last executing test programs: 18.973919717s ago: executing program 4 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100705b8b74000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100000000", 0x26) 18.785803875s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) 18.633011782s ago: executing program 4 (id=211): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 18.46315173s ago: executing program 4 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89002) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 18.345508196s ago: executing program 4 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x180062) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/power/pm_debug_messages', 0x266000, 0x41) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 18.268386749s ago: executing program 4 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/141, 0x900}], 0x10000000000000c4) 18.229070411s ago: executing program 32 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/141, 0x900}], 0x10000000000000c4) 3.754794077s ago: executing program 1 (id=471): openat(0xffffffffffffff9c, 0x0, 0x1450c2, 0x183) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x10001}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.864626468s ago: executing program 1 (id=475): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a8, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) 2.045586436s ago: executing program 0 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.977373019s ago: executing program 0 (id=486): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r0, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.976973949s ago: executing program 2 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) creat(&(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1c) 1.820248996s ago: executing program 2 (id=489): openat(0xffffffffffffff9c, 0x0, 0x1450c2, 0x183) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x10001}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.819800216s ago: executing program 1 (id=499): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x5}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 1.445015024s ago: executing program 1 (id=490): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbc6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.31009114s ago: executing program 0 (id=502): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.247233893s ago: executing program 0 (id=492): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb66, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 885.07671ms ago: executing program 2 (id=494): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x101944, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 869.33355ms ago: executing program 0 (id=495): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x5, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 855.276251ms ago: executing program 1 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1000004}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0188ca5bf0004c47ff123400000000010000040000126700000001aabbccddee0100000000000000000000000000000000000000000000000000000000000011111111111111111111111111111111"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0288ca5bf0004c07ff123400000000010000010000126700000001aabbccddee0200000000000000000000000000000000000000000000000000000000000022222222222222222222222222222222"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000003000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0388ca5bf0004c47ff123400000000010000010000126700000001aabbccddee0300000000000000000000000000000000000000000000000000000000000033333333333333333333333333333333"], 0x0) 752.486686ms ago: executing program 0 (id=498): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a8, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) 752.349866ms ago: executing program 1 (id=500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 721.406727ms ago: executing program 2 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=@newtclass={0x464, 0x28, 0x601, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0xff, 0xacd, 0x80, 0xfffffffa, 0x1000, 0x7, 0x2, 0x2, 0x0, 0x4, 0x3, 0x40, 0x0, 0x53c9, 0x800, 0x0, 0x7, 0xf6d6, 0x1, 0x1, 0x2, 0x9, 0x2, 0x63d5, 0x9, 0x8, 0x1655, 0x1db0, 0x4, 0xc055, 0x1, 0xffffffff, 0x7fffffff, 0x2, 0x8, 0x2b, 0x80000000, 0x0, 0x9abb, 0x0, 0xec15, 0x10, 0x3, 0x3, 0x4, 0x3, 0x40, 0x2, 0x2, 0x2, 0x4, 0x4, 0x10, 0x1, 0x99b, 0x5, 0x20a, 0x20000, 0x3ff, 0x80000001, 0x3, 0x0, 0x2, 0x0, 0x8, 0x272, 0x8, 0x70000000, 0xff, 0x8, 0x0, 0x8, 0x7, 0xaf, 0x1, 0xa085, 0xfffffff4, 0xd0bb, 0x7, 0x7, 0x6, 0x1, 0x0, 0x6, 0xfff000, 0x0, 0x45d26f95, 0x0, 0x7fffffff, 0x3ff, 0x6, 0x5, 0x0, 0x4, 0x5, 0x3, 0x4, 0x0, 0x0, 0xfffff94d, 0x8, 0x4, 0x4, 0xffffffaa, 0xd, 0xb, 0xff, 0xfffffffc, 0xfff, 0x5, 0x3, 0x4, 0xe246, 0x1, 0x5, 0x9, 0x4, 0x5, 0x5, 0x6, 0xa, 0x7, 0xe255, 0x6, 0x8, 0x800, 0x9, 0xffffffff, 0xfffffffe, 0x5, 0x699, 0x1, 0x4, 0x5, 0x42b9, 0x6, 0xf, 0x3, 0x200, 0x4, 0x8, 0x0, 0xffff, 0x10000, 0x10, 0xcca, 0x800, 0x8, 0xff, 0x8000, 0x6, 0x5, 0x80, 0xb03, 0xb, 0x78a, 0x48, 0x5, 0x1, 0xfff, 0xffffca00, 0xf, 0x8, 0xfff, 0x80, 0xd08, 0x6, 0x53f, 0xfffffffc, 0x44d, 0x1, 0x23d, 0x5, 0x400, 0x1, 0x2, 0x9, 0x0, 0x7, 0x3, 0xb4, 0x6b, 0xd, 0x2, 0x0, 0x9598, 0xd0000000, 0x3, 0x400, 0x10001, 0x7, 0x7, 0x0, 0x7, 0x7ff, 0x7, 0x7f, 0x5, 0xfffffff8, 0x8, 0x4, 0x6, 0x1, 0x8, 0x80000001, 0x6, 0xfffffffb, 0x1, 0x2, 0xfffffffe, 0x2, 0x3ff, 0x9, 0x3, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x5, 0x7bea, 0x7fffffff, 0xa, 0xff, 0x2, 0x6, 0x7ad, 0x6, 0xff, 0x75, 0x7fb, 0x2, 0x5, 0x3, 0x4, 0x6, 0x3, 0x5, 0x9, 0xff, 0x10, 0x0, 0x3, 0x400, 0x7fff, 0xb, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x2a, 0x3, 0x1, 0x7]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x6, 0x7, 0x74, 0x2028}, {0x7, 0x0, 0x1, 0x7fff, 0x0, 0x2}, 0x7, 0x3, 0x1c, 0x1ed, 0xf5}}]}}]}, 0x464}}, 0x20000000) 688.961528ms ago: executing program 5 (id=503): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000805"], 0x88) 683.607688ms ago: executing program 3 (id=504): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 640.532091ms ago: executing program 3 (id=505): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 589.917343ms ago: executing program 2 (id=506): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 501.997077ms ago: executing program 5 (id=507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='a'], 0x9) 484.939978ms ago: executing program 2 (id=508): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x6bb) semop(r0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee00, 0x0, 0x0, 0x0, 0x1a2, 0x2d49}, 0x3ff, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x101}) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 441.42322ms ago: executing program 5 (id=509): write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x14d52, &(0x7f0000000b40)=ANY=[], 0x7b, 0x1219, &(0x7f0000001280)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x1e0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 407.543172ms ago: executing program 3 (id=510): file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x3922, 0x1, 0x7, 0xffffffff, 0x9}, 0x18, 0x1000) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getuid() quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f0000000580)=ANY=[@ANYBLOB='huge=alwaysNfsuuid=j7d18191-6468-d5be-82c8-ead41cd5,smackfsdef=,fscontext=system_u,eui', @ANYRESDEC=r1, @ANYBLOB="1c50d3c2e44b8108653d2f646576dbb0268937fab8c42f"]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/79, 0x4f, 0x7f) 285.017037ms ago: executing program 3 (id=511): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2364, &(0x7f0000000040)={0x0, 0x80036d, 0xc000, 0x10, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 166.552413ms ago: executing program 5 (id=512): ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x100093, 0x0, 0x5, 0xb, "006093000100f16200000000000700"}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) 158.623443ms ago: executing program 3 (id=513): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "93b5aa98c3705c8b", "e422ea4eae9d199b5cdfadf0c3cfc9047452cd1fbcff163129a3425e3e8c7be5", "dee5e3c3", "2bd6745852a5d504"}, 0x38) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 124.563774ms ago: executing program 3 (id=514): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 37.663807][ T3532] __dump_stack+0x1d/0x30 [ 37.663837][ T3532] dump_stack_lvl+0x95/0xd0 [ 37.663869][ T3532] dump_stack+0x15/0x1b [ 37.663894][ T3532] should_fail_ex+0x262/0x280 [ 37.663986][ T3532] should_fail+0xb/0x20 [ 37.664016][ T3532] should_fail_usercopy+0x1a/0x20 [ 37.664064][ T3532] _copy_from_user+0x1c/0xb0 [ 37.664093][ T3532] sg_write+0x1ec/0x7a0 [ 37.664145][ T3532] ? __pfx_sg_write+0x10/0x10 [ 37.664221][ T3532] vfs_write+0x254/0x9a0 [ 37.664278][ T3532] ? __fget_files+0x184/0x1c0 [ 37.664309][ T3532] ksys_write+0xdc/0x1a0 [ 37.664342][ T3532] __x64_sys_write+0x40/0x50 [ 37.664384][ T3532] x64_sys_call+0x154e/0x2550 [ 37.664498][ T3532] do_syscall_64+0x112/0x360 [ 37.664526][ T3532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.664558][ T3532] RIP: 0033:0x7fa8e27ce159 [ 37.664593][ T3532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.664696][ T3532] RSP: 002b:00007fa8e1227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.664724][ T3532] RAX: ffffffffffffffda RBX: 00007fa8e2a55fa0 RCX: 00007fa8e27ce159 [ 37.664762][ T3532] RDX: 0000000000000054 RSI: 0000200000001540 RDI: 0000000000000004 [ 37.664780][ T3532] RBP: 00007fa8e286506b R08: 0000000000000000 R09: 0000000000000000 [ 37.664798][ T3532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.664816][ T3532] R13: 00007fa8e2a56038 R14: 00007fa8e2a55fa0 R15: 00007ffd695a5d38 [ 37.664842][ T3532] [ 37.766773][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 37.766823][ T29] audit: type=1400 audit(1790103583.345:191): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.916485][ T3520] Zero length message leads to an empty skb [ 38.006373][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 38.063194][ T3520] syz.0.1 (3520) used greatest stack depth: 10248 bytes left [ 38.103818][ T29] audit: type=1400 audit(1790103583.675:192): avc: denied { map_create } for pid=3545 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.103924][ T29] audit: type=1400 audit(1790103583.675:193): avc: denied { map_read map_write } for pid=3545 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.248062][ T29] audit: type=1400 audit(1790103583.815:194): avc: denied { create } for pid=3551 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.270531][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.292993][ T29] audit: type=1400 audit(1790103583.865:195): avc: denied { bind } for pid=3551 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.353939][ T29] audit: type=1400 audit(1790103583.925:196): avc: denied { write } for pid=3551 comm="syz.1.22" path="socket:[5557]" dev="sockfs" ino=5557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.385466][ T29] audit: type=1400 audit(1790103583.965:197): avc: denied { create } for pid=3553 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.387410][ T29] audit: type=1400 audit(1790103583.965:198): avc: denied { setopt } for pid=3553 comm="syz.0.23" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.412309][ T29] audit: type=1400 audit(1790103583.985:199): avc: denied { getopt } for pid=3551 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.417402][ T29] audit: type=1400 audit(1790103583.985:200): avc: denied { create } for pid=3553 comm="syz.0.23" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.440992][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.443668][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.459186][ T3557] loop2: detected capacity change from 0 to 512 [ 38.468416][ T3557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.468606][ T3557] EXT4-fs: Ignoring removed nobh option [ 38.528071][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.528224][ T3557] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.593506][ T3557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.611456][ T3557] EXT4-fs (loop2): can't enable nombcache during remount [ 38.679903][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.766550][ T3565] bridge_slave_0: left allmulticast mode [ 38.766578][ T3565] bridge_slave_0: left promiscuous mode [ 38.767189][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.798215][ T3565] bridge_slave_1: left allmulticast mode [ 38.798237][ T3565] bridge_slave_1: left promiscuous mode [ 38.798467][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.869300][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 38.869445][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 38.912999][ T3565] bond0: (slave bond_slave_0): Releasing backup interface [ 38.979113][ T3565] bond0: (slave bond_slave_1): Releasing backup interface [ 39.015338][ T3565] team0: Port device team_slave_0 removed [ 39.066987][ T3565] team0: Port device team_slave_1 removed [ 39.085096][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.085121][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.108478][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.108502][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.151662][ T3565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.284340][ T3585] netlink: 84 bytes leftover after parsing attributes in process `syz.3.33'. [ 39.378145][ T3588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 39.396375][ T3588] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 39.664803][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 39.683420][ T3607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.702997][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 39.764737][ T3614] loop0: detected capacity change from 0 to 512 [ 39.769384][ T3614] EXT4-fs: test_dummy_encryption option not supported [ 40.015822][ T3607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.044607][ T3607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.079619][ T3607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.150079][ T351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.155121][ T351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.171731][ T351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.209573][ T3428] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351133][ T3632] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 40.537376][ T3643] xt_hashlimit: size too large, truncated to 1048576 [ 40.736337][ T3666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.353333][ T3714] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.73'. [ 41.353368][ T3714] netlink: zone id is out of range [ 41.353378][ T3714] netlink: zone id is out of range [ 41.353414][ T3714] netlink: zone id is out of range [ 41.355762][ T3714] netlink: del zone limit has 4 unknown bytes [ 41.891695][ T3759] syzkaller1: entered promiscuous mode [ 41.891764][ T3759] syzkaller1: entered allmulticast mode [ 41.975938][ T3767] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 42.019251][ T3772] af_packet: packet size is too long (4294966816 > 2016) [ 42.043826][ T3774] loop0: detected capacity change from 0 to 1024 [ 42.044192][ T3774] ======================================================= [ 42.044192][ T3774] WARNING: The mand mount option has been deprecated and [ 42.044192][ T3774] and is ignored by this kernel. Remove the mand [ 42.044192][ T3774] option from the mount to silence this warning. [ 42.044192][ T3774] ======================================================= [ 42.116124][ T3774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.116319][ T3774] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.025223][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.088777][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 43.088793][ T29] audit: type=1400 audit(1790103588.655:267): avc: denied { ioctl } for pid=3903 comm="syz.0.110" path="socket:[6122]" dev="sockfs" ino=6122 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.089406][ T29] audit: type=1400 audit(1790103588.655:268): avc: denied { setopt } for pid=3903 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.089992][ T29] audit: type=1400 audit(1790103588.655:269): avc: denied { write } for pid=3903 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.094092][ T29] audit: type=1400 audit(1790103588.665:270): avc: denied { read } for pid=3903 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.200783][ T29] audit: type=1400 audit(1790103588.775:271): avc: denied { bind } for pid=3911 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.200813][ T29] audit: type=1400 audit(1790103588.775:272): avc: denied { node_bind } for pid=3911 comm="syz.2.115" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.201188][ T29] audit: type=1400 audit(1790103588.775:273): avc: denied { connect } for pid=3911 comm="syz.2.115" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.202679][ T29] audit: type=1400 audit(1790103588.775:274): avc: denied { write } for pid=3911 comm="syz.2.115" laddr=224.0.0.1 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.340188][ T29] audit: type=1400 audit(1790103588.915:275): avc: denied { perfmon } for pid=3921 comm="syz.2.117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.516758][ T29] audit: type=1400 audit(1790103589.085:276): avc: denied { bpf } for pid=3944 comm="syz.4.124" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.518183][ T3942] FAULT_INJECTION: forcing a failure. [ 43.518183][ T3942] name failslab, interval 1, probability 0, space 0, times 1 [ 43.518217][ T3942] CPU: 0 UID: 0 PID: 3942 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.518251][ T3942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.518268][ T3942] Call Trace: [ 43.518276][ T3942] [ 43.518286][ T3942] __dump_stack+0x1d/0x30 [ 43.518314][ T3942] dump_stack_lvl+0x95/0xd0 [ 43.518357][ T3942] dump_stack+0x15/0x1b [ 43.518448][ T3942] should_fail_ex+0x262/0x280 [ 43.518556][ T3942] ? __se_sys_mount+0xef/0x2e0 [ 43.518679][ T3942] should_failslab+0x8c/0xb0 [ 43.518787][ T3942] __kmalloc_cache_noprof+0x7a/0x400 [ 43.518821][ T3942] ? __se_sys_mount+0xef/0x2e0 [ 43.518849][ T3942] __se_sys_mount+0xef/0x2e0 [ 43.518870][ T3942] ? restore_fpregs_from_fpstate+0x61/0x110 [ 43.518931][ T3942] __x64_sys_mount+0x67/0x80 [ 43.518955][ T3942] x64_sys_call+0xc3b/0x2550 [ 43.518990][ T3942] do_syscall_64+0x112/0x360 [ 43.519025][ T3942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.519115][ T3942] RIP: 0033:0x7f975b69e159 [ 43.519134][ T3942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.519156][ T3942] RSP: 002b:00007f975a0f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.519182][ T3942] RAX: ffffffffffffffda RBX: 00007f975b925fa0 RCX: 00007f975b69e159 [ 43.519196][ T3942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.519208][ T3942] RBP: 00007f975b73506b R08: 0000200000000480 R09: 0000000000000000 [ 43.519252][ T3942] R10: 0000000000800006 R11: 0000000000000246 R12: 0000000000000000 [ 43.519264][ T3942] R13: 00007f975b926038 R14: 00007f975b925fa0 R15: 00007ffd11a97fd8 [ 43.519313][ T3942] [ 43.782884][ T3958] loop2: detected capacity change from 0 to 512 [ 43.791751][ T3958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.791873][ T3958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 43.791936][ T3958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.802774][ T3958] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 43.807591][ T3958] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.129: corrupted in-inode xattr: e_name out of bounds [ 43.807767][ T3958] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.808247][ T3958] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.129: couldn't read orphan inode 15 (err -117) [ 43.808343][ T3958] loop2: lost filesystem error report for type 5 error -117 [ 43.809463][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.839221][ T3958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.839346][ T3958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 43.839444][ T3958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.881724][ T3958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.881807][ T3958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 43.881890][ T3958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.907980][ T3958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.908065][ T3958] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 43.908126][ T3958] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.129: Corrupt directory, running e2fsck is recommended [ 43.931152][ T3958] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.040295][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.139135][ T3964] loop3: detected capacity change from 0 to 256 [ 44.160012][ T3973] loop0: detected capacity change from 0 to 1024 [ 44.173690][ T3973] EXT4-fs: Ignoring removed bh option [ 44.179097][ T3973] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 44.198259][ T3428] IPVS: starting estimator thread 0... [ 44.198850][ T3973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.290261][ T3981] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.314033][ T3979] IPVS: using max 1968 ests per chain, 98400 per kthread [ 44.350621][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.381444][ T3987] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.382060][ T3987] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 44.419298][ T3377] infiniband s`z1: ib_query_port failed (-19) [ 44.456139][ T3992] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 44.456166][ T3992] __nla_validate_parse: 3 callbacks suppressed [ 44.456188][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 44.662931][ T4010] xt_hashlimit: size too large, truncated to 1048576 [ 44.715211][ T4014] xt_hashlimit: size too large, truncated to 1048576 [ 45.109668][ T4032] loop1: detected capacity change from 0 to 256 [ 45.231715][ T4034] 9pnet: p9_errstr2errno: server reported unknown error [ 45.319055][ T4043] can0: slcan on pts1. [ 45.420982][ T4042] can0 (unregistered): slcan off pts1. [ 45.541514][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 45.638675][ T4050] loop0: detected capacity change from 0 to 128 [ 45.697490][ T4069] sg_write: process 60 (syz.4.166) changed security contexts after opening file descriptor, this is not allowed. [ 45.889402][ T4050] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.892320][ T4050] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.094480][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.157972][ T4104] FAULT_INJECTION: forcing a failure. [ 46.157972][ T4104] name failslab, interval 1, probability 0, space 0, times 0 [ 46.158009][ T4104] CPU: 1 UID: 0 PID: 4104 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.158168][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.158186][ T4104] Call Trace: [ 46.158195][ T4104] [ 46.158222][ T4104] __dump_stack+0x1d/0x30 [ 46.158249][ T4104] dump_stack_lvl+0x95/0xd0 [ 46.158272][ T4104] dump_stack+0x15/0x1b [ 46.158341][ T4104] should_fail_ex+0x262/0x280 [ 46.158441][ T4104] ? bpf_test_init+0x86/0x130 [ 46.158481][ T4104] should_failslab+0x8c/0xb0 [ 46.158517][ T4104] __kmalloc_noprof+0xd0/0x4d0 [ 46.158570][ T4104] ? finish_task_switch+0x121/0x340 [ 46.158658][ T4104] ? bpf_test_init+0x86/0x130 [ 46.158696][ T4104] bpf_test_init+0x86/0x130 [ 46.158771][ T4104] bpf_prog_test_run_skb+0x271/0x11b0 [ 46.158871][ T4104] ? futex_unqueue+0xc5/0xf0 [ 46.158946][ T4104] ? __rcu_read_unlock+0x4e/0x70 [ 46.158981][ T4104] ? __fget_files+0x184/0x1c0 [ 46.159004][ T4104] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 46.159104][ T4104] bpf_prog_test_run+0x208/0x340 [ 46.159206][ T4104] __sys_bpf+0x8da/0xc30 [ 46.159244][ T4104] __x64_sys_bpf+0x69/0x80 [ 46.159266][ T4104] x64_sys_call+0xf26/0x2550 [ 46.159343][ T4104] do_syscall_64+0x112/0x360 [ 46.159372][ T4104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.159446][ T4104] RIP: 0033:0x7fa8e27ce159 [ 46.159463][ T4104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.159482][ T4104] RSP: 002b:00007fa8e1227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.159503][ T4104] RAX: ffffffffffffffda RBX: 00007fa8e2a55fa0 RCX: 00007fa8e27ce159 [ 46.159517][ T4104] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 46.159589][ T4104] RBP: 00007fa8e286506b R08: 0000000000000000 R09: 0000000000000000 [ 46.159656][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.159710][ T4104] R13: 00007fa8e2a56038 R14: 00007fa8e2a55fa0 R15: 00007ffd695a5d38 [ 46.159738][ T4104] [ 46.428576][ T4111] FAULT_INJECTION: forcing a failure. [ 46.428576][ T4111] name failslab, interval 1, probability 0, space 0, times 0 [ 46.428607][ T4111] CPU: 1 UID: 0 PID: 4111 Comm: syz.4.178 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.428641][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.428707][ T4111] Call Trace: [ 46.428717][ T4111] [ 46.428727][ T4111] __dump_stack+0x1d/0x30 [ 46.428758][ T4111] dump_stack_lvl+0x95/0xd0 [ 46.428789][ T4111] dump_stack+0x15/0x1b [ 46.428809][ T4111] should_fail_ex+0x262/0x280 [ 46.428890][ T4111] ? __alloc_skb+0x2e0/0x6f0 [ 46.428930][ T4111] should_failslab+0x8c/0xb0 [ 46.428968][ T4111] kmem_cache_alloc_node_noprof+0x82/0x400 [ 46.429023][ T4111] ? conn_put+0x1ce/0x200 [ 46.429052][ T4111] ? __alloc_skb+0x2e0/0x6f0 [ 46.429093][ T4111] ? kfree+0x2f0/0x3b0 [ 46.429120][ T4111] __alloc_skb+0x2e0/0x6f0 [ 46.429227][ T4111] ? kvfree_call_rcu+0xed/0x3d0 [ 46.429267][ T4111] tipc_buf_acquire+0x2c/0xb0 [ 46.429298][ T4111] tipc_named_withdraw+0x13b/0x360 [ 46.429335][ T4111] tipc_nametbl_withdraw+0x154/0x230 [ 46.429392][ T4111] tipc_release+0xb32/0xf30 [ 46.429493][ T4111] ? locks_remove_posix+0x69/0x370 [ 46.429536][ T4111] __sock_release+0x65/0x150 [ 46.429571][ T4111] ? __pfx_sock_close+0x10/0x10 [ 46.429656][ T4111] sock_close+0x19/0x30 [ 46.429682][ T4111] __fput+0x29e/0x630 [ 46.429710][ T4111] fput_close_sync+0xad/0x190 [ 46.429791][ T4111] __x64_sys_close+0x55/0xf0 [ 46.429833][ T4111] x64_sys_call+0x812/0x2550 [ 46.429870][ T4111] do_syscall_64+0x112/0x360 [ 46.429898][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.429926][ T4111] RIP: 0033:0x7fa8e27ce159 [ 46.429974][ T4111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.429996][ T4111] RSP: 002b:00007fa8e1227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.430024][ T4111] RAX: ffffffffffffffda RBX: 00007fa8e2a55fa0 RCX: 00007fa8e27ce159 [ 46.430043][ T4111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.430081][ T4111] RBP: 00007fa8e286506b R08: 0000000000000000 R09: 0000000000000000 [ 46.430099][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.430114][ T4111] R13: 00007fa8e2a56038 R14: 00007fa8e2a55fa0 R15: 00007ffd695a5d38 [ 46.430133][ T4111] [ 46.430180][ T4111] tipc: Withdrawal distribution failure [ 47.224707][ T4143] loop0: detected capacity change from 0 to 1024 [ 47.248224][ T4143] EXT4-fs: Ignoring removed bh option [ 47.251131][ T4143] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 47.258347][ T4143] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 47.259279][ T4143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.815733][ T4143] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.857729][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 47.857766][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 47.866572][ T4150] gretap0: entered promiscuous mode [ 47.885303][ T4150] gretap0: left promiscuous mode [ 47.913581][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 47.913618][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 47.918662][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.959260][ T4152] gretap0: entered promiscuous mode [ 47.976149][ T4152] gretap0: left promiscuous mode [ 48.006926][ T4157] loop0: detected capacity change from 0 to 512 [ 48.007320][ T4157] ext4: Unknown parameter 'noacl' [ 48.163483][ T4167] tipc: Started in network mode [ 48.163521][ T4167] tipc: Node identity 8e2eeb4c0188, cluster identity 4711 [ 48.163577][ T4167] tipc: Enabled bearer , priority 1 [ 48.190765][ T4166] tipc: Resetting bearer [ 48.193986][ T4166] tipc: Disabling bearer [ 48.240317][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 48.240335][ T29] audit: type=1400 audit(1790103593.815:336): avc: denied { write } for pid=4172 comm="syz.2.204" name="mcfilter6" dev="proc" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.317468][ T4179] loop4: detected capacity change from 0 to 1024 [ 48.318019][ T4179] EXT4-fs: Ignoring removed bh option [ 48.318538][ T4179] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 48.339453][ T4179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.354882][ T29] audit: type=1400 audit(1790103593.925:337): avc: denied { write } for pid=4177 comm="syz.4.207" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.478337][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.523218][ T29] audit: type=1400 audit(1790103594.095:338): avc: denied { read write } for pid=4195 comm="syz.3.214" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.523283][ T29] audit: type=1400 audit(1790103594.095:339): avc: denied { open } for pid=4195 comm="syz.3.214" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.637453][ T29] audit: type=1400 audit(1790103594.205:340): avc: denied { create } for pid=4203 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.732889][ T29] audit: type=1400 audit(1790103594.305:341): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.044863][ T29] audit: type=1400 audit(1790103594.615:342): avc: denied { create } for pid=4234 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.209590][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.209632][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.209712][ T4222] bridge_slave_0: entered allmulticast mode [ 49.211147][ T4222] bridge_slave_0: entered promiscuous mode [ 49.213486][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.213644][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.213897][ T4222] bridge_slave_1: entered allmulticast mode [ 49.215265][ T4222] bridge_slave_1: entered promiscuous mode [ 49.242892][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.245408][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.284301][ T4222] team0: Port device team_slave_0 added [ 49.285379][ T4222] team0: Port device team_slave_1 added [ 49.302806][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.302820][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.302851][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.304074][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.304086][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.304112][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.336566][ T4222] hsr_slave_0: entered promiscuous mode [ 49.337792][ T4222] hsr_slave_1: entered promiscuous mode [ 49.338413][ T4222] debugfs: 'hsr0' already exists in 'hsr' [ 49.338456][ T4222] Cannot create hsr debugfs directory [ 49.442534][ T29] audit: type=1400 audit(1790103595.015:343): avc: denied { bind } for pid=4255 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.442801][ T29] audit: type=1400 audit(1790103595.015:344): avc: denied { listen } for pid=4255 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.443153][ T29] audit: type=1400 audit(1790103595.015:345): avc: denied { connect } for pid=4255 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.576004][ T4222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.595375][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.598912][ T4222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.609525][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.616230][ T4222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.625650][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.635457][ T4222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.642257][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.676509][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.676550][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.676730][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.676763][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.727038][ T4271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.237'. [ 49.737723][ T4271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4271 comm=syz.0.237 [ 49.737932][ T4271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.237'. [ 49.785769][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.798361][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.799380][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.819693][ T4222] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.828102][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.828164][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.842082][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.842178][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.083684][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.322878][ T4325] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 50.339751][ T4222] veth0_vlan: entered promiscuous mode [ 50.348223][ T4222] veth1_vlan: entered promiscuous mode [ 50.389502][ T4222] veth0_macvtap: entered promiscuous mode [ 50.400448][ T4222] veth1_macvtap: entered promiscuous mode [ 50.441565][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.442325][ T4332] FAULT_INJECTION: forcing a failure. [ 50.442325][ T4332] name failslab, interval 1, probability 0, space 0, times 0 [ 50.442375][ T4332] CPU: 0 UID: 0 PID: 4332 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.442408][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.442465][ T4332] Call Trace: [ 50.442474][ T4332] [ 50.442514][ T4332] __dump_stack+0x1d/0x30 [ 50.442545][ T4332] dump_stack_lvl+0x95/0xd0 [ 50.442567][ T4332] dump_stack+0x15/0x1b [ 50.442630][ T4332] should_fail_ex+0x262/0x280 [ 50.442664][ T4332] should_failslab+0x8c/0xb0 [ 50.442837][ T4332] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 50.442877][ T4332] ? shmem_alloc_inode+0x34/0x50 [ 50.443008][ T4332] ? shmem_alloc_inode+0x34/0x50 [ 50.443056][ T4332] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 50.443096][ T4332] shmem_alloc_inode+0x34/0x50 [ 50.443128][ T4332] alloc_inode+0x40/0x170 [ 50.443174][ T4332] new_inode+0x1d/0xe0 [ 50.443204][ T4332] shmem_get_inode+0x250/0x7b0 [ 50.443294][ T4332] __shmem_file_setup+0x14f/0x260 [ 50.443334][ T4332] shmem_file_setup+0x3b/0x50 [ 50.443372][ T4332] memfd_alloc_file+0x4e/0x300 [ 50.443427][ T4332] __se_sys_memfd_create+0x2e1/0x3b0 [ 50.443465][ T4332] __x64_sys_memfd_create+0x31/0x40 [ 50.443500][ T4332] x64_sys_call+0x1955/0x2550 [ 50.443531][ T4332] do_syscall_64+0x112/0x360 [ 50.443609][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.443634][ T4332] RIP: 0033:0x7f369ec8e159 [ 50.443656][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.443681][ T4332] RSP: 002b:00007f369d6e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 50.443768][ T4332] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f369ec8e159 [ 50.443822][ T4332] RDX: 00007f369d6e6ee0 RSI: 0000000000000000 RDI: 00007f369ed2524b [ 50.443836][ T4332] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000 [ 50.443895][ T4332] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 50.443914][ T4332] R13: 00007f369d6e6ee0 R14: 00007f369d6e6ea0 R15: 0000200000000600 [ 50.443934][ T4332] [ 50.447653][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.581740][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.582528][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.582716][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.582820][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.744815][ T4335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.253'. [ 50.871722][ T4354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.261'. [ 51.426959][ T4359] loop3: detected capacity change from 0 to 512 [ 51.444793][ T4359] EXT4-fs: test_dummy_encryption option not supported [ 51.583589][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 51.589013][ T4373] bond1: Invalid ad_actor_system MAC address. [ 51.589095][ T4373] bond1: option ad_actor_system: invalid value (1) [ 51.590725][ T4373] bond1 (unregistering): Released all slaves [ 51.887364][ T4400] ip_tables: iptables: counters copy to user failed while replacing table [ 52.080951][ T4415] loop2: detected capacity change from 0 to 164 [ 52.113583][ T4394] loop5: detected capacity change from 0 to 32768 [ 52.119736][ T4415] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 52.151322][ T4394] loop5: p1 p3 < > [ 52.189576][ T4422] loop1: detected capacity change from 0 to 256 [ 52.371210][ T4437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.371315][ T4437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.404424][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 52.404506][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 52.461875][ T4438] loop0: detected capacity change from 0 to 8192 [ 52.483506][ T4440] process 'syz.3.297' launched './file0' with NULL argv: empty string added [ 52.500937][ T4438] loop0: p1[EZD] p3 p4 [ 52.502697][ T4438] loop0: p3 start 150994944 is beyond EOD, truncated [ 52.661421][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.666412][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.991160][ T4485] syzkaller1: entered promiscuous mode [ 52.991185][ T4485] syzkaller1: entered allmulticast mode [ 53.152812][ T4496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 53.176241][ T4497] loop3: detected capacity change from 0 to 1024 [ 53.187475][ T4496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 53.203375][ T4497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 53.264708][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 53.264723][ T29] audit: type=1400 audit(1790103598.835:429): avc: denied { ioctl } for pid=4505 comm="syz.0.326" path="socket:[8153]" dev="sockfs" ino=8153 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.328605][ T29] audit: type=1400 audit(1790103598.895:430): avc: denied { getopt } for pid=4507 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.358372][ T4511] FAULT_INJECTION: forcing a failure. [ 53.358372][ T4511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.358408][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.2.327 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.358436][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.358493][ T4511] Call Trace: [ 53.358502][ T4511] [ 53.358512][ T4511] __dump_stack+0x1d/0x30 [ 53.358611][ T4511] dump_stack_lvl+0x95/0xd0 [ 53.358633][ T4511] dump_stack+0x15/0x1b [ 53.358661][ T4511] should_fail_ex+0x262/0x280 [ 53.358695][ T4511] should_fail_alloc_page+0xf2/0x100 [ 53.358804][ T4511] __alloc_frozen_pages_noprof+0x157/0x400 [ 53.358895][ T4511] alloc_pages_mpol+0xaf/0x1d0 [ 53.358919][ T4511] folio_alloc_mpol_noprof+0x39/0x80 [ 53.358951][ T4511] shmem_get_folio_gfp+0x3ff/0xd90 [ 53.358984][ T4511] ? filemap_map_pages+0xe96/0xf70 [ 53.359018][ T4511] shmem_fault+0xf6/0x250 [ 53.359104][ T4511] handle_mm_fault+0x2310/0x3bb0 [ 53.359143][ T4511] __get_user_pages+0x12e9/0x1eb0 [ 53.359227][ T4511] __mm_populate+0x242/0x390 [ 53.359259][ T4511] vm_mmap_pgoff+0x23b/0x2d0 [ 53.359293][ T4511] ksys_mmap_pgoff+0xc1/0x310 [ 53.359331][ T4511] ? __x64_sys_mmap+0x49/0x70 [ 53.359375][ T4511] x64_sys_call+0x23b3/0x2550 [ 53.359404][ T4511] do_syscall_64+0x112/0x360 [ 53.359507][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.359533][ T4511] RIP: 0033:0x7f369ec8e159 [ 53.359549][ T4511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.359573][ T4511] RSP: 002b:00007f369d6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.359595][ T4511] RAX: ffffffffffffffda RBX: 00007f369ef15fa0 RCX: 00007f369ec8e159 [ 53.359627][ T4511] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 53.359641][ T4511] RBP: 00007f369ed2506b R08: ffffffffffffffff R09: 0000000000000000 [ 53.359655][ T4511] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 53.359672][ T4511] R13: 00007f369ef16038 R14: 00007f369ef15fa0 R15: 00007fff05e10aa8 [ 53.359704][ T4511] [ 53.576296][ T29] audit: type=1400 audit(1790103599.145:431): avc: denied { write } for pid=4495 comm="syz.3.323" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.576456][ T29] audit: type=1400 audit(1790103599.145:432): avc: denied { add_name } for pid=4495 comm="syz.3.323" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.631302][ T29] audit: type=1400 audit(1790103599.205:433): avc: denied { name_bind } for pid=4517 comm="syz.1.332" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.673067][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 53.709846][ T29] audit: type=1400 audit(1790103599.275:434): avc: denied { create } for pid=4519 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rds_socket permissive=1 [ 53.743347][ T29] audit: type=1400 audit(1790103599.315:435): avc: denied { connect } for pid=4519 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rds_socket permissive=1 [ 53.876754][ T4533] netlink: 'syz.0.338': attribute type 19 has an invalid length. [ 53.876778][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.893885][ T4533] netlink: 'syz.0.338': attribute type 19 has an invalid length. [ 53.893937][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 53.910943][ T351] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.911937][ T351] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.912043][ T351] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.912269][ T351] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.959002][ T29] audit: type=1400 audit(1790103599.525:436): avc: denied { getopt } for pid=4534 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.047240][ T29] audit: type=1400 audit(1790103599.615:437): avc: denied { read } for pid=4540 comm="syz.1.342" path="socket:[6980]" dev="sockfs" ino=6980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.064586][ T29] audit: type=1400 audit(1790103599.625:438): avc: denied { load_policy } for pid=4537 comm="syz.5.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.076380][ T4544] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 54.076432][ T4544] SELinux: failed to load policy [ 54.232697][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 54.297646][ T4569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.396628][ T4575] loop0: detected capacity change from 0 to 1024 [ 54.405782][ T4575] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.405977][ T4575] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.421107][ T4575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.524187][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.631169][ T4603] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.759421][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 54.809984][ T4615] FAULT_INJECTION: forcing a failure. [ 54.809984][ T4615] name failslab, interval 1, probability 0, space 0, times 0 [ 54.810286][ T4615] CPU: 0 UID: 0 PID: 4615 Comm: syz.1.371 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.810320][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.810337][ T4615] Call Trace: [ 54.810346][ T4615] [ 54.810420][ T4615] __dump_stack+0x1d/0x30 [ 54.810454][ T4615] dump_stack_lvl+0x95/0xd0 [ 54.810485][ T4615] dump_stack+0x15/0x1b [ 54.810514][ T4615] should_fail_ex+0x262/0x280 [ 54.810548][ T4615] should_failslab+0x8c/0xb0 [ 54.810635][ T4615] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 54.810737][ T4615] ? shmem_alloc_inode+0x34/0x50 [ 54.810782][ T4615] ? shmem_alloc_inode+0x34/0x50 [ 54.810888][ T4615] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 54.810935][ T4615] shmem_alloc_inode+0x34/0x50 [ 54.811052][ T4615] alloc_inode+0x40/0x170 [ 54.811079][ T4615] new_inode+0x1d/0xe0 [ 54.811140][ T4615] shmem_get_inode+0x250/0x7b0 [ 54.811187][ T4615] __shmem_file_setup+0x14f/0x260 [ 54.811267][ T4615] shmem_file_setup+0x3b/0x50 [ 54.811308][ T4615] memfd_alloc_file+0x4e/0x300 [ 54.811347][ T4615] __se_sys_memfd_create+0x2e1/0x3b0 [ 54.811392][ T4615] __x64_sys_memfd_create+0x31/0x40 [ 54.811433][ T4615] x64_sys_call+0x1955/0x2550 [ 54.811468][ T4615] do_syscall_64+0x112/0x360 [ 54.811496][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.811559][ T4615] RIP: 0033:0x7f36cf65e159 [ 54.811575][ T4615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.811595][ T4615] RSP: 002b:00007f36ce0b6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 54.811679][ T4615] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f36cf65e159 [ 54.811699][ T4615] RDX: 00007f36ce0b6ee0 RSI: 0000000000000000 RDI: 00007f36cf6f524b [ 54.811718][ T4615] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000 [ 54.811736][ T4615] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 54.811754][ T4615] R13: 00007f36ce0b6ee0 R14: 00007f36ce0b6ea0 R15: 0000200000000600 [ 54.811780][ T4615] [ 54.906722][ T4600] loop0: detected capacity change from 0 to 512 [ 54.923899][ T4600] EXT4-fs: test_dummy_encryption option not supported [ 55.115941][ T4625] netdevsim netdevsim0 netdevsim3: IPsec offload requires 128 bit authentication [ 55.401615][ T4635] FAULT_INJECTION: forcing a failure. [ 55.401615][ T4635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 55.401706][ T4635] CPU: 0 UID: 0 PID: 4635 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.401741][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.401758][ T4635] Call Trace: [ 55.401767][ T4635] [ 55.401777][ T4635] __dump_stack+0x1d/0x30 [ 55.401882][ T4635] dump_stack_lvl+0x95/0xd0 [ 55.401936][ T4635] dump_stack+0x15/0x1b [ 55.401964][ T4635] should_fail_ex+0x262/0x280 [ 55.402066][ T4635] should_fail_alloc_page+0xf2/0x100 [ 55.402160][ T4635] __alloc_frozen_pages_noprof+0x157/0x400 [ 55.402199][ T4635] alloc_pages_mpol+0xaf/0x1d0 [ 55.402231][ T4635] folio_alloc_mpol_noprof+0x39/0x80 [ 55.402325][ T4635] shmem_get_folio_gfp+0x3ff/0xd90 [ 55.402370][ T4635] ? filemap_map_pages+0xe96/0xf70 [ 55.402451][ T4635] shmem_fault+0xf6/0x250 [ 55.402500][ T4635] handle_mm_fault+0x2310/0x3bb0 [ 55.402618][ T4635] __get_user_pages+0x12e9/0x1eb0 [ 55.402662][ T4635] __mm_populate+0x242/0x390 [ 55.402685][ T4635] vm_mmap_pgoff+0x23b/0x2d0 [ 55.402718][ T4635] ksys_mmap_pgoff+0xc1/0x310 [ 55.402819][ T4635] ? __x64_sys_mmap+0x49/0x70 [ 55.402907][ T4635] x64_sys_call+0x23b3/0x2550 [ 55.402957][ T4635] do_syscall_64+0x112/0x360 [ 55.402979][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.403001][ T4635] RIP: 0033:0x7f36cf65e159 [ 55.403018][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.403080][ T4635] RSP: 002b:00007f36ce0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.403107][ T4635] RAX: ffffffffffffffda RBX: 00007f36cf8e5fa0 RCX: 00007f36cf65e159 [ 55.403127][ T4635] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 55.403141][ T4635] RBP: 00007f36cf6f506b R08: ffffffffffffffff R09: 0000000000000000 [ 55.403155][ T4635] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 55.403167][ T4635] R13: 00007f36cf8e6038 R14: 00007f36cf8e5fa0 R15: 00007ffc97036468 [ 55.403189][ T4635] [ 55.772346][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.871599][ T4639] syz.2.382 (4639) used greatest stack depth: 10056 bytes left [ 56.057181][ T4672] loop3: detected capacity change from 0 to 164 [ 56.075629][ T4672] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 56.229499][ T4681] loop1: detected capacity change from 0 to 1024 [ 56.229968][ T4681] EXT4-fs: Ignoring removed bh option [ 56.243657][ T4681] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 56.290286][ T4681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.359084][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.388878][ T4661] EXT4-fs: test_dummy_encryption option not supported [ 56.758506][ T4699] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 56.831544][ T4703] set_capacity_and_notify: 1 callbacks suppressed [ 56.831559][ T4703] loop2: detected capacity change from 0 to 256 [ 56.894979][ T4707] loop5: detected capacity change from 0 to 512 [ 56.906877][ T4707] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.906911][ T4707] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 56.906928][ T4707] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.408: Corrupt directory, running e2fsck is recommended [ 56.907845][ T4707] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 56.909146][ T4707] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.408: corrupted in-inode xattr: e_name out of bounds [ 56.909183][ T4707] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.910056][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 56.910082][ C0] EXT4-fs (loop5): initial error at time 1790103602: ext4_iget_extra_inode:5210: inode 15 [ 56.910117][ C0] EXT4-fs (loop5): last error at time 1790103602: ext4_iget_extra_inode:5210: inode 15 [ 56.915475][ T4707] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.408: couldn't read orphan inode 15 (err -117) [ 56.915569][ T4707] loop5: lost filesystem error report for type 5 error -117 [ 56.917719][ T4707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.985545][ T4707] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.985578][ T4707] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 56.985650][ T4707] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.408: Corrupt directory, running e2fsck is recommended [ 57.022986][ T4707] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.023080][ T4707] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 57.023127][ T4707] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.408: Corrupt directory, running e2fsck is recommended [ 57.062661][ T4707] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.062765][ T4707] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 57.062815][ T4707] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.408: Corrupt directory, running e2fsck is recommended [ 57.103837][ T4707] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.229636][ T4222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.558264][ T4716] loop5: detected capacity change from 0 to 256 [ 57.959003][ T4732] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 58.274887][ T4748] FAULT_INJECTION: forcing a failure. [ 58.274887][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 58.274984][ T4748] CPU: 1 UID: 0 PID: 4748 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.275020][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.275092][ T4748] Call Trace: [ 58.275102][ T4748] [ 58.275112][ T4748] __dump_stack+0x1d/0x30 [ 58.275146][ T4748] dump_stack_lvl+0x95/0xd0 [ 58.275186][ T4748] dump_stack+0x15/0x1b [ 58.275227][ T4748] should_fail_ex+0x262/0x280 [ 58.275257][ T4748] should_failslab+0x8c/0xb0 [ 58.275299][ T4748] __kvmalloc_node_noprof+0x168/0x5c0 [ 58.275432][ T4748] ? bpf_compute_scc+0x76/0x630 [ 58.275504][ T4748] ? kfree+0x143/0x3b0 [ 58.275550][ T4748] ? bpf_compute_scc+0x76/0x630 [ 58.275599][ T4748] bpf_compute_scc+0x76/0x630 [ 58.275631][ T4748] bpf_check+0x1b5d/0x1d00 [ 58.275663][ T4748] bpf_prog_load+0xefb/0x1060 [ 58.275698][ T4748] ? avc_has_perm_noaudit+0xac/0x160 [ 58.275760][ T4748] __sys_bpf+0xbae/0xc30 [ 58.275798][ T4748] ? do_futex+0x300/0x460 [ 58.275848][ T4748] __x64_sys_bpf+0x69/0x80 [ 58.275879][ T4748] x64_sys_call+0xf26/0x2550 [ 58.275936][ T4748] do_syscall_64+0x112/0x360 [ 58.275957][ T4748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.275985][ T4748] RIP: 0033:0x7f975b69e159 [ 58.276008][ T4748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.276037][ T4748] RSP: 002b:00007f975a0f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.276066][ T4748] RAX: ffffffffffffffda RBX: 00007f975b925fa0 RCX: 00007f975b69e159 [ 58.276098][ T4748] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 58.276118][ T4748] RBP: 00007f975b73506b R08: 0000000000000000 R09: 0000000000000000 [ 58.276136][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.276153][ T4748] R13: 00007f975b926038 R14: 00007f975b925fa0 R15: 00007ffd11a97fd8 [ 58.276189][ T4748] [ 58.514420][ T4750] loop3: detected capacity change from 0 to 512 [ 58.514828][ T4750] EXT4-fs: test_dummy_encryption option not supported [ 58.816698][ T4757] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.862851][ T3378] infiniband s`z1: ib_query_port failed (-19) [ 58.887227][ T4759] loop3: detected capacity change from 0 to 256 [ 58.985913][ T4767] FAULT_INJECTION: forcing a failure. [ 58.985913][ T4767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.985983][ T4767] CPU: 0 UID: 0 PID: 4767 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.986018][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.986037][ T4767] Call Trace: [ 58.986046][ T4767] [ 58.986055][ T4767] __dump_stack+0x1d/0x30 [ 58.986086][ T4767] dump_stack_lvl+0x95/0xd0 [ 58.986118][ T4767] dump_stack+0x15/0x1b [ 58.986143][ T4767] should_fail_ex+0x262/0x280 [ 58.986202][ T4767] should_fail+0xb/0x20 [ 58.986232][ T4767] should_fail_usercopy+0x1a/0x20 [ 58.986269][ T4767] _copy_from_user+0x1c/0xb0 [ 58.986371][ T4767] bpf_test_init+0xb9/0x130 [ 58.986484][ T4767] bpf_prog_test_run_skb+0x271/0x11b0 [ 58.986527][ T4767] ? __rcu_read_unlock+0x4e/0x70 [ 58.986607][ T4767] ? __fget_files+0x184/0x1c0 [ 58.986642][ T4767] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 58.986708][ T4767] bpf_prog_test_run+0x208/0x340 [ 58.986814][ T4767] __sys_bpf+0x8da/0xc30 [ 58.986874][ T4767] ? do_futex+0x300/0x460 [ 58.986994][ T4767] __x64_sys_bpf+0x69/0x80 [ 58.987084][ T4767] x64_sys_call+0xf26/0x2550 [ 58.987184][ T4767] do_syscall_64+0x112/0x360 [ 58.987250][ T4767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.987281][ T4767] RIP: 0033:0x7f7bc070e159 [ 58.987303][ T4767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.987328][ T4767] RSP: 002b:00007f7bbf167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.987367][ T4767] RAX: ffffffffffffffda RBX: 00007f7bc0995fa0 RCX: 00007f7bc070e159 [ 58.987387][ T4767] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 58.987406][ T4767] RBP: 00007f7bc07a506b R08: 0000000000000000 R09: 0000000000000000 [ 58.987424][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.987469][ T4767] R13: 00007f7bc0996038 R14: 00007f7bc0995fa0 R15: 00007ffd654f9d08 [ 58.987489][ T4767] [ 59.122175][ T4761] loop2: detected capacity change from 0 to 256 [ 59.737625][ T4779] FAULT_INJECTION: forcing a failure. [ 59.737625][ T4779] name failslab, interval 1, probability 0, space 0, times 0 [ 59.737663][ T4779] CPU: 0 UID: 0 PID: 4779 Comm: syz.0.439 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.737691][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.737708][ T4779] Call Trace: [ 59.737717][ T4779] [ 59.737727][ T4779] __dump_stack+0x1d/0x30 [ 59.737761][ T4779] dump_stack_lvl+0x95/0xd0 [ 59.737794][ T4779] dump_stack+0x15/0x1b [ 59.737821][ T4779] should_fail_ex+0x262/0x280 [ 59.737846][ T4779] should_failslab+0x8c/0xb0 [ 59.737960][ T4779] __kvmalloc_node_noprof+0x168/0x5c0 [ 59.738007][ T4779] ? bpf_compute_scc+0x76/0x630 [ 59.738028][ T4779] ? kfree+0x143/0x3b0 [ 59.738053][ T4779] ? bpf_compute_scc+0x76/0x630 [ 59.738108][ T4779] bpf_compute_scc+0x76/0x630 [ 59.738140][ T4779] bpf_check+0x1b5d/0x1d00 [ 59.738178][ T4779] bpf_prog_load+0xefb/0x1060 [ 59.738219][ T4779] ? avc_has_perm_noaudit+0xac/0x160 [ 59.738265][ T4779] __sys_bpf+0xbae/0xc30 [ 59.738293][ T4779] ? do_futex+0x300/0x460 [ 59.738409][ T4779] __x64_sys_bpf+0x69/0x80 [ 59.738436][ T4779] x64_sys_call+0xf26/0x2550 [ 59.738478][ T4779] do_syscall_64+0x112/0x360 [ 59.738507][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.738589][ T4779] RIP: 0033:0x7f7bc070e159 [ 59.738605][ T4779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.738665][ T4779] RSP: 002b:00007f7bbf167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.738685][ T4779] RAX: ffffffffffffffda RBX: 00007f7bc0995fa0 RCX: 00007f7bc070e159 [ 59.738704][ T4779] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 59.738722][ T4779] RBP: 00007f7bc07a506b R08: 0000000000000000 R09: 0000000000000000 [ 59.738740][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.738805][ T4779] R13: 00007f7bc0996038 R14: 00007f7bc0995fa0 R15: 00007ffd654f9d08 [ 59.738825][ T4779] [ 59.982124][ T4788] loop5: detected capacity change from 0 to 512 [ 59.982457][ T4788] EXT4-fs: test_dummy_encryption option not supported [ 59.983725][ T4784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 60.926477][ T4891] loop0: detected capacity change from 0 to 256 [ 61.026174][ T4900] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.139575][ T3377] infiniband s`z1: ib_query_port failed (-19) [ 61.843424][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 61.843439][ T29] audit: type=1400 audit(1790103607.415:446): avc: denied { read write } for pid=4913 comm="syz.0.458" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.843472][ T29] audit: type=1400 audit(1790103607.415:447): avc: denied { open } for pid=4913 comm="syz.0.458" path="/108/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.846373][ T29] audit: type=1400 audit(1790103607.415:448): avc: denied { ioctl } for pid=4913 comm="syz.0.458" path="/108/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.850388][ T29] audit: type=1400 audit(1790103607.415:449): avc: denied { allowed } for pid=4911 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.851319][ T4908] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 61.880258][ T4909] loop2: detected capacity change from 0 to 1024 [ 61.943468][ T4909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.956684][ T4909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 61.956784][ T4909] System zones: 0-1, 3-36 [ 61.962943][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.007095][ T29] audit: type=1400 audit(1790103607.575:450): avc: denied { write } for pid=4906 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.007124][ T29] audit: type=1400 audit(1790103607.575:451): avc: denied { create } for pid=4906 comm="syz.2.460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.024234][ T4912] bridge_slave_0: left allmulticast mode [ 62.024418][ T4912] bridge_slave_0: left promiscuous mode [ 62.024809][ T4912] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.087123][ T29] audit: type=1400 audit(1790103607.645:452): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.109044][ T4912] bridge_slave_1: left allmulticast mode [ 62.109156][ T4912] bridge_slave_1: left promiscuous mode [ 62.109417][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.149297][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.200542][ T4912] bond0: (slave bond_slave_0): Releasing backup interface [ 62.224060][ T29] audit: type=1400 audit(1790103607.795:453): avc: denied { ioctl } for pid=4926 comm="syz.5.466" path="socket:[9607]" dev="sockfs" ino=9607 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.226250][ T4912] bond0: (slave bond_slave_1): Releasing backup interface [ 62.268037][ T4912] team0: Port device team_slave_0 removed [ 62.280274][ T4912] team0: Port device team_slave_1 removed [ 62.281210][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.281230][ T4912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.294843][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.294904][ T4912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.085328][ T4912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.157363][ T4927] .: renamed from bond0 (while UP) [ 63.196013][ T5044] loop5: detected capacity change from 0 to 256 [ 63.476870][ T5052] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.068663][ T29] audit: type=1400 audit(1790103609.635:454): avc: denied { mount } for pid=5054 comm="syz.2.474" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.073370][ T5055] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 64.225670][ T3378] infiniband s`z1: ib_query_port failed (-19) [ 64.229992][ T5052] siw: device registration error -19 [ 64.235135][ T29] audit: type=1400 audit(1790103609.805:455): avc: denied { create } for pid=5057 comm="syz.5.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.264939][ T5045] syz.3.470 (5045) used greatest stack depth: 9736 bytes left [ 65.006322][ T5077] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 65.131992][ T5081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 65.783431][ T5097] loop0: detected capacity change from 0 to 164 [ 66.245785][ T5110] tipc: Started in network mode [ 66.245804][ T5110] tipc: Node identity 1000004, cluster identity 4711 [ 66.245818][ T5110] tipc: Node number set to 16777220 [ 66.246511][ T5110] tipc: Enabled bearer , priority 0 [ 66.248747][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 66.405546][ T5123] netlink: 64 bytes leftover after parsing attributes in process `syz.3.504'. [ 66.460436][ T5125] X25: received unknown 00 with LCI 000 [ 66.772453][ T5150] loop5: detected capacity change from 0 to 8192 [ 66.873694][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 66.873714][ T29] audit: type=1400 audit(1790103612.445:474): avc: denied { write } for pid=5151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.914354][ T4222] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 66.914383][ T4222] FAT-fs (loop5): Filesystem has been set read-only [ 66.984067][ T5171] loop7: detected capacity change from 0 to 16384 [ 66.985308][ T29] audit: type=1400 audit(1790103612.555:475): avc: denied { write } for pid=5167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.084442][ T5177] ================================================================== [ 67.084483][ T5177] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 67.084524][ T5177] [ 67.084529][ T5177] read-write to 0xffff88811ad61d90 of 8 bytes by interrupt on cpu 1: [ 67.084547][ T5177] __xa_clear_mark+0xf5/0x1e0 [ 67.084573][ T5177] __folio_end_writeback+0xe7/0x530 [ 67.084615][ T5177] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 67.084647][ T5177] folio_end_writeback+0x1c/0x70 [ 67.084674][ T5177] bh_end_async_write+0x1a6/0x250 [ 67.084702][ T5177] bio_endio+0x390/0x570 [ 67.084735][ T5177] blk_update_request+0x33a/0x710 [ 67.084768][ T5177] blk_mq_end_request+0x26/0x50 [ 67.084799][ T5177] lo_complete_rq+0x98/0x130 [ 67.084825][ T5177] blk_done_softirq+0x77/0xb0 [ 67.084853][ T5177] handle_softirqs+0xcc/0x2a0 [ 67.084881][ T5177] __irq_exit_rcu+0x44/0xe0 [ 67.084905][ T5177] sysvec_apic_timer_interrupt+0x74/0x80 [ 67.084940][ T5177] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.084969][ T5177] __rcu_read_unlock+0xa/0x70 [ 67.085008][ T5177] filemap_get_entry+0x2a4/0x2e0 [ 67.085034][ T5177] shmem_get_folio_gfp+0x1ee/0xd90 [ 67.085071][ T5177] shmem_file_read_iter+0xf4/0x4b0 [ 67.085092][ T5177] lo_rw_aio+0x6ab/0x760 [ 67.085109][ T5177] loop_process_work+0x569/0xad0 [ 67.085128][ T5177] loop_workfn+0x31/0x40 [ 67.085149][ T5177] process_scheduled_works+0x56a/0xa50 [ 67.085191][ T5177] worker_thread+0x569/0x750 [ 67.085232][ T5177] kthread+0x223/0x270 [ 67.085252][ T5177] ret_from_fork+0x146/0x330 [ 67.085281][ T5177] ret_from_fork_asm+0x1a/0x30 [ 67.085315][ T5177] [ 67.085322][ T5177] read to 0xffff88811ad61d90 of 8 bytes by task 5177 on cpu 0: [ 67.085343][ T5177] xas_find_marked+0x211/0x650 [ 67.085369][ T5177] filemap_get_folios_tag+0xf7/0x400 [ 67.085398][ T5177] filemap_write_and_wait_range+0x1f5/0x370 [ 67.085422][ T5177] sync_blockdev+0x35/0x50 [ 67.085450][ T5177] loop_set_status+0x110/0x670 [ 67.085471][ T5177] lo_ioctl+0x78f/0x1430 [ 67.085489][ T5177] blkdev_ioctl+0x387/0x460 [ 67.085542][ T5177] __se_sys_ioctl+0xce/0x140 [ 67.085577][ T5177] __x64_sys_ioctl+0x43/0x50 [ 67.085605][ T5177] x64_sys_call+0x239d/0x2550 [ 67.085636][ T5177] do_syscall_64+0x112/0x360 [ 67.085659][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.085683][ T5177] [ 67.085687][ T5177] value changed: 0xfffffffc00000000 -> 0xfffff00000000000 [ 67.085700][ T5177] [ 67.085703][ T5177] Reported by Kernel Concurrency Sanitizer on: [ 67.085714][ T5177] CPU: 0 UID: 0 PID: 5177 Comm: syz.3.514 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.085745][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.085761][ T5177] ================================================================== [ 67.165520][ T29] audit: type=1400 audit(1790103612.735:476): avc: denied { name_connect } for pid=5178 comm="syz.5.516" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.461896][ T5179] syz.5.516 (5179) used greatest stack depth: 9552 bytes left [ 67.474008][ T5177] loop7: detected capacity change from 16384 to 0 [ 67.478678][ C0] I/O error, dev loop7, sector 5504 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2