last executing test programs: 3.69731435s ago: executing program 0 (id=376): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000000)) 3.459058558s ago: executing program 0 (id=380): socket(0x25, 0x1, 0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="0500006d000000000a004e203058d861fc0100000000000000000000000000010600000000000000000000000000000000000000000000000000000000000000000000000000000074d53f6ef1a6f2f597781d0800"/144], 0x90) syz_io_uring_setup(0xb52, &(0x7f0000000000)={0x0, 0x107d36, 0x20000, 0x1, 0x268}, &(0x7f00000000c0), &(0x7f0000000480)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@authinfo={0x18, 0x84, 0x6, {0x1}}], 0x18, 0x8040}], 0x1, 0x8800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='.\x00', 0x0, 0x8, r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x188202, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @loopback, 0x5}, r1}}, 0x30) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80000000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timerfd_create(0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x2) 3.089225522s ago: executing program 4 (id=385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79126800000000006113280000000000bf2020000000000004000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000040000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = syz_open_pts(r0, 0x141601) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x7f, 0x7fffffff, 0x5, 0x35, 0x58, "c695fda58793a9ac2679ae3e6d7c5b4e0bdb90", 0x4, 0x6}) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r2, 0x0) 2.68816716s ago: executing program 2 (id=391): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069119400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x13f, 0xa}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = syz_open_pts(r2, 0x141601) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001f40)=@newtclass={0x434, 0x28, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffe0, 0xffff}, {0xa, 0xf}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x20000, 0x3, 0x122c, 0x4, 0x153c, 0x76d, 0x0, 0x7, 0x5, 0x9, 0x8, 0x8, 0x5, 0x4, 0x9, 0xa, 0x5, 0x2000000, 0x7, 0x7, 0xfff, 0x8, 0x9, 0x400, 0x3, 0x7fff, 0x3, 0x1, 0x8, 0x0, 0x7fffffff, 0x4, 0xd153, 0xff, 0xff, 0x86, 0x26c, 0x3, 0x5342, 0xfce, 0x0, 0x1, 0x0, 0x8, 0x9, 0xe, 0x7, 0x3d5, 0x4db5, 0xa, 0x40000, 0x5a14fa1f, 0x2, 0x5, 0x800, 0x1ff, 0xc0d9, 0x5, 0x24e, 0x6, 0x1, 0x8, 0x9, 0x80000001, 0x6, 0x80000001, 0x80, 0xd6, 0x6, 0xfca, 0xcf1d, 0x3, 0x9, 0x2, 0x8d, 0x7, 0x8, 0x76, 0x48, 0x1, 0x79, 0x5, 0x7, 0x4, 0xe, 0x2, 0x2, 0x1, 0xff, 0x1, 0x8, 0x8, 0x1000, 0x800, 0x7, 0x5, 0x6, 0x7, 0x101, 0xffff, 0x6, 0x4, 0x4, 0xfffffffe, 0xffff, 0x10001, 0xfffffff7, 0x101, 0xbe, 0x4, 0x2, 0x2, 0x4, 0x0, 0x4, 0x3, 0x8, 0x3d, 0x0, 0x9, 0x6, 0x4, 0x5, 0x7fff, 0x52ad, 0x9, 0x2, 0x1, 0x41, 0x7, 0x8, 0x2, 0x7, 0x200, 0x2, 0x2, 0x0, 0x10, 0x4, 0xfffffffa, 0xe, 0xcac, 0x80000000, 0x7, 0x4, 0xfffffff1, 0x7ff, 0x80000000, 0xc4, 0x2, 0x400, 0x0, 0xfffffffb, 0x1, 0x0, 0x4, 0xd, 0x7, 0x4, 0xe, 0x5, 0xd, 0xd62, 0x8, 0xfffff15c, 0x8, 0x2d, 0xe2, 0x0, 0x8, 0x6, 0x80, 0xe1, 0xb, 0x8, 0x4, 0x100, 0x1, 0x9a8, 0x0, 0x0, 0x9, 0x10000, 0x7fffffff, 0x2, 0x800, 0xe26, 0x6, 0x7, 0x74d3, 0x10001, 0x9, 0x4, 0x2, 0x40, 0x80, 0x0, 0x2, 0x7, 0x6, 0x0, 0x8000, 0xfff, 0xe34b, 0xbad, 0x9, 0x2, 0x5, 0x8, 0x9, 0x7, 0x496, 0x10001, 0x6, 0x100, 0x1, 0xfffffff9, 0x6, 0xfffffff7, 0x5, 0x8, 0x8, 0x4, 0x2, 0x4, 0x6, 0x8, 0x1, 0xee, 0x7fff, 0x7, 0x1, 0x12, 0xffff, 0x3, 0x101, 0x126, 0x45, 0xf, 0xd89, 0x6, 0x1, 0x7, 0x7, 0x8, 0x3, 0x7f, 0x7f, 0x6, 0x9, 0x7ff, 0x80000000, 0x3, 0x1, 0x4, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x7f, 0x7fffffff, 0x5, 0x35, 0x58, "c695fda58793a9ac2679ae3e6d7c5b4e0bdb90", 0x4, 0x6}) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 2.597420464s ago: executing program 2 (id=394): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x51) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.577817241s ago: executing program 2 (id=395): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200", 0x4c}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r3, r2, 0x0, 0x7ffff000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="346d66646e6f3d0861d1e9cd25", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 2.507998188s ago: executing program 1 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.498198456s ago: executing program 1 (id=397): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8001}}], 0x2, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7) 2.467937801s ago: executing program 1 (id=398): inotify_init() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2204c1a, &(0x7f0000000300)=ANY=[], 0x1, 0x6dd, &(0x7f0000001280)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601080000000000000000070000010c00078005001500050000000500010006002200050005000200000005000400020000000900020073797a300000000013000300686173683a6e65742c6966616365"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r5, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.186076341s ago: executing program 4 (id=400): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x800, 0x0) 2.156295266s ago: executing program 0 (id=401): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x45, 0x1, 0x8, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0xb}, 0x419, 0x40000000, 0x3fffffc, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.104195356s ago: executing program 4 (id=402): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000000)) 2.051922376s ago: executing program 0 (id=403): socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x9, 0x1, 0x3, 0xfffffffffffffff9}) mq_timedreceive(r5, &(0x7f0000000080)=""/168, 0xa8, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="88"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x8800, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r8, 0xd44, 0x44c1, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r11 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x8, 0x6f, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x3}, 0x4, 0x88f5, 0x0, 0x1, 0xf138, 0x2, 0x5, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0xd, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r7) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 1.784090409s ago: executing program 3 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.783564109s ago: executing program 4 (id=408): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050200000100000f05000000090000000100000005000000005f0000616100"], 0x0, 0x37, 0x0, 0x9}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.708649985s ago: executing program 3 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000002c0)=""/229, &(0x7f0000000000)=0xe5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="d3cda8490300"}}) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a0300"], 0x122}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000140)=""/26, 0x1a}], 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0xb, 0x59, 0x0, {0x5, 0x4, 0x1, 0x7, 0xf8, 0x66, 0x4, 0x5, 0x2e, 0x6, @private=0xa010101, @local}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.637544523s ago: executing program 2 (id=410): socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x2) splice(0xffffffffffffffff, &(0x7f0000000380)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240488c0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3f7f8000}, 0xa00, 0x81, 0x43a1bd74, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r8 = openat(r7, &(0x7f0000001480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x92) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0xf2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 1.563973979s ago: executing program 1 (id=411): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc096, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x471, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x602000, 0x0) r1 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4880) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.307567744s ago: executing program 3 (id=412): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146) write$P9_RREAD(r1, &(0x7f0000000240)={0x3d, 0x75, 0x1, {0x32, "845f3ed78ffb24dd29a61bff69a5e2512c51f0ac775bce40ad170b15e60702c7bfc02f8b9216f2ef51883711b1357c134660"}}, 0x3d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x6, 0xfffffffffffffffd}, {0xffffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffff30}}, './file0\x00'}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x0, 0x5635, 0x44f, 0x9, 0x2cb]}, &(0x7f0000000040)=0x54) accept4(r0, 0x0, 0x0, 0x80000) 822.396737ms ago: executing program 4 (id=413): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/194, 0xc2, 0x0, 0x0) 739.954173ms ago: executing program 4 (id=414): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0xf52a, 0x2, 0x1, 0x2000033f}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r0, 0x627, 0x1764, 0x4b, 0x0, 0x0) unshare(0x60000600) io_uring_setup(0x4fee, 0x0) io_setup(0x85, &(0x7f0000001040)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x300}]) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x560c89bb) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0xfc}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) syz_clone(0x321c0000, 0x0, 0x48, 0x0, 0x0, 0x0) 739.621012ms ago: executing program 0 (id=415): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 6) 699.305725ms ago: executing program 3 (id=416): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x51) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 638.256004ms ago: executing program 0 (id=417): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) 566.013721ms ago: executing program 2 (id=418): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000000)) 440.155149ms ago: executing program 3 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 429.756397ms ago: executing program 1 (id=420): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x641b, 0x10100, 0x1, 0x1}, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 395.902931ms ago: executing program 3 (id=421): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200", 0x4c}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r3, r2, 0x0, 0x7ffff000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="346d66646e6f3d0861d1e9cd25", @ANYRESHEX, @ANYBLOB=',\x00']) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 236.268182ms ago: executing program 2 (id=422): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa6, 0x0, &(0x7f0000000240)="e30080670000ec67838717bd86dde148f0630962bb87dd45fe42904bcee14db4241544716b9ea42231ed9953a3bb017f9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c538679af0958a5df2dc69f339e7fd955a6694659f2754ffa12ce3445bf17168f8012059dad0306b8e2d4c80b1b30c59e9653181182ba401f298ca57733261f9116b885ef2da5d963e441a24fec4857c005a3ce8a0d", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) syz_io_uring_setup(0x1215, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 0s ago: executing program 1 (id=423): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") kernel console output (not intermixed with test programs): : denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.961678][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.967822][ T3298] cgroup: Unknown subsys name 'rlimit' [ 25.077527][ T28] audit: type=1400 audit(1772948679.820:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.103744][ T28] audit: type=1400 audit(1772948679.820:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.124270][ T28] audit: type=1400 audit(1772948679.820:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.132432][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.144756][ T28] audit: type=1400 audit(1772948679.820:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.173618][ T28] audit: type=1400 audit(1772948679.820:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.194580][ T28] audit: type=1400 audit(1772948679.820:78): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.219520][ T28] audit: type=1400 audit(1772948679.820:79): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.251858][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.376304][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.399334][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.447654][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.473462][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.490500][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.497825][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.505200][ T3310] bridge_slave_0: entered allmulticast mode [ 26.511634][ T3310] bridge_slave_0: entered promiscuous mode [ 26.538117][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.545365][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.552679][ T3310] bridge_slave_1: entered allmulticast mode [ 26.559077][ T3310] bridge_slave_1: entered promiscuous mode [ 26.571592][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.578921][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.586063][ T3316] bridge_slave_0: entered allmulticast mode [ 26.592529][ T3316] bridge_slave_0: entered promiscuous mode [ 26.611802][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.622030][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.631244][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.638299][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.645615][ T3316] bridge_slave_1: entered allmulticast mode [ 26.652046][ T3316] bridge_slave_1: entered promiscuous mode [ 26.670671][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.723186][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.730281][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.737609][ T3309] bridge_slave_0: entered allmulticast mode [ 26.744014][ T3309] bridge_slave_0: entered promiscuous mode [ 26.751468][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.760589][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.767655][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.774854][ T3309] bridge_slave_1: entered allmulticast mode [ 26.781597][ T3309] bridge_slave_1: entered promiscuous mode [ 26.796061][ T3310] team0: Port device team_slave_0 added [ 26.802707][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.820083][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.827363][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.834491][ T3318] bridge_slave_0: entered allmulticast mode [ 26.841083][ T3318] bridge_slave_0: entered promiscuous mode [ 26.851103][ T3310] team0: Port device team_slave_1 added [ 26.864492][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.871724][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.878893][ T3318] bridge_slave_1: entered allmulticast mode [ 26.885352][ T3318] bridge_slave_1: entered promiscuous mode [ 26.905441][ T3316] team0: Port device team_slave_0 added [ 26.912087][ T3316] team0: Port device team_slave_1 added [ 26.922732][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.937369][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.958710][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.965780][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.991706][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.006161][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.013275][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.020379][ T3312] bridge_slave_0: entered allmulticast mode [ 27.026799][ T3312] bridge_slave_0: entered promiscuous mode [ 27.034388][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.044669][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.054033][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.061029][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.087124][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.098222][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.105227][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.131228][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.145755][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.152943][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.160052][ T3312] bridge_slave_1: entered allmulticast mode [ 27.166582][ T3312] bridge_slave_1: entered promiscuous mode [ 27.181625][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.188569][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.214961][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.228765][ T3309] team0: Port device team_slave_0 added [ 27.252207][ T3309] team0: Port device team_slave_1 added [ 27.258441][ T3318] team0: Port device team_slave_0 added [ 27.265204][ T3318] team0: Port device team_slave_1 added [ 27.271949][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.282351][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.309842][ T3316] hsr_slave_0: entered promiscuous mode [ 27.315914][ T3316] hsr_slave_1: entered promiscuous mode [ 27.333201][ T3310] hsr_slave_0: entered promiscuous mode [ 27.339129][ T3310] hsr_slave_1: entered promiscuous mode [ 27.345101][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.350817][ T3310] Cannot create hsr debugfs directory [ 27.361542][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.368511][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.394893][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.410500][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.417527][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.443453][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.475899][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.482919][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.509067][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.520238][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.527266][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.553421][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.573581][ T3312] team0: Port device team_slave_0 added [ 27.596979][ T3312] team0: Port device team_slave_1 added [ 27.611778][ T3309] hsr_slave_0: entered promiscuous mode [ 27.617725][ T3309] hsr_slave_1: entered promiscuous mode [ 27.623593][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.629330][ T3309] Cannot create hsr debugfs directory [ 27.648009][ T3318] hsr_slave_0: entered promiscuous mode [ 27.653859][ T3318] hsr_slave_1: entered promiscuous mode [ 27.659680][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.665427][ T3318] Cannot create hsr debugfs directory [ 27.679912][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.686927][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.712871][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.723965][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.731004][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.756900][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.841225][ T3312] hsr_slave_0: entered promiscuous mode [ 27.847419][ T3312] hsr_slave_1: entered promiscuous mode [ 27.853561][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.859431][ T3312] Cannot create hsr debugfs directory [ 27.954975][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.971579][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.982256][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.003842][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.024935][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.033917][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.042992][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.052306][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.085042][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.094871][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.104230][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.121387][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.148581][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.166782][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.176058][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.184876][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.212595][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.229991][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.238715][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.249013][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.261531][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.268662][ T857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.283058][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.292825][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.299882][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.317591][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.325648][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.364599][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.382344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.389572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.398451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.405612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.423214][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.449599][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.468877][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.478061][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.495172][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.519359][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.528868][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.535973][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.553553][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.560615][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.572637][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.579921][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.590608][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.597791][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.631682][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.648758][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.659560][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.666752][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.675501][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.682626][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.737391][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.751643][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.770021][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.812689][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.879023][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.891396][ T3316] veth0_vlan: entered promiscuous mode [ 28.902775][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.919118][ T3316] veth1_vlan: entered promiscuous mode [ 28.945219][ T3316] veth0_macvtap: entered promiscuous mode [ 28.963079][ T3316] veth1_macvtap: entered promiscuous mode [ 28.996052][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.015242][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.037434][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.075273][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.104706][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.106338][ T3318] veth0_vlan: entered promiscuous mode [ 29.131793][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.140562][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155411][ T3309] veth0_vlan: entered promiscuous mode [ 29.166952][ T3318] veth1_vlan: entered promiscuous mode [ 29.175382][ T3309] veth1_vlan: entered promiscuous mode [ 29.189181][ T3312] veth0_vlan: entered promiscuous mode [ 29.212701][ T3310] veth0_vlan: entered promiscuous mode [ 29.219289][ T3312] veth1_vlan: entered promiscuous mode [ 29.230095][ T3310] veth1_vlan: entered promiscuous mode [ 29.253401][ T3318] veth0_macvtap: entered promiscuous mode [ 29.272667][ T3309] veth0_macvtap: entered promiscuous mode [ 29.280091][ T3318] veth1_macvtap: entered promiscuous mode [ 29.292948][ T3309] veth1_macvtap: entered promiscuous mode [ 29.299977][ T3310] veth0_macvtap: entered promiscuous mode [ 29.307911][ T3310] veth1_macvtap: entered promiscuous mode [ 29.318505][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.349874][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.358874][ T3312] veth0_macvtap: entered promiscuous mode [ 29.368374][ T3312] veth1_macvtap: entered promiscuous mode [ 29.375919][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.392020][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.405794][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.420032][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.434317][ T1723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.445384][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.460895][ T3489] loop9: detected capacity change from 0 to 7 [ 29.461074][ T1723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.467758][ T3489] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.484150][ T1405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.493231][ T3489] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.503184][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.503190][ T3489] loop9: unable to read partition table [ 29.516697][ T3489] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 29.517705][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.540040][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.548510][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.560403][ T1405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.571550][ T1405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.580449][ T1405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.581425][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.597953][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.609373][ T3492] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 29.628668][ T1405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.651075][ T1405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.664987][ T1405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.694954][ T1405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.708255][ T1405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.726657][ T1405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.748648][ T1405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.783590][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 29.783609][ T28] audit: type=1400 audit(1772948684.530:118): avc: denied { tracepoint } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.789232][ T1405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.818755][ T28] audit: type=1400 audit(1772948684.530:119): avc: denied { write } for pid=3498 comm="syz.4.5" name="tcp" dev="proc" ino=4026532418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.836720][ T1405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.851396][ T28] audit: type=1400 audit(1772948684.590:120): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.872916][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.898062][ T1405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920827][ T3503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.931686][ T28] audit: type=1400 audit(1772948684.620:121): avc: denied { write } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.938691][ T3502] tipc: Enabling of bearer rejected, failed to enable media [ 29.960443][ T28] audit: type=1400 audit(1772948684.620:122): avc: denied { nlmsg_write } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.980863][ T28] audit: type=1400 audit(1772948684.620:123): avc: denied { nlmsg_read } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.042222][ T28] audit: type=1400 audit(1772948684.640:124): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.091746][ T28] audit: type=1400 audit(1772948684.640:125): avc: denied { write } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.130052][ T28] audit: type=1400 audit(1772948684.650:126): avc: denied { create } for pid=3501 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 30.185310][ T3517] loop2: detected capacity change from 0 to 128 [ 30.202490][ T28] audit: type=1400 audit(1772948684.730:127): avc: denied { prog_run } for pid=3509 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.223476][ T3517] ======================================================= [ 30.223476][ T3517] WARNING: The mand mount option has been deprecated and [ 30.223476][ T3517] and is ignored by this kernel. Remove the mand [ 30.223476][ T3517] option from the mount to silence this warning. [ 30.223476][ T3517] ======================================================= [ 30.260831][ T3520] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 30.302897][ T3524] FAULT_INJECTION: forcing a failure. [ 30.302897][ T3524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.333001][ T3520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 30.344887][ T3524] CPU: 0 UID: 0 PID: 3524 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT(full) [ 30.344995][ T3524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.345007][ T3524] Call Trace: [ 30.345014][ T3524] [ 30.345022][ T3524] __dump_stack+0x1d/0x30 [ 30.345050][ T3524] dump_stack_lvl+0x95/0xd0 [ 30.345072][ T3524] dump_stack+0x15/0x1b [ 30.345138][ T3524] should_fail_ex+0x263/0x280 [ 30.345161][ T3524] should_fail+0xb/0x20 [ 30.345180][ T3524] should_fail_usercopy+0x1a/0x20 [ 30.345231][ T3524] _copy_from_user+0x1c/0xb0 [ 30.345298][ T3524] __sys_bpf+0x183/0x7e0 [ 30.345323][ T3524] __x64_sys_bpf+0x41/0x50 [ 30.345392][ T3524] x64_sys_call+0x10cb/0x3020 [ 30.345421][ T3524] do_syscall_64+0x12c/0x370 [ 30.345498][ T3524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.345520][ T3524] RIP: 0033:0x7ff65654c799 [ 30.345612][ T3524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.345629][ T3524] RSP: 002b:00007ff654fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.345668][ T3524] RAX: ffffffffffffffda RBX: 00007ff6567c5fa0 RCX: 00007ff65654c799 [ 30.345682][ T3524] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004 [ 30.345695][ T3524] RBP: 00007ff654fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 30.345707][ T3524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.345719][ T3524] R13: 00007ff6567c6038 R14: 00007ff6567c5fa0 R15: 00007fff7559a2a8 [ 30.345737][ T3524] [ 30.596983][ T3527] loop1: detected capacity change from 0 to 128 [ 30.604291][ T3517] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.644313][ T3527] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.661762][ T3517] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.695518][ T3527] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.771518][ T3533] FAULT_INJECTION: forcing a failure. [ 30.771518][ T3533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.828481][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.841670][ T3533] CPU: 0 UID: 0 PID: 3533 Comm: syz.4.18 Not tainted syzkaller #0 PREEMPT(full) [ 30.841702][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.841715][ T3533] Call Trace: [ 30.841722][ T3533] [ 30.841731][ T3533] __dump_stack+0x1d/0x30 [ 30.841839][ T3533] dump_stack_lvl+0x95/0xd0 [ 30.841864][ T3533] dump_stack+0x15/0x1b [ 30.841887][ T3533] should_fail_ex+0x263/0x280 [ 30.841965][ T3533] should_fail+0xb/0x20 [ 30.841986][ T3533] should_fail_usercopy+0x1a/0x20 [ 30.842013][ T3533] _copy_from_user+0x1c/0xb0 [ 30.842086][ T3533] ___sys_sendmsg+0xc1/0x1e0 [ 30.842126][ T3533] __x64_sys_sendmsg+0xd4/0x160 [ 30.842225][ T3533] x64_sys_call+0x194c/0x3020 [ 30.842254][ T3533] do_syscall_64+0x12c/0x370 [ 30.842276][ T3533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.842300][ T3533] RIP: 0033:0x7fabd73ec799 [ 30.842316][ T3533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.842342][ T3533] RSP: 002b:00007fabd5e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.842409][ T3533] RAX: ffffffffffffffda RBX: 00007fabd7665fa0 RCX: 00007fabd73ec799 [ 30.842423][ T3533] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 30.842437][ T3533] RBP: 00007fabd5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 30.842450][ T3533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.842463][ T3533] R13: 00007fabd7666038 R14: 00007fabd7665fa0 R15: 00007ffd9e5ff8a8 [ 30.842481][ T3533] [ 31.070571][ C0] hrtimer: interrupt took 55321 ns [ 31.243536][ T3540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20'. [ 31.269223][ T3543] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 31.309549][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 31.328611][ T3543] SELinux: failed to load policy [ 31.450062][ T3553] IPv6: NLM_F_REPLACE set, but no existing node found! [ 31.473711][ T3552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3552 comm=syz.4.25 [ 31.505533][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 31.553926][ T3557] ip6gretap1: entered promiscuous mode [ 31.756825][ T3564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3564 comm=syz.1.28 [ 31.910154][ T3570] netlink: 'syz.3.30': attribute type 27 has an invalid length. [ 31.948853][ T3570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 31.992854][ T3570] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 32.093914][ T3574] netlink: 'syz.3.31': attribute type 32 has an invalid length. [ 32.437863][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 32.495303][ T3576] loop4: detected capacity change from 0 to 1024 [ 32.506596][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.525892][ T3574] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 32.526155][ T3576] EXT4-fs: Ignoring removed oldalloc option [ 32.574169][ T3580] loop3: detected capacity change from 0 to 512 [ 32.587781][ T3576] EXT4-fs: Ignoring removed bh option [ 32.622462][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.691690][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.731240][ T3580] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.783203][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.35: corrupted inode contents [ 32.819352][ T3596] FAULT_INJECTION: forcing a failure. [ 32.819352][ T3596] name failslab, interval 1, probability 0, space 0, times 0 [ 32.904776][ T3600] netlink: 220 bytes leftover after parsing attributes in process `syz.3.35'. [ 32.913133][ T3596] CPU: 0 UID: 0 PID: 3596 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 32.913161][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.913173][ T3596] Call Trace: [ 32.913180][ T3596] [ 32.913188][ T3596] __dump_stack+0x1d/0x30 [ 32.913235][ T3596] dump_stack_lvl+0x95/0xd0 [ 32.913258][ T3596] dump_stack+0x15/0x1b [ 32.913279][ T3596] should_fail_ex+0x263/0x280 [ 32.913434][ T3596] should_failslab+0x8c/0xb0 [ 32.913454][ T3596] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 32.913477][ T3596] ? __alloc_skb+0x2d6/0x690 [ 32.913500][ T3596] __alloc_skb+0x2d6/0x690 [ 32.913568][ T3596] ? __alloc_skb+0x200/0x690 [ 32.913590][ T3596] netlink_alloc_large_skb+0xbf/0xf0 [ 32.913615][ T3596] netlink_sendmsg+0x40c/0x6f0 [ 32.913644][ T3596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.913722][ T3596] ____sys_sendmsg+0x563/0x5b0 [ 32.913748][ T3596] ___sys_sendmsg+0x195/0x1e0 [ 32.913780][ T3596] __x64_sys_sendmsg+0xd4/0x160 [ 32.913821][ T3596] x64_sys_call+0x194c/0x3020 [ 32.913858][ T3596] do_syscall_64+0x12c/0x370 [ 32.913881][ T3596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.913903][ T3596] RIP: 0033:0x7ff65654c799 [ 32.913959][ T3596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.913977][ T3596] RSP: 002b:00007ff654fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.913999][ T3596] RAX: ffffffffffffffda RBX: 00007ff6567c5fa0 RCX: 00007ff65654c799 [ 32.914013][ T3596] RDX: 0000000004000850 RSI: 0000200000000080 RDI: 0000000000000003 [ 32.914063][ T3596] RBP: 00007ff654fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 32.914076][ T3596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.914089][ T3596] R13: 00007ff6567c6038 R14: 00007ff6567c5fa0 R15: 00007fff7559a2a8 [ 32.914109][ T3596] [ 33.022124][ T3580] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 33.069046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b30fa00: rx timeout, send abort [ 33.104001][ T3605] 9p: Bad value for 'rfdno' [ 33.157614][ T3608] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 33.178275][ T3600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 33.202081][ T3609] EXT4-fs (loop3): shut down requested (0) [ 33.246407][ T3580] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.35: mark_inode_dirty error [ 33.303170][ T3580] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 33.310880][ T3612] loop2: detected capacity change from 0 to 128 [ 33.342783][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.35: corrupted inode contents [ 33.357423][ T3580] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 33.375891][ T3580] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #18: comm syz.3.35: mark_inode_dirty error [ 33.400257][ T3580] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 33.400759][ T3580] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #18: comm syz.3.35: mark inode dirty (error -117) [ 33.462173][ T3612] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.549394][ T3612] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.569068][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b305200: rx timeout, send abort [ 33.581057][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b30fa00: abort rx timeout. Force session deactivation [ 34.077358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b305200: abort rx timeout. Force session deactivation [ 34.166201][ T3580] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 34.166540][ T3580] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 34.328320][ T3621] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.448598][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.484756][ T3625] FAULT_INJECTION: forcing a failure. [ 34.484756][ T3625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.484785][ T3625] CPU: 0 UID: 0 PID: 3625 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 34.484811][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.484825][ T3625] Call Trace: [ 34.484880][ T3625] [ 34.484886][ T3625] __dump_stack+0x1d/0x30 [ 34.484910][ T3625] dump_stack_lvl+0x95/0xd0 [ 34.484930][ T3625] dump_stack+0x15/0x1b [ 34.484955][ T3625] should_fail_ex+0x263/0x280 [ 34.484977][ T3625] should_fail+0xb/0x20 [ 34.485002][ T3625] should_fail_usercopy+0x1a/0x20 [ 34.485030][ T3625] _copy_from_user+0x1c/0xb0 [ 34.485060][ T3625] ___sys_sendmsg+0xc1/0x1e0 [ 34.485103][ T3625] __x64_sys_sendmsg+0xd4/0x160 [ 34.485131][ T3625] x64_sys_call+0x194c/0x3020 [ 34.485194][ T3625] do_syscall_64+0x12c/0x370 [ 34.485240][ T3625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.485260][ T3625] RIP: 0033:0x7f12800ac799 [ 34.485275][ T3625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.485295][ T3625] RSP: 002b:00007f127eaff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.485393][ T3625] RAX: ffffffffffffffda RBX: 00007f1280325fa0 RCX: 00007f12800ac799 [ 34.485407][ T3625] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 34.485426][ T3625] RBP: 00007f127eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 34.485438][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.485449][ T3625] R13: 00007f1280326038 R14: 00007f1280325fa0 R15: 00007ffc9e28c7e8 [ 34.485501][ T3625] [ 34.552531][ T3623] loop1: detected capacity change from 0 to 2048 [ 34.630317][ T3576] syz.4.32 (3576) used greatest stack depth: 10032 bytes left [ 34.658895][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.871027][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 34.871049][ T28] audit: type=1400 audit(1772948689.590:264): avc: denied { create } for pid=3639 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.871152][ T28] audit: type=1400 audit(1772948689.590:265): avc: denied { connect } for pid=3639 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.871172][ T28] audit: type=1400 audit(1772948689.590:266): avc: denied { execute } for pid=3639 comm="syz.3.54" path="/13/file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.551215][ T28] audit: type=1400 audit(1772948690.300:267): avc: denied { write } for pid=3639 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.563377][ T3637] loop0: detected capacity change from 0 to 4096 [ 35.673613][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.768062][ T3637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.777674][ T3623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.804142][ T28] audit: type=1400 audit(1772948690.550:268): avc: denied { sqpoll } for pid=3636 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.864822][ T3618] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.504012][ T3637] loop4: detected capacity change from 0 to 7 [ 36.549264][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.569043][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.587680][ T3300] loop4: unable to read partition table [ 36.593551][ T3662] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.621276][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.633632][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.649452][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.666274][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.688979][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.702526][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.720673][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 37.053606][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.097588][ T3637] loop4: unable to read partition table [ 37.115035][ T3637] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 37.443648][ T3000] loop4: unable to read partition table [ 37.534057][ T3676] loop4: detected capacity change from 0 to 512 [ 37.546720][ T28] audit: type=1400 audit(1772948692.290:269): avc: denied { create } for pid=3673 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.574830][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.584858][ T3676] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.601031][ T28] audit: type=1400 audit(1772948692.310:270): avc: denied { write } for pid=3673 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.631054][ T3676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.668755][ T28] audit: type=1400 audit(1772948692.330:271): avc: denied { mounton } for pid=3675 comm="syz.4.60" path="/10/file1" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.705569][ T3691] loop2: detected capacity change from 0 to 512 [ 37.729856][ T3676] EXT4-fs (loop4): 1 truncate cleaned up [ 37.735729][ T3691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.746344][ T3676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.756031][ T3696] loop1: detected capacity change from 0 to 512 [ 37.771444][ T3691] EXT4-fs (loop2): 1 truncate cleaned up [ 37.780457][ T3676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.801482][ T3700] loop0: detected capacity change from 0 to 164 [ 37.812257][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.851013][ T3700] rock: directory entry would overflow storage [ 37.857256][ T3700] rock: sig=0x4543, size=28, remaining=18 [ 37.936004][ T3710] loop4: detected capacity change from 0 to 512 [ 37.942971][ T3696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.962447][ T3696] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.996106][ T28] audit: type=1400 audit(1772948692.740:272): avc: denied { mount } for pid=3698 comm="syz.0.66" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.170766][ T3696] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.65: corrupted inode contents [ 38.194987][ T3710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.354298][ T3696] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.65: mark_inode_dirty error [ 38.375140][ T3710] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.536554][ T28] audit: type=1400 audit(1772948692.910:273): avc: denied { create } for pid=3694 comm="syz.1.65" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.567660][ T3696] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.65: corrupted inode contents [ 38.608755][ T3696] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.65: mark_inode_dirty error [ 38.630813][ T3709] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.68: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.649535][ T3723] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.65: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 38.649535][ T3723] [ 38.720817][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.738232][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.744298][ T3725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.771792][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.785146][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 38.837976][ T3725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 38.865781][ T3745] FAULT_INJECTION: forcing a failure. [ 38.865781][ T3745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.901016][ T3745] CPU: 0 UID: 0 PID: 3745 Comm: syz.4.76 Not tainted syzkaller #0 PREEMPT(full) [ 38.901167][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.901178][ T3745] Call Trace: [ 38.901184][ T3745] [ 38.901192][ T3745] __dump_stack+0x1d/0x30 [ 38.901223][ T3745] dump_stack_lvl+0x95/0xd0 [ 38.901275][ T3745] dump_stack+0x15/0x1b [ 38.901294][ T3745] should_fail_ex+0x263/0x280 [ 38.901316][ T3745] should_fail+0xb/0x20 [ 38.901391][ T3745] should_fail_usercopy+0x1a/0x20 [ 38.901413][ T3745] set_fd_set+0x29/0x90 [ 38.901433][ T3745] core_sys_select+0x56b/0x730 [ 38.901521][ T3745] ? set_user_sigmask+0x8b/0x140 [ 38.901633][ T3745] ? kmem_cache_free+0xc8/0x380 [ 38.901656][ T3745] __se_sys_pselect6+0x23c/0x2a0 [ 38.901688][ T3745] __x64_sys_pselect6+0x78/0x90 [ 38.901710][ T3745] x64_sys_call+0x8d5/0x3020 [ 38.901791][ T3745] do_syscall_64+0x12c/0x370 [ 38.901828][ T3745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.901929][ T3745] RIP: 0033:0x7fabd73ec799 [ 38.901947][ T3745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.901966][ T3745] RSP: 002b:00007fabd5e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 38.901989][ T3745] RAX: ffffffffffffffda RBX: 00007fabd7665fa0 RCX: 00007fabd73ec799 [ 38.902005][ T3745] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000040 [ 38.902020][ T3745] RBP: 00007fabd5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 38.902088][ T3745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.902099][ T3745] R13: 00007fabd7666038 R14: 00007fabd7665fa0 R15: 00007ffd9e5ff8a8 [ 38.902173][ T3745] [ 39.094877][ T3752] xt_policy: output policy not valid in PREROUTING and INPUT [ 39.144843][ T3758] FAULT_INJECTION: forcing a failure. [ 39.144843][ T3758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.158245][ T3758] CPU: 0 UID: 0 PID: 3758 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 39.158273][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.158287][ T3758] Call Trace: [ 39.158295][ T3758] [ 39.158341][ T3758] __dump_stack+0x1d/0x30 [ 39.158431][ T3758] dump_stack_lvl+0x95/0xd0 [ 39.158457][ T3758] dump_stack+0x15/0x1b [ 39.158481][ T3758] should_fail_ex+0x263/0x280 [ 39.158506][ T3758] should_fail+0xb/0x20 [ 39.158560][ T3758] should_fail_usercopy+0x1a/0x20 [ 39.158585][ T3758] _copy_to_user+0x20/0xa0 [ 39.158614][ T3758] simple_read_from_buffer+0xb5/0x130 [ 39.158647][ T3758] proc_fail_nth_read+0x10e/0x150 [ 39.158730][ T3758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 39.158762][ T3758] vfs_read+0x1ab/0x7f0 [ 39.158863][ T3758] ? __rcu_read_unlock+0x4e/0x70 [ 39.158887][ T3758] ? __fget_files+0x184/0x1c0 [ 39.158910][ T3758] ? mutex_lock+0x57/0x90 [ 39.159031][ T3758] ksys_read+0xdc/0x1a0 [ 39.159065][ T3758] __x64_sys_read+0x40/0x50 [ 39.159085][ T3758] x64_sys_call+0x2886/0x3020 [ 39.159113][ T3758] do_syscall_64+0x12c/0x370 [ 39.159136][ T3758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.159160][ T3758] RIP: 0033:0x7f5162fbcfce [ 39.159207][ T3758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.159226][ T3758] RSP: 002b:00007f5161a56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.159250][ T3758] RAX: ffffffffffffffda RBX: 00007f5161a576c0 RCX: 00007f5162fbcfce [ 39.159265][ T3758] RDX: 000000000000000f RSI: 00007f5161a570a0 RDI: 0000000000000006 [ 39.159280][ T3758] RBP: 00007f5161a57090 R08: 0000000000000000 R09: 0000000000000000 [ 39.159295][ T3758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.159374][ T3758] R13: 00007f5163276038 R14: 00007f5163275fa0 R15: 00007fff74322ea8 [ 39.159394][ T3758] [ 39.364278][ T3761] loop3: detected capacity change from 0 to 512 [ 39.391498][ T3761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.404614][ T3761] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.428744][ T3761] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.83: corrupted inode contents [ 39.441368][ T3761] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.83: mark_inode_dirty error [ 39.453411][ T3761] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.83: corrupted inode contents [ 39.479801][ T3761] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.83: mark_inode_dirty error [ 39.507484][ T3766] loop0: detected capacity change from 0 to 1024 [ 39.514516][ T3766] EXT4-fs: Ignoring removed oldalloc option [ 39.524543][ T3766] EXT4-fs: Ignoring removed bh option [ 39.547143][ T3766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.589414][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.711249][ T3778] 9p: Bad value for 'rfdno' [ 39.770370][ T3780] loop3: detected capacity change from 0 to 2048 [ 39.806242][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.975296][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 39.975316][ T28] audit: type=1326 audit(1772948694.610:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.022091][ T28] audit: type=1326 audit(1772948694.610:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.092643][ T28] audit: type=1326 audit(1772948694.610:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.116085][ T28] audit: type=1326 audit(1772948694.610:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.157242][ T28] audit: type=1326 audit(1772948694.620:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.168086][ T3780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.191957][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.203878][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.213770][ T28] audit: type=1326 audit(1772948694.620:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.244646][ T3780] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1340 with error 28 [ 40.251020][ T28] audit: type=1326 audit(1772948694.620:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.280416][ T3780] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.280416][ T3780] [ 40.310772][ T3780] EXT4-fs (loop3): Total free blocks count 0 [ 40.314925][ T28] audit: type=1326 audit(1772948694.620:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.317299][ T3780] EXT4-fs (loop3): Free/Dirty block details [ 40.340277][ T28] audit: type=1326 audit(1772948694.620:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.351107][ T3775] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.84: Allocating blocks 1-17 which overlap fs metadata [ 40.369718][ T28] audit: type=1326 audit(1772948694.620:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f128006cfce code=0x7ffc0000 [ 40.406879][ T3780] EXT4-fs (loop3): free_blocks=2415919104 [ 40.407880][ T3766] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.84: Allocating blocks 1-17 which overlap fs metadata [ 40.413178][ T3780] EXT4-fs (loop3): dirty_blocks=1344 [ 40.431647][ T3780] EXT4-fs (loop3): Block reservation details [ 40.437647][ T3780] EXT4-fs (loop3): i_reserved_data_blocks=84 [ 40.536278][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.588873][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.626232][ T3788] loop0: detected capacity change from 0 to 256 [ 40.656535][ T3788] FAULT_INJECTION: forcing a failure. [ 40.656535][ T3788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.669889][ T3788] CPU: 1 UID: 0 PID: 3788 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 40.669917][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 40.669930][ T3788] Call Trace: [ 40.669938][ T3788] [ 40.669975][ T3788] __dump_stack+0x1d/0x30 [ 40.670004][ T3788] dump_stack_lvl+0x95/0xd0 [ 40.670031][ T3788] dump_stack+0x15/0x1b [ 40.670052][ T3788] should_fail_ex+0x263/0x280 [ 40.670137][ T3788] should_fail+0xb/0x20 [ 40.670160][ T3788] should_fail_usercopy+0x1a/0x20 [ 40.670185][ T3788] strncpy_from_user+0x27/0x250 [ 40.670290][ T3788] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 40.670316][ T3788] do_getname+0x59/0x1c0 [ 40.670341][ T3788] getname_flags+0x1d/0x30 [ 40.670421][ T3788] do_sys_openat2+0x60/0x130 [ 40.670452][ T3788] __x64_sys_creat+0x65/0x90 [ 40.670533][ T3788] x64_sys_call+0x2ea0/0x3020 [ 40.670558][ T3788] do_syscall_64+0x12c/0x370 [ 40.670581][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.670604][ T3788] RIP: 0033:0x7f12800ac799 [ 40.670655][ T3788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.670705][ T3788] RSP: 002b:00007f127eaff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 40.670759][ T3788] RAX: ffffffffffffffda RBX: 00007f1280325fa0 RCX: 00007f12800ac799 [ 40.670835][ T3788] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00002000000000c0 [ 40.670849][ T3788] RBP: 00007f127eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 40.670862][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.670873][ T3788] R13: 00007f1280326038 R14: 00007f1280325fa0 R15: 00007ffc9e28c7e8 [ 40.670890][ T3788] [ 40.883423][ T3791] loop0: detected capacity change from 0 to 512 [ 40.906426][ T3791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.918331][ T3791] EXT4-fs (loop0): 1 orphan inode deleted [ 40.924332][ T3791] EXT4-fs (loop0): 1 truncate cleaned up [ 40.930445][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.943606][ T3791] EXT4-fs (loop0): shut down requested (1) [ 41.051740][ T3752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.073508][ T3752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.222095][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.240030][ T3752] syz.4.80 (3752) used greatest stack depth: 9544 bytes left [ 41.252384][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.266288][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.288918][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.319975][ T3798] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 41.342336][ T3804] Zero length message leads to an empty skb [ 41.345105][ T3798] bond1 (unregistering): Released all slaves [ 41.431047][ T1033] IPVS: starting estimator thread 0... [ 41.488448][ T3814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.99'. [ 41.524508][ T3817] IPVS: using max 2592 ests per chain, 129600 per kthread [ 41.527422][ T3826] 9p: Bad value for 'rfdno' [ 41.777146][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.813487][ T3859] loop2: detected capacity change from 0 to 1024 [ 41.821121][ T3859] EXT4-fs: Ignoring removed oldalloc option [ 41.827210][ T3859] ext2: Unknown parameter 'smackfsdef' [ 42.074094][ T3865] loop2: detected capacity change from 0 to 1024 [ 42.082454][ T3865] EXT4-fs: inline encryption not supported [ 42.113330][ T3865] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.189432][ T3865] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.112: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.215116][ T3865] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 42.215420][ T3865] EXT4-fs (loop2): Remounting filesystem read-only [ 42.224572][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 42.224605][ C1] EXT4-fs (loop2): initial error at time 1772948696: ext4_map_blocks:776: inode 3: block 2 [ 42.224664][ C1] EXT4-fs (loop2): last error at time 1772948696: ext4_map_blocks:776: inode 3: block 2 [ 42.261197][ T3873] FAULT_INJECTION: forcing a failure. [ 42.261197][ T3873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.276561][ T3873] CPU: 1 UID: 0 PID: 3873 Comm: syz.1.113 Not tainted syzkaller #0 PREEMPT(full) [ 42.276593][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.276605][ T3873] Call Trace: [ 42.276710][ T3873] [ 42.276720][ T3873] __dump_stack+0x1d/0x30 [ 42.276748][ T3873] dump_stack_lvl+0x95/0xd0 [ 42.276772][ T3873] dump_stack+0x15/0x1b [ 42.276794][ T3873] should_fail_ex+0x263/0x280 [ 42.276891][ T3873] should_fail+0xb/0x20 [ 42.277025][ T3873] should_fail_usercopy+0x1a/0x20 [ 42.277049][ T3873] _copy_to_user+0x20/0xa0 [ 42.277077][ T3873] simple_read_from_buffer+0xb5/0x130 [ 42.277101][ T3873] proc_fail_nth_read+0x10e/0x150 [ 42.277172][ T3873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.277247][ T3873] vfs_read+0x1ab/0x7f0 [ 42.277346][ T3873] ? __rcu_read_unlock+0x4e/0x70 [ 42.277366][ T3873] ? __fget_files+0x184/0x1c0 [ 42.277387][ T3873] ? mutex_lock+0x57/0x90 [ 42.277413][ T3873] ksys_read+0xdc/0x1a0 [ 42.277510][ T3873] __x64_sys_read+0x40/0x50 [ 42.277529][ T3873] x64_sys_call+0x2886/0x3020 [ 42.277593][ T3873] do_syscall_64+0x12c/0x370 [ 42.277615][ T3873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.277640][ T3873] RIP: 0033:0x7ff65650cfce [ 42.277658][ T3873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.277744][ T3873] RSP: 002b:00007ff654f85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.277768][ T3873] RAX: ffffffffffffffda RBX: 00007ff654f866c0 RCX: 00007ff65650cfce [ 42.277784][ T3873] RDX: 000000000000000f RSI: 00007ff654f860a0 RDI: 0000000000000005 [ 42.277800][ T3873] RBP: 00007ff654f86090 R08: 0000000000000000 R09: 0000000000000000 [ 42.277815][ T3873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.277884][ T3873] R13: 00007ff6567c6128 R14: 00007ff6567c6090 R15: 00007fff7559a2a8 [ 42.277933][ T3873] [ 42.297127][ T3865] EXT4-fs (loop2): 1 orphan inode deleted [ 42.477729][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.491206][ T3865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.520225][ T3865] loop2: detected capacity change from 0 to 256 [ 42.619343][ T3865] FAT-fs (loop2): Directory bread(block 64) failed [ 42.651368][ T3865] FAT-fs (loop2): Directory bread(block 65) failed [ 42.660902][ T3865] FAT-fs (loop2): Directory bread(block 66) failed [ 42.668746][ T3865] FAT-fs (loop2): Directory bread(block 67) failed [ 42.676297][ T3865] FAT-fs (loop2): Directory bread(block 68) failed [ 42.683176][ T3865] FAT-fs (loop2): Directory bread(block 69) failed [ 42.689968][ T3865] FAT-fs (loop2): Directory bread(block 70) failed [ 42.704334][ T3865] FAT-fs (loop2): Directory bread(block 71) failed [ 42.711161][ T3865] FAT-fs (loop2): Directory bread(block 72) failed [ 42.719498][ T3865] FAT-fs (loop2): Directory bread(block 73) failed [ 42.728597][ T3900] xt_hashlimit: max too large, truncated to 1048576 [ 42.735500][ T3405] IPVS: starting estimator thread 0... [ 42.811582][ T3903] loop1: detected capacity change from 0 to 1024 [ 42.828375][ T3907] loop3: detected capacity change from 0 to 1024 [ 42.844912][ T3901] IPVS: using max 2784 ests per chain, 139200 per kthread [ 42.863407][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 42.924299][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.941396][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 43.049789][ T12] IPVS: stop unused estimator thread 0... [ 43.160034][ T3934] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.169826][ T3934] SELinux: failed to load policy [ 43.236202][ T3513] IPVS: starting estimator thread 0... [ 43.330329][ T3944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.134'. [ 43.342636][ T3939] IPVS: using max 2736 ests per chain, 136800 per kthread [ 43.404128][ T3945] loop2: detected capacity change from 0 to 512 [ 43.436896][ T3945] EXT4-fs (loop2): 1 truncate cleaned up [ 43.447468][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.463784][ T3945] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.133: invalid indirect mapped block 4294901760 (level 0) [ 43.480199][ T3945] EXT4-fs (loop2): Remounting filesystem read-only [ 43.492605][ T127] IPVS: stop unused estimator thread 0... [ 43.506830][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.525540][ T3950] loop1: detected capacity change from 0 to 128 [ 43.544120][ T3950] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.568567][ T3950] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.594910][ T3954] iso9660: Bad value for 'mode' [ 43.603398][ T3950] FAULT_INJECTION: forcing a failure. [ 43.603398][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 43.619907][ T3950] CPU: 1 UID: 0 PID: 3950 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 43.619934][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.619945][ T3950] Call Trace: [ 43.620018][ T3950] [ 43.620026][ T3950] __dump_stack+0x1d/0x30 [ 43.620060][ T3950] dump_stack_lvl+0x95/0xd0 [ 43.620082][ T3950] dump_stack+0x15/0x1b [ 43.620104][ T3950] should_fail_ex+0x263/0x280 [ 43.620191][ T3950] should_failslab+0x8c/0xb0 [ 43.620211][ T3950] __kmalloc_noprof+0xb8/0x4e0 [ 43.620275][ T3950] ? copy_splice_read+0xc2/0x6c0 [ 43.620304][ T3950] copy_splice_read+0xc2/0x6c0 [ 43.620326][ T3950] ? __pfx_copy_splice_read+0x10/0x10 [ 43.620425][ T3950] splice_direct_to_actor+0x26e/0x670 [ 43.620444][ T3950] ? __pfx_direct_splice_actor+0x10/0x10 [ 43.620466][ T3950] do_splice_direct+0x119/0x1a0 [ 43.620487][ T3950] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 43.620582][ T3950] do_sendfile+0x382/0x650 [ 43.620606][ T3950] __x64_sys_sendfile64+0xb8/0x150 [ 43.620630][ T3950] x64_sys_call+0x2dc4/0x3020 [ 43.620730][ T3950] do_syscall_64+0x12c/0x370 [ 43.620750][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.620769][ T3950] RIP: 0033:0x7ff65654c799 [ 43.620785][ T3950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.620802][ T3950] RSP: 002b:00007ff654fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.620824][ T3950] RAX: ffffffffffffffda RBX: 00007ff6567c5fa0 RCX: 00007ff65654c799 [ 43.620886][ T3950] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 43.620898][ T3950] RBP: 00007ff654fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.620911][ T3950] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 43.620999][ T3950] R13: 00007ff6567c6038 R14: 00007ff6567c5fa0 R15: 00007fff7559a2a8 [ 43.621077][ T3950] [ 43.854424][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.952832][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 43.974503][ T3959] FAULT_INJECTION: forcing a failure. [ 43.974503][ T3959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.988421][ T3959] CPU: 1 UID: 0 PID: 3959 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(full) [ 43.988517][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.988530][ T3959] Call Trace: [ 43.988538][ T3959] [ 43.988547][ T3959] __dump_stack+0x1d/0x30 [ 43.988602][ T3959] dump_stack_lvl+0x95/0xd0 [ 43.988630][ T3959] dump_stack+0x15/0x1b [ 43.988651][ T3959] should_fail_ex+0x263/0x280 [ 43.988673][ T3959] should_fail+0xb/0x20 [ 43.988693][ T3959] should_fail_usercopy+0x1a/0x20 [ 43.988796][ T3959] strncpy_from_user+0x27/0x250 [ 43.988825][ T3959] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 43.988847][ T3959] do_getname+0x59/0x1c0 [ 43.988945][ T3959] getname_uflags+0x23/0x30 [ 43.989019][ T3959] do_fchownat+0x89/0x210 [ 43.989047][ T3959] __x64_sys_lchown+0x4a/0x60 [ 43.989146][ T3959] x64_sys_call+0x2870/0x3020 [ 43.989174][ T3959] do_syscall_64+0x12c/0x370 [ 43.989193][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.989213][ T3959] RIP: 0033:0x7f5162ffc799 [ 43.989259][ T3959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.989409][ T3959] RSP: 002b:00007f5161a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 43.989434][ T3959] RAX: ffffffffffffffda RBX: 00007f5163275fa0 RCX: 00007f5162ffc799 [ 43.989451][ T3959] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000200000000000 [ 43.989480][ T3959] RBP: 00007f5161a57090 R08: 0000000000000000 R09: 0000000000000000 [ 43.989523][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.989535][ T3959] R13: 00007f5163276038 R14: 00007f5163275fa0 R15: 00007fff74322ea8 [ 43.989552][ T3959] [ 44.229324][ T3513] IPVS: starting estimator thread 0... [ 44.247938][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.294495][ T3977] EXT4-fs: Ignoring removed oldalloc option [ 44.300611][ T3977] ext2: Unknown parameter 'smackfsdef' [ 44.331053][ T3973] IPVS: using max 2592 ests per chain, 129600 per kthread [ 44.369703][ T3983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.147'. [ 44.485501][ T3987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.542319][ T3997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.550877][ T3987] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.562333][ T3997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.581886][ T4000] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.668569][ T4001] FAULT_INJECTION: forcing a failure. [ 44.668569][ T4001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.681908][ T4001] CPU: 1 UID: 0 PID: 4001 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 44.681934][ T4001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 44.681946][ T4001] Call Trace: [ 44.681982][ T4001] [ 44.681990][ T4001] __dump_stack+0x1d/0x30 [ 44.682014][ T4001] dump_stack_lvl+0x95/0xd0 [ 44.682090][ T4001] dump_stack+0x15/0x1b [ 44.682111][ T4001] should_fail_ex+0x263/0x280 [ 44.682133][ T4001] should_fail+0xb/0x20 [ 44.682150][ T4001] should_fail_usercopy+0x1a/0x20 [ 44.682177][ T4001] _copy_from_user+0x1c/0xb0 [ 44.682295][ T4001] __sys_bpf+0x183/0x7e0 [ 44.682375][ T4001] __x64_sys_bpf+0x41/0x50 [ 44.682415][ T4001] x64_sys_call+0x10cb/0x3020 [ 44.682440][ T4001] do_syscall_64+0x12c/0x370 [ 44.682534][ T4001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.682553][ T4001] RIP: 0033:0x7f3ea94cc799 [ 44.682568][ T4001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.682633][ T4001] RSP: 002b:00007f3ea7ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.682656][ T4001] RAX: ffffffffffffffda RBX: 00007f3ea9746180 RCX: 00007f3ea94cc799 [ 44.682669][ T4001] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 44.682682][ T4001] RBP: 00007f3ea7ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 44.682753][ T4001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.682767][ T4001] R13: 00007f3ea9746218 R14: 00007f3ea9746180 R15: 00007ffc62d8e298 [ 44.682786][ T4001] [ 44.853011][ T4000] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.882225][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.923007][ T3997] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 44.982259][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 44.982284][ T28] audit: type=1400 audit(1772948699.710:506): avc: denied { view } for pid=3998 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.182159][ T28] audit: type=1326 audit(1772948699.920:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.247339][ T28] audit: type=1326 audit(1772948699.920:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.319740][ T28] audit: type=1326 audit(1772948699.920:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.353713][ T28] audit: type=1326 audit(1772948699.920:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.419804][ T4024] set_capacity_and_notify: 6 callbacks suppressed [ 45.419824][ T4024] loop1: detected capacity change from 0 to 1024 [ 45.464404][ T28] audit: type=1326 audit(1772948699.920:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.496439][ T28] audit: type=1326 audit(1772948699.920:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.498419][ T4024] EXT4-fs: Ignoring removed oldalloc option [ 45.548636][ T4029] FAULT_INJECTION: forcing a failure. [ 45.548636][ T4029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.561042][ T4024] ext2: Unknown parameter 'smackfsdef' [ 45.567137][ T4029] CPU: 0 UID: 0 PID: 4029 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) [ 45.567166][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.567205][ T4029] Call Trace: [ 45.567213][ T4029] [ 45.567222][ T4029] __dump_stack+0x1d/0x30 [ 45.567250][ T4029] dump_stack_lvl+0x95/0xd0 [ 45.567288][ T4029] dump_stack+0x15/0x1b [ 45.567309][ T4029] should_fail_ex+0x263/0x280 [ 45.567349][ T4029] should_fail+0xb/0x20 [ 45.567408][ T4029] should_fail_usercopy+0x1a/0x20 [ 45.567436][ T4029] _copy_from_user+0x1c/0xb0 [ 45.567465][ T4029] __sys_sendto+0x1ca/0x490 [ 45.567512][ T4029] __x64_sys_sendto+0x76/0x90 [ 45.567540][ T4029] x64_sys_call+0x2d35/0x3020 [ 45.567570][ T4029] do_syscall_64+0x12c/0x370 [ 45.567594][ T4029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.567615][ T4029] RIP: 0033:0x7f3ea948cfce [ 45.567648][ T4029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.567663][ T4029] RSP: 002b:00007f3ea7f25e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 45.567725][ T4029] RAX: ffffffffffffffda RBX: 00007f3ea7f276c0 RCX: 00007f3ea948cfce [ 45.567740][ T4029] RDX: 0000000000000020 RSI: 00007f3ea7f26000 RDI: 0000000000000004 [ 45.567752][ T4029] RBP: 0000000000000000 R08: 00007f3ea7f25f04 R09: 000000000000000c [ 45.567763][ T4029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.567777][ T4029] R13: 00007f3ea7f25f58 R14: 00007f3ea7f26000 R15: 0000000000000000 [ 45.567797][ T4029] [ 45.740669][ T28] audit: type=1326 audit(1772948699.920:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.801201][ T4032] loop1: detected capacity change from 0 to 512 [ 45.811064][ T4032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.825135][ T28] audit: type=1326 audit(1772948699.920:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.825531][ T4032] EXT4-fs (loop1): 1 truncate cleaned up [ 45.825962][ T4032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.849007][ T28] audit: type=1326 audit(1772948699.920:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 45.902970][ T4032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.989760][ T4041] loop2: detected capacity change from 0 to 1024 [ 46.012016][ T4041] EXT4-fs: Ignoring removed oldalloc option [ 46.018002][ T4041] EXT4-fs: Ignoring removed bh option [ 46.036930][ T4043] loop4: detected capacity change from 0 to 4096 [ 46.052884][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.139114][ T4043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.275649][ T4050] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 46.341409][ T4050] ip6gretap2: entered promiscuous mode [ 46.347612][ T4050] ip6gretap2: entered allmulticast mode [ 46.648331][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.118925][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.223673][ T4079] loop1: detected capacity change from 0 to 512 [ 47.251305][ T4079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.272153][ T4079] EXT4-fs (loop1): 1 truncate cleaned up [ 47.279446][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.310580][ T4086] loop4: detected capacity change from 0 to 1024 [ 47.328131][ T4086] EXT4-fs: Ignoring removed oldalloc option [ 47.334608][ T4086] EXT4-fs: Ignoring removed bh option [ 47.343320][ T4079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.353867][ T4081] loop2: detected capacity change from 0 to 4096 [ 47.377361][ T4081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.393702][ T4086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.558900][ T4101] 9p: Bad value for 'rfdno' [ 47.633385][ T4106] ------------[ cut here ]------------ [ 47.639004][ T4106] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 47.663656][ T4106] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.186/4106 [ 47.674602][ T4106] Modules linked in: [ 47.678600][ T4106] CPU: 0 UID: 0 PID: 4106 Comm: syz.3.186 Not tainted syzkaller #0 PREEMPT(full) [ 47.687872][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.698056][ T4106] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 47.704378][ T4106] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 47.724183][ T4106] RSP: 0018:ffffc90010617370 EFLAGS: 00010246 [ 47.730365][ T4106] RAX: ffff888104a8bcf8 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 47.738429][ T4106] RDX: ffffffff86817ff9 RSI: ffffffff866d9ba5 RDI: ffffffff871d2140 [ 47.746622][ T4106] RBP: ffff888121d29a70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 47.754678][ T4106] R10: 0000000000049288 R11: ffffc90005a1d000 R12: ffff888121d29a30 [ 47.762737][ T4106] R13: 00000000ffffdfcc R14: ffff888121d29a7c R15: ffff888121d29a68 [ 47.770738][ T4106] FS: 00007f5161a576c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 47.779750][ T4106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.786424][ T4106] CR2: 00007f51630aeaeb CR3: 000000011b02e000 CR4: 00000000003506f0 [ 47.794477][ T4106] Call Trace: [ 47.797780][ T4106] [ 47.800728][ T4106] reg_set_min_max+0x1c8/0x260 [ 47.805566][ T4106] check_cond_jmp_op+0x13b2/0x1a80 [ 47.810719][ T4106] do_check+0x4a9b/0x9860 [ 47.815154][ T4106] do_check_common+0xd0b/0x1630 [ 47.820049][ T4106] bpf_check+0x2f78/0xcc30 [ 47.824531][ T4106] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 47.830663][ T4106] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 47.836377][ T4106] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 47.842439][ T4106] ? css_rstat_updated+0xbb/0x280 [ 47.847504][ T4106] ? try_charge_memcg+0x215/0xa10 [ 47.852637][ T4106] ? pcpu_block_update+0x24e/0x3b0 [ 47.857793][ T4106] ? _find_next_zero_bit+0x64/0xa0 [ 47.862977][ T4106] ? pcpu_block_refresh_hint+0x157/0x170 [ 47.868670][ T4106] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 47.874788][ T4106] ? css_rstat_updated+0xbb/0x280 [ 47.879892][ T4106] ? mod_memcg_state+0x182/0x270 [ 47.884882][ T4106] ? __rcu_read_unlock+0x4e/0x70 [ 47.889834][ T4106] ? avc_has_perm_noaudit+0xab/0x130 [ 47.895434][ T4106] ? avc_has_perm+0x101/0x190 [ 47.900201][ T4106] ? selinux_bpf_prog_load+0x197/0x1c0 [ 47.905751][ T4106] ? security_bpf_prog_load+0x9e/0x140 [ 47.911343][ T4106] bpf_prog_load+0xf76/0x1140 [ 47.916052][ T4106] ? security_bpf+0x2b/0x90 [ 47.920600][ T4106] __sys_bpf+0x505/0x7e0 [ 47.924993][ T4106] __x64_sys_bpf+0x41/0x50 [ 47.929466][ T4106] x64_sys_call+0x10cb/0x3020 [ 47.934246][ T4106] do_syscall_64+0x12c/0x370 [ 47.938871][ T4106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.944908][ T4106] RIP: 0033:0x7f5162ffc799 [ 47.949391][ T4106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.969146][ T4106] RSP: 002b:00007f5161a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.977879][ T4106] RAX: ffffffffffffffda RBX: 00007f5163275fa0 RCX: 00007f5162ffc799 [ 47.986013][ T4106] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 47.994054][ T4106] RBP: 00007f5163092bd9 R08: 0000000000000000 R09: 0000000000000000 [ 48.002099][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.010097][ T4106] R13: 00007f5163276038 R14: 00007f5163275fa0 R15: 00007fff74322ea8 [ 48.018128][ T4106] [ 48.021211][ T4106] ---[ end trace 0000000000000000 ]--- [ 48.028349][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.558431][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.687293][ T4126] loop4: detected capacity change from 0 to 7 [ 48.771276][ T4126] buffer_io_error: 7 callbacks suppressed [ 48.771294][ T4126] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.786852][ T4126] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.797060][ T4126] loop4: unable to read partition table [ 48.811098][ T4126] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 48.822341][ T4131] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.825232][ T4129] SELinux: ebitmap: truncated map [ 48.831561][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.835919][ T4129] SELinux: failed to load policy [ 48.853895][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.871371][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.883812][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.928462][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.942836][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 48.971251][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 49.678718][ T4155] netlink: 'syz.0.205': attribute type 30 has an invalid length. [ 49.688009][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 49.703072][ T4155] bond0: option arp_missed_max: invalid value (0) [ 49.709536][ T4155] bond0: option arp_missed_max: allowed values 1 - 255 [ 49.740720][ T4162] loop4: detected capacity change from 0 to 1024 [ 49.749170][ T4162] EXT4-fs: Ignoring removed oldalloc option [ 49.778239][ T4162] ext2: Unknown parameter 'smackfsdef' [ 49.836012][ T4166] delete_channel: no stack [ 49.840628][ T4166] delete_channel: no stack [ 50.081072][ T28] kauditd_printk_skb: 411 callbacks suppressed [ 50.081087][ T28] audit: type=1400 audit(1772948704.820:927): avc: denied { watch watch_reads } for pid=4094 comm="syz.1.183" path="/43" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.128390][ T4173] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.253570][ T4173] SELinux: failed to load policy [ 50.345091][ T28] audit: type=1400 audit(1772948705.090:928): avc: denied { name_connect } for pid=4180 comm="syz.0.214" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 50.351877][ T4181] syz.0.214 (4181) used greatest stack depth: 9392 bytes left [ 50.383335][ T4185] FAULT_INJECTION: forcing a failure. [ 50.383335][ T4185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.399452][ T4185] CPU: 0 UID: 0 PID: 4185 Comm: syz.4.213 Tainted: G W syzkaller #0 PREEMPT(full) [ 50.399501][ T4185] Tainted: [W]=WARN [ 50.399509][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.399520][ T4185] Call Trace: [ 50.399527][ T4185] [ 50.399536][ T4185] __dump_stack+0x1d/0x30 [ 50.399634][ T4185] dump_stack_lvl+0x95/0xd0 [ 50.399654][ T4185] dump_stack+0x15/0x1b [ 50.399674][ T4185] should_fail_ex+0x263/0x280 [ 50.399699][ T4185] should_fail+0xb/0x20 [ 50.399721][ T4185] should_fail_usercopy+0x1a/0x20 [ 50.399757][ T4185] _copy_from_user+0x1c/0xb0 [ 50.399820][ T4185] memdup_user+0x5e/0xd0 [ 50.399843][ T4185] strndup_user+0x68/0xb0 [ 50.399864][ T4185] __se_sys_mount+0x4d/0x2e0 [ 50.399893][ T4185] ? fput+0x8f/0xc0 [ 50.399985][ T4185] ? ksys_write+0x194/0x1a0 [ 50.400004][ T4185] __x64_sys_mount+0x67/0x80 [ 50.400028][ T4185] x64_sys_call+0x2d61/0x3020 [ 50.400119][ T4185] do_syscall_64+0x12c/0x370 [ 50.400138][ T4185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.400157][ T4185] RIP: 0033:0x7fabd73ec799 [ 50.400222][ T4185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.400301][ T4185] RSP: 002b:00007fabd5e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.400322][ T4185] RAX: ffffffffffffffda RBX: 00007fabd7665fa0 RCX: 00007fabd73ec799 [ 50.400335][ T4185] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000000 [ 50.400407][ T4185] RBP: 00007fabd5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 50.400420][ T4185] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000001 [ 50.400442][ T4185] R13: 00007fabd7666038 R14: 00007fabd7665fa0 R15: 00007ffd9e5ff8a8 [ 50.400459][ T4185] [ 50.670171][ T4198] xt_hashlimit: max too large, truncated to 1048576 [ 50.698882][ T4201] loop3: detected capacity change from 0 to 512 [ 50.706364][ T4201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.727455][ T4201] EXT4-fs (loop3): 1 truncate cleaned up [ 50.746347][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.765804][ T4201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.821820][ T28] audit: type=1400 audit(1772948705.570:929): avc: denied { accept } for pid=4210 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.825260][ T4211] netlink: 'syz.0.225': attribute type 21 has an invalid length. [ 50.879213][ T4214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 50.888810][ T4214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 50.899003][ T4214] syzkaller0: entered promiscuous mode [ 50.904586][ T4214] syzkaller0: entered allmulticast mode [ 50.914431][ T4214] 0: reclassify loop, rule prio 0, protocol 800 [ 50.921435][ T4214] nfs: Unexpected value for 'acl' [ 50.926556][ T28] audit: type=1400 audit(1772948705.640:930): avc: denied { ioctl } for pid=4213 comm="syz.1.226" path="socket:[8111]" dev="sockfs" ino=8111 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.954848][ T4214] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 50.973778][ T28] audit: type=1400 audit(1772948705.710:931): avc: denied { create } for pid=4213 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.993722][ T4217] loop4: detected capacity change from 0 to 512 [ 51.010600][ T10] IPVS: starting estimator thread 0... [ 51.019241][ T4217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.073214][ T4227] netlink: 14 bytes leftover after parsing attributes in process `syz.1.230'. [ 51.085256][ T4227] hsr_slave_0: left promiscuous mode [ 51.093240][ T4227] hsr_slave_1: left promiscuous mode [ 51.111747][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.131120][ T4221] IPVS: using max 3552 ests per chain, 177600 per kthread [ 51.145368][ T28] audit: type=1400 audit(1772948705.890:932): avc: denied { read write } for pid=4226 comm="syz.1.230" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.186464][ T28] audit: type=1400 audit(1772948705.890:933): avc: denied { open } for pid=4226 comm="syz.1.230" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.210315][ T28] audit: type=1400 audit(1772948705.890:934): avc: denied { read } for pid=4226 comm="syz.1.230" dev="sockfs" ino=8136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.220780][ T4227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 51.245462][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 51.271067][ T28] audit: type=1400 audit(1772948705.950:935): avc: denied { setopt } for pid=4226 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.311359][ T4239] loop4: detected capacity change from 0 to 512 [ 51.320226][ T4243] xt_hashlimit: max too large, truncated to 1048576 [ 51.348024][ T4239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.468413][ T4239] EXT4-fs (loop4): 1 truncate cleaned up [ 51.491573][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.649807][ T28] audit: type=1326 audit(1772948706.250:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12800ac799 code=0x7ffc0000 [ 52.502418][ T4239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.745796][ T4265] loop4: detected capacity change from 0 to 7 [ 52.765512][ T4265] loop4: unable to read partition table [ 52.771351][ T4265] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 52.868127][ T35] IPVS: starting estimator thread 0... [ 52.901490][ T4269] netlink: 220 bytes leftover after parsing attributes in process `syz.0.246'. [ 52.910619][ T4269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 52.961325][ T4274] IPVS: using max 2544 ests per chain, 127200 per kthread [ 53.001972][ T4284] loop2: detected capacity change from 0 to 512 [ 53.026733][ T4284] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.057017][ T4284] EXT4-fs (loop2): 1 truncate cleaned up [ 53.063334][ T4284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.091514][ T4284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.193681][ T1405] IPVS: stop unused estimator thread 0... [ 53.237987][ T4297] loop4: detected capacity change from 0 to 512 [ 54.017836][ T3405] IPVS: starting estimator thread 0... [ 54.101266][ T4321] xt_hashlimit: max too large, truncated to 1048576 [ 54.103787][ T4318] loop1: detected capacity change from 0 to 1024 [ 54.118899][ T4318] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.126925][ T4318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054c01c, mo2=0002] [ 54.135189][ T4314] IPVS: using max 2736 ests per chain, 136800 per kthread [ 54.142718][ T4318] System zones: 0-1, 3-36 [ 54.149758][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.172868][ T4326] loop3: detected capacity change from 0 to 512 [ 54.193866][ T4326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.229476][ T4331] tmpfs: Bad value for 'mpol' [ 54.240776][ T4326] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.291650][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.302373][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.327598][ T4340] loop3: detected capacity change from 0 to 512 [ 54.348512][ T4342] xt_hashlimit: max too large, truncated to 1048576 [ 54.359447][ T4340] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 54.380395][ T4340] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 54.400968][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.407430][ C0] EXT4-fs (loop3): initial error at time 1772948709: mb_free_blocks:2047: inode 11: block 64 [ 54.415894][ T4340] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.271: corrupted inode contents [ 54.417835][ C0] EXT4-fs (loop3): last error at time 1772948709: mb_free_blocks:2047: inode 11: block 64 [ 54.452238][ T4350] loop1: detected capacity change from 0 to 1024 [ 54.489245][ T4350] EXT4-fs: Ignoring removed oldalloc option [ 54.496130][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.496376][ T4340] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.271: mark_inode_dirty error [ 54.551323][ T4350] EXT4-fs: Ignoring removed bh option [ 54.562620][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.628671][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.628854][ T4340] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.271: invalid indirect mapped block 1 (level 1) [ 54.651522][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.651828][ T4340] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.271: corrupted inode contents [ 54.679237][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.679508][ T4340] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 54.697846][ T4340] loop3: lost filesystem error report for type 5 error -117 [ 54.698072][ T4340] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.271: corrupted inode contents [ 54.717536][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.717786][ T4340] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.271: mark_inode_dirty error [ 54.741224][ T4340] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.741559][ T4340] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 54.762837][ T4340] loop3: lost filesystem error report for type 5 error -117 [ 54.763205][ T4340] EXT4-fs (loop3): 1 truncate cleaned up [ 54.777482][ T4340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.790669][ T4358] 9p: Bad value for 'rfdno' [ 54.839479][ T4340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 55.097378][ T28] kauditd_printk_skb: 288 callbacks suppressed [ 55.097405][ T28] audit: type=1326 audit(1772948709.840:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.167393][ T28] audit: type=1326 audit(1772948709.890:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.262592][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.438211][ T28] audit: type=1326 audit(1772948709.890:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.490412][ T4371] ext4: Unknown parameter 'uid<00000000000000000000' [ 55.505101][ T28] audit: type=1326 audit(1772948709.890:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.528687][ T28] audit: type=1326 audit(1772948709.890:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.552461][ T28] audit: type=1326 audit(1772948709.890:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.575185][ T4336] buffer_io_error: 16 callbacks suppressed [ 55.575201][ T4336] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.576806][ T28] audit: type=1326 audit(1772948709.890:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.588945][ T4336] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.622617][ T4336] loop4: unable to read partition table [ 55.629520][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.631305][ T28] audit: type=1326 audit(1772948709.890:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.678591][ T4336] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 55.713324][ T4381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 55.718084][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.730745][ T4351] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.733612][ T28] audit: type=1326 audit(1772948709.890:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.751459][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.773208][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.781999][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.790846][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.799425][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.816262][ T28] audit: type=1326 audit(1772948709.900:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff65650cfce code=0x7ffc0000 [ 55.935183][ T4385] set_capacity_and_notify: 2 callbacks suppressed [ 55.935229][ T4385] loop3: detected capacity change from 0 to 128 [ 55.955848][ T4385] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 56.055780][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.274559][ T4417] loop1: detected capacity change from 0 to 1024 [ 56.284985][ T4417] EXT4-fs: Ignoring removed oldalloc option [ 56.293903][ T4417] EXT4-fs: Ignoring removed bh option [ 56.323877][ T4415] loop3: detected capacity change from 0 to 4096 [ 56.324614][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.362120][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.517500][ T4433] 9p: Bad value for 'rfdno' [ 56.541283][ T4435] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 56.596314][ T4435] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 57.196799][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.255650][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.289177][ T4459] loop4: detected capacity change from 0 to 1024 [ 57.331535][ T4461] loop1: detected capacity change from 0 to 1764 [ 57.355051][ T4459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.412783][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.499307][ T4469] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.314'. [ 57.687559][ T4468] loop1: detected capacity change from 0 to 1024 [ 57.720561][ T4483] loop3: detected capacity change from 0 to 1024 [ 57.727484][ T4483] EXT4-fs: Ignoring removed oldalloc option [ 57.737448][ T4483] EXT4-fs: Ignoring removed bh option [ 58.045872][ T4468] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.115286][ T4468] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.318: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.137357][ T4468] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 58.157189][ T3405] hid (null): unknown global tag 0xe [ 58.175121][ T3405] hid (null): unknown global tag 0xe [ 58.187795][ T4468] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.187795][ T4468] [ 58.191427][ T3405] hid-generic 0001:0003:0007.0001: unexpected long global item [ 58.224442][ T4501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.318'. [ 58.238332][ T4501] IPv6: NLM_F_REPLACE set, but no existing node found! [ 58.239698][ T4472] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.249656][ T3405] hid-generic 0001:0003:0007.0001: probe with driver hid-generic failed with error -22 [ 58.265499][ T4472] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 58.284919][ T4502] loop2: detected capacity change from 0 to 512 [ 58.525392][ T3513] IPVS: starting estimator thread 0... [ 58.623844][ T4506] IPVS: using max 2784 ests per chain, 139200 per kthread [ 58.756722][ T4518] loop4: detected capacity change from 0 to 512 [ 58.786508][ T4518] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.079872][ T4539] loop3: detected capacity change from 0 to 1024 [ 59.101147][ T4539] EXT4-fs: Ignoring removed oldalloc option [ 59.113899][ T4539] EXT4-fs: Ignoring removed bh option [ 59.318639][ T3405] hid (null): unknown global tag 0xe [ 59.339806][ T3405] hid (null): unknown global tag 0xe [ 59.351714][ T3405] hid-generic 0001:0003:0007.0002: unexpected long global item [ 59.365961][ T3405] hid-generic 0001:0003:0007.0002: probe with driver hid-generic failed with error -22 [ 59.520009][ T4568] delete_channel: no stack [ 59.536777][ T4568] delete_channel: no stack [ 59.562199][ T3405] IPVS: starting estimator thread 0... [ 59.681087][ T4569] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.739158][ T4576] netlink: 'syz.4.352': attribute type 29 has an invalid length. [ 59.752163][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 59.765066][ T4576] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 59.785231][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 59.845294][ T127] IPVS: stop unused estimator thread 0... [ 59.951615][ T4587] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 59.998000][ T4587] FAULT_INJECTION: forcing a failure. [ 59.998000][ T4587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.012300][ T4587] CPU: 1 UID: 0 PID: 4587 Comm: syz.1.357 Tainted: G W syzkaller #0 PREEMPT(full) [ 60.012336][ T4587] Tainted: [W]=WARN [ 60.012342][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.012428][ T4587] Call Trace: [ 60.012435][ T4587] [ 60.012444][ T4587] __dump_stack+0x1d/0x30 [ 60.012536][ T4587] dump_stack_lvl+0x95/0xd0 [ 60.012561][ T4587] dump_stack+0x15/0x1b [ 60.012689][ T4587] should_fail_ex+0x263/0x280 [ 60.012711][ T4587] should_fail+0xb/0x20 [ 60.012729][ T4587] should_fail_usercopy+0x1a/0x20 [ 60.012827][ T4587] _copy_from_user+0x1c/0xb0 [ 60.012927][ T4587] ___sys_sendmsg+0xc1/0x1e0 [ 60.012952][ T4587] ? path_openat+0x1b01/0x2050 [ 60.013006][ T4587] __sys_sendmmsg+0x185/0x320 [ 60.013048][ T4587] __x64_sys_sendmmsg+0x57/0x70 [ 60.013113][ T4587] x64_sys_call+0x27aa/0x3020 [ 60.013136][ T4587] do_syscall_64+0x12c/0x370 [ 60.013156][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.013242][ T4587] RIP: 0033:0x7ff65654c799 [ 60.013261][ T4587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.013311][ T4587] RSP: 002b:00007ff654fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.013330][ T4587] RAX: ffffffffffffffda RBX: 00007ff6567c5fa0 RCX: 00007ff65654c799 [ 60.013345][ T4587] RDX: 0000000000000001 RSI: 00002000000045c0 RDI: 0000000000000008 [ 60.013367][ T4587] RBP: 00007ff654fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.013409][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.013420][ T4587] R13: 00007ff6567c6038 R14: 00007ff6567c5fa0 R15: 00007fff7559a2a8 [ 60.013441][ T4587] [ 60.335750][ T4596] EXT4-fs: Ignoring removed oldalloc option [ 60.350300][ T4596] ext2: Unknown parameter 'smackfsdef' [ 60.564665][ T28] kauditd_printk_skb: 994 callbacks suppressed [ 60.564684][ T28] audit: type=1400 audit(1772948715.310:2229): avc: denied { block_suspend } for pid=4610 comm="syz.2.364" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.666915][ T4616] FAULT_INJECTION: forcing a failure. [ 60.666915][ T4616] name failslab, interval 1, probability 0, space 0, times 0 [ 60.680394][ T4616] CPU: 0 UID: 0 PID: 4616 Comm: syz.4.367 Tainted: G W syzkaller #0 PREEMPT(full) [ 60.680429][ T4616] Tainted: [W]=WARN [ 60.680437][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.680516][ T4616] Call Trace: [ 60.680522][ T4616] [ 60.680530][ T4616] __dump_stack+0x1d/0x30 [ 60.680632][ T4616] dump_stack_lvl+0x95/0xd0 [ 60.680657][ T4616] dump_stack+0x15/0x1b [ 60.680710][ T4616] should_fail_ex+0x263/0x280 [ 60.680736][ T4616] should_failslab+0x8c/0xb0 [ 60.680760][ T4616] __kmalloc_noprof+0xb8/0x4e0 [ 60.680784][ T4616] ? security_sk_alloc+0x52/0x120 [ 60.680884][ T4616] security_sk_alloc+0x52/0x120 [ 60.680915][ T4616] sk_prot_alloc+0xc2/0x180 [ 60.680950][ T4616] sk_alloc+0x35/0x3e0 [ 60.680977][ T4616] unix_create1+0xa5/0x400 [ 60.681117][ T4616] unix_stream_connect+0x2a1/0xaa0 [ 60.681216][ T4616] ? selinux_netlbl_socket_connect+0x114/0x130 [ 60.681253][ T4616] ? selinux_socket_connect+0x57/0x70 [ 60.681285][ T4616] ? __pfx_unix_stream_connect+0x10/0x10 [ 60.681425][ T4616] __sys_connect+0x1f1/0x2a0 [ 60.681454][ T4616] __x64_sys_connect+0x3f/0x50 [ 60.681478][ T4616] x64_sys_call+0x2df0/0x3020 [ 60.681589][ T4616] do_syscall_64+0x12c/0x370 [ 60.681612][ T4616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.681646][ T4616] RIP: 0033:0x7fabd73ec799 [ 60.681749][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.681768][ T4616] RSP: 002b:00007fabd5e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.681787][ T4616] RAX: ffffffffffffffda RBX: 00007fabd7665fa0 RCX: 00007fabd73ec799 [ 60.681800][ T4616] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 60.681811][ T4616] RBP: 00007fabd5e47090 R08: 0000000000000000 R09: 0000000000000000 [ 60.681834][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.681845][ T4616] R13: 00007fabd7666038 R14: 00007fabd7665fa0 R15: 00007ffd9e5ff8a8 [ 60.681949][ T4616] [ 60.771055][ T3300] buffer_io_error: 3 callbacks suppressed [ 60.771070][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.848076][ T4622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.878868][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.903552][ T4622] EXT4-fs (loop3): 1 truncate cleaned up [ 60.941147][ T3300] loop4: unable to read partition table [ 60.954618][ T4625] set_capacity_and_notify: 3 callbacks suppressed [ 60.954724][ T4625] loop2: detected capacity change from 0 to 1024 [ 60.971050][ T4597] Buffer I/O error on dev loop4, logical block 0, async page read [ 60.981499][ T4625] EXT4-fs: Ignoring removed oldalloc option [ 61.004385][ T4625] EXT4-fs: Ignoring removed bh option [ 61.010372][ T4583] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.045175][ T4583] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.054047][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.062375][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.074999][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.083306][ T4583] loop4: unable to read partition table [ 61.089537][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.098064][ T3300] Buffer I/O error on dev loop4, logical block 0, async page read [ 61.106174][ T4583] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 61.122935][ T3000] loop4: unable to read partition table [ 61.134728][ T28] audit: type=1326 audit(1772948715.880:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.135341][ T4635] 9p: Bad value for 'rfdno' [ 61.159950][ T28] audit: type=1326 audit(1772948715.880:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.193736][ T4638] FAULT_INJECTION: forcing a failure. [ 61.193736][ T4638] name failslab, interval 1, probability 0, space 0, times 0 [ 61.205705][ T28] audit: type=1326 audit(1772948715.880:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.229783][ T4638] CPU: 1 UID: 0 PID: 4638 Comm: syz.3.374 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.229816][ T4638] Tainted: [W]=WARN [ 61.229845][ T4638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.229855][ T4638] Call Trace: [ 61.229862][ T4638] [ 61.229870][ T4638] __dump_stack+0x1d/0x30 [ 61.229911][ T4638] dump_stack_lvl+0x95/0xd0 [ 61.229937][ T4638] dump_stack+0x15/0x1b [ 61.230024][ T4638] should_fail_ex+0x263/0x280 [ 61.230049][ T4638] should_failslab+0x8c/0xb0 [ 61.230068][ T4638] kmem_cache_alloc_noprof+0x66/0x400 [ 61.230088][ T4638] ? security_file_alloc+0x32/0xf0 [ 61.230195][ T4638] security_file_alloc+0x32/0xf0 [ 61.230225][ T4638] init_file+0x5b/0x1b0 [ 61.230249][ T4638] alloc_empty_file+0x8b/0x200 [ 61.230274][ T4638] path_openat+0x65/0x2050 [ 61.230362][ T4638] ? _parse_integer_limit+0x170/0x190 [ 61.230386][ T4638] ? _parse_integer+0x27/0x40 [ 61.230407][ T4638] ? kstrtoull+0x111/0x140 [ 61.230430][ T4638] ? kstrtouint+0x76/0xc0 [ 61.230506][ T4638] do_file_open+0x16c/0x290 [ 61.230569][ T4638] do_sys_openat2+0x94/0x130 [ 61.230596][ T4638] __x64_sys_openat+0xf2/0x120 [ 61.230620][ T4638] x64_sys_call+0x1e39/0x3020 [ 61.230660][ T4638] do_syscall_64+0x12c/0x370 [ 61.230681][ T4638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.230706][ T4638] RIP: 0033:0x7f5162ffc799 [ 61.230724][ T4638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.230814][ T4638] RSP: 002b:00007f5161a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.230884][ T4638] RAX: ffffffffffffffda RBX: 00007f5163275fa0 RCX: 00007f5162ffc799 [ 61.230919][ T4638] RDX: 0000000000080082 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 61.230940][ T4638] RBP: 00007f5161a57090 R08: 0000000000000000 R09: 0000000000000000 [ 61.230955][ T4638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.230968][ T4638] R13: 00007f5163276038 R14: 00007f5163275fa0 R15: 00007fff74322ea8 [ 61.230989][ T4638] [ 61.232542][ T28] audit: type=1326 audit(1772948715.880:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.503249][ T28] audit: type=1326 audit(1772948715.880:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.527157][ T28] audit: type=1400 audit(1772948715.880:2235): avc: denied { mounton } for pid=4624 comm="syz.2.370" path="/62/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.550799][ T28] audit: type=1326 audit(1772948715.910:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.609980][ T28] audit: type=1326 audit(1772948715.910:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.647734][ T28] audit: type=1326 audit(1772948715.920:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea94cc799 code=0x7ffc0000 [ 61.839411][ T4652] lo speed is unknown, defaulting to 1000 [ 61.892756][ T4656] FAULT_INJECTION: forcing a failure. [ 61.892756][ T4656] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.909952][ T4657] netlink: 'syz.0.380': attribute type 21 has an invalid length. [ 61.911652][ T4652] lo speed is unknown, defaulting to 1000 [ 61.918223][ T4656] CPU: 1 UID: 0 PID: 4656 Comm: syz.1.381 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.918254][ T4656] Tainted: [W]=WARN [ 61.918261][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.918303][ T4656] Call Trace: [ 61.918310][ T4656] [ 61.918347][ T4656] __dump_stack+0x1d/0x30 [ 61.918374][ T4656] dump_stack_lvl+0x95/0xd0 [ 61.918397][ T4656] dump_stack+0x15/0x1b [ 61.918418][ T4656] should_fail_ex+0x263/0x280 [ 61.918500][ T4656] should_fail_alloc_page+0xf2/0x100 [ 61.918563][ T4656] __alloc_frozen_pages_noprof+0x108/0x360 [ 61.918591][ T4656] alloc_pages_mpol+0xb3/0x260 [ 61.918618][ T4656] vma_alloc_folio_noprof+0x1a9/0x300 [ 61.918669][ T4656] handle_mm_fault+0x111f/0x3020 [ 61.918698][ T4656] ? mas_walk+0x6b/0x150 [ 61.918731][ T4656] ? vma_start_read+0x1c7/0x2c0 [ 61.918757][ T4656] do_user_addr_fault+0x62f/0x1050 [ 61.918790][ T4656] ? trace_page_fault_user+0x1f/0xe0 [ 61.918867][ T4656] exc_page_fault+0x62/0xa0 [ 61.918895][ T4656] asm_exc_page_fault+0x26/0x30 [ 61.918961][ T4656] RIP: 0033:0x7ff65640df4b [ 61.918978][ T4656] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 61.918995][ T4656] RSP: 002b:00007ff654fa5fa0 EFLAGS: 00010206 [ 61.919013][ T4656] RAX: 0000000000000000 RBX: 00007ff6567c5fa0 RCX: 0000000000000000 [ 61.919026][ T4656] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0 [ 61.919047][ T4656] RBP: 00007ff654fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.919060][ T4656] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 61.919085][ T4656] R13: 00007ff6567c6038 R14: 00007ff6567c5fa0 R15: 00007fff7559a2a8 [ 61.919103][ T4656] [ 61.919188][ T4656] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 62.044464][ T4625] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.370: Allocating blocks 1-17 which overlap fs metadata [ 62.059159][ T4657] netlink: 128 bytes leftover after parsing attributes in process `syz.0.380'. [ 62.068720][ T4633] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.370: Allocating blocks 1-17 which overlap fs metadata [ 62.087852][ T4652] lo speed is unknown, defaulting to 1000 [ 62.135837][ T4659] SELinux: syz.3.382 (4659) set checkreqprot to 1. This is no longer supported. [ 62.192502][ T4657] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 62.200179][ T4657] netlink: 3 bytes leftover after parsing attributes in process `syz.0.380'. [ 62.228071][ T4666] hub 1-0:1.0: USB hub found [ 62.232975][ T4666] hub 1-0:1.0: 8 ports detected [ 62.235784][ T4652] infiniband syU: set active [ 62.243042][ T4652] infiniband syU: added lo [ 62.273633][ T1033] lo speed is unknown, defaulting to 1000 [ 62.292395][ T4652] RDS/IB: syU: added [ 62.314184][ T4652] smc: adding ib device syU with port count 1 [ 62.360541][ T4652] smc: ib device syU port 1 has no pnetid [ 62.397855][ T3368] lo speed is unknown, defaulting to 1000 [ 62.404051][ T4652] lo speed is unknown, defaulting to 1000 [ 62.512120][ T4652] lo speed is unknown, defaulting to 1000 [ 62.564164][ T4652] lo speed is unknown, defaulting to 1000 [ 62.672812][ T4652] lo speed is unknown, defaulting to 1000 [ 62.721449][ T4692] loop2: detected capacity change from 0 to 1024 [ 62.751510][ T4692] EXT4-fs: Ignoring removed oldalloc option [ 62.757468][ T4692] EXT4-fs: Ignoring removed bh option [ 62.823347][ T4702] loop1: detected capacity change from 0 to 164 [ 62.831587][ T4652] lo speed is unknown, defaulting to 1000 [ 62.925033][ T4704] 9p: Bad value for 'rfdno' [ 63.108288][ T4702] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 63.525864][ T4726] lo speed is unknown, defaulting to 1000 [ 63.628194][ T4730] loop3: detected capacity change from 0 to 512 [ 63.676996][ T4730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.750703][ T4730] EXT4-fs (loop3): 1 orphan inode deleted [ 63.790776][ T4730] EXT4-fs (loop3): 1 truncate cleaned up [ 63.824680][ T4730] EXT4-fs (loop3): shut down requested (1) [ 63.897513][ T4734] lo speed is unknown, defaulting to 1000 [ 64.440326][ T4745] loop3: detected capacity change from 0 to 2048 [ 64.503351][ T4745] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.566049][ T4754] FAULT_INJECTION: forcing a failure. [ 64.566049][ T4754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.621213][ T4754] CPU: 0 UID: 0 PID: 4754 Comm: syz.0.415 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.621273][ T4754] Tainted: [W]=WARN [ 64.621303][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.621317][ T4754] Call Trace: [ 64.621325][ T4754] [ 64.621334][ T4754] __dump_stack+0x1d/0x30 [ 64.621441][ T4754] dump_stack_lvl+0x95/0xd0 [ 64.621466][ T4754] dump_stack+0x15/0x1b [ 64.621488][ T4754] should_fail_ex+0x263/0x280 [ 64.621509][ T4754] should_fail+0xb/0x20 [ 64.621527][ T4754] should_fail_usercopy+0x1a/0x20 [ 64.621603][ T4754] strncpy_from_user+0x27/0x250 [ 64.621642][ T4754] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 64.621729][ T4754] do_getname+0x59/0x1c0 [ 64.621755][ T4754] __se_sys_symlink+0x2f/0x1b0 [ 64.621801][ T4754] __x64_sys_symlink+0x31/0x40 [ 64.621832][ T4754] x64_sys_call+0x2465/0x3020 [ 64.621865][ T4754] do_syscall_64+0x12c/0x370 [ 64.621889][ T4754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.621914][ T4754] RIP: 0033:0x7f12800ac799 [ 64.621929][ T4754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.621987][ T4754] RSP: 002b:00007f127eaff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 64.622010][ T4754] RAX: ffffffffffffffda RBX: 00007f1280325fa0 RCX: 00007f12800ac799 [ 64.622024][ T4754] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000001640 [ 64.622036][ T4754] RBP: 00007f127eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.622048][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.622060][ T4754] R13: 00007f1280326038 R14: 00007f1280325fa0 R15: 00007ffc9e28c7e8 [ 64.622141][ T4754] [ 64.649328][ T4752] lo speed is unknown, defaulting to 1000 [ 64.896282][ T4767] loop1: detected capacity change from 0 to 512 [ 64.903661][ T4767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.927448][ T4770] loop3: detected capacity change from 0 to 1024 [ 64.938303][ T4770] EXT4-fs: Ignoring removed oldalloc option [ 64.995790][ T4770] EXT4-fs: Ignoring removed bh option [ 65.012267][ T4767] EXT4-fs (loop1): 1 truncate cleaned up [ 65.210015][ T4779] 9p: Bad value for 'rfdno' [ 65.312690][ T4781] program syz.2.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.341457][ T4782] loop1: detected capacity change from 0 to 512 [ 65.362176][ T4782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.394089][ T4782] EXT4-fs (loop1): 1 truncate cleaned up [ 65.419391][ T4777] ================================================================== [ 65.427502][ T4777] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 65.435399][ T4777] [ 65.437716][ T4777] write to 0xffff88811ae6212c of 4 bytes by task 4770 on cpu 0: [ 65.445333][ T4777] xas_set_mark+0x12b/0x140 [ 65.449925][ T4777] __folio_start_writeback+0x17b/0x370 [ 65.455473][ T4777] ext4_bio_write_folio+0x5ad/0x9f0 [ 65.460672][ T4777] mpage_process_page_bufs+0x4a1/0x620 [ 65.466124][ T4777] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 65.471950][ T4777] ext4_do_writepages+0xa07/0x2840 [ 65.477076][ T4777] ext4_writepages+0x18f/0x320 [ 65.481834][ T4777] do_writepages+0x1c6/0x310 [ 65.486456][ T4777] file_write_and_wait_range+0x178/0x2f0 [ 65.492079][ T4777] generic_buffers_fsync_noflush+0x45/0x130 [ 65.497983][ T4777] ext4_sync_file+0x1aa/0x6b0 [ 65.502652][ T4777] vfs_fsync_range+0xc5/0xe0 [ 65.507420][ T4777] ext4_buffered_write_iter+0x34f/0x3c0 [ 65.512955][ T4777] ext4_file_write_iter+0x380/0xfa0 [ 65.518155][ T4777] iter_file_splice_write+0x6c4/0xa80 [ 65.523690][ T4777] direct_splice_actor+0x156/0x2a0 [ 65.528788][ T4777] splice_direct_to_actor+0x311/0x670 [ 65.534157][ T4777] do_splice_direct+0x119/0x1a0 [ 65.539101][ T4777] do_sendfile+0x382/0x650 [ 65.543540][ T4777] __x64_sys_sendfile64+0x105/0x150 [ 65.548743][ T4777] x64_sys_call+0x2dc4/0x3020 [ 65.553422][ T4777] do_syscall_64+0x12c/0x370 [ 65.558038][ T4777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.564012][ T4777] [ 65.566352][ T4777] read to 0xffff88811ae6212c of 4 bytes by task 4777 on cpu 1: [ 65.573902][ T4777] __writeback_single_inode+0x26b/0x860 [ 65.579446][ T4777] writeback_single_inode+0x16d/0x3f0 [ 65.584820][ T4777] sync_inode_metadata+0x6e/0xa0 [ 65.589770][ T4777] generic_buffers_fsync_noflush+0xee/0x130 [ 65.595662][ T4777] ext4_sync_file+0x1aa/0x6b0 [ 65.600335][ T4777] vfs_fsync_range+0xc5/0xe0 [ 65.604930][ T4777] ext4_buffered_write_iter+0x34f/0x3c0 [ 65.610483][ T4777] ext4_file_write_iter+0x380/0xfa0 [ 65.615684][ T4777] iter_file_splice_write+0x6c4/0xa80 [ 65.621064][ T4777] direct_splice_actor+0x156/0x2a0 [ 65.626295][ T4777] splice_direct_to_actor+0x311/0x670 [ 65.631670][ T4777] do_splice_direct+0x119/0x1a0 [ 65.636543][ T4777] do_sendfile+0x382/0x650 [ 65.640963][ T4777] __x64_sys_sendfile64+0x105/0x150 [ 65.646183][ T4777] x64_sys_call+0x2dc4/0x3020 [ 65.650859][ T4777] do_syscall_64+0x12c/0x370 [ 65.655456][ T4777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.661343][ T4777] [ 65.663668][ T4777] value changed: 0x0a000021 -> 0x04000021 [ 65.669370][ T4777] [ 65.671685][ T4777] Reported by Kernel Concurrency Sanitizer on: [ 65.677834][ T4777] CPU: 1 UID: 0 PID: 4777 Comm: syz.3.421 Tainted: G W syzkaller #0 PREEMPT(full) [ 65.688583][ T4777] Tainted: [W]=WARN [ 65.692377][ T4777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.702436][ T4777] ================================================================== [ 65.718378][ T28] kauditd_printk_skb: 643 callbacks suppressed [ 65.718472][ T28] audit: type=1326 audit(1772948720.460:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5162fbcfce code=0x7ffc0000 [ 65.765006][ T28] audit: type=1326 audit(1772948720.500:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5162ffc799 code=0x7ffc0000 [ 65.788633][ T28] audit: type=1326 audit(1772948720.500:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5162ffc799 code=0x7ffc0000