last executing test programs: 25.85269641s ago: executing program 3 (id=275): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffc, @loopback, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a00204000000007000000001400110076657486305f746f1f6272696467650008000a00fbffffff140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendto$inet6(r0, 0x0, 0x0, 0x814, 0x0, 0x0) 25.453254665s ago: executing program 3 (id=279): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x4000040) preadv2(0xffffffffffffffff, &(0x7f0000000980), 0x64, 0x2, 0x29, 0x9) socket$nl_route(0x10, 0x3, 0x0) 25.145680401s ago: executing program 3 (id=281): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) ioctl$TCSETA(r1, 0x5406, &(0x7f00000003c0)={0x2, 0x6, 0xd, 0x4, 0x5, "11dad5ebf3e6c4c1"}) read(r0, &(0x7f00000002c0)=""/228, 0xe4) 25.098876325s ago: executing program 3 (id=282): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000ac0), 0x2, 0x46a, &(0x7f0000000640)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 24.237451621s ago: executing program 3 (id=286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 23.091762701s ago: executing program 3 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(r1, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40440d1) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x19fbe) 23.091623131s ago: executing program 32 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(r1, &(0x7f0000005d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40440d1) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x19fbe) 5.112993943s ago: executing program 4 (id=438): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r4, 0x107, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000100), 0x80800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nvram(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r6 = syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100), 0x0) add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000002008567bfa32e0602"], 0x18, 0xfffffffffffffff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x4fed0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x80, 0x2, 0x164}, 0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 4.907839381s ago: executing program 4 (id=443): pipe2$9p(&(0x7f0000000140), 0x80000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 4.891789513s ago: executing program 4 (id=444): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = socket(0xa, 0x5, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0xc7f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4.700774039s ago: executing program 4 (id=451): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002d40)={'netdevsim0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7e528816}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 4.58186735s ago: executing program 4 (id=453): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x513000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x2, 0x8, 0x3, 0x3, 0x31f}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10, 0xffffffffffffffff, 0xdd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x320881b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20, 0x688, &(0x7f0000001c00)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf84b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x1) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0xa0, 0x0, 0x5268, 0x2, 0x0, 0x1, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x400000000000b, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_config_ext={0xd07, 0x2003c}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x4, &(0x7f00000014c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r9, 0x0}]) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e23, @loopback}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000180)) 3.718567445s ago: executing program 2 (id=456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) 3.050362844s ago: executing program 2 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.945116983s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat$full(0xffffffffffffff9c, 0x0, 0x400080, 0x0) 1.621850068s ago: executing program 5 (id=464): socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 1.564822853s ago: executing program 4 (id=467): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.501776919s ago: executing program 2 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="8100000000000000017380c888caef02a2368eccd51e7e8a148727fb8a57dbd04a162587b7b9", 0x26}], 0x1) 1.306396666s ago: executing program 2 (id=469): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a242, 0x1a1) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r3, 0x0, 0x0, 0x1001ed) fallocate(r2, 0x3, 0x3, 0x10000) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x6, 0x0, 0xa697, 0x3}) 1.306294246s ago: executing program 5 (id=472): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x104faa, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20001006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) 1.209567095s ago: executing program 5 (id=473): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) close(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000404000/0x3000)=nil, 0x3000, 0x680000b, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 1.127396212s ago: executing program 5 (id=474): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = getegid() syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32], 0x94, 0x2) 1.089661724s ago: executing program 5 (id=476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @private0, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 1.008591042s ago: executing program 0 (id=477): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001800), r0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 907.812821ms ago: executing program 5 (id=478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2006}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)=0x8, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@remote, 0x4e22, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x22}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mknod$loop(0x0, 0x6000, 0x0) open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) 876.478113ms ago: executing program 1 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e62, 0xeffffff2, @empty, 0x7f}}, 0x10001fc, 0x6, 0xffff1896, 0x1f4, 0x26, 0xffffffb9, 0x1a}, 0x9c) 859.578045ms ago: executing program 2 (id=480): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x513000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x2, 0x8, 0x3, 0x3, 0x31f}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10, 0xffffffffffffffff, 0xdd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x320881b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20, 0x688, &(0x7f0000001c00)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf84b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x1) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0xa0, 0x0, 0x5268, 0x2, 0x0, 0x1, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x400000000000b, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_config_ext={0xd07, 0x2003c}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x4, &(0x7f00000014c0)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r9, 0x0}]) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e23, @loopback}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000180)) 754.511474ms ago: executing program 1 (id=481): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 631.477575ms ago: executing program 0 (id=482): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 612.293677ms ago: executing program 1 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {0x6, 0xfff1}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40004) 334.958071ms ago: executing program 0 (id=484): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 257.748678ms ago: executing program 1 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 175.580415ms ago: executing program 0 (id=486): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r2, {0x10, 0xa}, {}, {0x1c, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000085) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 133.748748ms ago: executing program 0 (id=487): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="25c3704acacc", @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x10, 0x2}}}}}}}, 0x0) 87.229063ms ago: executing program 1 (id=488): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc", 0x30}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x110, 0xffffffffffffffff, 0xa71b8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) 51.485935ms ago: executing program 0 (id=489): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000240)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 1 (id=490): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r4, 0x107, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000100), 0x80800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r6 = syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000002008567bfa32e0602"], 0x18, 0xfffffffffffffff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x4fed0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x80, 0x2, 0x164}, 0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 28.018643][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 28.018660][ T28] audit: type=1400 audit(1771772159.365:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.047806][ T28] audit: type=1400 audit(1771772159.395:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.048621][ T3300] cgroup: Unknown subsys name 'net' [ 28.075846][ T28] audit: type=1400 audit(1771772159.425:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.193901][ T3300] cgroup: Unknown subsys name 'cpuset' [ 28.200211][ T3300] cgroup: Unknown subsys name 'rlimit' [ 28.329767][ T28] audit: type=1400 audit(1771772159.675:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.357403][ T28] audit: type=1400 audit(1771772159.675:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.378432][ T28] audit: type=1400 audit(1771772159.675:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.386339][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.398902][ T28] audit: type=1400 audit(1771772159.675:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.428179][ T28] audit: type=1400 audit(1771772159.685:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.453438][ T28] audit: type=1400 audit(1771772159.685:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.477111][ T28] audit: type=1400 audit(1771772159.705:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.508499][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.654922][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.724288][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.742507][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.786817][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.794087][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.801352][ T3315] bridge_slave_0: entered allmulticast mode [ 29.807836][ T3315] bridge_slave_0: entered promiscuous mode [ 29.816412][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.830407][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.837719][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.845099][ T3315] bridge_slave_1: entered allmulticast mode [ 29.851561][ T3315] bridge_slave_1: entered promiscuous mode [ 29.858303][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.921252][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.937494][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.944653][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.951731][ T3312] bridge_slave_0: entered allmulticast mode [ 29.958253][ T3312] bridge_slave_0: entered promiscuous mode [ 29.968223][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.982299][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.989444][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.996683][ T3313] bridge_slave_0: entered allmulticast mode [ 30.003324][ T3313] bridge_slave_0: entered promiscuous mode [ 30.014655][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.021865][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.029192][ T3312] bridge_slave_1: entered allmulticast mode [ 30.035665][ T3312] bridge_slave_1: entered promiscuous mode [ 30.048808][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.055970][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.063142][ T3313] bridge_slave_1: entered allmulticast mode [ 30.069554][ T3313] bridge_slave_1: entered promiscuous mode [ 30.104279][ T3315] team0: Port device team_slave_0 added [ 30.119262][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.126466][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.133670][ T3323] bridge_slave_0: entered allmulticast mode [ 30.140185][ T3323] bridge_slave_0: entered promiscuous mode [ 30.147706][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.157007][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.164392][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.171690][ T3320] bridge_slave_0: entered allmulticast mode [ 30.178369][ T3320] bridge_slave_0: entered promiscuous mode [ 30.185794][ T3315] team0: Port device team_slave_1 added [ 30.191552][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.198695][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.205823][ T3320] bridge_slave_1: entered allmulticast mode [ 30.212196][ T3320] bridge_slave_1: entered promiscuous mode [ 30.220005][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.230419][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.239818][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.247115][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.254288][ T3323] bridge_slave_1: entered allmulticast mode [ 30.261008][ T3323] bridge_slave_1: entered promiscuous mode [ 30.268667][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.317170][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.324446][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.350816][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.366426][ T3312] team0: Port device team_slave_0 added [ 30.373302][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.383367][ T3313] team0: Port device team_slave_0 added [ 30.389925][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.400144][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.409795][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.416896][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.443045][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.454845][ T3312] team0: Port device team_slave_1 added [ 30.461351][ T3313] team0: Port device team_slave_1 added [ 30.472044][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.512158][ T3323] team0: Port device team_slave_0 added [ 30.522978][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.529968][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.556037][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.567553][ T3320] team0: Port device team_slave_0 added [ 30.573954][ T3323] team0: Port device team_slave_1 added [ 30.584721][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.591681][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.617926][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.629031][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.636084][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.662302][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.673977][ T3320] team0: Port device team_slave_1 added [ 30.694928][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.701901][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.728463][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.751040][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.758245][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.784797][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.797696][ T3315] hsr_slave_0: entered promiscuous mode [ 30.803939][ T3315] hsr_slave_1: entered promiscuous mode [ 30.825797][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.832800][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.859024][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.877053][ T3312] hsr_slave_0: entered promiscuous mode [ 30.883266][ T3312] hsr_slave_1: entered promiscuous mode [ 30.889317][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.895230][ T3312] Cannot create hsr debugfs directory [ 30.900973][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.908180][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.934275][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.945422][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.952634][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.979251][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.019986][ T3323] hsr_slave_0: entered promiscuous mode [ 31.026096][ T3323] hsr_slave_1: entered promiscuous mode [ 31.032095][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 31.038031][ T3323] Cannot create hsr debugfs directory [ 31.057483][ T3313] hsr_slave_0: entered promiscuous mode [ 31.063652][ T3313] hsr_slave_1: entered promiscuous mode [ 31.069737][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.075712][ T3313] Cannot create hsr debugfs directory [ 31.109733][ T3320] hsr_slave_0: entered promiscuous mode [ 31.115987][ T3320] hsr_slave_1: entered promiscuous mode [ 31.121765][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 31.127604][ T3320] Cannot create hsr debugfs directory [ 31.296934][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.306911][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.317754][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.326665][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.351288][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.361631][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.371254][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.382665][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.416888][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.429187][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.445674][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.454657][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.485322][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.494906][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.511806][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.519588][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.541911][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.550710][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.561144][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.568343][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.587756][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.594972][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.618535][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.628575][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.639418][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.648825][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.665148][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.685953][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.706028][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713183][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.721970][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.729119][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.779096][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.806365][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.828479][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.835687][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.844754][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.857901][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.865151][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.899670][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.908946][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.956930][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.966983][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.976078][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.005059][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012233][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.033933][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.041119][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.057471][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.064572][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.080062][ T3323] veth0_vlan: entered promiscuous mode [ 32.101624][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.108916][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.124243][ T3323] veth1_vlan: entered promiscuous mode [ 32.139578][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.150745][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.175949][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.192755][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.244758][ T3323] veth0_macvtap: entered promiscuous mode [ 32.265231][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.274343][ T3323] veth1_macvtap: entered promiscuous mode [ 32.314924][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.342701][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.375237][ T314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.396600][ T314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405908][ T314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.425313][ T314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448082][ T3315] veth0_vlan: entered promiscuous mode [ 32.464439][ T3313] veth0_vlan: entered promiscuous mode [ 32.472365][ T3312] veth0_vlan: entered promiscuous mode [ 32.480670][ T3315] veth1_vlan: entered promiscuous mode [ 32.497938][ T3313] veth1_vlan: entered promiscuous mode [ 32.505875][ T3312] veth1_vlan: entered promiscuous mode [ 32.531028][ T3313] veth0_macvtap: entered promiscuous mode [ 32.531254][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.538808][ T3313] veth1_macvtap: entered promiscuous mode [ 32.564167][ T3320] veth0_vlan: entered promiscuous mode [ 32.577951][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.597935][ T3315] veth0_macvtap: entered promiscuous mode [ 32.606540][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.626687][ T3312] veth0_macvtap: entered promiscuous mode [ 32.635503][ T3315] veth1_macvtap: entered promiscuous mode [ 32.641951][ T3312] veth1_macvtap: entered promiscuous mode [ 32.660434][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.670945][ T3320] veth1_vlan: entered promiscuous mode [ 32.690748][ T3320] veth0_macvtap: entered promiscuous mode [ 32.706203][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.717030][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.744864][ T3320] veth1_macvtap: entered promiscuous mode [ 32.756118][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.766659][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779188][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.789780][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.805375][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.817724][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.831835][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.846744][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.855964][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.873434][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.883232][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902320][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.925729][ T3497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3497 comm=syz.0.1 [ 32.943480][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.967747][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.991132][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.026933][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.043763][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.062609][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.083543][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.093306][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 33.093368][ T28] audit: type=1400 audit(1771772164.445:122): avc: denied { read } for pid=3504 comm="syz.2.10" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.124502][ T28] audit: type=1400 audit(1771772164.475:123): avc: denied { open } for pid=3504 comm="syz.2.10" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.175245][ T28] audit: type=1400 audit(1771772164.475:124): avc: denied { ioctl } for pid=3504 comm="syz.2.10" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.203741][ T3510] loop1: detected capacity change from 0 to 164 [ 33.215168][ T28] audit: type=1400 audit(1771772164.565:125): avc: denied { create } for pid=3513 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.237022][ T3510] Unable to read rock-ridge attributes [ 33.238555][ C1] hrtimer: interrupt took 34697 ns [ 33.300487][ T28] audit: type=1400 audit(1771772164.605:126): avc: denied { mount } for pid=3509 comm="syz.1.2" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 33.350982][ T28] audit: type=1400 audit(1771772164.625:127): avc: denied { read write } for pid=3515 comm="syz.3.12" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.384634][ T28] audit: type=1400 audit(1771772164.625:128): avc: denied { open } for pid=3515 comm="syz.3.12" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.437912][ T28] audit: type=1400 audit(1771772164.685:129): avc: denied { create } for pid=3513 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.463979][ T28] audit: type=1400 audit(1771772164.765:130): avc: denied { read } for pid=3524 comm="syz.0.15" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.488995][ T28] audit: type=1400 audit(1771772164.765:131): avc: denied { open } for pid=3524 comm="syz.0.15" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.547296][ T3528] loop2: detected capacity change from 0 to 128 [ 33.599044][ T3531] loop3: detected capacity change from 0 to 512 [ 33.620762][ T3531] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.673959][ T3531] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 33.695318][ T3531] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.714792][ T3531] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.18: corrupted inode contents [ 33.761487][ T3531] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 33.762027][ T3531] EXT4-fs (loop3): Remounting filesystem read-only [ 33.771465][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.771487][ C0] EXT4-fs (loop3): initial error at time 1771772165: ext4_do_update_inode:5569: inode 16 [ 33.771514][ C0] EXT4-fs (loop3): last error at time 1771772165: ext4_do_update_inode:5569: inode 16 [ 33.804870][ T3531] EXT4-fs (loop3): 1 truncate cleaned up [ 33.810802][ T314] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.833601][ T314] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 33.858457][ T314] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 33.871996][ T3538] loop4: detected capacity change from 0 to 512 [ 33.878847][ T3531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.896321][ T3538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.923727][ T3538] EXT4-fs (loop4): 1 truncate cleaned up [ 33.932436][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.070430][ T3544] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 34.426113][ T3557] loop2: detected capacity change from 0 to 512 [ 34.443117][ T3557] EXT4-fs: Ignoring removed nobh option [ 34.481737][ T3557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.493381][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 34.514583][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.534702][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.546919][ T3557] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.561588][ T3557] EXT4-fs (loop2): 1 truncate cleaned up [ 34.574575][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.624992][ T3562] loop0: detected capacity change from 0 to 512 [ 34.696985][ T3562] EXT4-fs: Ignoring removed nobh option [ 34.773200][ T3569] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 34.824001][ T3562] ------------[ cut here ]------------ [ 34.829654][ T3562] EA inode 11 i_nlink=1026 [ 34.829672][ T3562] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.31/3562 [ 34.845079][ T3562] Modules linked in: [ 34.849085][ T3562] CPU: 0 UID: 0 PID: 3562 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 34.858591][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.868903][ T3562] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 34.875586][ T3562] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 34.895485][ T3562] RSP: 0018:ffffc90001bb3778 EFLAGS: 00010246 [ 34.901671][ T3562] RAX: ffff888104c44c78 RBX: ffff88811b0c6048 RCX: ffffffff81bff418 [ 34.909799][ T3562] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de420 [ 34.918109][ T3562] RBP: 000000000000000b R08: 000188811b0c5ffb R09: 0000000000000000 [ 34.923579][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 34.926376][ T3562] R10: ffffc90001bb36a8 R11: 0001c90001bb36a8 R12: ffff88811b0c5ff8 [ 34.926394][ T3562] R13: ffffffff871de420 R14: ffff88811b0c5fb0 R15: 0000000000000001 [ 34.926408][ T3562] FS: 00007f75c97a76c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 34.926427][ T3562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.967472][ T3562] CR2: 000020000002a000 CR3: 000000011b87c000 CR4: 00000000003506f0 [ 34.975588][ T3562] Call Trace: [ 34.979110][ T3562] [ 34.982156][ T3562] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 34.988289][ T3562] ? errseq_check+0x2c/0x50 [ 34.992951][ T3562] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 34.998618][ T3562] ? ext4_truncate+0x92b/0xb00 [ 35.003790][ T3562] ext4_evict_inode+0xa1f/0xd60 [ 35.008870][ T3562] ? __pfx_ext4_evict_inode+0x10/0x10 [ 35.014537][ T3562] evict+0x2af/0x510 [ 35.018697][ T3562] ? __dquot_initialize+0x146/0x7c0 [ 35.023980][ T3562] iput+0x41a/0x580 [ 35.027865][ T3562] ext4_process_orphan+0x1a9/0x1c0 [ 35.033049][ T3562] ext4_orphan_cleanup+0x6a8/0xa00 [ 35.038571][ T3562] ext4_fill_super+0x3408/0x37c0 [ 35.041765][ T3510] Unable to read rock-ridge attributes [ 35.043738][ T3562] ? set_blocksize+0x14c/0x270 [ 35.054361][ T3562] ? setup_bdev_super+0x30e/0x370 [ 35.059588][ T3562] ? __pfx_ext4_fill_super+0x10/0x10 [ 35.064929][ T3562] get_tree_bdev_flags+0x291/0x300 [ 35.070087][ T3562] ? __pfx_ext4_fill_super+0x10/0x10 [ 35.075477][ T3562] get_tree_bdev+0x1f/0x30 [ 35.079930][ T3562] ext4_get_tree+0x1c/0x30 [ 35.084564][ T3562] vfs_get_tree+0x57/0x1d0 [ 35.089169][ T3562] do_new_mount+0x288/0x8d0 [ 35.094002][ T3562] path_mount+0x4d0/0xbc0 [ 35.098428][ T3562] __se_sys_mount+0x28c/0x2e0 [ 35.103162][ T3562] __x64_sys_mount+0x67/0x80 [ 35.108041][ T3562] x64_sys_call+0x2d61/0x3020 [ 35.112926][ T3562] do_syscall_64+0x12c/0x370 [ 35.117733][ T3562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.123747][ T3562] RIP: 0033:0x7f75cad4d8ca [ 35.128340][ T3562] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.148681][ T3562] RSP: 002b:00007f75c97a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.157446][ T3562] RAX: ffffffffffffffda RBX: 00007f75c97a6ee0 RCX: 00007f75cad4d8ca [ 35.165539][ T3562] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f75c97a6ea0 [ 35.173759][ T3562] RBP: 0000200000000180 R08: 00007f75c97a6ee0 R09: 0000000000800718 [ 35.181936][ T3562] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 35.190054][ T3562] R13: 00007f75c97a6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 35.198399][ T3562] [ 35.201530][ T3562] ---[ end trace 0000000000000000 ]--- [ 35.210855][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.243464][ T3562] EXT4-fs (loop0): 1 orphan inode deleted [ 35.250152][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.420601][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.569816][ T3595] Illegal XDP return value 4291416064 on prog (id 7) dev syz_tun, expect packet loss! [ 35.623268][ T3600] batman_adv: batadv0: Adding interface: dummy0 [ 35.637486][ T3600] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.678376][ T3600] batman_adv: batadv0: Interface activated: dummy0 [ 35.698427][ T3601] batadv0: mtu less than device minimum [ 35.714524][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.726213][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.737270][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.748353][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.759420][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.770415][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.781615][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.792526][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.803383][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.838578][ T3604] netlink: 277 bytes leftover after parsing attributes in process `syz.3.45'. [ 36.015050][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 36.233941][ T3624] loop2: detected capacity change from 0 to 2048 [ 36.436256][ T3624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.467051][ T3624] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.675783][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.948846][ T3659] loop0: detected capacity change from 0 to 1024 [ 36.960520][ T3659] ======================================================= [ 36.960520][ T3659] WARNING: The mand mount option has been deprecated and [ 36.960520][ T3659] and is ignored by this kernel. Remove the mand [ 36.960520][ T3659] option from the mount to silence this warning. [ 36.960520][ T3659] ======================================================= [ 37.135343][ T3679] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.562488][ T3692] loop3: detected capacity change from 0 to 32768 [ 37.603500][ T3304] loop3: p1 p3 < > [ 37.612036][ T3692] loop3: p1 p3 < > [ 37.686663][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 37.687241][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.713617][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.714727][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 37.858951][ T3712] loop0: detected capacity change from 0 to 128 [ 37.886636][ T3712] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.921624][ T3712] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.010859][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 38.025837][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.042528][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 38.120521][ T3747] loop2: [ 38.184944][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 38.184962][ T28] audit: type=1400 audit(1771772169.535:199): avc: denied { read } for pid=3755 comm="syz.0.100" path="socket:[6153]" dev="sockfs" ino=6153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.353915][ T3783] netlink: 80 bytes leftover after parsing attributes in process `syz.0.106'. [ 38.363958][ T3783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 38.374165][ T3783] geneve0: entered allmulticast mode [ 38.398843][ T28] audit: type=1400 audit(1771772169.745:200): avc: denied { create } for pid=3788 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.433021][ T28] audit: type=1400 audit(1771772169.745:201): avc: denied { sqpoll } for pid=3788 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.500288][ T28] audit: type=1400 audit(1771772169.845:202): avc: denied { bind } for pid=3791 comm="syz.0.108" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.520665][ T28] audit: type=1400 audit(1771772169.845:203): avc: denied { node_bind } for pid=3791 comm="syz.0.108" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.543140][ T28] audit: type=1400 audit(1771772169.845:204): avc: denied { write } for pid=3791 comm="syz.0.108" path="socket:[6191]" dev="sockfs" ino=6191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.593700][ T28] audit: type=1400 audit(1771772169.935:205): avc: denied { perfmon } for pid=3793 comm="syz.0.110" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.618164][ T28] audit: type=1400 audit(1771772169.935:206): avc: denied { bpf } for pid=3793 comm="syz.0.110" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.639212][ T28] audit: type=1400 audit(1771772169.935:207): avc: denied { read } for pid=3793 comm="syz.0.110" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.663783][ T28] audit: type=1400 audit(1771772169.935:208): avc: denied { open } for pid=3793 comm="syz.0.110" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.709469][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 38.944692][ T3815] set_capacity_and_notify: 1 callbacks suppressed [ 38.944711][ T3815] loop2: detected capacity change from 0 to 1024 [ 38.993035][ T3815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.007043][ T3815] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.074059][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.198802][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.312707][ T3838] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 39.349726][ T3825] loop1: detected capacity change from 0 to 32768 [ 39.385282][ T3304] loop1: p1 p3 < p5 p6 > [ 39.389837][ T3304] loop1: partition table partially beyond EOD, truncated [ 39.433004][ T3825] loop1: p1 p3 < p5 p6 > [ 39.443274][ T3825] loop1: partition table partially beyond EOD, truncated [ 39.481994][ T3854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.160029][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 40.215178][ T3885] team0: Port device team_slave_0 removed [ 40.339993][ T3892] loop2: detected capacity change from 0 to 512 [ 40.369485][ T3892] EXT4-fs: Ignoring removed nobh option [ 40.377336][ T3892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.407108][ T3899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 40.420795][ T3892] EXT4-fs (loop2): 1 truncate cleaned up [ 40.431062][ T3892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.501334][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 40.596475][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.795972][ T3939] loop2: detected capacity change from 0 to 2048 [ 40.822584][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.047071][ T3959] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 41.154168][ T3975] capability: warning: `syz.1.177' uses deprecated v2 capabilities in a way that may be insecure [ 41.212975][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.213026][ T3832] Bluetooth: hci0: command 0x1003 tx timeout [ 41.224066][ T3980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.178'. [ 41.256471][ T3987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=3987 comm=syz.4.180 [ 41.355338][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.457796][ T4004] loop2: detected capacity change from 0 to 128 [ 41.496623][ T4004] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.533705][ T4004] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.680066][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.762135][ T4023] loop2: detected capacity change from 0 to 512 [ 42.078170][ T4028] loop2: detected capacity change from 0 to 65536 [ 42.116640][ T4033] syzkaller0: entered promiscuous mode [ 42.122613][ T4033] syzkaller0: entered allmulticast mode [ 42.130855][ T4033] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 42.640949][ T4057] loop3: detected capacity change from 0 to 512 [ 42.653789][ T4057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.694302][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.710197][ T4057] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.760891][ T4070] hub 3-0:1.0: USB hub found [ 42.767839][ T4057] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 42.783092][ T4070] hub 3-0:1.0: 8 ports detected [ 42.790692][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.859874][ T4076] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.867746][ T4076] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.941825][ T4076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.953626][ T4076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.990231][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.009378][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.019320][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.051415][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.074450][ T4096] loop1: detected capacity change from 0 to 512 [ 43.088011][ T4096] EXT4-fs: Ignoring removed nobh option [ 43.095163][ T4096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.124733][ T4096] EXT4-fs (loop1): 1 truncate cleaned up [ 43.159212][ T4096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.227473][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.296275][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 43.296294][ T28] audit: type=1400 audit(1771772174.645:240): avc: denied { write } for pid=4109 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.329481][ T4112] loop2: detected capacity change from 0 to 512 [ 43.339923][ T4112] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.376689][ T4112] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 43.389189][ T4112] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 43.404894][ T4112] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.229: Failed to acquire dquot type 1 [ 43.427531][ T4112] loop2: lost filesystem error report for type 5 error -5 [ 43.428173][ T4112] EXT4-fs (loop2): 1 truncate cleaned up [ 43.435510][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 43.435532][ C0] EXT4-fs (loop2): last error at time 1771772174: ext4_acquire_dquot:7001 [ 43.468228][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 43.537746][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 43.559108][ T4120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.575161][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.589172][ T4120] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.612629][ T4120] EXT4-fs (loop2): Online defrag not supported for non-extent files [ 43.630612][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.652338][ T4124] syz.1.243: attempt to access beyond end of device [ 43.652338][ T4124] loop1: rw=2049, sector=145, nr_sectors = 5 limit=128 [ 43.667302][ T4124] syz.1.243: attempt to access beyond end of device [ 43.667302][ T4124] loop1: rw=8423425, sector=102, nr_sectors = 27 limit=128 [ 43.682488][ T4124] syz.1.243: attempt to access beyond end of device [ 43.682488][ T4124] loop1: rw=8423425, sector=145, nr_sectors = 5 limit=128 [ 44.114643][ T4140] set_capacity_and_notify: 2 callbacks suppressed [ 44.114707][ T4140] loop2: detected capacity change from 0 to 128 [ 44.231154][ T4140] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.244694][ T4140] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.285591][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.372307][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.529836][ T28] audit: type=1400 audit(1771772175.875:241): avc: denied { load_policy } for pid=4147 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.552238][ T4153] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.562335][ T4153] SELinux: failed to load policy [ 44.588694][ T4157] loop1: detected capacity change from 0 to 512 [ 44.600520][ T4157] EXT4-fs: Ignoring removed nobh option [ 44.614518][ T4157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.638604][ T4157] EXT4-fs (loop1): 1 truncate cleaned up [ 44.651327][ T4157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.693463][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 44.789033][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.847359][ T4174] loop3: detected capacity change from 0 to 128 [ 44.865852][ T4174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.878722][ T4174] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.932603][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.967176][ T4181] loop3: detected capacity change from 0 to 1024 [ 44.976234][ T4181] EXT4-fs: inline encryption not supported [ 44.985444][ T4183] loop1: detected capacity change from 0 to 128 [ 45.005540][ T4183] syz.1.255: attempt to access beyond end of device [ 45.005540][ T4183] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 45.005962][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.020742][ T4183] syz.1.255: attempt to access beyond end of device [ 45.020742][ T4183] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 45.045984][ T4183] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 45.054780][ T4183] syz.1.255: attempt to access beyond end of device [ 45.054780][ T4183] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 45.060676][ T4181] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.254: Allocating blocks 465-513 which overlap fs metadata [ 45.069061][ T28] audit: type=1400 audit(1771772176.405:242): avc: denied { remove_name } for pid=4180 comm="syz.3.254" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.097102][ T4181] EXT4-fs (loop3): pa ffff888107266310: logic 2080, phys. 177, len 21 [ 45.106221][ T28] audit: type=1400 audit(1771772176.405:243): avc: denied { rename } for pid=4180 comm="syz.3.254" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.114399][ T4181] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, [ 45.136939][ T28] audit: type=1400 audit(1771772176.405:244): avc: denied { unlink } for pid=4180 comm="syz.3.254" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.136944][ T4181] free 0, pa_free 3 [ 45.150570][ T4183] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 45.186828][ T4183] syz.1.255: attempt to access beyond end of device [ 45.186828][ T4183] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 45.201222][ T4183] syz.1.255: attempt to access beyond end of device [ 45.201222][ T4183] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 45.216402][ T4183] syz.1.255: attempt to access beyond end of device [ 45.216402][ T4183] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 45.230902][ T4183] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 45.231986][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.239810][ T4183] syz.1.255: attempt to access beyond end of device [ 45.239810][ T4183] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 45.262805][ T4183] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 45.274147][ T4183] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 45.288167][ T4183] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 45.299040][ T4183] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 45.308237][ T4191] loop3: detected capacity change from 0 to 2048 [ 45.309706][ T4183] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 45.323988][ T4183] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 45.332508][ T4183] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 45.345900][ T4191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.376746][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.389621][ T28] audit: type=1400 audit(1771772176.735:245): avc: denied { mounton } for pid=4194 comm="syz.4.268" path="/67/bus" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.871761][ T4216] loop1: detected capacity change from 0 to 128 [ 45.886396][ T4216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.899632][ T4216] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.925961][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.996996][ T4222] loop1: detected capacity change from 0 to 1024 [ 46.016838][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.035102][ T4222] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.266: Allocating blocks 449-513 which overlap fs metadata [ 46.052892][ T4222] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 46.103884][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.173039][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.261835][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.629750][ T4246] loop2: detected capacity change from 0 to 512 [ 46.664953][ T4246] EXT4-fs: Ignoring removed bh option [ 46.696218][ T4246] EXT4-fs: inline encryption not supported [ 46.727373][ T4248] loop3: detected capacity change from 0 to 128 [ 46.770777][ T4246] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.860108][ T4246] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.943051][ T4246] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.277: bg 0: block 248: padding at end of block bitmap is not set [ 46.998629][ T4246] loop2: lost filesystem error report for type 5 error -117 [ 46.998836][ T4246] Quota error (device loop2): write_blk: dquota write failed [ 47.006244][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 47.006267][ C0] EXT4-fs (loop2): last error at time 1771772178: ext4_validate_block_bitmap:441 [ 47.064264][ T4263] EXT4-fs: inline encryption not supported [ 47.074270][ T4246] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.099327][ T4246] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.277: Failed to acquire dquot type 1 [ 47.119644][ T4266] EXT4-fs error (device loop3): __ext4_iget:5378: inode #15: block 1803188595: comm syz.3.282: invalid block [ 47.142568][ T4246] loop2: lost filesystem error report for type 5 error -117 [ 47.143776][ T4246] EXT4-fs (loop2): 1 truncate cleaned up [ 47.163552][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.176715][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 47.182979][ T4266] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.192888][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.208910][ C0] EXT4-fs (loop3): initial error at time 1771772178: __ext4_iget:5378: inode 15: block 1803188595 [ 47.219607][ C0] EXT4-fs (loop3): last error at time 1771772178: __ext4_iget:5378: inode 15: block 1803188595 [ 47.230961][ T4266] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.282: couldn't read orphan inode 15 (err -117) [ 47.251102][ T4226] syz.4.267 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 47.265642][ T4226] CPU: 1 UID: 0 PID: 4226 Comm: syz.4.267 Tainted: G W syzkaller #0 PREEMPT(full) [ 47.265675][ T4226] Tainted: [W]=WARN [ 47.265682][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.265694][ T4226] Call Trace: [ 47.265702][ T4226] [ 47.265712][ T4226] __dump_stack+0x1d/0x30 [ 47.265746][ T4226] dump_stack_lvl+0x95/0xd0 [ 47.265771][ T4226] dump_stack+0x15/0x1b [ 47.265795][ T4226] dump_header+0x80/0x240 [ 47.265821][ T4226] oom_kill_process+0x295/0x350 [ 47.265885][ T4226] out_of_memory+0x97d/0xb80 [ 47.265955][ T4226] try_charge_memcg+0x62e/0xa10 [ 47.265995][ T4226] obj_cgroup_charge_pages+0x23/0xc0 [ 47.266060][ T4226] __memcg_kmem_charge_page+0x9e/0x170 [ 47.266090][ T4226] __alloc_frozen_pages_noprof+0x18a/0x360 [ 47.266201][ T4226] alloc_pages_mpol+0xb3/0x260 [ 47.266231][ T4226] alloc_pages_noprof+0x8f/0x130 [ 47.266260][ T4226] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 47.266299][ T4226] __kvmalloc_node_noprof+0x3d4/0x650 [ 47.266361][ T4226] ? ip_set_alloc+0x24/0x30 [ 47.266435][ T4226] ? ip_set_alloc+0x24/0x30 [ 47.266457][ T4226] ? __kmalloc_cache_noprof+0x18a/0x410 [ 47.266481][ T4226] ip_set_alloc+0x24/0x30 [ 47.266587][ T4226] hash_netiface_create+0x282/0x740 [ 47.266611][ T4226] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.266674][ T4226] ip_set_create+0x3cf/0x970 [ 47.266711][ T4226] ? __nla_parse+0x40/0x60 [ 47.266740][ T4226] nfnetlink_rcv_msg+0x509/0x5d0 [ 47.266780][ T4226] netlink_rcv_skb+0x123/0x220 [ 47.266889][ T4226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.266918][ T4226] nfnetlink_rcv+0x167/0x1720 [ 47.267017][ T4226] ? __kfree_skb+0x109/0x150 [ 47.267047][ T4226] ? nlmon_xmit+0x4f/0x60 [ 47.267098][ T4226] ? consume_skb+0x4b/0x160 [ 47.267119][ T4226] ? nlmon_xmit+0x4f/0x60 [ 47.267150][ T4226] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 47.267179][ T4226] ? __dev_queue_xmit+0x1393/0x1f40 [ 47.267293][ T4226] ? __dev_queue_xmit+0x148/0x1f40 [ 47.267323][ T4226] ? ref_tracker_free+0x37d/0x3e0 [ 47.267351][ T4226] ? __netlink_deliver_tap+0x4dc/0x500 [ 47.267387][ T4226] netlink_unicast+0x5c0/0x690 [ 47.267457][ T4226] netlink_sendmsg+0x5c8/0x6f0 [ 47.267515][ T4226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.267547][ T4226] ____sys_sendmsg+0x5af/0x600 [ 47.267672][ T4226] ___sys_sendmsg+0x195/0x1e0 [ 47.267711][ T4226] __x64_sys_sendmsg+0xd4/0x160 [ 47.267740][ T4226] x64_sys_call+0x194c/0x3020 [ 47.267801][ T4226] do_syscall_64+0x12c/0x370 [ 47.267844][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.267865][ T4226] RIP: 0033:0x7f10b9d0c629 [ 47.267914][ T4226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.267931][ T4226] RSP: 002b:00007f10b875f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.267953][ T4226] RAX: ffffffffffffffda RBX: 00007f10b9f85fa0 RCX: 00007f10b9d0c629 [ 47.267970][ T4226] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 47.267986][ T4226] RBP: 00007f10b9da2b39 R08: 0000000000000000 R09: 0000000000000000 [ 47.268002][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.267992][ T4263] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.291: Allocating blocks 465-513 which overlap fs metadata [ 47.268081][ T4226] R13: 00007f10b9f86038 R14: 00007f10b9f85fa0 R15: 00007ffee4a14408 [ 47.268102][ T4226] [ 47.268110][ T4226] memory: usage 307200kB, limit 307200kB, failcnt 1594 [ 47.292936][ T4266] loop3: lost filesystem error report for type 5 error -117 [ 47.293983][ T4226] memory+swap: usage 323668kB, limit 9007199254740988kB, failcnt 0 [ 47.298904][ T4263] EXT4-fs (loop1): pa ffff888107266310: logic 2080, phys. 177, len 21 [ 47.300152][ T4226] kmem: usage 306868kB, limit 9007199254740988kB, failcnt 0 [ 47.304628][ T4263] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, [ 47.309241][ T4226] Memory cgroup stats for [ 47.313472][ T4263] free 0, pa_free 3 [ 47.317785][ T4226] /syz4 [ 47.338680][ T4266] EXT4-fs (loop3): mounted filesystem 4d550000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.414357][ T4226] : [ 47.687777][ T4226] cache 282624 [ 47.693867][ T4226] rss 4096 [ 47.696972][ T4226] shmem 0 [ 47.699995][ T4226] mapped_file 8192 [ 47.703895][ T4226] dirty 8192 [ 47.706774][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.707552][ T4226] writeback 0 [ 47.719972][ T4226] workingset_refault_anon 66 [ 47.725313][ T4270] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.3.282: unable to read itable block [ 47.738966][ C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 47.739395][ T4226] workingset_refault_file 1062 [ 47.756642][ T4226] swap 16982016 [ 47.781467][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.814235][ T4270] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.3.282: unable to read itable block [ 47.828692][ T4246] syz.2.277 (4246) used greatest stack depth: 9160 bytes left [ 47.841157][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 47.873147][ T4226] swapcached 16994304 [ 47.873163][ T4226] pgpgin 30190 [ 47.873236][ T4226] pgpgout 30118 [ 47.873248][ T4226] pgfault 40876 [ 47.873257][ T4226] pgmajfault 40 [ 47.873266][ T4226] inactive_anon 0 [ 47.873276][ T4226] active_anon 0 [ 47.873285][ T4226] inactive_file 0 [ 47.873294][ T4226] active_file 282624 [ 47.873302][ T4226] unevictable 0 [ 47.873340][ T4226] hierarchical_memory_limit 314572800 [ 47.873348][ T4226] hierarchical_memsw_limit 9223372036854771712 [ 47.873358][ T4226] total_cache 282624 [ 47.873368][ T4226] total_rss 4096 [ 47.873376][ T4226] total_shmem 0 [ 47.873385][ T4226] total_mapped_file 8192 [ 47.873395][ T4226] total_dirty 8192 [ 47.873404][ T4226] total_writeback 0 [ 47.873414][ T4226] total_workingset_refault_anon 66 [ 47.873453][ T4226] total_workingset_refault_file 1062 [ 47.873464][ T4226] total_swap 16982016 [ 47.873472][ T4226] total_swapcached 16994304 [ 47.873481][ T4226] total_pgpgin 30190 [ 47.873490][ T4226] total_pgpgout 30118 [ 47.873499][ T4226] total_pgfault 40876 [ 47.873509][ T4226] total_pgmajfault 40 [ 47.873518][ T4226] total_inactive_anon 0 [ 47.873525][ T4226] total_active_anon 0 [ 47.873608][ T4226] total_inactive_file 0 [ 47.873626][ T4226] total_active_file 282624 [ 47.873636][ T4226] total_unevictable 0 [ 47.873684][ T4226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.267,pid=4225,uid=0 [ 47.873769][ T4226] Memory cgroup out of memory: Killed process 4225 (syz.4.267) total-vm:96340kB, anon-rss:1220kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 47.906548][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.906569][ T4270] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: IO failure [ 47.907635][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.907706][ T4270] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.282: mark_inode_dirty error [ 47.907758][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.907854][ T4270] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.3.282: unable to read itable block [ 47.908763][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.908779][ T4270] EXT4-fs error (device loop3): ext4_get_max_inline_size:121: inode #18: comm syz.3.282: can't get inode location 18 [ 47.908855][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.909047][ T4270] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.3.282: unable to read itable block [ 47.909460][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.909476][ T4270] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: IO failure [ 47.909527][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.909596][ T4270] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.282: mark_inode_dirty error [ 47.909635][ T4270] EXT4-fs (loop3): I/O error while writing superblock [ 47.910089][ T4270] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.282: Error while async write back metadata [ 47.938600][ T3320] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 48.191411][ T4226] syz.4.267 (4226) used greatest stack depth: 5776 bytes left [ 49.405288][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 49.561642][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.583097][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.612956][ T4307] bridge_slave_0: entered allmulticast mode [ 49.620501][ T4307] bridge_slave_0: entered promiscuous mode [ 49.650126][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.685365][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.692736][ T4307] bridge_slave_1: entered allmulticast mode [ 49.737818][ T4307] bridge_slave_1: entered promiscuous mode [ 49.830196][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.877947][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.951266][ T314] bridge_slave_1: left allmulticast mode [ 49.979756][ T314] bridge_slave_1: left promiscuous mode [ 49.999703][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.033593][ T314] bridge_slave_0: left allmulticast mode [ 50.043913][ T314] bridge_slave_0: left promiscuous mode [ 50.059864][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.155052][ T314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.173574][ T314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.195014][ T314] bond0 (unregistering): Released all slaves [ 50.233568][ T4338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=4338 comm=syz.2.305 [ 50.245737][ T4307] team0: Port device team_slave_0 added [ 50.254856][ T4307] team0: Port device team_slave_1 added [ 50.277326][ T314] hsr_slave_0: left promiscuous mode [ 50.283541][ T314] hsr_slave_1: left promiscuous mode [ 50.289960][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.298384][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.351478][ T314] team0 (unregistering): Port device team_slave_1 removed [ 50.371523][ T314] team0 (unregistering): Port device team_slave_0 removed [ 50.420090][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.439507][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.487283][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.545295][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.556653][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.585975][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.644091][ T4307] hsr_slave_0: entered promiscuous mode [ 50.650282][ T4307] hsr_slave_1: entered promiscuous mode [ 50.664110][ T4307] debugfs: 'hsr0' already exists in 'hsr' [ 50.672383][ T4307] Cannot create hsr debugfs directory [ 50.863568][ T4307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.963722][ T4307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.096710][ T4307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.110909][ T4307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.192573][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.223923][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.224505][ T4391] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 51.292712][ T4398] set_capacity_and_notify: 4 callbacks suppressed [ 51.292731][ T4398] loop1: detected capacity change from 0 to 512 [ 51.309554][ T4398] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.321604][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.329006][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.338616][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.345832][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.370959][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.382674][ T4398] __quota_error: 1 callbacks suppressed [ 51.382749][ T4398] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 51.411519][ T4398] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 51.433852][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.475653][ T4398] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.317: Failed to acquire dquot type 1 [ 51.520744][ T4398] loop1: lost filesystem error report for type 5 error -5 [ 51.521366][ T4398] EXT4-fs (loop1): 1 truncate cleaned up [ 51.528553][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 51.528571][ C1] EXT4-fs (loop1): last error at time 1771772182: ext4_acquire_dquot:7001 [ 51.546418][ T4411] netlink: 80 bytes leftover after parsing attributes in process `syz.2.318'. [ 51.558945][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 51.573660][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 51.639096][ T4411] geneve0: entered allmulticast mode [ 51.654543][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.715563][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 51.858481][ T4437] loop1: detected capacity change from 0 to 512 [ 51.880952][ T4437] EXT4-fs: Ignoring removed nobh option [ 51.906337][ T4437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.010064][ T4307] veth0_vlan: entered promiscuous mode [ 52.025164][ T4437] EXT4-fs (loop1): 1 truncate cleaned up [ 52.031368][ T4437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.046715][ T4307] veth1_vlan: entered promiscuous mode [ 52.067116][ T4307] veth0_macvtap: entered promiscuous mode [ 52.076141][ T4307] veth1_macvtap: entered promiscuous mode [ 52.170127][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.202981][ T28] audit: type=1326 audit(1771772183.545:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.4.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10b9d0c629 code=0x0 [ 52.205304][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.325975][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.346197][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.366365][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.399421][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.503746][ T4483] loop5: detected capacity change from 0 to 1024 [ 52.516555][ T4483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.546084][ T4483] EXT4-fs (loop5): shut down requested (0) [ 52.556468][ T28] audit: type=1400 audit(1771772183.905:248): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.657010][ T28] audit: type=1400 audit(1771772183.905:249): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.689768][ T28] audit: type=1400 audit(1771772183.905:250): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.712165][ T28] audit: type=1400 audit(1771772183.905:251): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.733786][ T28] audit: type=1400 audit(1771772183.905:252): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.812954][ T28] audit: type=1400 audit(1771772183.905:253): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.047413][ T4432] syz.1.319 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.103212][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.126816][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.1.319 Tainted: G W syzkaller #0 PREEMPT(full) [ 53.126850][ T4432] Tainted: [W]=WARN [ 53.126857][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.126871][ T4432] Call Trace: [ 53.126878][ T4432] [ 53.126910][ T4432] __dump_stack+0x1d/0x30 [ 53.127023][ T4432] dump_stack_lvl+0x95/0xd0 [ 53.127046][ T4432] dump_stack+0x15/0x1b [ 53.127136][ T4432] dump_header+0x80/0x240 [ 53.127185][ T4432] oom_kill_process+0x295/0x350 [ 53.127211][ T4432] out_of_memory+0x97d/0xb80 [ 53.127264][ T4432] try_charge_memcg+0x62e/0xa10 [ 53.127300][ T4432] obj_cgroup_charge_pages+0x23/0xc0 [ 53.127367][ T4432] __memcg_kmem_charge_page+0x9e/0x170 [ 53.127531][ T4432] __alloc_frozen_pages_noprof+0x18a/0x360 [ 53.127562][ T4432] alloc_pages_mpol+0xb3/0x260 [ 53.127595][ T4432] alloc_pages_noprof+0x8f/0x130 [ 53.127665][ T4432] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 53.127711][ T4432] __kvmalloc_node_noprof+0x3d4/0x650 [ 53.127737][ T4432] ? ip_set_alloc+0x24/0x30 [ 53.127765][ T4432] ? ip_set_alloc+0x24/0x30 [ 53.127789][ T4432] ? __kmalloc_cache_noprof+0x18a/0x410 [ 53.127847][ T4432] ip_set_alloc+0x24/0x30 [ 53.127946][ T4432] hash_netiface_create+0x282/0x740 [ 53.127972][ T4432] ? __pfx_hash_netiface_create+0x10/0x10 [ 53.128016][ T4432] ip_set_create+0x3cf/0x970 [ 53.128086][ T4432] ? __nla_parse+0x40/0x60 [ 53.128111][ T4432] nfnetlink_rcv_msg+0x509/0x5d0 [ 53.128226][ T4432] netlink_rcv_skb+0x123/0x220 [ 53.128284][ T4432] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 53.128333][ T4432] nfnetlink_rcv+0x167/0x1720 [ 53.128371][ T4432] ? __kfree_skb+0x109/0x150 [ 53.128403][ T4432] ? nlmon_xmit+0x4f/0x60 [ 53.128430][ T4432] ? consume_skb+0x4b/0x160 [ 53.128502][ T4432] ? nlmon_xmit+0x4f/0x60 [ 53.128535][ T4432] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 53.128625][ T4432] ? __dev_queue_xmit+0x1393/0x1f40 [ 53.128697][ T4432] ? __dev_queue_xmit+0x148/0x1f40 [ 53.128734][ T4432] ? ref_tracker_free+0x37d/0x3e0 [ 53.128762][ T4432] ? __netlink_deliver_tap+0x4dc/0x500 [ 53.128793][ T4432] netlink_unicast+0x5c0/0x690 [ 53.128945][ T4432] netlink_sendmsg+0x5c8/0x6f0 [ 53.129051][ T4432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.129128][ T4432] ____sys_sendmsg+0x5af/0x600 [ 53.129163][ T4432] ___sys_sendmsg+0x195/0x1e0 [ 53.129210][ T4432] __x64_sys_sendmsg+0xd4/0x160 [ 53.129271][ T4432] x64_sys_call+0x194c/0x3020 [ 53.129296][ T4432] do_syscall_64+0x12c/0x370 [ 53.129327][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.129398][ T4432] RIP: 0033:0x7f918deac629 [ 53.129418][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.129435][ T4432] RSP: 002b:00007f918c8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.129456][ T4432] RAX: ffffffffffffffda RBX: 00007f918e125fa0 RCX: 00007f918deac629 [ 53.129469][ T4432] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 53.129554][ T4432] RBP: 00007f918df42b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.129569][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.129584][ T4432] R13: 00007f918e126038 R14: 00007f918e125fa0 R15: 00007fffb60645f8 [ 53.129606][ T4432] [ 53.129628][ T4432] memory: usage 307200kB, limit 307200kB, failcnt 317 [ 53.193499][ T28] audit: type=1400 audit(1771772183.905:254): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.197115][ T4432] memory+swap: usage 307532kB, limit 9007199254740988kB, failcnt 0 [ 53.498271][ T4432] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 53.505630][ T4432] Memory cgroup stats for /syz1: [ 53.505804][ T4432] cache 24576 [ 53.514315][ T4432] rss 0 [ 53.517164][ T4432] shmem 0 [ 53.520217][ T4432] mapped_file 0 [ 53.523735][ T4432] dirty 0 [ 53.526775][ T4432] writeback 0 [ 53.530076][ T4432] workingset_refault_anon 112 [ 53.535259][ T4432] workingset_refault_file 505 [ 53.540082][ T4432] swap 425984 [ 53.563605][ T4432] swapcached 471040 [ 53.567616][ T4432] pgpgin 12994 [ 53.571162][ T4432] pgpgout 12977 [ 53.574762][ T4432] pgfault 16864 [ 53.578299][ T4432] pgmajfault 43 [ 53.581881][ T4432] inactive_anon 45056 [ 53.585980][ T4432] active_anon 0 [ 53.589592][ T4432] inactive_file 8192 [ 53.593655][ T4432] active_file 16384 [ 53.597692][ T4432] unevictable 0 [ 53.601319][ T4432] hierarchical_memory_limit 314572800 [ 53.606879][ T4432] hierarchical_memsw_limit 9223372036854771712 [ 53.613567][ T4432] total_cache 24576 [ 53.617417][ T4432] total_rss 0 [ 53.620792][ T4432] total_shmem 0 [ 53.624348][ T4432] total_mapped_file 0 [ 53.636624][ T4432] total_dirty 0 [ 53.641044][ T4432] total_writeback 0 [ 53.647360][ T4432] total_workingset_refault_anon 112 [ 53.653104][ T4432] total_workingset_refault_file 505 [ 53.658603][ T4432] total_swap 425984 [ 53.663100][ T4432] total_swapcached 471040 [ 53.667473][ T4432] total_pgpgin 12994 [ 53.671502][ T4432] total_pgpgout 12977 [ 53.675545][ T4432] total_pgfault 16864 [ 53.679705][ T4432] total_pgmajfault 43 [ 53.683811][ T4432] total_inactive_anon 45056 [ 53.688322][ T4432] total_active_anon 0 [ 53.692307][ T4432] total_inactive_file 8192 [ 53.697203][ T4432] total_active_file 16384 [ 53.701696][ T4432] total_unevictable 0 [ 53.712902][ T4432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.319,pid=4430,uid=0 [ 53.737157][ T4432] Memory cgroup out of memory: Killed process 4432 (syz.1.319) total-vm:96340kB, anon-rss:1252kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 54.096990][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.323177][ T4542] loop5: detected capacity change from 0 to 512 [ 54.330242][ T4542] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.363453][ T4542] EXT4-fs (loop5): 1 truncate cleaned up [ 54.375043][ T4542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.716571][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.224002][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.357'. [ 55.961064][ T4601] loop1: detected capacity change from 0 to 1024 [ 56.024310][ T4601] ext4: Bad value for 'max_batch_time' [ 56.762738][ T4615] loop5: detected capacity change from 0 to 1024 [ 56.793358][ T4615] EXT4-fs: Ignoring removed orlov option [ 56.827922][ T4615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.288365][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 57.308316][ T4622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.374'. [ 57.519784][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.605374][ T4562] syz.2.351 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 57.622855][ T4562] CPU: 1 UID: 0 PID: 4562 Comm: syz.2.351 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.622893][ T4562] Tainted: [W]=WARN [ 57.622902][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.622917][ T4562] Call Trace: [ 57.622925][ T4562] [ 57.622935][ T4562] __dump_stack+0x1d/0x30 [ 57.622963][ T4562] dump_stack_lvl+0x95/0xd0 [ 57.623002][ T4562] dump_stack+0x15/0x1b [ 57.623027][ T4562] dump_header+0x80/0x240 [ 57.623056][ T4562] oom_kill_process+0x295/0x350 [ 57.623080][ T4562] out_of_memory+0x97d/0xb80 [ 57.623175][ T4562] try_charge_memcg+0x62e/0xa10 [ 57.623210][ T4562] obj_cgroup_charge_pages+0x23/0xc0 [ 57.623235][ T4562] __memcg_kmem_charge_page+0x9e/0x170 [ 57.623331][ T4562] __alloc_frozen_pages_noprof+0x18a/0x360 [ 57.623379][ T4562] alloc_pages_mpol+0xb3/0x260 [ 57.623405][ T4562] alloc_pages_noprof+0x8f/0x130 [ 57.623431][ T4562] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 57.623478][ T4562] __kvmalloc_node_noprof+0x3d4/0x650 [ 57.623548][ T4562] ? ip_set_alloc+0x24/0x30 [ 57.623572][ T4562] ? ip_set_alloc+0x24/0x30 [ 57.623594][ T4562] ? __kmalloc_cache_noprof+0x18a/0x410 [ 57.623621][ T4562] ip_set_alloc+0x24/0x30 [ 57.623653][ T4562] hash_netiface_create+0x282/0x740 [ 57.623682][ T4562] ? __pfx_hash_netiface_create+0x10/0x10 [ 57.623734][ T4562] ip_set_create+0x3cf/0x970 [ 57.623773][ T4562] ? __nla_parse+0x40/0x60 [ 57.623938][ T4562] nfnetlink_rcv_msg+0x509/0x5d0 [ 57.623979][ T4562] netlink_rcv_skb+0x123/0x220 [ 57.624003][ T4562] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 57.624029][ T4562] nfnetlink_rcv+0x167/0x1720 [ 57.624116][ T4562] ? __kfree_skb+0x109/0x150 [ 57.624142][ T4562] ? nlmon_xmit+0x4f/0x60 [ 57.624172][ T4562] ? consume_skb+0x4b/0x160 [ 57.624199][ T4562] ? nlmon_xmit+0x4f/0x60 [ 57.624245][ T4562] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 57.624278][ T4562] ? __dev_queue_xmit+0x1393/0x1f40 [ 57.624381][ T4562] ? __dev_queue_xmit+0x148/0x1f40 [ 57.624470][ T4562] ? ref_tracker_free+0x37d/0x3e0 [ 57.624498][ T4562] ? __netlink_deliver_tap+0x4dc/0x500 [ 57.624532][ T4562] netlink_unicast+0x5c0/0x690 [ 57.624597][ T4562] netlink_sendmsg+0x5c8/0x6f0 [ 57.624637][ T4562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.624663][ T4562] ____sys_sendmsg+0x5af/0x600 [ 57.624767][ T4562] ___sys_sendmsg+0x195/0x1e0 [ 57.624802][ T4562] __x64_sys_sendmsg+0xd4/0x160 [ 57.624830][ T4562] x64_sys_call+0x194c/0x3020 [ 57.624876][ T4562] do_syscall_64+0x12c/0x370 [ 57.624916][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.624937][ T4562] RIP: 0033:0x7f2ee7bec629 [ 57.624954][ T4562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.625011][ T4562] RSP: 002b:00007f2ee663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.625036][ T4562] RAX: ffffffffffffffda RBX: 00007f2ee7e65fa0 RCX: 00007f2ee7bec629 [ 57.625051][ T4562] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 57.625064][ T4562] RBP: 00007f2ee7c82b39 R08: 0000000000000000 R09: 0000000000000000 [ 57.625079][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.625093][ T4562] R13: 00007f2ee7e66038 R14: 00007f2ee7e65fa0 R15: 00007fff81d276f8 [ 57.625153][ T4562] [ 57.696759][ T4627] loop5: detected capacity change from 0 to 512 [ 57.704142][ T4562] memory: usage 307200kB, limit 307200kB, failcnt 948 [ 57.706019][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 57.706033][ T28] audit: type=1400 audit(1771772189.045:262): avc: denied { read } for pid=4623 comm="syz.5.375" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.710466][ T4562] memory+swap: usage 391600kB, limit 9007199254740988kB, failcnt 0 [ 57.716360][ T28] audit: type=1400 audit(1771772189.045:263): avc: denied { open } for pid=4623 comm="syz.5.375" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.721866][ T4562] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 57.752888][ T28] audit: type=1400 audit(1771772189.045:264): avc: denied { read } for pid=4623 comm="syz.5.375" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.758400][ T4562] Memory cgroup stats for [ 57.773338][ T4627] EXT4-fs: Ignoring removed nobh option [ 57.799313][ T4562] /syz2 [ 57.801369][ T28] audit: type=1400 audit(1771772189.045:265): avc: denied { open } for pid=4623 comm="syz.5.375" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.807007][ T4562] : [ 57.967054][ T4627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 58.111601][ T4562] cache 0 [ 58.114708][ T4562] rss 0 [ 58.117494][ T4562] shmem 0 [ 58.120510][ T4562] mapped_file 0 [ 58.126379][ T4562] dirty 0 [ 58.129467][ T4562] writeback 0 [ 58.132781][ T4562] workingset_refault_anon 11 [ 58.137815][ T4562] workingset_refault_file 535 [ 58.145187][ T4562] swap 86425600 [ 58.156376][ T4562] swapcached 86429696 [ 58.160897][ T4562] pgpgin 44408 [ 58.179283][ T4562] pgpgout 44407 [ 58.183259][ T4562] pgfault 30514 [ 58.186932][ T4562] pgmajfault 17 [ 58.189074][ T4627] System zones: [ 58.190486][ T4562] inactive_anon 4096 [ 58.193531][ T4627] 1-12 [ 58.198889][ T4638] loop1: detected capacity change from 0 to 512 [ 58.203716][ T4627] EXT4-fs (loop5): orphan cleanup on readonly fs [ 58.208334][ T4562] active_anon 0 [ 58.218387][ T4562] inactive_file 0 [ 58.246597][ T4638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.261141][ T4562] active_file 0 [ 58.265608][ T4562] unevictable 0 [ 58.269263][ T4562] hierarchical_memory_limit 314572800 [ 58.275842][ T4562] hierarchical_memsw_limit 9223372036854771712 [ 58.282399][ T4562] total_cache 0 [ 58.289131][ T4562] total_rss 0 [ 58.292760][ T4562] total_shmem 0 [ 58.293230][ T4627] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.296761][ T4562] total_mapped_file 0 [ 58.314183][ T4638] EXT4-fs (loop1): 1 truncate cleaned up [ 58.320285][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.330136][ T4627] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.375: corrupted inode contents [ 58.333153][ T4562] total_dirty 0 [ 58.354146][ T4562] total_writeback 0 [ 58.358280][ T4562] total_workingset_refault_anon 11 [ 58.363500][ T4562] total_workingset_refault_file 535 [ 58.369065][ T4562] total_swap 86425600 [ 58.373216][ T4562] total_swapcached 86429696 [ 58.377777][ T4562] total_pgpgin 44408 [ 58.381690][ T4562] total_pgpgout 44407 [ 58.385761][ T4562] total_pgfault 30514 [ 58.389912][ T4562] total_pgmajfault 17 [ 58.393960][ T4562] total_inactive_anon 4096 [ 58.398818][ T4562] total_active_anon 0 [ 58.400111][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.402815][ T4562] total_inactive_file 0 [ 58.402827][ T4562] total_active_file 0 [ 58.412189][ T4627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.416370][ T4562] total_unevictable 0 [ 58.433544][ T4627] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.375: mark_inode_dirty error [ 58.445138][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 58.445154][ C0] EXT4-fs (loop5): initial error at time 1771772189: ext4_do_update_inode:5569: inode 15 [ 58.445181][ C0] EXT4-fs (loop5): last error at time 1771772189: ext4_do_update_inode:5569: inode 15 [ 58.471627][ T4562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.351,pid=4560,uid=0 [ 58.486439][ T4562] Memory cgroup out of memory: Killed process 4560 (syz.2.351) total-vm:96340kB, anon-rss:1224kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 58.495585][ T4627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.513730][ T4627] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.375: corrupted inode contents [ 58.550974][ T4562] syz.2.351 (4562) used greatest stack depth: 5336 bytes left [ 58.555693][ T4627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.568241][ T4627] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.375: mark_inode_dirty error [ 58.595865][ T4647] sch_tbf: burst 3488 is lower than device lo mtu (65550) ! [ 58.641417][ T4627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.641628][ T4627] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.375: mark inode dirty (error -117) [ 58.715181][ T4627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.715382][ T4627] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 58.791664][ T4627] EXT4-fs (loop5): 1 orphan inode deleted [ 58.817841][ T4627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.905202][ T28] audit: type=1400 audit(1771772190.255:266): avc: denied { ioctl } for pid=4623 comm="syz.5.375" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.946590][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.953976][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.451572][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.057775][ T4666] loop5: detected capacity change from 0 to 128 [ 60.246465][ T28] audit: type=1400 audit(1771772191.595:267): avc: denied { read } for pid=4670 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.369199][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.395720][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.721219][ T4679] syz_tun: entered allmulticast mode [ 61.735092][ T117] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.748610][ T117] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.765898][ T4691] loop5: detected capacity change from 0 to 512 [ 61.784573][ T4691] EXT4-fs: Ignoring removed nobh option [ 61.788743][ T117] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.818733][ T117] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.836455][ T4691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.861865][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 61.875732][ T4702] tipc: Enabling of bearer rejected, failed to enable media [ 61.907781][ T4691] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.963577][ T4691] EXT4-fs (loop5): 1 truncate cleaned up [ 61.989110][ T4691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.252817][ T4689] syz.5.391 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 62.267884][ T4689] CPU: 1 UID: 0 PID: 4689 Comm: syz.5.391 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.267985][ T4689] Tainted: [W]=WARN [ 62.267994][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.268005][ T4689] Call Trace: [ 62.268013][ T4689] [ 62.268021][ T4689] __dump_stack+0x1d/0x30 [ 62.268048][ T4689] dump_stack_lvl+0x95/0xd0 [ 62.268083][ T4689] dump_stack+0x15/0x1b [ 62.268104][ T4689] dump_header+0x80/0x240 [ 62.268204][ T4689] oom_kill_process+0x295/0x350 [ 62.268228][ T4689] out_of_memory+0x97d/0xb80 [ 62.268254][ T4689] try_charge_memcg+0x62e/0xa10 [ 62.268361][ T4689] obj_cgroup_charge_pages+0x23/0xc0 [ 62.268386][ T4689] __memcg_kmem_charge_page+0x9e/0x170 [ 62.268439][ T4689] __alloc_frozen_pages_noprof+0x18a/0x360 [ 62.268469][ T4689] alloc_pages_mpol+0xb3/0x260 [ 62.268495][ T4689] alloc_pages_noprof+0x8f/0x130 [ 62.268553][ T4689] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 62.268612][ T4689] __kvmalloc_node_noprof+0x3d4/0x650 [ 62.268710][ T4689] ? ip_set_alloc+0x24/0x30 [ 62.268732][ T4689] ? ip_set_alloc+0x24/0x30 [ 62.268760][ T4689] ? __kmalloc_cache_noprof+0x18a/0x410 [ 62.268874][ T4689] ip_set_alloc+0x24/0x30 [ 62.268958][ T4689] hash_netiface_create+0x282/0x740 [ 62.269014][ T4689] ? __pfx_hash_netiface_create+0x10/0x10 [ 62.269041][ T4689] ip_set_create+0x3cf/0x970 [ 62.269159][ T4689] ? __nla_parse+0x40/0x60 [ 62.269194][ T4689] nfnetlink_rcv_msg+0x509/0x5d0 [ 62.269236][ T4689] netlink_rcv_skb+0x123/0x220 [ 62.269311][ T4689] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.269342][ T4689] nfnetlink_rcv+0x167/0x1720 [ 62.269370][ T4689] ? __kfree_skb+0x109/0x150 [ 62.269424][ T4689] ? nlmon_xmit+0x4f/0x60 [ 62.269459][ T4689] ? consume_skb+0x4b/0x160 [ 62.269487][ T4689] ? nlmon_xmit+0x4f/0x60 [ 62.269538][ T4689] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 62.269564][ T4689] ? __dev_queue_xmit+0x1393/0x1f40 [ 62.269595][ T4689] ? __dev_queue_xmit+0x148/0x1f40 [ 62.269628][ T4689] ? ref_tracker_free+0x37d/0x3e0 [ 62.269725][ T4689] ? __netlink_deliver_tap+0x4dc/0x500 [ 62.269761][ T4689] netlink_unicast+0x5c0/0x690 [ 62.269788][ T4689] netlink_sendmsg+0x5c8/0x6f0 [ 62.269843][ T4689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.269939][ T4689] ____sys_sendmsg+0x5af/0x600 [ 62.269976][ T4689] ___sys_sendmsg+0x195/0x1e0 [ 62.270087][ T4689] __x64_sys_sendmsg+0xd4/0x160 [ 62.270118][ T4689] x64_sys_call+0x194c/0x3020 [ 62.270143][ T4689] do_syscall_64+0x12c/0x370 [ 62.270277][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.270299][ T4689] RIP: 0033:0x7f292c5dc629 [ 62.270316][ T4689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.270403][ T4689] RSP: 002b:00007f292b037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.270425][ T4689] RAX: ffffffffffffffda RBX: 00007f292c855fa0 RCX: 00007f292c5dc629 [ 62.270439][ T4689] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 62.270452][ T4689] RBP: 00007f292c672b39 R08: 0000000000000000 R09: 0000000000000000 [ 62.270465][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.270476][ T4689] R13: 00007f292c856038 R14: 00007f292c855fa0 R15: 00007fff351675f8 [ 62.270546][ T4689] [ 62.270555][ T4689] memory: usage 307200kB, limit 307200kB, failcnt 409 [ 62.609592][ T4689] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 62.617844][ T4689] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 62.625542][ T4689] Memory cgroup stats for /syz5: [ 62.625927][ T4689] cache 28672 [ 62.636427][ T4689] rss 0 [ 62.639230][ T4689] shmem 0 [ 62.642255][ T4689] mapped_file 0 [ 62.645853][ T4689] dirty 0 [ 62.648796][ T4689] writeback 0 [ 62.652080][ T4689] workingset_refault_anon 105 [ 62.656989][ T4689] workingset_refault_file 0 [ 62.661585][ T4689] swap 442368 [ 62.665732][ T4689] swapcached 466944 [ 62.669642][ T4689] pgpgin 22006 [ 62.673177][ T4689] pgpgout 21992 [ 62.676872][ T4689] pgfault 9684 [ 62.680233][ T4689] pgmajfault 32 [ 62.683760][ T4689] inactive_anon 24576 [ 62.687840][ T4689] active_anon 0 [ 62.691381][ T4689] inactive_file 32768 [ 62.695388][ T4689] active_file 0 [ 62.698947][ T4689] unevictable 0 [ 62.702416][ T4689] hierarchical_memory_limit 314572800 [ 62.707966][ T4689] hierarchical_memsw_limit 9223372036854771712 [ 62.714380][ T4689] total_cache 28672 [ 62.718188][ T4689] total_rss 0 [ 62.721592][ T4689] total_shmem 0 [ 62.725253][ T4689] total_mapped_file 0 [ 62.729243][ T4689] total_dirty 0 [ 62.732694][ T4689] total_writeback 0 [ 62.736813][ T4689] total_workingset_refault_anon 105 [ 62.742127][ T4689] total_workingset_refault_file 0 [ 62.747367][ T4689] total_swap 442368 [ 62.751219][ T4689] total_swapcached 466944 [ 62.755626][ T4689] total_pgpgin 22006 [ 62.759678][ T4689] total_pgpgout 21992 [ 62.763813][ T4689] total_pgfault 9684 [ 62.767814][ T4689] total_pgmajfault 32 [ 62.771919][ T4689] total_inactive_anon 24576 [ 62.776635][ T4689] total_active_anon 0 [ 62.780769][ T4689] total_inactive_file 32768 [ 62.785479][ T4689] total_active_file 0 [ 62.789469][ T4689] total_unevictable 0 [ 62.793825][ T4689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.391,pid=4688,uid=0 [ 62.808869][ T4689] Memory cgroup out of memory: Killed process 4688 (syz.5.391) total-vm:96340kB, anon-rss:1228kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 62.912385][ T4735] loop1: detected capacity change from 0 to 128 [ 62.919290][ T4736] tipc: Enabling of bearer rejected, failed to enable media [ 62.929749][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.022800][ T28] audit: type=1400 audit(1771772195.365:268): avc: denied { write } for pid=4775 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.266792][ T4784] loop5: detected capacity change from 0 to 512 [ 64.328509][ T4784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.374597][ T4784] EXT4-fs (loop5): 1 truncate cleaned up [ 64.380618][ T4784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.674136][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.746511][ T28] audit: type=1400 audit(1771772196.095:269): avc: denied { write } for pid=4810 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.783134][ T4816] loop2: detected capacity change from 0 to 7 [ 64.803454][ T4816] loop2: [ 64.821804][ T28] audit: type=1400 audit(1771772196.115:270): avc: denied { setopt } for pid=4810 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.897507][ T4829] loop5: detected capacity change from 0 to 512 [ 64.922675][ T4829] EXT4-fs: Ignoring removed i_version option [ 64.933756][ T4829] EXT4-fs: Ignoring removed bh option [ 64.934577][ T4833] loop1: detected capacity change from 0 to 128 [ 64.970698][ T4829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.016219][ T4829] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.078525][ T4307] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.204046][ T4842] tipc: Started in network mode [ 65.208967][ T4842] tipc: Node identity 42d4722e5d9c, cluster identity 4711 [ 65.216317][ T4842] tipc: Enabled bearer , priority 0 [ 65.247865][ T4842] syzkaller0: entered promiscuous mode [ 65.262909][ T4842] syzkaller0: entered allmulticast mode [ 65.283507][ T4842] tipc: Resetting bearer [ 65.853264][ T4841] tipc: Resetting bearer [ 66.204052][ T4841] tipc: Disabling bearer [ 66.884026][ T1108] tipc: Node number set to 524841518 [ 67.211150][ T28] audit: type=1400 audit(1771772198.555:271): avc: denied { mount } for pid=4885 comm="syz.2.442" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.235022][ T4883] loop1: detected capacity change from 0 to 512 [ 67.245051][ T4883] EXT4-fs: Ignoring removed nobh option [ 67.255269][ T4883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.299082][ T4883] EXT4-fs (loop1): 1 truncate cleaned up [ 67.307410][ T4883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.327480][ T28] audit: type=1400 audit(1771772198.675:272): avc: denied { name_bind } for pid=4894 comm="syz.4.444" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.368364][ T28] audit: type=1400 audit(1771772198.715:273): avc: denied { add_name } for pid=4879 comm="syz.1.439" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.435271][ T4904] syz_tun: entered allmulticast mode [ 67.477042][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.447'. [ 67.512957][ T4905] netlink: 44 bytes leftover after parsing attributes in process `syz.5.447'. [ 68.507267][ T4880] syz.1.439 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 68.521535][ T4880] CPU: 0 UID: 0 PID: 4880 Comm: syz.1.439 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.521571][ T4880] Tainted: [W]=WARN [ 68.521579][ T4880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.521592][ T4880] Call Trace: [ 68.521599][ T4880] [ 68.521675][ T4880] __dump_stack+0x1d/0x30 [ 68.521709][ T4880] dump_stack_lvl+0x95/0xd0 [ 68.521737][ T4880] dump_stack+0x15/0x1b [ 68.521758][ T4880] dump_header+0x80/0x240 [ 68.521855][ T4880] oom_kill_process+0x295/0x350 [ 68.521881][ T4880] out_of_memory+0x97d/0xb80 [ 68.521907][ T4880] try_charge_memcg+0x62e/0xa10 [ 68.521945][ T4880] obj_cgroup_charge_pages+0x23/0xc0 [ 68.522050][ T4880] __memcg_kmem_charge_page+0x9e/0x170 [ 68.522077][ T4880] __alloc_frozen_pages_noprof+0x18a/0x360 [ 68.522141][ T4880] alloc_pages_mpol+0xb3/0x260 [ 68.522171][ T4880] alloc_pages_noprof+0x8f/0x130 [ 68.522197][ T4880] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 68.522297][ T4880] __kvmalloc_node_noprof+0x3d4/0x650 [ 68.522326][ T4880] ? ip_set_alloc+0x24/0x30 [ 68.522354][ T4880] ? ip_set_alloc+0x24/0x30 [ 68.522381][ T4880] ? __kmalloc_cache_noprof+0x18a/0x410 [ 68.522427][ T4880] ip_set_alloc+0x24/0x30 [ 68.522454][ T4880] hash_netiface_create+0x282/0x740 [ 68.522484][ T4880] ? __pfx_hash_netiface_create+0x10/0x10 [ 68.522513][ T4880] ip_set_create+0x3cf/0x970 [ 68.522607][ T4880] ? __nla_parse+0x40/0x60 [ 68.522637][ T4880] nfnetlink_rcv_msg+0x509/0x5d0 [ 68.522680][ T4880] netlink_rcv_skb+0x123/0x220 [ 68.522704][ T4880] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 68.522731][ T4880] nfnetlink_rcv+0x167/0x1720 [ 68.522829][ T4880] ? __list_del_entry_valid_or_report+0x65/0x130 [ 68.522928][ T4880] ? __rmqueue_pcplist+0x9b0/0xb70 [ 68.523043][ T4880] ? _raw_spin_lock_bh+0x56/0xb0 [ 68.523067][ T4880] ? _raw_spin_unlock_bh+0x18/0x20 [ 68.523188][ T4880] ? selinux_nlmsg_lookup+0x99/0x890 [ 68.523222][ T4880] ? __rcu_read_unlock+0x33/0x70 [ 68.523243][ T4880] ? __netlink_lookup+0x276/0x2b0 [ 68.523331][ T4880] netlink_unicast+0x5c0/0x690 [ 68.523362][ T4880] netlink_sendmsg+0x5c8/0x6f0 [ 68.523438][ T4880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.523463][ T4880] ____sys_sendmsg+0x5af/0x600 [ 68.523497][ T4880] ___sys_sendmsg+0x195/0x1e0 [ 68.523620][ T4880] __x64_sys_sendmsg+0xd4/0x160 [ 68.523705][ T4880] x64_sys_call+0x194c/0x3020 [ 68.523800][ T4880] do_syscall_64+0x12c/0x370 [ 68.523842][ T4880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.523869][ T4880] RIP: 0033:0x7f918deac629 [ 68.523888][ T4880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.523978][ T4880] RSP: 002b:00007f918c8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.524001][ T4880] RAX: ffffffffffffffda RBX: 00007f918e125fa0 RCX: 00007f918deac629 [ 68.524015][ T4880] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 68.524027][ T4880] RBP: 00007f918df42b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.524040][ T4880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.524052][ T4880] R13: 00007f918e126038 R14: 00007f918e125fa0 R15: 00007fffb60645f8 [ 68.524073][ T4880] [ 68.851830][ T4880] memory: usage 307200kB, limit 307200kB, failcnt 570 [ 68.859318][ T4880] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 68.867674][ T4880] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 68.875112][ T4880] Memory cgroup stats for /syz1: [ 68.875513][ T4880] cache 20480 [ 68.884438][ T4880] rss 4096 [ 68.887561][ T4880] shmem 0 [ 68.890596][ T4880] mapped_file 4096 [ 68.896079][ T4880] dirty 0 [ 68.899164][ T4880] writeback 0 [ 68.902719][ T4880] workingset_refault_anon 223 [ 68.907730][ T4880] workingset_refault_file 1145 [ 68.912501][ T4880] swap 368640 [ 68.915916][ T4880] swapcached 802816 [ 68.919840][ T4880] pgpgin 31467 [ 68.923512][ T4880] pgpgout 31437 [ 68.927078][ T4880] pgfault 35379 [ 68.930657][ T4880] pgmajfault 64 [ 68.934365][ T4880] inactive_anon 98304 [ 68.938443][ T4880] active_anon 4096 [ 68.942378][ T4880] inactive_file 4096 [ 68.946525][ T4880] active_file 16384 [ 68.950619][ T4880] unevictable 0 [ 68.954357][ T4880] hierarchical_memory_limit 314572800 [ 68.959838][ T4880] hierarchical_memsw_limit 9223372036854771712 [ 68.966638][ T4880] total_cache 20480 [ 68.970531][ T4880] total_rss 4096 [ 68.974370][ T4880] total_shmem 0 [ 68.977878][ T4880] total_mapped_file 4096 [ 68.982156][ T4880] total_dirty 0 [ 68.985907][ T4880] total_writeback 0 [ 68.989924][ T4880] total_workingset_refault_anon 223 [ 68.995292][ T4880] total_workingset_refault_file 1145 [ 69.000687][ T4880] total_swap 368640 [ 69.004698][ T4880] total_swapcached 802816 [ 69.009129][ T4880] total_pgpgin 31467 [ 69.013566][ T4880] total_pgpgout 31437 [ 69.017973][ T4880] total_pgfault 35379 [ 69.022173][ T4880] total_pgmajfault 64 [ 69.026608][ T4880] total_inactive_anon 98304 [ 69.031168][ T4880] total_active_anon 4096 [ 69.035672][ T4880] total_inactive_file 4096 [ 69.040300][ T4880] total_active_file 16384 [ 69.044818][ T4880] total_unevictable 0 [ 69.049162][ T4880] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.439,pid=4879,uid=0 [ 69.064126][ T4880] Memory cgroup out of memory: Killed process 4880 (syz.1.439) total-vm:96340kB, anon-rss:1252kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 69.131485][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.335670][ T4944] syz_tun: entered allmulticast mode [ 69.648425][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.655934][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.886337][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.931769][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.516411][ T117] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.526428][ T117] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.592041][ T117] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.621992][ T28] audit: type=1400 audit(1771772201.965:274): avc: denied { ioctl } for pid=4962 comm="syz.5.464" path="socket:[8045]" dev="sockfs" ino=8045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.652036][ T117] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.715078][ T28] audit: type=1400 audit(1771772202.045:275): avc: denied { read write } for pid=4965 comm="syz.1.466" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.788331][ T4972] tipc: Enabling of bearer rejected, failed to enable media [ 70.794823][ T28] audit: type=1400 audit(1771772202.045:276): avc: denied { open } for pid=4965 comm="syz.1.466" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 70.837163][ T4967] loop1: detected capacity change from 0 to 512 [ 70.885377][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.945655][ T4967] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.031694][ T4967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.576320][ T5000] loop5: detected capacity change from 0 to 128 [ 71.586833][ T5000] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.600152][ T5000] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.617335][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.208639][ T28] audit: type=1400 audit(1771772203.555:277): avc: denied { read write } for pid=5019 comm="syz.1.490" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.284284][ T28] audit: type=1400 audit(1771772203.555:278): avc: denied { open } for pid=5019 comm="syz.1.490" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.319601][ T5020] loop1: detected capacity change from 0 to 512 [ 72.348630][ T2999] ================================================================== [ 72.356836][ T2999] BUG: KCSAN: data-race in set_nlink / set_nlink [ 72.363269][ T2999] [ 72.365593][ T2999] read to 0xffff8881071069e8 of 4 bytes by task 3304 on cpu 1: [ 72.373398][ T2999] set_nlink+0x29/0xb0 [ 72.377650][ T2999] kernfs_iop_permission+0x1e2/0x220 [ 72.383036][ T2999] inode_permission+0x31f/0x3b0 [ 72.387894][ T2999] link_path_walk+0x779/0xe30 [ 72.392666][ T2999] path_openat+0x1c6/0x2050 [ 72.397538][ T2999] do_file_open+0x16c/0x290 [ 72.402157][ T2999] do_sys_openat2+0x94/0x130 [ 72.406869][ T2999] __x64_sys_openat+0xf2/0x120 [ 72.411945][ T2999] x64_sys_call+0x1e39/0x3020 [ 72.416641][ T2999] do_syscall_64+0x12c/0x370 [ 72.421337][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.427258][ T2999] [ 72.429646][ T2999] write to 0xffff8881071069e8 of 4 bytes by task 2999 on cpu 0: [ 72.437808][ T2999] set_nlink+0x99/0xb0 [ 72.441882][ T2999] kernfs_iop_permission+0x1e2/0x220 [ 72.447264][ T2999] inode_permission+0x31f/0x3b0 [ 72.452381][ T2999] link_path_walk+0x779/0xe30 [ 72.457158][ T2999] path_lookupat+0x8c/0x500 [ 72.461823][ T2999] filename_lookup+0x190/0x390 [ 72.466741][ T2999] vfs_statx+0x96/0x170 [ 72.471263][ T2999] vfs_fstatat+0x118/0x170 [ 72.475812][ T2999] __se_sys_newfstatat+0x55/0x3e0 [ 72.480935][ T2999] __x64_sys_newfstatat+0x55/0x70 [ 72.486140][ T2999] x64_sys_call+0x2c64/0x3020 [ 72.491013][ T2999] do_syscall_64+0x12c/0x370 [ 72.495622][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.501612][ T2999] [ 72.504039][ T2999] value changed: 0x00000008 -> 0x00000009 [ 72.509844][ T2999] [ 72.512253][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 72.518674][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 72.529279][ T2999] Tainted: [W]=WARN [ 72.533101][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.543705][ T2999] ================================================================== [ 72.633683][ T5020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.677886][ T5020] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.724395][ T5020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.703037][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.704079][ T3832] Bluetooth: hci0: command 0x1003 tx timeout [ 73.783588][ T4307] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.