version}]}, 0x3, 0x45a, &(0x7f0000000700)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 0s ago: executing program 4 (id=518): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@dax_inode}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nouid32}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazytime'}}, {@uid_eq={'uid', 0x3d, r6}}, {@audit}, {@euid_eq={'euid', 0x3d, r6}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$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") r7 = getgid() r8 = getuid() write$P9_RSTATu(r4, &(0x7f0000000280)={0x1a3, 0x7d, 0x2, {{0x0, 0x18d, 0x8726, 0x5, {0x2, 0x3, 0x4}, 0x94010000, 0x6a56, 0x0, 0x8, 0x1, '\x00', 0x14e, '\xff\x00l\x1e\xa0 48 0f b9 3a e9 04 ff ff ff e8 61 2a d8 03 90 90 90 90 90 90 90 [ 44.076016][ T3736] RSP: 0018:ffffc900028937f8 EFLAGS: 00010246 [ 44.082550][ T3736] RAX: ffff888104ed9c30 RBX: ffff8881005acdd8 RCX: ffffffff81c23586 [ 44.091019][ T3736] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d20a0 [ 44.099490][ T3736] RBP: 000000000000000b R08: 00018881005acd8b R09: 0000000000000000 [ 44.107759][ T3736] R10: ffffc90002893728 R11: 0001c90002893728 R12: ffff8881005acd88 [ 44.116380][ T3736] R13: ffffffff871d20a0 R14: ffff8881005acd40 R15: 0000000000000001 [ 44.124980][ T3736] FS: 00007f35e63cd6c0(0000) GS:ffff8882ae9de000(0000) knlGS:0000000000000000 [ 44.134440][ T3736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.141729][ T3736] CR2: 0000000034747865 CR3: 000000011b750000 CR4: 00000000003506f0 [ 44.150950][ T3736] Call Trace: [ 44.155250][ T3736] [ 44.158780][ T3736] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 44.165437][ T3736] ext4_xattr_delete_inode+0x6b5/0x790 [ 44.171480][ T3736] ext4_evict_inode+0xb18/0xdf0 [ 44.176640][ T3736] ? __pfx_ext4_evict_inode+0x10/0x10 [ 44.183050][ T3736] evict+0x2a5/0x510 [ 44.187709][ T3736] ? preempt_schedule_common+0x11/0x30 [ 44.193600][ T3736] ? preempt_schedule_thunk+0x16/0x40 [ 44.199439][ T3736] ? __pfx_ext4_drop_inode+0x10/0x10 [ 44.205762][ T3736] iput+0x430/0x5a0 [ 44.210641][ T3736] ext4_process_orphan+0x1a4/0x1c0 [ 44.216438][ T3736] ext4_orphan_cleanup+0x6a6/0xa10 [ 44.221928][ T3736] ? ext4_register_li_request+0x14c/0x440 [ 44.228070][ T3736] ext4_fill_super+0x33d5/0x3780 [ 44.234178][ T3736] ? set_blocksize+0x14c/0x270 [ 44.239570][ T3736] ? __pfx_ext4_fill_super+0x10/0x10 [ 44.245580][ T3736] get_tree_bdev_flags+0x291/0x300 [ 44.251370][ T3736] ? __pfx_ext4_fill_super+0x10/0x10 [ 44.257288][ T3736] get_tree_bdev+0x1f/0x30 [ 44.262630][ T3736] ext4_get_tree+0x1c/0x30 [ 44.267720][ T3736] vfs_get_tree+0x57/0x1d0 [ 44.272599][ T3736] do_new_mount+0x288/0x8d0 [ 44.277830][ T3736] path_mount+0x4ad/0xb90 [ 44.283006][ T3736] __se_sys_mount+0x28c/0x2e0 [ 44.288230][ T3736] __x64_sys_mount+0x67/0x80 [ 44.294050][ T3736] x64_sys_call+0x2d61/0x3020 [ 44.299240][ T3736] do_syscall_64+0x136/0x3c0 [ 44.304758][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.311710][ T3736] RIP: 0033:0x7f35e79be0ca [ 44.316700][ T3736] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.336750][ T3736] RSP: 002b:00007f35e63cce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.345980][ T3736] RAX: ffffffffffffffda RBX: 00007f35e63ccee0 RCX: 00007f35e79be0ca [ 44.354310][ T3736] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f35e63ccea0 [ 44.362550][ T3736] RBP: 00002000000009c0 R08: 00007f35e63ccee0 R09: 0000000000800718 [ 44.371100][ T3736] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 44.379379][ T3736] R13: 00007f35e63ccea0 R14: 000000000000048d R15: 0000200000000200 [ 44.388347][ T3736] [ 44.391727][ T3736] ---[ end trace 0000000000000000 ]--- [ 44.400277][ T3736] EXT4-fs (loop1): 1 orphan inode deleted [ 44.414904][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.529853][ T3736] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 44.546763][ T3736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.594506][ T3722] loop2: lost filesystem error report for type 5 error -117 [ 44.595886][ T3722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.678973][ T28] audit: type=1400 audit(1781774573.549:299): avc: denied { create } for pid=3725 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.743063][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.761565][ T3744] FAULT_INJECTION: forcing a failure. [ 44.761565][ T3744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.792388][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.0.65 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 44.792417][ T3744] Tainted: [W]=WARN [ 44.792435][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.792447][ T3744] Call Trace: [ 44.792454][ T3744] [ 44.792462][ T3744] __dump_stack+0x1d/0x30 [ 44.792484][ T3744] dump_stack_lvl+0x95/0xd0 [ 44.792501][ T3744] dump_stack+0x15/0x1b [ 44.792516][ T3744] should_fail_ex+0x25e/0x270 [ 44.792559][ T3744] should_fail+0xb/0x20 [ 44.792574][ T3744] should_fail_usercopy+0x1a/0x20 [ 44.792592][ T3744] _copy_to_user+0x20/0xa0 [ 44.792672][ T3744] ethtool_get_perm_addr+0xc7/0x190 [ 44.792701][ T3744] dev_ethtool+0x15d7/0x20f0 [ 44.792768][ T3744] dev_ioctl+0x2e0/0x960 [ 44.792832][ T3744] sock_do_ioctl+0x1aa/0x230 [ 44.792852][ T3744] sock_ioctl+0x439/0x610 [ 44.792866][ T3744] ? mutex_lock+0x57/0x90 [ 44.792946][ T3744] ? __pfx_sock_ioctl+0x10/0x10 [ 44.792965][ T3744] __se_sys_ioctl+0xce/0x140 [ 44.792989][ T3744] __x64_sys_ioctl+0x43/0x50 [ 44.793027][ T3744] x64_sys_call+0x1563/0x3020 [ 44.793047][ T3744] do_syscall_64+0x136/0x3c0 [ 44.793076][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.793176][ T3744] RIP: 0033:0x7fb996d1ce59 [ 44.793192][ T3744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.793210][ T3744] RSP: 002b:00007fb995777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.793231][ T3744] RAX: ffffffffffffffda RBX: 00007fb996f95fa0 RCX: 00007fb996d1ce59 [ 44.793297][ T3744] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 44.793311][ T3744] RBP: 00007fb995777090 R08: 0000000000000000 R09: 0000000000000000 [ 44.793324][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.793336][ T3744] R13: 00007fb996f96038 R14: 00007fb996f95fa0 R15: 00007ffc75280ff8 [ 44.793354][ T3744] [ 44.990151][ T3742] loop3: detected capacity change from 0 to 4096 [ 44.990282][ T3752] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 45.004638][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 45.023184][ T28] audit: type=1400 audit(1781774574.699:300): avc: denied { ioctl } for pid=3750 comm="syz.1.68" path="socket:[5416]" dev="sockfs" ino=5416 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.054389][ T3742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.072967][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.081348][ T28] audit: type=1400 audit(1781774574.769:301): avc: denied { write } for pid=3741 comm="syz.3.63" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.122448][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.133878][ T3755] random: crng reseeded on system resumption [ 45.156037][ T3755] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 45.165617][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 161.408812][ T28] audit: type=1400 audit(1781774691.089:302): avc: denied { name_connect } for pid=3764 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 161.475103][ T28] audit: type=1400 audit(1781774691.119:303): avc: denied { listen } for pid=3764 comm="syz.0.70" lport=43009 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.515392][ T28] audit: type=1400 audit(1781774691.119:304): avc: denied { accept } for pid=3764 comm="syz.0.70" lport=43009 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.541424][ T3782] loop1: detected capacity change from 0 to 512 [ 161.549992][ T3782] EXT4-fs: Ignoring removed bh option [ 161.555462][ T28] audit: type=1400 audit(1781774691.129:305): avc: denied { read } for pid=3764 comm="syz.0.70" lport=43009 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.606974][ T3782] EXT4-fs: inline encryption not supported [ 161.622447][ T3782] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.631691][ T28] audit: type=1400 audit(1781774691.129:306): avc: denied { setopt } for pid=3764 comm="syz.0.70" lport=43009 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.707858][ T28] audit: type=1400 audit(1781774691.129:307): avc: denied { mount } for pid=3769 comm="syz.1.71" name="/" dev="ramfs" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.730231][ T28] audit: type=1400 audit(1781774691.159:308): avc: denied { mount } for pid=3776 comm="syz.2.75" name="/" dev="autofs" ino=5530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 161.745583][ T3782] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 161.752494][ T28] audit: type=1400 audit(1781774691.269:309): avc: denied { bind } for pid=3787 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.786082][ T28] audit: type=1400 audit(1781774691.269:310): avc: denied { name_bind } for pid=3787 comm="syz.4.77" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 161.807595][ T28] audit: type=1400 audit(1781774691.269:311): avc: denied { node_bind } for pid=3787 comm="syz.4.77" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 161.819132][ T3782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.71: bg 0: block 248: padding at end of block bitmap is not set [ 161.904612][ T3782] loop1: lost filesystem error report for type 5 error -117 [ 161.905048][ T3782] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.71: Failed to acquire dquot type 1 [ 161.912394][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 161.912413][ C0] EXT4-fs (loop1): last error at time 1781774691: ext4_validate_block_bitmap:441 [ 161.940244][ T3782] loop1: lost filesystem error report for type 5 error -28 [ 161.971209][ T3782] EXT4-fs (loop1): 1 truncate cleaned up [ 162.018589][ T3782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 162.113915][ T3797] FAULT_INJECTION: forcing a failure. [ 162.113915][ T3797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.150701][ T3797] CPU: 0 UID: 0 PID: 3797 Comm: syz.2.79 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 162.150730][ T3797] Tainted: [W]=WARN [ 162.150736][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.150752][ T3797] Call Trace: [ 162.150760][ T3797] [ 162.150768][ T3797] __dump_stack+0x1d/0x30 [ 162.150830][ T3797] dump_stack_lvl+0x95/0xd0 [ 162.150846][ T3797] dump_stack+0x15/0x1b [ 162.150865][ T3797] should_fail_ex+0x25e/0x270 [ 162.150882][ T3797] should_fail+0xb/0x20 [ 162.150900][ T3797] should_fail_usercopy+0x1a/0x20 [ 162.150922][ T3797] _copy_from_user+0x1c/0xb0 [ 162.150963][ T3797] io_sync_cancel+0x12f/0x8a0 [ 162.151076][ T3797] ? __mutex_lock+0xa9d/0xf40 [ 162.151102][ T3797] ? __pfx_autoremove_wake_function+0x10/0x10 [ 162.151216][ T3797] __se_sys_io_uring_register+0x9f3/0x1330 [ 162.151238][ T3797] ? fput+0x8f/0xc0 [ 162.151257][ T3797] ? ksys_write+0x194/0x1a0 [ 162.151291][ T3797] __x64_sys_io_uring_register+0x55/0x70 [ 162.151308][ T3797] x64_sys_call+0x2be0/0x3020 [ 162.151331][ T3797] do_syscall_64+0x136/0x3c0 [ 162.151382][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.151400][ T3797] RIP: 0033:0x7f90b6c3ce59 [ 162.151417][ T3797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.151454][ T3797] RSP: 002b:00007f90b536d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 162.151474][ T3797] RAX: ffffffffffffffda RBX: 00007f90b6eb6090 RCX: 00007f90b6c3ce59 [ 162.151489][ T3797] RDX: 0000200000000000 RSI: 0000000000000018 RDI: 0000000000000003 [ 162.151525][ T3797] RBP: 00007f90b536d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.151539][ T3797] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 162.151552][ T3797] R13: 00007f90b6eb6128 R14: 00007f90b6eb6090 R15: 00007ffd1262d8b8 [ 162.151573][ T3797] [ 162.401125][ T3812] random: crng reseeded on system resumption [ 162.466994][ T3782] syz.1.71 (3782) used greatest stack depth: 9312 bytes left [ 162.481769][ T3812] netlink: 'syz.2.85': attribute type 6 has an invalid length. [ 162.511499][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 162.646205][ T3818] loop0: detected capacity change from 0 to 4096 [ 162.681345][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.726242][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.783155][ T3824] vlan2: entered allmulticast mode [ 162.793296][ T3824] veth0_to_bond: entered allmulticast mode [ 162.817093][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 162.818317][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.838267][ T412] EXT4-fs error (device loop1): ext4_release_dquot:7068: comm kworker/u8:6: Failed to release dquot type 1 [ 162.851631][ T412] loop1: lost filesystem error report for type 5 error -117 [ 162.856538][ T3826] syzkaller0: entered promiscuous mode [ 162.891769][ T3826] syzkaller0: entered allmulticast mode [ 162.968042][ T3824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 162.981564][ T3824] ip6gretap1: entered promiscuous mode [ 163.041927][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.053538][ T3828] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 163.107187][ T3836] FAULT_INJECTION: forcing a failure. [ 163.107187][ T3836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.130902][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.153427][ T3836] CPU: 1 UID: 0 PID: 3836 Comm: syz.2.93 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 163.153460][ T3836] Tainted: [W]=WARN [ 163.153468][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.153486][ T3836] Call Trace: [ 163.153568][ T3836] [ 163.153576][ T3836] __dump_stack+0x1d/0x30 [ 163.153601][ T3836] dump_stack_lvl+0x95/0xd0 [ 163.153621][ T3836] dump_stack+0x15/0x1b [ 163.153642][ T3836] should_fail_ex+0x25e/0x270 [ 163.153665][ T3836] should_fail+0xb/0x20 [ 163.153684][ T3836] should_fail_usercopy+0x1a/0x20 [ 163.153707][ T3836] _copy_to_user+0x20/0xa0 [ 163.153734][ T3836] simple_read_from_buffer+0xb5/0x130 [ 163.153823][ T3836] proc_fail_nth_read+0x10e/0x150 [ 163.153931][ T3836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.153987][ T3836] vfs_read+0x18e/0x7c0 [ 163.154090][ T3836] ? __rcu_read_unlock+0x4e/0x70 [ 163.154115][ T3836] ? __fget_files+0x184/0x1c0 [ 163.154135][ T3836] ? mutex_lock+0x57/0x90 [ 163.154164][ T3836] ksys_read+0xdc/0x1a0 [ 163.154193][ T3836] __x64_sys_read+0x40/0x50 [ 163.154220][ T3836] x64_sys_call+0x2886/0x3020 [ 163.154242][ T3836] do_syscall_64+0x136/0x3c0 [ 163.154347][ T3836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.154368][ T3836] RIP: 0033:0x7f90b6bfd68e [ 163.154402][ T3836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.154426][ T3836] RSP: 002b:00007f90b568efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.154448][ T3836] RAX: ffffffffffffffda RBX: 00007f90b568f6c0 RCX: 00007f90b6bfd68e [ 163.154464][ T3836] RDX: 000000000000000f RSI: 00007f90b568f0a0 RDI: 0000000000000003 [ 163.154478][ T3836] RBP: 00007f90b568f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.154493][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.154507][ T3836] R13: 00007f90b6eb6038 R14: 00007f90b6eb5fa0 R15: 00007ffd1262d8b8 [ 163.154528][ T3836] [ 163.397211][ T3849] FAULT_INJECTION: forcing a failure. [ 163.397211][ T3849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.410372][ T3849] CPU: 0 UID: 0 PID: 3849 Comm: syz.2.97 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 163.410400][ T3849] Tainted: [W]=WARN [ 163.410408][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.410499][ T3849] Call Trace: [ 163.410505][ T3849] [ 163.410511][ T3849] __dump_stack+0x1d/0x30 [ 163.410533][ T3849] dump_stack_lvl+0x95/0xd0 [ 163.410549][ T3849] dump_stack+0x15/0x1b [ 163.410565][ T3849] should_fail_ex+0x25e/0x270 [ 163.410585][ T3849] should_fail+0xb/0x20 [ 163.410622][ T3849] should_fail_usercopy+0x1a/0x20 [ 163.410642][ T3849] _copy_to_user+0x20/0xa0 [ 163.410667][ T3849] simple_read_from_buffer+0xb5/0x130 [ 163.410740][ T3849] proc_fail_nth_read+0x10e/0x150 [ 163.410772][ T3849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.410860][ T3849] vfs_read+0x18e/0x7c0 [ 163.410880][ T3849] ? __rcu_read_unlock+0x4e/0x70 [ 163.410922][ T3849] ? __fget_files+0x184/0x1c0 [ 163.410938][ T3849] ? mutex_lock+0x57/0x90 [ 163.410958][ T3849] ksys_read+0xdc/0x1a0 [ 163.410979][ T3849] __x64_sys_read+0x40/0x50 [ 163.411078][ T3849] x64_sys_call+0x2886/0x3020 [ 163.411095][ T3849] do_syscall_64+0x136/0x3c0 [ 163.411120][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.411137][ T3849] RIP: 0033:0x7f90b6bfd68e [ 163.411218][ T3849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.411274][ T3849] RSP: 002b:00007f90b568efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.411290][ T3849] RAX: ffffffffffffffda RBX: 00007f90b568f6c0 RCX: 00007f90b6bfd68e [ 163.411302][ T3849] RDX: 000000000000000f RSI: 00007f90b568f0a0 RDI: 0000000000000003 [ 163.411313][ T3849] RBP: 00007f90b568f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.411323][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.411349][ T3849] R13: 00007f90b6eb6038 R14: 00007f90b6eb5fa0 R15: 00007ffd1262d8b8 [ 163.411386][ T3849] [ 163.444260][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.690655][ T412] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.773878][ T30] bridge_slave_1: left allmulticast mode [ 163.782581][ T30] bridge_slave_1: left promiscuous mode [ 163.801544][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.813035][ T3856] loop4: detected capacity change from 0 to 4096 [ 163.835902][ T30] bridge_slave_0: left allmulticast mode [ 163.841720][ T30] bridge_slave_0: left promiscuous mode [ 163.856175][ T3856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.866974][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.922027][ T3876] loop0: detected capacity change from 0 to 1764 [ 163.935579][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.003921][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.016068][ T3848] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 164.025290][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.041058][ T30] bond0 (unregistering): Released all slaves [ 164.054364][ T30] bond1 (unregistering): Released all slaves [ 164.083763][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.166961][ T3889] random: crng reseeded on system resumption [ 164.198759][ T30] tipc: Left network mode [ 164.219811][ T30] hsr_slave_0: left promiscuous mode [ 164.227231][ T30] hsr_slave_1: left promiscuous mode [ 164.236159][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.249427][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.260781][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.275753][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.304261][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 164.327350][ T30] veth1_macvtap: left promiscuous mode [ 164.486166][ T30] veth0_macvtap: left promiscuous mode [ 164.504990][ T30] veth1_vlan: left promiscuous mode [ 164.518111][ T30] veth0_vlan: left promiscuous mode [ 164.658074][ T30] team0 (unregistering): Port device team_slave_1 removed [ 164.672438][ T30] team0 (unregistering): Port device team_slave_0 removed [ 164.871097][ T3889] netlink: 'syz.0.103': attribute type 6 has an invalid length. [ 164.888169][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.970600][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.989847][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.999637][ T3908] loop3: detected capacity change from 0 to 8192 [ 165.006273][ T3829] bridge_slave_0: entered allmulticast mode [ 165.013244][ T3829] bridge_slave_0: entered promiscuous mode [ 165.029582][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.046772][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.059548][ T3829] bridge_slave_1: entered allmulticast mode [ 165.084903][ T3829] bridge_slave_1: entered promiscuous mode [ 165.139741][ T3829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.164165][ T3829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.229305][ T3829] team0: Port device team_slave_0 added [ 165.242145][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 165.261375][ T3829] team0: Port device team_slave_1 added [ 165.301420][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.316288][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.367979][ T3829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.392270][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.409453][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.509812][ T3829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.553104][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 165.590036][ T3829] hsr_slave_0: entered promiscuous mode [ 165.602903][ T3829] hsr_slave_1: entered promiscuous mode [ 165.616999][ T3829] debugfs: 'hsr0' already exists in 'hsr' [ 165.625860][ T3829] Cannot create hsr debugfs directory [ 165.653689][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 165.750278][ T3541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.850028][ T3829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.866850][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.876380][ T3829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.886741][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.900172][ T3829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.909857][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.921901][ T3829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.939132][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.042113][ T3829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.058929][ T3829] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.069002][ T2139] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.076089][ T2139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.087844][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.094929][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.167896][ T3981] team0 (unregistering): Port device team_slave_0 removed [ 166.178351][ T3981] team0 (unregistering): Port device team_slave_1 removed [ 166.258838][ T3993] random: crng reseeded on system resumption [ 166.307922][ T3993] netlink: 'syz.3.115': attribute type 6 has an invalid length. [ 166.321868][ T3829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.334749][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 166.386629][ T4001] loop0: detected capacity change from 0 to 2048 [ 166.413818][ T4001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.431032][ T4001] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.450841][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 166.450855][ T28] audit: type=1400 audit(1781774696.139:444): avc: denied { write } for pid=3999 comm="syz.0.116" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.451621][ T4001] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #15: comm syz.0.116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 166.499923][ T4001] EXT4-fs (loop0): Remounting filesystem read-only [ 166.521875][ T28] audit: type=1400 audit(1781774696.209:445): avc: denied { write } for pid=3999 comm="syz.0.116" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.558282][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.599130][ T3829] veth0_vlan: entered promiscuous mode [ 166.607872][ T3829] veth1_vlan: entered promiscuous mode [ 166.615537][ T3829] veth0_macvtap: entered promiscuous mode [ 166.623367][ T3829] veth1_macvtap: entered promiscuous mode [ 166.628527][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.628870][ T3985] loop2: detected capacity change from 0 to 2048 [ 166.632829][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.636296][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.636351][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.636424][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.636602][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.667853][ T3985] EXT4-fs: quotafile must be on filesystem root [ 166.769665][ T4022] loop0: detected capacity change from 0 to 512 [ 166.850995][ T4022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.854686][ T3985] loop2: detected capacity change from 0 to 512 [ 166.880034][ T4022] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 166.912438][ T3985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.947605][ T4022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 166.971152][ T3985] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #17: comm syz.2.114: corrupted in-inode xattr: e_name out of bounds [ 166.987049][ T4022] System zones: 1-12 [ 166.997342][ T4022] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.016276][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.029497][ T3985] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 167.030036][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 167.046194][ C0] EXT4-fs (loop2): initial error at time 1781774696: ext4_iget_extra_inode:5128: inode 17 [ 167.056425][ C0] EXT4-fs (loop2): last error at time 1781774696: ext4_iget_extra_inode:5128: inode 17 [ 167.077777][ T28] audit: type=1400 audit(1781774696.759:446): avc: denied { read write } for pid=4027 comm="syz.3.119" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.088625][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.112355][ T3985] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.114: couldn't read orphan inode 17 (err -117) [ 167.114978][ T28] audit: type=1400 audit(1781774696.759:447): avc: denied { open } for pid=4027 comm="syz.3.119" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.119908][ T3985] loop2: lost filesystem error report for type 5 error -117 [ 167.170136][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 167.184617][ C0] EXT4-fs (loop0): initial error at time 1781774696: ext4_read_block_bitmap_nowait:517 [ 167.194766][ C0] EXT4-fs (loop0): last error at time 1781774696: ext4_read_block_bitmap_nowait:517 [ 167.204903][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.219522][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.227629][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.249080][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.279864][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.282720][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.339220][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.341512][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.362667][ T3985] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.2.114: path /20/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 167.384572][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.386227][ T4022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.117: Block bitmap for bg 0 marked uninitialized [ 167.408062][ T4022] loop0: lost filesystem error report for type 5 error -117 [ 167.408237][ T4022] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 167.430584][ T4022] EXT4-fs (loop0): 1 truncate cleaned up [ 167.437505][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.461706][ T4020] loop5: detected capacity change from 0 to 1764 [ 167.497893][ T4020] iso9660: Bad value for 'sbsector' [ 169.605318][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.651860][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.679721][ T28] audit: type=1400 audit(1781774699.359:448): avc: denied { ioctl } for pid=4042 comm="syz.0.123" path="socket:[7344]" dev="sockfs" ino=7344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.719264][ T4046] loop2: detected capacity change from 0 to 512 [ 169.751190][ T28] audit: type=1400 audit(1781774699.439:449): avc: denied { ioctl } for pid=4047 comm="syz.3.126" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.782001][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.794908][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.801755][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.821645][ T4046] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.835320][ T28] audit: type=1400 audit(1781774699.519:450): avc: denied { write } for pid=4045 comm="syz.2.124" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.840598][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.857167][ T28] audit: type=1400 audit(1781774699.519:451): avc: denied { append } for pid=4045 comm="syz.2.124" path="/22/file1/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.890884][ T28] audit: type=1400 audit(1781774699.519:452): avc: denied { write } for pid=4045 comm="syz.2.124" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.906312][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.912432][ T4046] loop2: detected capacity change from 512 to 0 [ 169.920966][ C1] I/O error, dev loop2, sector 104 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 169.935855][ T28] audit: type=1400 audit(1781774699.519:453): avc: denied { mounton } for pid=4045 comm="syz.2.124" path="/22/file1/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.936401][ T4059] EXT4-fs error (device loop2): ext4_write_dquot:7012: comm syz.2.124: Failed to commit dquot type 0 [ 169.972774][ T4054] loop4: detected capacity change from 0 to 8192 [ 169.979539][ T4043] loop0: detected capacity change from 0 to 4096 [ 169.988267][ T4043] EXT4-fs: inline encryption not supported [ 169.999546][ T4043] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 170.008794][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.017395][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.024483][ T4059] EXT4-fs error (device loop2): ext4_write_dquot:7012: comm syz.2.124: Failed to commit dquot type 1 [ 170.035840][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.044544][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.051716][ T4059] EXT4-fs error (device loop2): ext4_get_inode_loc:5023: inode #18: block 37: comm syz.2.124: unable to read itable block [ 170.065230][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.073811][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.080914][ T4059] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: IO failure [ 170.089646][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.098055][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.105092][ T4059] EXT4-fs error (device loop2): ext4_ext_truncate:4557: inode #18: comm syz.2.124: mark_inode_dirty error [ 170.125896][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.138249][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.145660][ T4059] EXT4-fs error (device loop2): ext4_get_inode_loc:5023: inode #18: block 37: comm syz.2.124: unable to read itable block [ 170.158867][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.167514][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.175025][ T4059] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: IO failure [ 170.186601][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.195103][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.202132][ T4059] EXT4-fs error (device loop2): ext4_truncate:4690: inode #18: comm syz.2.124: mark_inode_dirty error [ 170.213322][ T4059] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.223712][ T4059] EXT4-fs (loop2): I/O error while writing superblock [ 170.249810][ T3305] EXT4-fs error (device loop2): ext4_get_inode_loc:5023: inode #2: block 35: comm syz-executor: unable to read itable block [ 170.263216][ T3305] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.286695][ T3305] EXT4-fs (loop2): I/O error while writing superblock [ 170.297224][ T3305] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: IO failure [ 170.310953][ T3305] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 170.319503][ T4069] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 170.329956][ T4069] bond1: entered allmulticast mode [ 170.339072][ T4069] ip6gretap1: entered promiscuous mode [ 170.346596][ T4069] ip6gretap1: entered allmulticast mode [ 170.352325][ T4069] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 170.426570][ T4073] loop4: detected capacity change from 0 to 2048 [ 170.442900][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.455408][ T4073] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.474301][ T4073] EXT4-fs (loop4): shut down requested (1) [ 170.482234][ T4073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.564429][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.638757][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.698655][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.716223][ T4097] loop0: detected capacity change from 0 to 512 [ 170.740896][ T4097] EXT4-fs: dax option not supported [ 170.767170][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.793494][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.916129][ T39] bridge_slave_1: left allmulticast mode [ 170.932528][ T39] bridge_slave_1: left promiscuous mode [ 170.950260][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.011492][ T39] bridge_slave_0: left allmulticast mode [ 171.028892][ T39] bridge_slave_0: left promiscuous mode [ 171.036977][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.080399][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.109708][ T4115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.126006][ T4115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.564012][ T4115] iso9660: Unknown parameter '' [ 171.645902][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.666958][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.687941][ T39] bond0 (unregistering): Released all slaves [ 171.695305][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 171.695318][ T28] audit: type=1400 audit(1781774701.369:484): avc: denied { create } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.743545][ T28] audit: type=1400 audit(1781774701.399:485): avc: denied { create } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.790005][ T28] audit: type=1400 audit(1781774701.399:486): avc: denied { write } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.827558][ T28] audit: type=1400 audit(1781774701.399:487): avc: denied { read } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.868255][ T28] audit: type=1400 audit(1781774701.409:488): avc: denied { write } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.887459][ T28] audit: type=1400 audit(1781774701.499:489): avc: denied { create } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.907226][ T28] audit: type=1400 audit(1781774701.499:490): avc: denied { create } for pid=4114 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.926866][ T39] hsr_slave_0: left promiscuous mode [ 171.928682][ T28] audit: type=1400 audit(1781774701.549:491): avc: denied { search } for pid=4125 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.954271][ T39] hsr_slave_1: left promiscuous mode [ 171.969032][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.994520][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.004815][ T28] audit: type=1400 audit(1781774701.579:492): avc: denied { read } for pid=4128 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.040484][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.042603][ T28] audit: type=1400 audit(1781774701.579:493): avc: denied { read open } for pid=4128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.067385][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.107511][ T39] veth1_macvtap: left promiscuous mode [ 172.116688][ T39] veth0_macvtap: left promiscuous mode [ 172.124627][ T39] veth1_vlan: left promiscuous mode [ 172.131360][ T39] veth0_vlan: left promiscuous mode [ 172.239058][ T4093] set_capacity_and_notify: 3 callbacks suppressed [ 172.239084][ T4093] loop5: detected capacity change from 0 to 512 [ 172.254641][ T4093] ======================================================= [ 172.254641][ T4093] WARNING: The mand mount option has been deprecated and [ 172.254641][ T4093] and is ignored by this kernel. Remove the mand [ 172.254641][ T4093] option from the mount to silence this warning. [ 172.254641][ T4093] ======================================================= [ 172.297088][ T39] team0 (unregistering): Port device team_slave_1 removed [ 172.312252][ T4135] loop0: detected capacity change from 0 to 4096 [ 172.327101][ T39] team0 (unregistering): Port device team_slave_0 removed [ 172.347215][ T4093] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 172.371714][ T4135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.445600][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 172.526764][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.673342][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.680521][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.687647][ T4094] bridge_slave_0: entered allmulticast mode [ 172.694151][ T4094] bridge_slave_0: entered promiscuous mode [ 172.701251][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.708377][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.715670][ T4094] bridge_slave_1: entered allmulticast mode [ 172.728187][ T4094] bridge_slave_1: entered promiscuous mode [ 172.757720][ T4094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.771389][ T39] IPVS: stop unused estimator thread 0... [ 172.772704][ T4094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.803594][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 172.812168][ T4094] team0: Port device team_slave_0 added [ 172.823775][ T4094] team0: Port device team_slave_1 added [ 172.864091][ T4094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.880266][ T4094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.925756][ T4094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.948771][ T4094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.969105][ T4094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.998418][ T4094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.078390][ T4094] hsr_slave_0: entered promiscuous mode [ 173.101080][ T4094] hsr_slave_1: entered promiscuous mode [ 173.118644][ T4094] debugfs: 'hsr0' already exists in 'hsr' [ 173.139696][ T4094] Cannot create hsr debugfs directory [ 173.265122][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 173.289526][ T4094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.300072][ T4094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.307836][ T4202] netlink: 'syz.4.158': attribute type 6 has an invalid length. [ 173.321446][ T4094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.328835][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 173.341416][ T4094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.353838][ T4094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.369195][ T4094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.377372][ T4094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.387564][ T4094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.453817][ T4094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.478392][ T4094] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.490416][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.497483][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.508840][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.515899][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.677977][ T4094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.721566][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 173.828276][ T4238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.160'. [ 173.909926][ T4094] veth0_vlan: entered promiscuous mode [ 173.923066][ T4094] veth1_vlan: entered promiscuous mode [ 173.942693][ T4094] veth0_macvtap: entered promiscuous mode [ 173.950086][ T4094] veth1_macvtap: entered promiscuous mode [ 173.953291][ T4259] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.163'. [ 173.961679][ T4094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.977299][ T4094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.993712][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.002988][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.014004][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.023773][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.231279][ T4267] loop6: detected capacity change from 0 to 512 [ 174.280063][ T4267] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 174.280093][ T4267] EXT4-fs: failed to create workqueue [ 174.306342][ T4267] EXT4-fs (loop6): mount failed [ 174.657498][ T4277] loop0: detected capacity change from 0 to 512 [ 174.713020][ T4277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.774120][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0200-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.822927][ T4277] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.046108][ T4277] futex_wake_op: syz.0.165 tries to shift op by 32; fix this program [ 175.083501][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0200-0000-0000-000000000000. [ 175.141489][ T4282] loop5: detected capacity change from 0 to 1764 [ 175.338363][ T4161] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 175.563959][ T4303] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.603071][ T4300] random: crng reseeded on system resumption [ 175.709605][ T4300] netlink: 'syz.6.171': attribute type 6 has an invalid length. [ 175.726771][ T3379] IPVS: starting estimator thread 0... [ 175.736994][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.171'. [ 175.738043][ T4308] loop5: detected capacity change from 0 to 1024 [ 175.756046][ T4308] EXT4-fs: Ignoring removed orlov option [ 175.784014][ T4308] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 175.803298][ T4308] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.174: lblock 2 mapped to illegal pblock 2 (length 1) [ 175.817356][ T4308] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 175.819760][ T4308] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.174: lblock 0 mapped to illegal pblock 48 (length 1) [ 175.828896][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 175.828932][ C0] EXT4-fs (loop5): initial error at time 1781774705: ext4_map_blocks:791: inode 3: block 2 [ 175.828964][ C0] EXT4-fs (loop5): last error at time 1781774705: ext4_map_blocks:791: inode 3: block 2 [ 175.834531][ T4316] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 175.879796][ T4308] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 175.880174][ T4308] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.174: Failed to acquire dquot type 0 [ 175.880893][ T4309] IPVS: using max 2352 ests per chain, 117600 per kthread [ 175.889254][ T4308] loop5: lost filesystem error report for type 5 error -117 [ 175.904341][ T4311] loop0: detected capacity change from 0 to 128 [ 175.917182][ T4308] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 175.933630][ T4308] loop5: lost filesystem error report for type 5 error -117 [ 175.935357][ T4308] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.174: mark_inode_dirty error [ 175.954461][ T4308] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.955291][ T4308] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 175.972188][ T4311] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.988183][ T4311] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.989713][ T4308] EXT4-fs (loop5): 1 orphan inode deleted [ 176.032353][ T39] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.033238][ T4308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.067326][ T39] EXT4-fs error (device loop5): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 0 [ 176.095723][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.147308][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.170823][ T3829] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 176.190750][ T3829] loop5: lost filesystem error report for type 5 error -117 [ 176.193100][ T3829] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 176.212969][ T3829] loop5: lost filesystem error report for type 5 error -117 [ 176.213049][ T3829] EXT4-fs error (device loop5): ext4_quota_off:7316: inode #3: comm syz-executor: mark_inode_dirty error [ 176.234260][ T3829] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.299830][ T4330] netlink: 'syz.3.183': attribute type 29 has an invalid length. [ 176.338932][ T4330] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 176.351169][ T4330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.183'. [ 176.376820][ T4334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.389414][ T4334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.574104][ T4343] loop3: detected capacity change from 0 to 8192 [ 176.591791][ T4343] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.640754][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 176.662228][ T4350] loop3: detected capacity change from 0 to 1024 [ 176.684503][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.698066][ T4350] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.710734][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.190: bg 0: block 112: padding at end of block bitmap is not set [ 176.731441][ T4350] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.190: Freeing blocks not in datazone - block = 0, count = 16 [ 176.745909][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 176.745921][ T28] audit: type=1400 audit(1781774706.429:676): avc: denied { write } for pid=4349 comm="syz.3.190" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 176.778665][ T28] audit: type=1400 audit(1781774706.439:677): avc: denied { listen } for pid=4349 comm="syz.3.190" laddr=fe80::13 lport=38492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.800933][ T28] audit: type=1400 audit(1781774706.439:678): avc: denied { accept } for pid=4349 comm="syz.3.190" laddr=fe80::13 lport=38492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.845263][ T28] audit: type=1400 audit(1781774706.529:679): avc: denied { setopt } for pid=4360 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.921632][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.953331][ T4366] netlink: 'syz.6.197': attribute type 1 has an invalid length. [ 176.961091][ T4366] netlink: 'syz.6.197': attribute type 2 has an invalid length. [ 176.969114][ T4366] netlink: 'syz.6.197': attribute type 1 has an invalid length. [ 176.980510][ T4366] netlink: 'syz.6.197': attribute type 2 has an invalid length. [ 176.997840][ T28] audit: type=1400 audit(1781774706.629:680): avc: denied { read write } for pid=4365 comm="syz.6.197" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 177.029081][ T28] audit: type=1400 audit(1781774706.629:681): avc: denied { open } for pid=4365 comm="syz.6.197" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 177.046048][ T4369] loop3: detected capacity change from 0 to 128 [ 177.052124][ T28] audit: type=1400 audit(1781774706.629:682): avc: denied { ioctl } for pid=4365 comm="syz.6.197" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 177.195819][ T4373] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 177.299037][ T4373] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 177.309628][ T4373] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.196: bad orphan inode 4 [ 177.322444][ T4373] loop5: lost filesystem error report for type 5 error -117 [ 177.325297][ T4373] EXT4-fs (loop5): 1 orphan inode deleted [ 177.332983][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 177.333132][ C1] EXT4-fs (loop5): initial error at time 1781774707: ext4_orphan_get:1425 [ 177.333394][ C1] EXT4-fs (loop5): last error at time 1781774707: ext4_orphan_get:1425 [ 177.368193][ T4373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.392557][ T4373] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.196: lblock 0 mapped to illegal pblock 4 (length 1) [ 177.437442][ T4373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.447621][ T4373] block device autoloading is deprecated and will be removed. [ 177.462986][ T28] audit: type=1400 audit(1781774707.069:683): avc: denied { setattr } for pid=4362 comm="syz.5.196" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.667241][ T4369] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.781078][ T28] audit: type=1400 audit(1781774707.069:684): avc: denied { write } for pid=4362 comm="syz.5.196" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.815605][ T4369] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.913926][ T28] audit: type=1400 audit(1781774707.069:685): avc: denied { create } for pid=4362 comm="syz.5.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 178.077938][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.115449][ T4408] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 178.152674][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.206'. [ 178.176037][ T4408] bond2 (unregistering): Released all slaves [ 178.187565][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.206'. [ 178.256494][ T4431] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 178.292542][ T4431] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 178.346499][ T23] IPVS: starting estimator thread 0... [ 178.450035][ T4436] IPVS: using max 2304 ests per chain, 115200 per kthread [ 178.562052][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.688270][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.695539][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.825340][ T4488] set_capacity_and_notify: 1 callbacks suppressed [ 178.825356][ T4488] loop6: detected capacity change from 0 to 2048 [ 178.852336][ T4488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.865580][ T4488] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.883592][ T4488] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #15: comm syz.6.216: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 178.901867][ T4488] EXT4-fs (loop6): Remounting filesystem read-only [ 178.919779][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.316896][ T4513] loop6: detected capacity change from 0 to 1764 [ 179.329621][ T4513] iso9660: Bad value for 'sbsector' [ 179.383738][ T4538] loop3: detected capacity change from 0 to 256 [ 179.415983][ T4534] loop5: detected capacity change from 0 to 2048 [ 179.426949][ T4538] FAT-fs (loop3): Directory bread(block 64) failed [ 179.433625][ T4538] FAT-fs (loop3): Directory bread(block 65) failed [ 179.459292][ T4538] FAT-fs (loop3): Directory bread(block 66) failed [ 179.481321][ T4538] FAT-fs (loop3): Directory bread(block 67) failed [ 179.491086][ T4538] FAT-fs (loop3): Directory bread(block 68) failed [ 179.492705][ T4534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.510619][ T4538] FAT-fs (loop3): Directory bread(block 69) failed [ 179.545353][ T4546] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 179.557181][ T4538] FAT-fs (loop3): Directory bread(block 70) failed [ 179.577620][ T4534] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.591281][ T4538] FAT-fs (loop3): Directory bread(block 71) failed [ 179.599691][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.238'. [ 179.607481][ T4538] FAT-fs (loop3): Directory bread(block 72) failed [ 179.612068][ T4534] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #15: comm syz.5.232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 179.628187][ T4538] FAT-fs (loop3): Directory bread(block 73) failed [ 179.673822][ T4534] EXT4-fs (loop5): Remounting filesystem read-only [ 179.694787][ T4546] bond1: entered promiscuous mode [ 179.702275][ T4546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.798629][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.927544][ T4562] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.239'. [ 180.368460][ T4546] loop0: detected capacity change from 0 to 1024 [ 180.457857][ T4546] EXT4-fs: Invalid want_extra_isize 1 [ 181.697459][ T4582] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 181.729455][ T4582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 181.894974][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 181.894989][ T28] audit: type=1400 audit(1781774711.579:719): avc: denied { sqpoll } for pid=4584 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.946544][ T4590] can0: slcan on ttyS3. [ 182.004282][ T28] audit: type=1400 audit(1781774711.679:720): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 182.029057][ T4596] loop5: detected capacity change from 0 to 256 [ 182.035486][ T4590] can0 (unregistered): slcan off ttyS3. [ 182.078526][ T4596] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.092548][ T28] audit: type=1400 audit(1781774711.769:721): avc: denied { map } for pid=4588 comm="syz.6.247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.118141][ T28] audit: type=1400 audit(1781774711.769:722): avc: denied { read write } for pid=4588 comm="syz.6.247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.151424][ T28] audit: type=1400 audit(1781774711.789:723): avc: denied { lock } for pid=4588 comm="syz.6.247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 182.186343][ T4597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 182.215560][ T4597] ip6gretap0: entered promiscuous mode [ 182.228115][ T28] audit: type=1400 audit(1781774711.909:724): avc: denied { create } for pid=4595 comm="syz.5.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 182.240806][ T4606] loop6: detected capacity change from 0 to 512 [ 182.272970][ T28] audit: type=1400 audit(1781774711.929:725): avc: denied { connect } for pid=4595 comm="syz.5.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 182.276014][ T4606] EXT4-fs: Ignoring removed i_version option [ 182.324434][ T4609] loop0: detected capacity change from 0 to 512 [ 182.329011][ T4606] EXT4-fs: Ignoring removed bh option [ 182.332723][ T28] audit: type=1400 audit(1781774711.999:726): avc: denied { mount } for pid=4608 comm="syz.0.252" name="/" dev="rpc_pipefs" ino=8949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 182.350783][ T4609] EXT4-fs: dax option not supported [ 182.396897][ T28] audit: type=1400 audit(1781774711.999:727): avc: denied { unmount } for pid=4608 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 182.417070][ T28] audit: type=1400 audit(1781774712.039:728): avc: denied { mounton } for pid=4608 comm="syz.0.252" path="/59/file0" dev="rpc_pipefs" ino=8949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 182.448773][ T4609] loop0: detected capacity change from 0 to 256 [ 182.456472][ T4606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.456703][ T4606] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.574482][ T4625] FAULT_INJECTION: forcing a failure. [ 182.574482][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 182.587685][ T4625] CPU: 0 UID: 0 PID: 4625 Comm: syz.3.258 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 182.587718][ T4625] Tainted: [W]=WARN [ 182.587768][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.587787][ T4625] Call Trace: [ 182.587793][ T4625] [ 182.587801][ T4625] __dump_stack+0x1d/0x30 [ 182.587824][ T4625] dump_stack_lvl+0x95/0xd0 [ 182.587885][ T4625] dump_stack+0x15/0x1b [ 182.587962][ T4625] should_fail_ex+0x25e/0x270 [ 182.587984][ T4625] should_failslab+0x8c/0xb0 [ 182.588013][ T4625] __kmalloc_noprof+0xb8/0x4d0 [ 182.588043][ T4625] ? copy_splice_read+0xc2/0x6b0 [ 182.588092][ T4625] copy_splice_read+0xc2/0x6b0 [ 182.588188][ T4625] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 182.588214][ T4625] splice_direct_to_actor+0x27c/0x680 [ 182.588244][ T4625] ? kstrtouint_from_user+0xa8/0xf0 [ 182.588265][ T4625] ? __pfx_direct_splice_actor+0x10/0x10 [ 182.588372][ T4625] do_splice_direct+0x119/0x1a0 [ 182.588403][ T4625] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 182.588426][ T4625] do_sendfile+0x37d/0x640 [ 182.588449][ T4625] __x64_sys_sendfile64+0x105/0x150 [ 182.588545][ T4625] x64_sys_call+0x2dc4/0x3020 [ 182.588568][ T4625] do_syscall_64+0x136/0x3c0 [ 182.588724][ T4625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.588745][ T4625] RIP: 0033:0x7ff003e5ce59 [ 182.588762][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.588784][ T4625] RSP: 002b:00007ff0028af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 182.588805][ T4625] RAX: ffffffffffffffda RBX: 00007ff0040d5fa0 RCX: 00007ff003e5ce59 [ 182.588819][ T4625] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 182.588832][ T4625] RBP: 00007ff0028af090 R08: 0000000000000000 R09: 0000000000000000 [ 182.588886][ T4625] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 182.588899][ T4625] R13: 00007ff0040d6038 R14: 00007ff0040d5fa0 R15: 00007fff414b21c8 [ 182.588919][ T4625] [ 182.812097][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.872401][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 182.976657][ T4647] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 182.989689][ T4631] IPVS: stopping backup sync thread 4647 ... [ 183.345694][ T4652] loop5: detected capacity change from 0 to 512 [ 183.398279][ T4655] netlink: 'syz.4.269': attribute type 29 has an invalid length. [ 183.409282][ T4652] EXT4-fs: dax option not supported [ 183.455673][ T4655] netlink: 'syz.4.269': attribute type 29 has an invalid length. [ 183.481984][ T9] IPVS: starting estimator thread 0... [ 183.580013][ T4657] IPVS: using max 2400 ests per chain, 120000 per kthread [ 183.589877][ T4661] x_tables: duplicate underflow at hook 1 [ 183.833358][ T4656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.905506][ T4656] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.980150][ T4674] set_capacity_and_notify: 1 callbacks suppressed [ 183.980164][ T4674] loop0: detected capacity change from 0 to 1764 [ 184.005698][ T4656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.038916][ T4674] iso9660: Bad value for 'sbsector' [ 184.584613][ T4691] loop3: detected capacity change from 0 to 128 [ 184.594039][ T4690] loop6: detected capacity change from 0 to 1024 [ 184.613981][ T4690] EXT4-fs: Ignoring removed orlov option [ 184.642188][ T4691] vfat: Unknown parameter '' [ 184.665677][ T4690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.761138][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.930697][ T4723] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 185.162984][ T4726] loop0: detected capacity change from 0 to 512 [ 185.173355][ T4726] EXT4-fs: dax option not supported [ 185.191289][ T4732] vlan2: entered allmulticast mode [ 185.196528][ T4732] veth0_to_bond: entered allmulticast mode [ 185.226702][ T4726] loop0: detected capacity change from 0 to 256 [ 185.290470][ T4732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 185.343123][ T4733] loop6: detected capacity change from 0 to 512 [ 185.366406][ T4732] ip6gretap2: entered promiscuous mode [ 185.376969][ T4733] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 185.396516][ T4733] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 185.406756][ T4733] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.283: bad orphan inode 4 [ 185.417515][ T4733] loop6: lost filesystem error report for type 5 error -117 [ 185.418639][ T4733] EXT4-fs (loop6): 1 orphan inode deleted [ 185.426396][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 185.426429][ C1] EXT4-fs (loop6): initial error at time 1781774715: ext4_orphan_get:1425 [ 185.426590][ C1] EXT4-fs (loop6): last error at time 1781774715: ext4_orphan_get:1425 [ 185.461231][ T4733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.482269][ T4733] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.283: lblock 0 mapped to illegal pblock 4 (length 1) [ 186.045014][ T4758] loop3: detected capacity change from 0 to 512 [ 186.052595][ T4758] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.095496][ T4758] lo speed is unknown, defaulting to 1000 [ 186.103095][ T4758] lo speed is unknown, defaulting to 1000 [ 186.109416][ T4758] lo speed is unknown, defaulting to 1000 [ 186.177536][ T4758] infiniband sz1: set active [ 186.182298][ T4758] infiniband sz1: added lo [ 186.187818][ T23] lo speed is unknown, defaulting to 1000 [ 186.209050][ T4758] RDS/IB: sz1: added [ 186.213414][ T4758] smc: adding ib device sz1 with port count 1 [ 186.219682][ T4758] smc: ib device sz1 port 1 has no pnetid [ 186.230935][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.231905][ T4758] lo speed is unknown, defaulting to 1000 [ 186.309679][ T4758] lo speed is unknown, defaulting to 1000 [ 186.379543][ T4758] lo speed is unknown, defaulting to 1000 [ 186.449599][ T4758] lo speed is unknown, defaulting to 1000 [ 186.521218][ T4758] lo speed is unknown, defaulting to 1000 [ 186.591188][ T23] lo speed is unknown, defaulting to 1000 [ 186.629297][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.646368][ T4763] xt_hashlimit: max too large, truncated to 1048576 [ 186.669757][ T4763] loop5: detected capacity change from 0 to 512 [ 186.696993][ T4763] EXT4-fs: Ignoring removed i_version option [ 186.729089][ T4763] EXT4-fs: Invalid want_extra_isize 155 [ 186.759319][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.934259][ T4784] netlink: 32 bytes leftover after parsing attributes in process `syz.5.295'. [ 186.945317][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 186.945329][ T28] audit: type=1400 audit(1781774716.599:747): avc: denied { connect } for pid=4782 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.984838][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 187.005466][ T28] audit: type=1400 audit(1781774716.689:748): avc: denied { write } for pid=4765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.103013][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 187.117078][ T28] audit: type=1400 audit(1781774716.739:749): avc: denied { write } for pid=4793 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.161768][ T4798] loop6: detected capacity change from 0 to 128 [ 187.181997][ T4784] loop5: detected capacity change from 0 to 256 [ 187.933538][ T4798] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.971024][ T4798] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.046465][ T28] audit: type=1400 audit(1781774717.719:750): avc: denied { write } for pid=4797 comm="syz.6.299" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.094644][ T4802] lo speed is unknown, defaulting to 1000 [ 188.175397][ T4094] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.407994][ T28] audit: type=1400 audit(1781774718.089:751): avc: denied { connect } for pid=4808 comm="syz.5.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.503058][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.548789][ T28] audit: type=1400 audit(1781774718.199:752): avc: denied { ioctl } for pid=4812 comm="syz.6.303" path="socket:[10339]" dev="sockfs" ino=10339 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.739165][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.294: corrupted inode contents [ 188.755424][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.760042][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 188.764983][ T4800] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.294: mark_inode_dirty error [ 188.769392][ C1] EXT4-fs (loop0): initial error at time 1781774718: ext4_do_update_inode:5690: inode 16 [ 188.769672][ C1] EXT4-fs (loop0): last error at time 1781774718: ext4_do_update_inode:5690: inode 16 [ 188.811051][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.813265][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.294: corrupted inode contents [ 188.851170][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.852806][ T4800] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.294: mark_inode_dirty error [ 188.876292][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.878050][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.294: corrupted inode contents [ 188.902306][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.913230][ T4800] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 188.933541][ T4800] loop0: lost filesystem error report for type 5 error -117 [ 188.936922][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.294: corrupted inode contents [ 188.960705][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.973782][ T4800] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.294: mark_inode_dirty error [ 188.996727][ T4800] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.997873][ T4800] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 188.998276][ T4823] tipc: Enabling of bearer rejected, failed to enable media [ 189.008194][ T4800] loop0: lost filesystem error report for type 5 error -117 [ 189.032280][ T4800] EXT4-fs (loop0): 1 truncate cleaned up [ 189.066548][ T4800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.068925][ T30] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.088766][ T4800] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.111421][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7068: comm kworker/u8:1: Failed to release dquot type 1 [ 189.256285][ T4833] set_capacity_and_notify: 1 callbacks suppressed [ 189.256300][ T4833] loop5: detected capacity change from 0 to 512 [ 189.303529][ T4833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.305340][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.325870][ T4833] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.387452][ T28] audit: type=1400 audit(1781774719.069:753): avc: denied { create } for pid=4839 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.480878][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.544730][ T4847] netlink: 40 bytes leftover after parsing attributes in process `syz.5.313'. [ 189.689355][ T4847] loop5: detected capacity change from 0 to 512 [ 189.737380][ T4847] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 189.769998][ T4847] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 189.771223][ T4847] EXT4-fs error (device loop5): ext4_quota_enable:7226: comm syz.5.313: Bad quota inode: 4, type: 1 [ 189.780419][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 189.780439][ C0] EXT4-fs (loop5): initial error at time 1781774719: ext4_ext_check_inode:521: inode 4 [ 189.780471][ C0] EXT4-fs (loop5): last error at time 1781774719: ext4_ext_check_inode:521: inode 4 [ 189.817570][ T4847] loop5: lost filesystem error report for type 5 error -117 [ 189.820088][ T4847] EXT4-fs warning (device loop5): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.875164][ T4847] EXT4-fs (loop5): mount failed [ 189.920920][ T28] audit: type=1400 audit(1781774719.599:754): avc: denied { write } for pid=4846 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.003515][ T4861] FAULT_INJECTION: forcing a failure. [ 190.003515][ T4861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.020105][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: syz.5.317 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 190.020139][ T4861] Tainted: [W]=WARN [ 190.020146][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.020158][ T4861] Call Trace: [ 190.020193][ T4861] [ 190.020276][ T4861] __dump_stack+0x1d/0x30 [ 190.020300][ T4861] dump_stack_lvl+0x95/0xd0 [ 190.020321][ T4861] dump_stack+0x15/0x1b [ 190.020340][ T4861] should_fail_ex+0x25e/0x270 [ 190.020361][ T4861] should_fail+0xb/0x20 [ 190.020451][ T4861] should_fail_usercopy+0x1a/0x20 [ 190.020468][ T4861] _copy_to_user+0x20/0xa0 [ 190.020489][ T4861] simple_read_from_buffer+0xb5/0x130 [ 190.020570][ T4861] proc_fail_nth_read+0x10e/0x150 [ 190.020598][ T4861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.020621][ T4861] vfs_read+0x18e/0x7c0 [ 190.020641][ T4861] ? __rcu_read_unlock+0x4e/0x70 [ 190.020694][ T4861] ? __fget_files+0x184/0x1c0 [ 190.020710][ T4861] ? mutex_lock+0x57/0x90 [ 190.020730][ T4861] ksys_read+0xdc/0x1a0 [ 190.020751][ T4861] __x64_sys_read+0x40/0x50 [ 190.020788][ T4861] x64_sys_call+0x2886/0x3020 [ 190.020805][ T4861] do_syscall_64+0x136/0x3c0 [ 190.020829][ T4861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.020847][ T4861] RIP: 0033:0x7fd1aae2d68e [ 190.020937][ T4861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.020952][ T4861] RSP: 002b:00007fd1a98befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.020971][ T4861] RAX: ffffffffffffffda RBX: 00007fd1a98bf6c0 RCX: 00007fd1aae2d68e [ 190.021010][ T4861] RDX: 000000000000000f RSI: 00007fd1a98bf0a0 RDI: 0000000000000005 [ 190.021021][ T4861] RBP: 00007fd1a98bf090 R08: 0000000000000000 R09: 0000000000000000 [ 190.021031][ T4861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.021041][ T4861] R13: 00007fd1ab0e6038 R14: 00007fd1ab0e5fa0 R15: 00007ffd530a6038 [ 190.021100][ T4861] [ 190.235222][ T28] audit: type=1400 audit(1781774719.919:755): avc: denied { mounton } for pid=4866 comm="syz.5.319" path="/proc/104/task" dev="proc" ino=9924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 190.266975][ T4867] loop5: detected capacity change from 0 to 128 [ 190.302255][ T4873] loop5: detected capacity change from 0 to 512 [ 190.316933][ T4873] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 190.327057][ T4873] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.321: invalid block [ 190.421394][ T4873] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 190.430002][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 190.445636][ C1] EXT4-fs (loop5): initial error at time 1781774720: ext4_get_branch:178: inode 13: block 1024 [ 190.456056][ C1] EXT4-fs (loop5): last error at time 1781774720: ext4_get_branch:178: inode 13: block 1024 [ 190.476537][ T4873] EXT4-fs (loop5): 1 truncate cleaned up [ 190.482740][ T4873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.502765][ T4873] EXT4-fs: user quota file already specified [ 190.510945][ T3858] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.517044][ T3541] Bluetooth: hci0: command 0x1003 tx timeout [ 190.661283][ T4879] loop3: detected capacity change from 0 to 512 [ 190.701271][ T4879] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 190.745209][ T4879] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 190.757797][ T4879] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.322: bad orphan inode 4 [ 190.768018][ T4879] loop3: lost filesystem error report for type 5 error -117 [ 190.769947][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 190.783644][ C0] EXT4-fs (loop3): initial error at time 1781774720: ext4_orphan_get:1425 [ 190.792168][ C0] EXT4-fs (loop3): last error at time 1781774720: ext4_orphan_get:1425 [ 190.927072][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.934233][ T4882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.941483][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.948505][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.129737][ T4882] lo speed is unknown, defaulting to 1000 [ 191.368795][ T4613] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 191.382573][ T4879] EXT4-fs (loop3): 1 orphan inode deleted [ 191.393271][ T4879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.413946][ T4879] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.322: lblock 0 mapped to illegal pblock 4 (length 1) [ 191.506398][ T4613] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 191.755668][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.405612][ T4886] loop6: detected capacity change from 0 to 1764 [ 192.466538][ T4886] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 192.531857][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 192.531940][ T28] audit: type=1400 audit(1781774722.219:760): avc: denied { ioctl } for pid=4909 comm="syz.4.331" path="socket:[10013]" dev="sockfs" ino=10013 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.582656][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.629041][ T4917] vlan2: entered allmulticast mode [ 192.649296][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.652743][ T4917] veth0_to_bond: entered allmulticast mode [ 192.733779][ T4928] loop5: detected capacity change from 0 to 512 [ 192.746297][ T4928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.765066][ T4928] EXT4-fs (loop5): 1 truncate cleaned up [ 192.771478][ T4928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.810089][ T28] audit: type=1400 audit(1781774722.489:761): avc: denied { write } for pid=4927 comm="syz.5.338" name="ip_vs" dev="proc" ino=4026533409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 192.845812][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.960733][ T4924] loop3: detected capacity change from 0 to 512 [ 192.981211][ T4924] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.334: inode has both inline data and extents flags [ 193.034673][ T4924] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.034829][ T4924] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.334: couldn't read orphan inode 15 (err -117) [ 193.044067][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 193.044106][ C0] EXT4-fs (loop3): initial error at time 1781774722: ext4_orphan_get:1399: inode 15 [ 193.044138][ C0] EXT4-fs (loop3): last error at time 1781774722: ext4_orphan_get:1399: inode 15 [ 193.118707][ T4924] loop3: lost filesystem error report for type 5 error -117 [ 193.119318][ T4924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.161296][ T28] audit: type=1400 audit(1781774722.849:762): avc: denied { read } for pid=4923 comm="syz.3.334" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.217530][ T28] audit: type=1400 audit(1781774722.849:763): avc: denied { open } for pid=4923 comm="syz.3.334" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.252705][ T28] audit: type=1400 audit(1781774722.899:764): avc: denied { ioctl } for pid=4923 comm="syz.3.334" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.255136][ T4945] vlan2: entered allmulticast mode [ 193.290102][ T28] audit: type=1400 audit(1781774722.929:765): avc: denied { create } for pid=4942 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.321482][ T4945] veth0_to_bond: entered allmulticast mode [ 193.327380][ T28] audit: type=1400 audit(1781774722.929:766): avc: denied { setopt } for pid=4942 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.421344][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.455984][ T4945] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 193.487667][ T4945] ip6gretap1: entered promiscuous mode [ 193.500454][ T28] audit: type=1400 audit(1781774723.179:767): avc: denied { bind } for pid=4942 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.576214][ T28] audit: type=1400 audit(1781774723.259:768): avc: denied { getopt } for pid=4942 comm="syz.4.341" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.799619][ T4960] loop6: detected capacity change from 0 to 512 [ 193.827341][ T4960] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 193.886112][ T4960] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 193.896938][ T4960] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.345: bad orphan inode 4 [ 193.907365][ T4960] loop6: lost filesystem error report for type 5 error -117 [ 193.908488][ T4960] EXT4-fs (loop6): 1 orphan inode deleted [ 193.916129][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 193.916691][ C0] EXT4-fs (loop6): initial error at time 1781774723: ext4_orphan_get:1425 [ 193.916771][ C0] EXT4-fs (loop6): last error at time 1781774723: ext4_orphan_get:1425 [ 193.953856][ T4960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.975404][ T4960] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.345: lblock 0 mapped to illegal pblock 4 (length 1) [ 194.001701][ T28] audit: type=1400 audit(1781774723.659:769): avc: denied { write } for pid=4953 comm="syz.6.345" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.167354][ T4959] loop5: detected capacity change from 0 to 1764 [ 194.297209][ T4959] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 194.490903][ T4970] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 194.634987][ T4970] ip6gretap1: entered promiscuous mode [ 194.670105][ T3858] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.208364][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.530657][ T412] tipc: Subscription rejected, illegal request [ 195.546330][ T4992] random: crng reseeded on system resumption [ 195.573380][ T4992] netlink: 'syz.0.355': attribute type 6 has an invalid length. [ 195.583127][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 196.162994][ T5006] loop0: detected capacity change from 0 to 512 [ 196.169458][ T5006] EXT4-fs: dax option not supported [ 196.181258][ T5006] loop0: detected capacity change from 0 to 256 [ 197.415853][ T5037] loop0: detected capacity change from 0 to 8192 [ 197.511642][ T5043] random: crng reseeded on system resumption [ 197.585270][ T5043] netlink: 'syz.0.369': attribute type 6 has an invalid length. [ 197.609452][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 197.635790][ T5049] loop5: detected capacity change from 0 to 1024 [ 197.661168][ T5049] __quota_error: 6 callbacks suppressed [ 197.661181][ T5049] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 197.692677][ T5049] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 197.707346][ T28] audit: type=1400 audit(1781774727.389:776): avc: denied { write } for pid=5053 comm="syz.4.374" path="socket:[11335]" dev="sockfs" ino=11335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.730810][ T5049] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.373: Failed to acquire dquot type 0 [ 197.751759][ T5049] loop5: lost filesystem error report for type 5 error -117 [ 197.753786][ T5049] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, [ 197.761120][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 197.761136][ C1] EXT4-fs (loop5): initial error at time 1781774727: ext4_acquire_dquot:7032 [ 197.761163][ C1] EXT4-fs (loop5): last error at time 1781774727: ext4_acquire_dquot:7032 [ 197.792608][ T5049] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 197.808620][ T5049] EXT4-fs (loop5): 1 truncate cleaned up [ 197.814888][ T5049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.846435][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.105573][ T28] audit: type=1400 audit(1781774727.789:777): avc: denied { read write } for pid=5064 comm="syz.6.379" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.129871][ T28] audit: type=1400 audit(1781774727.789:778): avc: denied { open } for pid=5064 comm="syz.6.379" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.138264][ T5063] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 198.165145][ T28] audit: type=1400 audit(1781774727.849:779): avc: denied { relabelto } for pid=5062 comm="syz.3.378" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 198.202720][ T5063] ipt_ECN: cannot use operation on non-tcp rule [ 198.221093][ T28] audit: type=1400 audit(1781774727.849:780): avc: denied { associate } for pid=5062 comm="syz.3.378" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 198.268001][ T5070] loop3: detected capacity change from 0 to 512 [ 198.326708][ T5074] loop0: detected capacity change from 0 to 128 [ 198.458128][ T5075] lo speed is unknown, defaulting to 1000 [ 199.252923][ T5074] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.284588][ T5074] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.370633][ T5084] loop5: detected capacity change from 0 to 128 [ 199.371442][ T5091] gretap0: entered promiscuous mode [ 199.479781][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 199.494567][ T5084] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.532200][ T5091] gretap0: left promiscuous mode [ 199.540463][ T5084] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.596452][ T28] audit: type=1400 audit(1781774729.269:781): avc: denied { write } for pid=5073 comm="syz.0.382" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.696380][ T28] audit: type=1400 audit(1781774729.369:782): avc: denied { write } for pid=5083 comm="syz.5.383" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.732670][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.772478][ T3829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.783163][ T5099] loop3: detected capacity change from 0 to 256 [ 199.797843][ T28] audit: type=1400 audit(1781774729.449:783): avc: denied { setopt } for pid=5098 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.821558][ T5099] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.862994][ T5099] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.893445][ T5099] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 200.018350][ T5106] ip6erspan0: entered promiscuous mode [ 200.024907][ T5111] random: crng reseeded on system resumption [ 200.057894][ T5111] netlink: 'syz.5.392': attribute type 6 has an invalid length. [ 200.075492][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.392'. [ 200.470900][ T5128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 200.487380][ T5128] ip6gretap3: entered promiscuous mode [ 200.517710][ T5132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.403'. [ 200.526743][ T5132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.403'. [ 200.707429][ T5149] loop3: detected capacity change from 0 to 256 [ 200.765320][ T5153] loop5: detected capacity change from 0 to 512 [ 200.777239][ T5153] EXT4-fs: dax option not supported [ 200.818981][ T5155] FAULT_INJECTION: forcing a failure. [ 200.818981][ T5155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.851844][ T5155] CPU: 1 UID: 0 PID: 5155 Comm: syz.3.413 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.851877][ T5155] Tainted: [W]=WARN [ 200.851885][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.851910][ T5155] Call Trace: [ 200.851917][ T5155] [ 200.851924][ T5155] __dump_stack+0x1d/0x30 [ 200.851948][ T5155] dump_stack_lvl+0x95/0xd0 [ 200.851967][ T5155] dump_stack+0x15/0x1b [ 200.851985][ T5155] should_fail_ex+0x25e/0x270 [ 200.852056][ T5155] should_fail+0xb/0x20 [ 200.852070][ T5155] should_fail_usercopy+0x1a/0x20 [ 200.852096][ T5155] _copy_to_user+0x20/0xa0 [ 200.852122][ T5155] simple_read_from_buffer+0xb5/0x130 [ 200.852197][ T5155] proc_fail_nth_read+0x10e/0x150 [ 200.852228][ T5155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.852259][ T5155] vfs_read+0x18e/0x7c0 [ 200.852283][ T5155] ? __rcu_read_unlock+0x4e/0x70 [ 200.852383][ T5155] ? __fget_files+0x184/0x1c0 [ 200.852403][ T5155] ? mutex_lock+0x57/0x90 [ 200.852428][ T5155] ksys_read+0xdc/0x1a0 [ 200.852455][ T5155] __x64_sys_read+0x40/0x50 [ 200.852546][ T5155] x64_sys_call+0x2886/0x3020 [ 200.852568][ T5155] do_syscall_64+0x136/0x3c0 [ 200.852595][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.852638][ T5155] RIP: 0033:0x7ff003e1d68e [ 200.852651][ T5155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.852668][ T5155] RSP: 002b:00007ff0028aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.852689][ T5155] RAX: ffffffffffffffda RBX: 00007ff0028af6c0 RCX: 00007ff003e1d68e [ 200.852703][ T5155] RDX: 000000000000000f RSI: 00007ff0028af0a0 RDI: 0000000000000005 [ 200.852716][ T5155] RBP: 00007ff0028af090 R08: 0000000000000000 R09: 0000000000000000 [ 200.852759][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.852772][ T5155] R13: 00007ff0040d6038 R14: 00007ff0040d5fa0 R15: 00007fff414b21c8 [ 200.852791][ T5155] [ 201.103830][ T5165] random: crng reseeded on system resumption [ 201.152519][ T5168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 201.166630][ T5168] ip6gretap4: entered promiscuous mode [ 201.173504][ T5165] netlink: 'syz.5.417': attribute type 6 has an invalid length. [ 201.176670][ T5167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.184054][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'. [ 201.301488][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.518431][ T5182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 201.543527][ T5182] ip6gretap2: entered promiscuous mode [ 201.747901][ T5179] set_capacity_and_notify: 3 callbacks suppressed [ 201.747925][ T5179] loop0: detected capacity change from 0 to 1764 [ 201.782357][ T5189] loop5: detected capacity change from 0 to 512 [ 201.788304][ T5179] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 201.792808][ T5189] EXT4-fs: dax option not supported [ 201.913635][ T5198] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 201.940253][ T5198] ip6gretap2: entered promiscuous mode [ 201.974025][ T5202] loop0: detected capacity change from 0 to 4096 [ 201.983788][ T5202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.042490][ T5209] loop3: detected capacity change from 0 to 512 [ 202.049257][ T5209] EXT4-fs: dax option not supported [ 202.138773][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.166419][ T5213] random: crng reseeded on system resumption [ 202.286883][ T5214] lo speed is unknown, defaulting to 1000 [ 202.846943][ T5213] netlink: 'syz.0.438': attribute type 6 has an invalid length. [ 202.926868][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 203.204133][ T5234] loop3: detected capacity change from 0 to 512 [ 203.234213][ T5234] EXT4-fs: inline encryption not supported [ 203.739963][ T5234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.767910][ T5234] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.948826][ T5234] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 203.975538][ T5234] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.444: bg 0: block 248: padding at end of block bitmap is not set [ 204.210320][ T5234] loop3: lost filesystem error report for type 5 error -117 [ 204.224875][ T5234] __quota_error: 13 callbacks suppressed [ 204.224940][ T5234] Quota error (device loop3): write_blk: dquota write failed [ 204.232282][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 204.232302][ C0] EXT4-fs (loop3): last error at time 1781774733: ext4_validate_block_bitmap:441 [ 204.644692][ T5234] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 204.663684][ T5234] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.444: Failed to acquire dquot type 1 [ 204.690546][ T5250] loop5: detected capacity change from 0 to 1764 [ 204.698363][ T5250] iso9660: Unknown parameter 'euid' [ 204.742744][ T28] audit: type=1400 audit(1781774734.429:797): avc: denied { firmware_load } for pid=5242 comm="syz.5.448" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 204.926471][ T5234] loop3: lost filesystem error report for type 5 error -28 [ 205.081134][ T5257] 9p: Bad value for 'rfdno' [ 205.094283][ T5234] EXT4-fs (loop3): 1 truncate cleaned up [ 205.139303][ T5234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 205.169775][ T28] audit: type=1400 audit(1781774734.579:798): avc: denied { listen } for pid=5252 comm="syz.6.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.227728][ T2139] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.319144][ T2139] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.379233][ T28] audit: type=1400 audit(1781774734.759:799): avc: denied { ioctl } for pid=5252 comm="syz.6.451" path="socket:[12119]" dev="sockfs" ino=12119 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.425836][ T2139] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.478095][ T2139] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.524363][ T28] audit: type=1400 audit(1781774735.129:800): avc: denied { name_connect } for pid=5261 comm="syz.6.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 205.563761][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 205.582309][ T30] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 205.600430][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:1: Failed to release dquot type 1 [ 205.625656][ T30] loop3: lost filesystem error report for type 5 error -117 [ 205.718608][ T5268] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 205.764995][ T5268] bond1: entered promiscuous mode [ 205.783784][ T5268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.806667][ T28] audit: type=1400 audit(1781774735.489:801): avc: denied { create } for pid=5264 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 205.874855][ T28] audit: type=1400 audit(1781774735.519:802): avc: denied { write } for pid=5264 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 205.897628][ T5268] bond1: (slave bridge1): making interface the new active one [ 205.923601][ T5268] bridge1: entered promiscuous mode [ 205.946019][ T5268] bridge1: left promiscuous mode [ 206.232660][ T5272] Driver unsupported XDP return value 0 on prog (id 99) dev N/A, expect packet loss! [ 206.292855][ T5279] loop5: detected capacity change from 0 to 2048 [ 206.385642][ T5282] lo speed is unknown, defaulting to 1000 [ 206.548846][ T5279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.691622][ T28] audit: type=1400 audit(1781774736.379:803): avc: denied { write } for pid=5271 comm="syz.5.456" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.822675][ T5292] netlink: 56 bytes leftover after parsing attributes in process `syz.4.460'. [ 207.148545][ T5302] loop0: detected capacity change from 0 to 512 [ 207.159219][ T5302] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.463: bad orphan inode 17 [ 207.175465][ T5302] loop0: lost filesystem error report for type 5 error -117 [ 207.175579][ T5302] ext4_test_bit(bit=16, block=4) = 1 [ 207.182909][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 207.182932][ C1] EXT4-fs (loop0): initial error at time 1781774736: ext4_orphan_get:1425 [ 207.182950][ C1] EXT4-fs (loop0): last error at time 1781774736: ext4_orphan_get:1425 [ 207.278215][ T5302] is_bad_inode(inode)=0 [ 207.284024][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.322989][ T5302] NEXT_ORPHAN(inode)=0 [ 207.357286][ T5302] max_ino=32 [ 207.378913][ T5302] i_nlink=1 [ 207.415480][ T5302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.429217][ T5309] loop5: detected capacity change from 0 to 512 [ 207.469621][ T5302] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 207.488164][ T5309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.539889][ T5313] xt_policy: too many policy elements [ 207.549284][ T30] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 207.700303][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.347640][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.387387][ T5330] loop0: detected capacity change from 0 to 4096 [ 208.410961][ T5330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.447656][ T5341] loop5: detected capacity change from 0 to 512 [ 208.489606][ T5341] ext3: Unknown parameter 'obj_user' [ 208.534948][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.201747][ T5359] loop3: detected capacity change from 0 to 1764 [ 209.222025][ T5359] iso9660: Bad value for 'sbsector' [ 209.419511][ T5364] veth1_macvtap: left promiscuous mode [ 209.767494][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 209.767509][ T28] audit: type=1400 audit(1781774739.449:809): avc: denied { write } for pid=5375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.848898][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 209.849687][ T28] audit: type=1400 audit(1781774739.509:810): avc: denied { write } for pid=5389 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.004817][ T3020] veth1_macvtap: entered promiscuous mode [ 210.238986][ T28] audit: type=1400 audit(1781774739.919:811): avc: denied { write } for pid=5397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.306291][ T28] audit: type=1400 audit(1781774739.989:812): avc: denied { write } for pid=5418 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.316419][ T5401] loop0: detected capacity change from 0 to 4096 [ 210.352838][ T3020] veth0_vlan: left promiscuous mode [ 210.360440][ T3020] veth0_vlan: entered promiscuous mode [ 210.369258][ T5401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.402182][ T28] audit: type=1400 audit(1781774740.089:813): avc: denied { write } for pid=5399 comm="syz.0.485" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.470311][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.636649][ T28] audit: type=1400 audit(1781774740.319:814): avc: denied { write } for pid=5427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.680104][ T5445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.701396][ T28] audit: type=1400 audit(1781774740.349:815): avc: denied { write } for pid=5444 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.748115][ T28] audit: type=1400 audit(1781774740.359:816): avc: denied { mount } for pid=5441 comm="syz.0.491" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 210.808956][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 210.885607][ T28] audit: type=1400 audit(1781774740.569:817): avc: denied { mount } for pid=5450 comm="syz.4.493" name="/" dev="ramfs" ino=13409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 211.012245][ T5468] FAULT_INJECTION: forcing a failure. [ 211.012245][ T5468] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 211.030160][ T28] audit: type=1400 audit(1781774740.709:818): avc: denied { write } for pid=5453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.051690][ T5468] CPU: 0 UID: 0 PID: 5468 Comm: syz.5.492 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 211.051722][ T5468] Tainted: [W]=WARN [ 211.051729][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 211.051741][ T5468] Call Trace: [ 211.051748][ T5468] [ 211.051756][ T5468] __dump_stack+0x1d/0x30 [ 211.051855][ T5468] dump_stack_lvl+0x95/0xd0 [ 211.051891][ T5468] dump_stack+0x15/0x1b [ 211.051909][ T5468] should_fail_ex+0x25e/0x270 [ 211.051953][ T5468] should_fail_alloc_page+0xf2/0x100 [ 211.051982][ T5468] __alloc_frozen_pages_noprof+0x108/0x350 [ 211.052007][ T5468] alloc_pages_mpol+0xa9/0x1d0 [ 211.052059][ T5468] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 211.052084][ T5468] handle_mm_fault+0x1020/0x2da0 [ 211.052116][ T5468] do_user_addr_fault+0x402/0x1060 [ 211.052144][ T5468] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 211.052176][ T5468] exc_page_fault+0x62/0xa0 [ 211.052200][ T5468] asm_exc_page_fault+0x26/0x30 [ 211.052228][ T5468] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 211.052252][ T5468] Code: c9 75 f6 e9 92 2c 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 211.052268][ T5468] RSP: 0018:ffffc90001007d90 EFLAGS: 00050246 [ 211.052285][ T5468] RAX: 0000000000000000 RBX: 0000000000b39000 RCX: 0000000000000040 [ 211.052298][ T5468] RDX: 0000000000000000 RSI: 0000200000b39040 RDI: 0000200000b3a000 [ 211.052358][ T5468] RBP: 0000200000b39040 R08: 0001ffff85ab8fcf R09: 0000000000000000 [ 211.052441][ T5468] R10: 0000000000000000 R11: ffffffff82366b80 R12: 0000000000001000 [ 211.052454][ T5468] R13: 00007ffffffff000 R14: 000000007f4c6000 R15: 0000000000000000 [ 211.052469][ T5468] ? __pfx_read_zero+0x10/0x10 [ 211.052498][ T5468] read_zero+0x77/0x160 [ 211.052581][ T5468] ? __pfx_read_zero+0x10/0x10 [ 211.052638][ T5468] vfs_read+0x18e/0x7c0 [ 211.052662][ T5468] ? __rcu_read_unlock+0x4e/0x70 [ 211.052724][ T5468] ? __fget_files+0x184/0x1c0 [ 211.052746][ T5468] ksys_read+0xdc/0x1a0 [ 211.052772][ T5468] __x64_sys_read+0x40/0x50 [ 211.052873][ T5468] x64_sys_call+0x2886/0x3020 [ 211.052946][ T5468] do_syscall_64+0x136/0x3c0 [ 211.052980][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.053000][ T5468] RIP: 0033:0x7fd1aae6ce59 [ 211.053015][ T5468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.053096][ T5468] RSP: 002b:00007fd1a989e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.053116][ T5468] RAX: ffffffffffffffda RBX: 00007fd1ab0e6090 RCX: 00007fd1aae6ce59 [ 211.053130][ T5468] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000007 [ 211.053144][ T5468] RBP: 00007fd1a989e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.053156][ T5468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.053169][ T5468] R13: 00007fd1ab0e6128 R14: 00007fd1ab0e6090 R15: 00007ffd530a6038 [ 211.053193][ T5468] [ 211.081177][ T5455] loop0: detected capacity change from 0 to 4096 [ 211.425403][ T5482] loop3: detected capacity change from 0 to 128 [ 211.441588][ T5455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.500555][ T5482] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 211.522159][ T5482] FAT-fs (loop3): Filesystem has been set read-only [ 211.609031][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.648428][ T5490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.674516][ T5492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.788133][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 212.876919][ T5510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5510 comm=syz.0.505 [ 212.948126][ T5510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5510 comm=syz.0.505 [ 213.034696][ T5510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5510 comm=syz.0.505 [ 213.528557][ T5527] loop6: detected capacity change from 0 to 4096 [ 213.640717][ T5527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.647983][ T5539] tipc: Enabling of bearer rejected, failed to enable media [ 213.675592][ T5545] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 213.686206][ T5545] ip6gretap1: entered promiscuous mode [ 213.732585][ T4094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.746740][ T5550] FAULT_INJECTION: forcing a failure. [ 213.746740][ T5550] name failslab, interval 1, probability 0, space 0, times 0 [ 213.782919][ T5550] CPU: 1 UID: 0 PID: 5550 Comm: syz.5.512 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.782950][ T5550] Tainted: [W]=WARN [ 213.783041][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.783052][ T5550] Call Trace: [ 213.783058][ T5550] [ 213.783066][ T5550] __dump_stack+0x1d/0x30 [ 213.783089][ T5550] dump_stack_lvl+0x95/0xd0 [ 213.783178][ T5550] dump_stack+0x15/0x1b [ 213.783196][ T5550] should_fail_ex+0x25e/0x270 [ 213.783216][ T5550] ? alloc_pipe_info+0xad/0x340 [ 213.783319][ T5550] should_failslab+0x8c/0xb0 [ 213.783347][ T5550] __kmalloc_cache_noprof+0x5f/0x400 [ 213.783366][ T5550] alloc_pipe_info+0xad/0x340 [ 213.783419][ T5550] splice_direct_to_actor+0x593/0x680 [ 213.783444][ T5550] ? kstrtouint_from_user+0xa8/0xf0 [ 213.783462][ T5550] ? __pfx_direct_splice_actor+0x10/0x10 [ 213.783509][ T5550] ? __rcu_read_unlock+0x4e/0x70 [ 213.783533][ T5550] ? get_pid_task+0x92/0xc0 [ 213.783561][ T5550] ? avc_policy_seqno+0x15/0x30 [ 213.783594][ T5550] do_splice_direct+0x119/0x1a0 [ 213.783624][ T5550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 213.783693][ T5550] do_sendfile+0x37d/0x640 [ 213.783715][ T5550] __x64_sys_sendfile64+0xb8/0x150 [ 213.783736][ T5550] x64_sys_call+0x2dc4/0x3020 [ 213.783852][ T5550] do_syscall_64+0x136/0x3c0 [ 213.783948][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.783965][ T5550] RIP: 0033:0x7fd1aae6ce59 [ 213.783981][ T5550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.783997][ T5550] RSP: 002b:00007fd1a987d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 213.784158][ T5550] RAX: ffffffffffffffda RBX: 00007fd1ab0e6180 RCX: 00007fd1aae6ce59 [ 213.784170][ T5550] RDX: 0000200000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 213.784181][ T5550] RBP: 00007fd1a987d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.784191][ T5550] R10: 0000000100000110 R11: 0000000000000246 R12: 0000000000000001 [ 213.784204][ T5550] R13: 00007fd1ab0e6218 R14: 00007fd1ab0e6180 R15: 00007ffd530a6038 [ 213.784279][ T5550] [ 214.009680][ T5554] loop3: detected capacity change from 0 to 512 [ 214.019775][ T5554] EXT4-fs: dax option not supported [ 214.025661][ T2981] ================================================================== [ 214.033744][ T2981] BUG: KCSAN: data-race in d_delete / path_lookupat [ 214.040345][ T2981] [ 214.042664][ T2981] read-write to 0xffff8881087f46c0 of 4 bytes by task 4106 on cpu 1: [ 214.050725][ T2981] d_delete+0x15a/0x180 [ 214.054882][ T2981] d_delete_notify+0x32/0x100 [ 214.059568][ T2981] vfs_unlink+0x287/0x490 [ 214.063903][ T2981] filename_unlinkat+0x1dc/0x410 [ 214.068847][ T2981] __se_sys_unlink+0x2b/0xe0 [ 214.073437][ T2981] __x64_sys_unlink+0x1f/0x30 [ 214.078124][ T2981] x64_sys_call+0x2eb6/0x3020 [ 214.082803][ T2981] do_syscall_64+0x136/0x3c0 [ 214.087397][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.093285][ T2981] [ 214.095600][ T2981] read to 0xffff8881087f46c0 of 4 bytes by task 2981 on cpu 0: [ 214.103136][ T2981] path_lookupat+0x19b/0x4c0 [ 214.107725][ T2981] filename_lookup+0x18f/0x390 [ 214.112488][ T2981] do_readlinkat+0x74/0x2f0 [ 214.116985][ T2981] __x64_sys_readlink+0x47/0x60 [ 214.121831][ T2981] x64_sys_call+0x2b51/0x3020 [ 214.126510][ T2981] do_syscall_64+0x136/0x3c0 [ 214.131104][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.136994][ T2981] [ 214.139311][ T2981] value changed: 0x00300180 -> 0x00004080 [ 214.145017][ T2981] [ 214.147332][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 214.153475][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 214.163892][ T2981] Tainted: [W]=WARN [ 214.167687][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.177745][ T2981] ================================================================== [ 214.186024][ T5554] loop3: detected capacity change from 0 to 256 [ 221.677042][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 221.677068][ T28] audit: type=1400 audit(1781775263.356:830): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.707086][ T28] audit: type=1400 audit(1781775263.376:831): avc: denied { write } for pid=5576 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.508293][ T28] audit: type=1400 audit(1781775264.186:832): avc: denied { write } for pid=5579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.531361][ T28] audit: type=1400 audit(1781775264.186:833): avc: denied { write } for pid=5590 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.938159][ T28] audit: type=1400 audit(1781775264.616:834): avc: denied { write } for pid=5593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.961165][ T28] audit: type=1400 audit(1781775264.636:835): avc: denied { write } for pid=5604 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.393870][ T28] audit: type=1400 audit(1781775265.076:836): avc: denied { write } for pid=5608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.429159][ T28] audit: type=1400 audit(1781775265.106:837): avc: denied { write } for pid=5619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1