last executing test programs: 5.875526861s ago: executing program 4 (id=1048): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x184}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.808060704s ago: executing program 2 (id=1054): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"/1012], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.538395842s ago: executing program 4 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x101040, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, 0x0, 0x52cc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x30000002, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) 4.417178815s ago: executing program 2 (id=1058): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x18, &(0x7f0000000040), 0x0, 0xb87, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x20, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x15, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r0, 0x6}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000100)=0x6, 0x4) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c800) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4.041455687s ago: executing program 0 (id=1063): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x71, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 3.92610956s ago: executing program 1 (id=1065): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioprio_set$uid(0x0, 0x0, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000340)={0x136db, 0x80000000002f423f, 0xfffffffffffffffe, 0x9, 0xd, 0x7, 0x2000008, 0x4, 0x80000000, 0xffffd, 0x3, 0x1, 0x100, 0x7, 0x0, 0x1fffffffffffe, 0x3, 0xc5b, 0xfffffffffffffffe, 0x4000000000200, 0x80000, 0x0, 0x816, 0x80000001, 0x37, 0x6}) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000002b80)=ANY=[@ANYBLOB="b700000018140000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc6209fcd8fd8ff1e8201cea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) socket$inet(0x2, 0x800, 0xd9) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1038014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$eJzs3U9oHOfZAPBnZMl/FDAm34e/YBxnbOcDBxxltYqVikCTzWpkT7LaFburYlNKamI5CMtJSBra+JKYQtKWQumpxzTX3HprKbTQQ9tToTn00lsgp5JC/xEIBZWd3ZUleVeSHVtOmt/PSDM788y8zztaz7Mj7bwbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAk1dlSaTKJWl5fPJ8OV51tNua3WN/f3683TDZ4ekO7EUnnK/bvj0/+0V32vzdWH+58OxFHu4+Oxv7OZH9cu+/woSf/Z3Skv/0WCd2u4zuMSyIOdJK6cnFlZenVu5DILvrBL291i9Hezymr563I5ytnszRvNdKZ6enSY+fmWulcXstaF1rtbD6tNrNKe6wXPzMzlWYTFxqL9bOzlVqWnqo+kk7OzDzxaLlUmk6fnVjIKs1Wo/7Ys9Gqnstrtbx+togpl74dnZgnOk/E5/J22s4q82l6eXllaWq7XDtBk4NW7Ok+f44+fOij1z/8+/JS5wk5bCdJrwPlyclyeXL6zMyZJ0ql0XKpvHFBaZNYi4iRiE7EXXnS8gVyZ07ccAeM9Op/1CKPeizG+UgH/BuLasxGMxox33n8p7GbInr69f//H/vrH7Zqd33971f5B26sPhJF/T/WfXRsWP0fmOtu/nst3ohrcSUuxkqsxFK8egvbru7r9m5XMx65ve369TuNZMPys5FFPfJoRSPymI9KsSTtLUljJqZjOkrxfJyLuWhFGnORRy2yaMWFaEU7suIZVY1mZFGJdjSiGWmcimo8EmlMxkzMxFSkkcVEXIhGLEY9zsZsVIq9XI7l4rhPbcr38IH4xYt//Ojdzvxa0OQWHUzeiiiC/rZF0E3lfsv6v9p5zXBThPr/JbB3q5V38vQNn8lqv/4DAAAA/7WS4rfvnev/sXiwmJvLa9nX73VaAAAAwB1U/OX/aGdSvMXrwUg61/+lAZEf7HpuAAAAwJ2RFPfYJRExHg915y7HcrwVSzHolwARcWi3UwQAAAA+o+Lv/8c6k/GIN4sF/eFShlz/AwAAAF803xs2xv6H/TF2Wwv7kl+NRcRYcn3h/MPJ1UonrnJ1T3e73uRra3tszx1JDvZ2UkymR6/dl0TEaDU7mvRHv/x3b/Dbj4vvR0bXNh821n/SbG6ZQGydQPEofhjHuzHHLxWT+3qbjCbdVsbn8lo2UW3UniyGROx8tV9/afk7EZ3Wv1+fP5jE5eWVpYkXXl65VORyvbP59au9ARRvGkdxi1z6w//Gg4N7PFbciNFrd7zbbml9/0e6m49s3Wayvs2340Q35sR4dzreX9Ntc3+nzcmJJyejUjk40s7Ot19fXdf7XhaTaz0fu62evx0nN/zoTp4akEV5QxYv3ZxFef3x39mx2JDFma+e7Dd/cnMW7x5/8/y/fttIsqntspi6hSxW90RszgLgXrlcjPpzowodKKrQp6tdnfrfrbudYlXpBvTs4Fz7zxutrL3K6G+/rtaNxubqPrJ2YtxZdV+Nbl051Y051X09MXpkQF25PuCM/sryK7/rndEff/8nP/3Gsd//rGj3tqrb+/FIN6Y3ift/M6TGdvq8f1NVfa+zxXtD223Vyklcj9jzrauvxOHX3rj26PLViy8uvbj0Urk8NV16vFQ6U97bix0rXjFskSkAX17bf8bO0Ih+nUke33RVHZc21t37195SMBEvxMuxEpfidHG3QUQ8NLjd8XVvQzi9zVXr+LpPeDndu7acfbYbuvna8kZseS127QowiSGxU+uO2P/9uJh8cjd+GgCwO05sU4eTvWuhw14hJKe3ue7eWMs3XR3H8Fo+yFfu3qEAgC+NrPlxMt5+J2k284XnJ2dmJivtc1nabFSfS5v57NkszevtrFk9V6mfzdKFZqPdqPZ/cTybtdLW4sJCo9lO5xrNNEZa+fnik9/T3ke/t7L5Sr2dV1sLtazSytJqo96uVNvpbN6qpguLz9Ty1v6sWWzcWsiq+VxerbTzRj1tNRab1WwiTVtZ1gs8lzXTfDart/O5vDNbTxea+XyleT0iaovzWTqbtarNfKHd6O6w31Zen2s054vdTtzc/b/s9vEGgM+D1964duXiysrSq7c38+ctY5LuzL3uIwCw0Y1yfa8zAQAAAAAAAAAAAAAAhll7//+h/kxn6Xa3/Y3Eju4R3BPbxeyLW7npcN9nuVXxLszE3oGr9kbs7PjctZkk4q2V6KZx4HNwoO7dzDefeurKsJhn3nzg3M72Ezu9UzbeORix9+c/6i55enjwd3v//was6g/7fAs9/SBi5DaOz2oyYNWnq/001tm72+clAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjkPwEAAP//MkpLmg==") (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r4, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x5, 0x20000006}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46800c040001000000010000000200060001000000dd0000003800000045030000080000000500200001000500090000000000000003000000040000000500000006000000800000000600000002000000a25b00004b67de06a501fefbdbe1a44da35a3a4ff0d72d6ef1e3b3059eea508281af370b8f79fbd5fbf71a8a3b583e543797159b0221f5235a8ab9d1e0785b9c830471b5104cfe69ab2d26075198aab2c73d1ade808aac8d5d1f244e"], 0x58) close(r5) 3.875070342s ago: executing program 2 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x3) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0x4813, 0x0, 0x8000}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b042c498c3bb8f9e0c37b9b373b6d", 0x3f}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x0, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 3.745345066s ago: executing program 1 (id=1067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) unshare(0x4000400) unshare(0x48020000) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x1, 0x3, 0x2, 0x94, 0xffffffffffffffff}) 3.651983778s ago: executing program 4 (id=1068): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"/1012], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.165379693s ago: executing program 0 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x400, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMIWAIT(r7, 0x5453, 0x0) 3.094174426s ago: executing program 3 (id=1071): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x51, 0x0, &(0x7f0000000440)="b451806305624431ed3373e30001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6", 0x0, 0xeaa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x50) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.93609084s ago: executing program 3 (id=1072): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x184}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.835395063s ago: executing program 1 (id=1073): sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000100a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES32=r0], 0x38}}, 0x10) 2.802191255s ago: executing program 0 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x101040, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, 0x0, 0x52cc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000003c80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x8, @private2, 0x800}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}], 0x2, 0x44845) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={r6, 0x3}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x30000002, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/167, 0xa7}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbb5e0aaaaaaaaaabb86dd60122c9200103ae3fe8000000000000000000000000000bbff02004f7300efd96960982f7a4a0c255a00000000000000000000000001860066667df3779ff0850c0081"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.781725215s ago: executing program 1 (id=1075): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)={0x1, 0x0, [0x0]}) 2.62732286s ago: executing program 4 (id=1076): setfsuid(0xee01) socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r1 = socket(0x2, 0x80805, 0x0) listen(r1, 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000009c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 2.109447776s ago: executing program 2 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x300, 0x81, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, {0xa, 0x4e23, 0x4b, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x13, 0x8001, 0x6, 0xe, 0x3]}}, 0x5c) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f767469300000"], 0x80}}, 0x40000) 2.099796266s ago: executing program 1 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x101040, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, 0x0, 0x52cc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x30000002, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) 1.994002379s ago: executing program 3 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000002c40)=[{&(0x7f00000006c0)}, {0x0}, {&(0x7f00000019c0)}, {0x0}, {&(0x7f0000001b40)="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", 0x910}, {&(0x7f0000002b40)}], 0x6, &(0x7f0000002cc0)=[{0x18, 0x84, 0x0, "35bc835172"}, {0x40, 0x10b, 0xdfe7b3cb, "29a9410e2c9cfee789562dbafe65d072ad776830a53f36bc0cb5c782d627db3cdd10f9510d4231f162"}, {0xb0, 0x11, 0x8001, "e938766fc1a4ea5144b4213089d75697721d724afe5a29e4d38596d1aed0aa8eb13f9da6f579a5f4b474c8947839aec3286a89119e27e6e0f88461f10a9eaef152bc9e78d83e71f710e61c9ce4e33e2a853b5b795247cf1f3dbe15744f6f0c12d6b6fbed6b11517146a7ba3065856e69f0e9766ce8de9e72a681b898967d0b817c2ffa83de0a6193ab8c4982bf4bea09c280462528bb0d7cb3ab"}], 0x108}, 0x41) 1.906598642s ago: executing program 3 (id=1080): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x7, @perf_config_ext={0x3, 0x100}, 0x4128, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000000180)="b4610200056afa94b53fb20aed02000000c68c02f51729022676e143708000000000d5fe00cc6390009c00000000002fbf1ccca3bc82777419b3d1ff4970690104000025c86667a746bb59a95be4b17395e84fd70fa66390739cb311577545318ab6e2af6c1d0177d3118b071c21ec5f379c5a4b90d6d51980ceff3f0cc5cb8947d6bf5ade5b53e3", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xfffffffffffffe50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r2, 0x0, 0x0, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 1.772306175s ago: executing program 0 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x300, 0x81, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, {0xa, 0x4e23, 0x4b, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x13, 0x8001, 0x6, 0xe, 0x3]}}, 0x5c) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f767469300000"], 0x80}}, 0x40000) 1.499734334s ago: executing program 4 (id=1082): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x51, 0x0, &(0x7f0000000440)="b451806305624431ed3373e30001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6", 0x0, 0xeaa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x50) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 888.216043ms ago: executing program 1 (id=1083): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x71, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 887.973133ms ago: executing program 4 (id=1084): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x184}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 522.874333ms ago: executing program 3 (id=1085): sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000100a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES32=r0], 0x38}}, 0x10) 427.269137ms ago: executing program 2 (id=1086): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"/1012], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 163.453244ms ago: executing program 3 (id=1087): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) unshare(0x24020400) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x7813, 0x3, 0x0, 0xfffdffff, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000000)={0x0, 0xcafd, 0x1, 0x7, 0x1, [0x69, 0x8, 0x1, 0x1]}) timer_getoverrun(r0) flock(r2, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) 126.912416ms ago: executing program 0 (id=1088): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRES64=r1], 0x3c}}, 0x20004091) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x0, {0x23, 0x3, 0x4, 0x9, 0x7fff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 95.470837ms ago: executing program 2 (id=1089): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x184}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=1090): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001ec0), 0x600002, 0x0) fcntl$setflags(r0, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc293, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x10000, 0x0, 0x8, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000080)={0x9, 0x9, 0x0, 0x81}) unshare(0x60000600) sync() sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480200001000370400000000000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xa4, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x74, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x40d8}, @TCA_GRED_MAX_P={0x8, 0x4, 0xc}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x6, 0x1, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xe8a}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x227c0e49, 0x3b67, 0xe, 0x2, 0x9, 0xff, 0x6, 0x80000000, 0x3ff, 0x12, 0x1a, 0x5, 0x5, 0x3, 0x1ff}}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0xb, 0x1, 0x5}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x9}, {0x5, 0x1}}}, 0x24}}, 0x40006) kernel console output (not intermixed with test programs): 0xd0 [ 79.558938][ T4591] dump_stack+0x15/0x1b [ 79.558962][ T4591] should_fail_ex+0x25e/0x270 [ 79.559015][ T4591] should_fail+0xb/0x20 [ 79.559036][ T4591] should_fail_usercopy+0x1a/0x20 [ 79.559062][ T4591] _copy_from_user+0x1c/0xb0 [ 79.559139][ T4591] ___sys_sendmsg+0xc1/0x1e0 [ 79.559177][ T4591] __x64_sys_sendmsg+0xd4/0x160 [ 79.559223][ T4591] x64_sys_call+0x194c/0x3020 [ 79.559250][ T4591] do_syscall_64+0x136/0x3c0 [ 79.559289][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.559317][ T4591] RIP: 0033:0x7f3af257ce59 [ 79.559337][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.559387][ T4591] RSP: 002b:00007f3af0fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.559412][ T4591] RAX: ffffffffffffffda RBX: 00007f3af27f5fa0 RCX: 00007f3af257ce59 [ 79.559430][ T4591] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000006 [ 79.559447][ T4591] RBP: 00007f3af0fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 79.559475][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.559489][ T4591] R13: 00007f3af27f6038 R14: 00007f3af27f5fa0 R15: 00007ffe301bff38 [ 79.559514][ T4591] [ 79.559935][ T4589] program syz.0.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.726293][ T3702] Bluetooth: hci0: command 0x1003 tx timeout [ 79.746480][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.768265][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 79.891181][ T4603] FAULT_INJECTION: forcing a failure. [ 79.891181][ T4603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.904581][ T4603] CPU: 0 UID: 0 PID: 4603 Comm: syz.2.361 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.904608][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.904629][ T4603] Call Trace: [ 79.904691][ T4603] [ 79.904701][ T4603] __dump_stack+0x1d/0x30 [ 79.904730][ T4603] dump_stack_lvl+0x95/0xd0 [ 79.904756][ T4603] dump_stack+0x15/0x1b [ 79.904778][ T4603] should_fail_ex+0x25e/0x270 [ 79.904872][ T4603] should_fail+0xb/0x20 [ 79.904894][ T4603] should_fail_usercopy+0x1a/0x20 [ 79.905005][ T4603] _copy_from_user+0x1c/0xb0 [ 79.905038][ T4603] __sys_bpf+0x183/0x7e0 [ 79.905079][ T4603] __x64_sys_bpf+0x41/0x50 [ 79.905099][ T4603] x64_sys_call+0x10cb/0x3020 [ 79.905130][ T4603] do_syscall_64+0x136/0x3c0 [ 79.905235][ T4603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.905323][ T4603] RIP: 0033:0x7f5f4f16ce59 [ 79.905339][ T4603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.905425][ T4603] RSP: 002b:00007f5f4dbbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.905448][ T4603] RAX: ffffffffffffffda RBX: 00007f5f4f3e5fa0 RCX: 00007f5f4f16ce59 [ 79.905474][ T4603] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 79.905491][ T4603] RBP: 00007f5f4dbbf090 R08: 0000000000000000 R09: 0000000000000000 [ 79.905508][ T4603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.905547][ T4603] R13: 00007f5f4f3e6038 R14: 00007f5f4f3e5fa0 R15: 00007fff7d7217c8 [ 79.905593][ T4603] [ 80.104807][ T4607] program syz.2.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.531739][ T4616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 81.174667][ T4619] pim6reg9: entered allmulticast mode [ 81.205275][ T4623] loop2: detected capacity change from 0 to 256 [ 81.212986][ T4621] loop4: detected capacity change from 0 to 512 [ 81.253861][ T4621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.404672][ T4621] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.451919][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 81.451931][ T28] audit: type=1400 audit(1781460459.877:644): avc: denied { execute } for pid=4627 comm="syz.3.369" path="/71/net_prio.prioidx" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.532842][ T4633] loop1: detected capacity change from 0 to 4096 [ 81.554527][ T4638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 81.578200][ T4633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.756996][ T28] audit: type=1400 audit(1781460460.177:645): avc: denied { write } for pid=4632 comm="syz.1.371" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.978761][ T28] audit: type=1400 audit(1781460460.397:646): avc: denied { write } for pid=4632 comm="syz.1.371" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.078971][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.143150][ T28] audit: type=1400 audit(1781460460.397:647): avc: denied { write } for pid=4632 comm="syz.1.371" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.181691][ T28] audit: type=1400 audit(1781460460.427:648): avc: denied { create } for pid=4627 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.204101][ T28] audit: type=1400 audit(1781460460.427:650): avc: denied { bind } for pid=4627 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.223766][ T28] audit: type=1400 audit(1781460460.427:651): avc: denied { write } for pid=4627 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.228882][ T4654] futex_wake_op: syz.2.375 tries to shift op by 144; fix this program [ 82.243392][ T28] audit: type=1326 audit(1781460460.427:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.0.372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171d42ce59 code=0x7ffc0000 [ 82.243478][ T28] audit: type=1326 audit(1781460460.427:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.0.372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171d42ce59 code=0x7ffc0000 [ 82.243569][ T28] audit: type=1326 audit(1781460460.427:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.0.372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171d42ce59 code=0x7ffc0000 [ 82.282092][ T4652] syzkaller0: entered promiscuous mode [ 82.415041][ T4652] syzkaller0: entered allmulticast mode [ 82.644635][ T4661] syzkaller0: entered promiscuous mode [ 82.676080][ T4661] syzkaller0: entered allmulticast mode [ 82.837843][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.968218][ T4664] syzkaller0: entered promiscuous mode [ 82.973791][ T4664] syzkaller0: entered allmulticast mode [ 84.495499][ T4692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 84.738464][ T4695] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.898538][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 84.910716][ T4690] loop0: detected capacity change from 0 to 256 [ 85.991506][ T4702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'. [ 86.334044][ T4722] loop0: detected capacity change from 0 to 512 [ 86.356490][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.521996][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 86.540235][ T28] kauditd_printk_skb: 433 callbacks suppressed [ 86.540268][ T28] audit: type=1400 audit(1781460464.887:1087): avc: denied { read } for pid=4729 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.574550][ T4722] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.604793][ T4733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'. [ 86.643176][ T4722] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 86.664897][ T28] audit: type=1326 audit(1781460465.017:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 86.702945][ T4722] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 86.744904][ T4722] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.396: Failed to acquire dquot type 0 [ 86.784686][ T28] audit: type=1326 audit(1781460465.017:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 86.919342][ T28] audit: type=1326 audit(1781460465.017:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 87.001388][ T28] audit: type=1326 audit(1781460465.027:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 87.026872][ T28] audit: type=1326 audit(1781460465.027:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 87.052267][ T28] audit: type=1326 audit(1781460465.027:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 87.265585][ T28] audit: type=1326 audit(1781460465.027:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ee53ce59 code=0x7ffc0000 [ 87.332892][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.411283][ T4749] loop3: detected capacity change from 0 to 256 [ 87.540818][ T4754] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 87.541889][ T4753] IPVS: stopping master sync thread 4754 ... [ 88.076208][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.083570][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.204885][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.224298][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.277801][ T4772] loop4: detected capacity change from 0 to 512 [ 88.298253][ T4772] EXT4-fs: Ignoring removed bh option [ 88.328374][ T4772] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 88.342091][ T4763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.404'. [ 88.351422][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.360481][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.369463][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.378633][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.429392][ T4776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 88.438613][ T4772] EXT4-fs (loop4): 1 truncate cleaned up [ 88.463764][ T4772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.583527][ T4779] loop0: detected capacity change from 0 to 128 [ 88.643155][ T4779] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 88.655415][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 88.667313][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.668054][ T4787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 88.765596][ T4779] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.778063][ T4779] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.946307][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.525355][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 89.898906][ T4819] loop1: detected capacity change from 0 to 128 [ 90.014142][ T4819] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 90.074029][ T4819] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.115033][ T4819] ext2 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.311668][ T4832] loop2: detected capacity change from 0 to 512 [ 90.346655][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.420846][ T4832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.688744][ T4832] EXT4-fs (loop2): 1 truncate cleaned up [ 90.935092][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.962198][ T4840] syzkaller0: entered promiscuous mode [ 90.981124][ T4840] syzkaller0: entered allmulticast mode [ 91.107708][ T4842] syzkaller0: entered promiscuous mode [ 91.113248][ T4842] syzkaller0: entered allmulticast mode [ 91.205061][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.218704][ T4846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 91.258386][ T4846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'. [ 91.366960][ T4851] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 91.380042][ T4851] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 91.413224][ T4851] loop0: detected capacity change from 0 to 128 [ 91.424885][ T4861] netlink: 128 bytes leftover after parsing attributes in process `syz.1.442'. [ 91.448320][ T4851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.466785][ T4861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.489179][ T4851] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.526807][ T4864] loop3: detected capacity change from 0 to 512 [ 91.548637][ T4864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.574051][ T4864] EXT4-fs (loop3): 1 truncate cleaned up [ 91.584800][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.597298][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 91.597381][ T28] audit: type=1400 audit(1781460470.017:1200): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.610226][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 91.792420][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.954341][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 91.982373][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'. [ 92.014777][ T28] audit: type=1326 audit(1781460470.437:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.087676][ T4891] loop1: detected capacity change from 0 to 512 [ 92.098566][ T28] audit: type=1326 audit(1781460470.437:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.131547][ T4891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.142053][ T28] audit: type=1326 audit(1781460470.437:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.287800][ T28] audit: type=1326 audit(1781460470.437:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.313155][ T28] audit: type=1326 audit(1781460470.437:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.338454][ T28] audit: type=1326 audit(1781460470.437:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.363886][ T28] audit: type=1326 audit(1781460470.437:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.391015][ T4891] EXT4-fs (loop1): 1 truncate cleaned up [ 92.401032][ T4891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.494953][ T28] audit: type=1326 audit(1781460470.437:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.631789][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.751077][ T28] audit: type=1326 audit(1781460470.437:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.4.451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af257ce59 code=0x7ffc0000 [ 92.793744][ T4902] syzkaller0: entered promiscuous mode [ 92.816704][ T4904] program syz.1.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.871739][ T4902] syzkaller0: entered allmulticast mode [ 93.055599][ T4908] loop4: detected capacity change from 0 to 512 [ 93.099478][ T4908] EXT4-fs: Ignoring removed nobh option [ 93.105122][ T4908] EXT4-fs: Ignoring removed orlov option [ 93.195200][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 93.208654][ T4908] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.460: invalid block [ 93.326182][ T4908] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.339955][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 93.355600][ C1] EXT4-fs (loop4): initial error at time 1781460471: __ext4_iget:5481: inode 11: block 1 [ 93.365474][ C1] EXT4-fs (loop4): last error at time 1781460471: __ext4_iget:5481: inode 11: block 1 [ 93.376004][ T4908] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.460: couldn't read orphan inode 11 (err -117) [ 93.394700][ T4908] loop4: lost filesystem error report for type 5 error -117 [ 93.419580][ T4908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.715762][ T4931] loop3: detected capacity change from 0 to 4096 [ 93.753286][ T4931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.978078][ T4908] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.995122][ T4908] netlink: 60 bytes leftover after parsing attributes in process `syz.4.460'. [ 94.148714][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.215944][ T4949] syzkaller0: entered promiscuous mode [ 94.221565][ T4949] syzkaller0: entered allmulticast mode [ 94.224907][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.361500][ T4955] futex_wake_op: syz.3.477 tries to shift op by 144; fix this program [ 94.437385][ T4961] loop1: detected capacity change from 0 to 512 [ 94.550957][ T4961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.580850][ T4961] EXT4-fs (loop1): 1 truncate cleaned up [ 94.595619][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.635928][ T4970] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 94.682405][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.389518][ T4983] syzkaller0: entered promiscuous mode [ 95.395354][ T4983] syzkaller0: entered allmulticast mode [ 95.716590][ T4995] FAULT_INJECTION: forcing a failure. [ 95.716590][ T4995] name failslab, interval 1, probability 0, space 0, times 0 [ 95.753905][ T5002] FAULT_INJECTION: forcing a failure. [ 95.753905][ T5002] name failslab, interval 1, probability 0, space 0, times 0 [ 95.768741][ T4999] futex_wake_op: syz.3.495 tries to shift op by 144; fix this program [ 95.777220][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.777249][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.777343][ T4995] Call Trace: [ 95.777350][ T4995] [ 95.777359][ T4995] __dump_stack+0x1d/0x30 [ 95.777387][ T4995] dump_stack_lvl+0x95/0xd0 [ 95.777405][ T4995] dump_stack+0x15/0x1b [ 95.777486][ T4995] should_fail_ex+0x25e/0x270 [ 95.777524][ T4995] should_failslab+0x8c/0xb0 [ 95.777584][ T4995] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 95.777624][ T4995] ? __alloc_skb+0x2d6/0x690 [ 95.777647][ T4995] __alloc_skb+0x2d6/0x690 [ 95.777727][ T4995] ? __alloc_skb+0x200/0x690 [ 95.777747][ T4995] netlink_alloc_large_skb+0xbf/0xf0 [ 95.777778][ T4995] netlink_sendmsg+0x40c/0x6f0 [ 95.777831][ T4995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.777856][ T4995] ____sys_sendmsg+0x532/0x580 [ 95.777932][ T4995] ___sys_sendmsg+0x195/0x1e0 [ 95.777972][ T4995] __x64_sys_sendmsg+0xd4/0x160 [ 95.778004][ T4995] x64_sys_call+0x194c/0x3020 [ 95.778040][ T4995] do_syscall_64+0x136/0x3c0 [ 95.778077][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.778103][ T4995] RIP: 0033:0x7f171d42ce59 [ 95.778152][ T4995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.778168][ T4995] RSP: 002b:00007f171be87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.778249][ T4995] RAX: ffffffffffffffda RBX: 00007f171d6a5fa0 RCX: 00007f171d42ce59 [ 95.778260][ T4995] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 95.778271][ T4995] RBP: 00007f171be87090 R08: 0000000000000000 R09: 0000000000000000 [ 95.778313][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.778323][ T4995] R13: 00007f171d6a6038 R14: 00007f171d6a5fa0 R15: 00007ffe21864d38 [ 95.778339][ T4995] [ 95.976052][ T5002] CPU: 0 UID: 0 PID: 5002 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.976081][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.976095][ T5002] Call Trace: [ 95.976102][ T5002] [ 95.976110][ T5002] __dump_stack+0x1d/0x30 [ 95.976170][ T5002] dump_stack_lvl+0x95/0xd0 [ 95.976193][ T5002] dump_stack+0x15/0x1b [ 95.976213][ T5002] should_fail_ex+0x25e/0x270 [ 95.976245][ T5002] should_failslab+0x8c/0xb0 [ 95.976328][ T5002] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 95.976358][ T5002] ? __alloc_skb+0x2d6/0x690 [ 95.976381][ T5002] __alloc_skb+0x2d6/0x690 [ 95.976464][ T5002] ? __alloc_skb+0x200/0x690 [ 95.976503][ T5002] netlink_alloc_large_skb+0xbf/0xf0 [ 95.976537][ T5002] netlink_sendmsg+0x40c/0x6f0 [ 95.976574][ T5002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.976700][ T5002] ____sys_sendmsg+0x532/0x580 [ 95.976730][ T5002] ___sys_sendmsg+0x195/0x1e0 [ 95.976773][ T5002] __x64_sys_sendmsg+0xd4/0x160 [ 95.976803][ T5002] x64_sys_call+0x194c/0x3020 [ 95.976827][ T5002] do_syscall_64+0x136/0x3c0 [ 95.976864][ T5002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.976883][ T5002] RIP: 0033:0x7fe8ee53ce59 [ 95.976896][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.976953][ T5002] RSP: 002b:00007fe8ecf8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.976969][ T5002] RAX: ffffffffffffffda RBX: 00007fe8ee7b5fa0 RCX: 00007fe8ee53ce59 [ 95.976985][ T5002] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 95.976998][ T5002] RBP: 00007fe8ecf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.977023][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.977037][ T5002] R13: 00007fe8ee7b6038 R14: 00007fe8ee7b5fa0 R15: 00007ffe32b882f8 [ 95.977101][ T5002] [ 96.309353][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 96.486727][ T5016] syzkaller0: entered promiscuous mode [ 96.526200][ T5016] syzkaller0: entered allmulticast mode [ 96.595582][ T5021] loop2: detected capacity change from 0 to 512 [ 96.737125][ T5021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.749914][ T5021] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.801898][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 96.801985][ T28] audit: type=1400 audit(1781460475.227:1227): avc: denied { write } for pid=5020 comm="syz.2.502" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.832368][ T5021] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 96.849142][ T5021] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 96.869303][ T5025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.504'. [ 96.892394][ T5021] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.502: Failed to acquire dquot type 0 [ 96.948107][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.981994][ T5042] FAULT_INJECTION: forcing a failure. [ 96.981994][ T5042] name failslab, interval 1, probability 0, space 0, times 0 [ 96.999134][ T5042] CPU: 0 UID: 0 PID: 5042 Comm: syz.0.508 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.999299][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.999313][ T5042] Call Trace: [ 96.999320][ T5042] [ 96.999327][ T5042] __dump_stack+0x1d/0x30 [ 96.999354][ T5042] dump_stack_lvl+0x95/0xd0 [ 96.999444][ T5042] dump_stack+0x15/0x1b [ 96.999473][ T5042] should_fail_ex+0x25e/0x270 [ 96.999504][ T5042] should_failslab+0x8c/0xb0 [ 96.999532][ T5042] __kmalloc_noprof+0xb8/0x4d0 [ 96.999670][ T5042] ? alloc_pipe_info+0x1c8/0x340 [ 96.999700][ T5042] alloc_pipe_info+0x1c8/0x340 [ 96.999758][ T5042] splice_direct_to_actor+0x593/0x680 [ 96.999797][ T5042] ? __file_has_perm+0x3d9/0x430 [ 96.999823][ T5042] ? __pfx_direct_splice_actor+0x10/0x10 [ 96.999879][ T5042] do_splice_direct+0x119/0x1a0 [ 96.999907][ T5042] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 96.999932][ T5042] do_sendfile+0x37d/0x640 [ 96.999957][ T5042] __x64_sys_sendfile64+0x105/0x150 [ 97.000122][ T5042] x64_sys_call+0x2dc4/0x3020 [ 97.000248][ T5042] do_syscall_64+0x136/0x3c0 [ 97.000279][ T5042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.000305][ T5042] RIP: 0033:0x7f171d42ce59 [ 97.000443][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.000537][ T5042] RSP: 002b:00007f171be87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.000561][ T5042] RAX: ffffffffffffffda RBX: 00007f171d6a5fa0 RCX: 00007f171d42ce59 [ 97.000601][ T5042] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 97.000615][ T5042] RBP: 00007f171be87090 R08: 0000000000000000 R09: 0000000000000000 [ 97.000630][ T5042] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 97.000645][ T5042] R13: 00007f171d6a6038 R14: 00007f171d6a5fa0 R15: 00007ffe21864d38 [ 97.000668][ T5042] [ 97.119018][ T5048] loop1: detected capacity change from 0 to 4096 [ 97.212598][ T5048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.238558][ T28] audit: type=1400 audit(1781460475.657:1228): avc: denied { write } for pid=5047 comm="syz.1.511" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.260701][ T5053] futex_wake_op: syz.0.513 tries to shift op by 144; fix this program [ 97.409303][ T5060] syzkaller0: entered promiscuous mode [ 97.422511][ T5060] syzkaller0: entered allmulticast mode [ 97.445421][ T28] audit: type=1400 audit(1781460475.817:1229): avc: denied { write } for pid=5047 comm="syz.1.511" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.467843][ T28] audit: type=1400 audit(1781460475.817:1230): avc: denied { write } for pid=5047 comm="syz.1.511" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.056863][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.403689][ T5090] program syz.3.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.279039][ T5099] loop0: detected capacity change from 0 to 512 [ 99.486197][ T5101] loop4: detected capacity change from 0 to 4096 [ 99.496337][ T5097] syzkaller0: entered promiscuous mode [ 99.501818][ T5097] syzkaller0: entered allmulticast mode [ 99.545027][ T5099] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 99.553671][ T23] IPVS: starting estimator thread 0... [ 100.285099][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.435472][ T28] audit: type=1400 audit(1781460478.847:1231): avc: denied { write } for pid=5100 comm="syz.4.532" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.508203][ T5099] EXT4-fs (loop0): 1 truncate cleaned up [ 100.671278][ T5102] IPVS: using max 2736 ests per chain, 136800 per kthread [ 100.691578][ T5099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.712562][ T28] audit: type=1400 audit(1781460479.127:1232): avc: denied { write } for pid=5100 comm="syz.4.532" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.770681][ T5113] loop1: detected capacity change from 0 to 128 [ 100.796206][ T5113] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 100.804466][ T28] audit: type=1400 audit(1781460479.127:1233): avc: denied { write } for pid=5100 comm="syz.4.532" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.826023][ T28] audit: type=1400 audit(1781460479.157:1234): avc: denied { read } for pid=5109 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.846687][ T5113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.858855][ T5113] ext2 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.880867][ T5110] IPv6: Can't replace route, no match found [ 100.886853][ T5110] IPv6: Can't replace route, no match found [ 100.992228][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.002352][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.010767][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.047947][ T5119] program syz.3.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.122816][ T5127] program syz.3.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.157999][ T5129] loop3: detected capacity change from 0 to 256 [ 101.175477][ T5129] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.202091][ T5129] FAT-fs (loop3): Directory bread(block 64) failed [ 101.208671][ T5129] FAT-fs (loop3): Directory bread(block 65) failed [ 101.215839][ T5129] FAT-fs (loop3): Directory bread(block 66) failed [ 101.222526][ T5129] FAT-fs (loop3): Directory bread(block 67) failed [ 101.229137][ T5129] FAT-fs (loop3): Directory bread(block 68) failed [ 101.235907][ T5129] FAT-fs (loop3): Directory bread(block 69) failed [ 101.242513][ T5129] FAT-fs (loop3): Directory bread(block 70) failed [ 101.249078][ T5129] FAT-fs (loop3): Directory bread(block 71) failed [ 101.256231][ T5129] FAT-fs (loop3): Directory bread(block 72) failed [ 101.263306][ T5129] FAT-fs (loop3): Directory bread(block 73) failed [ 101.421186][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.600588][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.642896][ T5135] loop3: detected capacity change from 0 to 256 [ 101.649424][ T5136] loop2: detected capacity change from 0 to 512 [ 101.682218][ T5136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.985204][ T5136] EXT4-fs (loop2): 1 truncate cleaned up [ 101.991515][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.705759][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.909045][ T5140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.544'. [ 103.733277][ T5159] FAULT_INJECTION: forcing a failure. [ 103.733277][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 104.096341][ T5159] CPU: 1 UID: 0 PID: 5159 Comm: syz.4.548 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.096390][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.096415][ T5159] Call Trace: [ 104.096421][ T5159] [ 104.096427][ T5159] __dump_stack+0x1d/0x30 [ 104.096448][ T5159] dump_stack_lvl+0x95/0xd0 [ 104.096485][ T5159] dump_stack+0x15/0x1b [ 104.096510][ T5159] should_fail_ex+0x25e/0x270 [ 104.096547][ T5159] should_failslab+0x8c/0xb0 [ 104.096611][ T5159] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 104.096649][ T5159] ? __alloc_skb+0x2d6/0x690 [ 104.096741][ T5159] __alloc_skb+0x2d6/0x690 [ 104.096758][ T5159] ? __alloc_skb+0x200/0x690 [ 104.096814][ T5159] netlink_alloc_large_skb+0xbf/0xf0 [ 104.096850][ T5159] netlink_sendmsg+0x40c/0x6f0 [ 104.096878][ T5159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.096903][ T5159] ____sys_sendmsg+0x532/0x580 [ 104.097004][ T5159] ___sys_sendmsg+0x195/0x1e0 [ 104.097041][ T5159] __x64_sys_sendmsg+0xd4/0x160 [ 104.097069][ T5159] x64_sys_call+0x194c/0x3020 [ 104.097090][ T5159] do_syscall_64+0x136/0x3c0 [ 104.097134][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.097159][ T5159] RIP: 0033:0x7f3af257ce59 [ 104.097251][ T5159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.097271][ T5159] RSP: 002b:00007f3af0fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.097295][ T5159] RAX: ffffffffffffffda RBX: 00007f3af27f5fa0 RCX: 00007f3af257ce59 [ 104.097327][ T5159] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.097340][ T5159] RBP: 00007f3af0fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.097351][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.097362][ T5159] R13: 00007f3af27f6038 R14: 00007f3af27f5fa0 R15: 00007ffe301bff38 [ 104.097384][ T5159] [ 106.968592][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 106.968618][ T28] audit: type=1400 audit(1781460485.357:1240): avc: denied { setopt } for pid=5175 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.362279][ T28] audit: type=1400 audit(1781460485.357:1241): avc: denied { read } for pid=5175 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.381985][ T5178] loop1: detected capacity change from 0 to 128 [ 107.862112][ T28] audit: type=1400 audit(1781460485.417:1242): avc: denied { write } for pid=5175 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.944228][ T3519] IPVS: starting estimator thread 0... [ 107.959629][ T5178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 107.997284][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 108.013040][ T5178] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.127670][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 108.139157][ T5178] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.150191][ T5186] IPVS: using max 1920 ests per chain, 96000 per kthread [ 108.402685][ T5204] loop3: detected capacity change from 0 to 512 [ 108.431824][ T5204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.476162][ T5204] EXT4-fs (loop3): 1 truncate cleaned up [ 108.492499][ T5204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.565817][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.665328][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.725217][ T5212] loop1: detected capacity change from 0 to 256 [ 108.858249][ T5216] syzkaller0: entered promiscuous mode [ 108.872205][ T5218] loop2: detected capacity change from 0 to 512 [ 108.880063][ T5216] syzkaller0: entered allmulticast mode [ 108.916360][ T28] audit: type=1400 audit(1781460487.277:1243): avc: denied { ioctl } for pid=5214 comm="syz.3.565" path="socket:[10009]" dev="sockfs" ino=10009 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.013655][ T5222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 109.378147][ T5218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.414309][ T5218] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #17: comm syz.2.566: corrupted in-inode xattr: e_name out of bounds [ 109.431734][ T5218] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 109.432908][ T5218] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.566: couldn't read orphan inode 17 (err -117) [ 109.442170][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 109.442185][ C0] EXT4-fs (loop2): initial error at time 1781460487: ext4_iget_extra_inode:5128: inode 17 [ 109.442216][ C0] EXT4-fs (loop2): last error at time 1781460487: ext4_iget_extra_inode:5128: inode 17 [ 109.487669][ T5218] loop2: lost filesystem error report for type 5 error -117 [ 109.508757][ T5218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.689855][ T5241] program syz.4.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.793658][ T5238] loop3: detected capacity change from 0 to 128 [ 109.806143][ T5238] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 109.832062][ T5249] program syz.1.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.927037][ T5251] netlink: 'syz.1.575': attribute type 9 has an invalid length. [ 109.949687][ T5238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.969586][ T5238] ext2 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.980877][ T28] audit: type=1400 audit(1781460488.407:1244): avc: denied { bind } for pid=5246 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.000144][ T28] audit: type=1400 audit(1781460488.407:1245): avc: denied { listen } for pid=5246 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.053277][ T28] audit: type=1400 audit(1781460488.477:1246): avc: denied { accept } for pid=5246 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.186388][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.461896][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.532830][ T5272] loop3: detected capacity change from 0 to 512 [ 110.544371][ T5272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.573798][ T5272] EXT4-fs (loop3): 1 truncate cleaned up [ 110.580137][ T5272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.664532][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.703369][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 110.735427][ T28] audit: type=1400 audit(1781460489.157:1247): avc: denied { create } for pid=5276 comm="syz.3.585" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.756819][ T28] audit: type=1400 audit(1781460489.157:1248): avc: denied { read } for pid=5276 comm="syz.3.585" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.780282][ T28] audit: type=1400 audit(1781460489.157:1249): avc: denied { open } for pid=5276 comm="syz.3.585" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.885777][ T5294] loop3: detected capacity change from 0 to 512 [ 110.930148][ T5294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.949316][ T5294] EXT4-fs (loop3): 1 truncate cleaned up [ 110.957651][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.145885][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.149552][ T5314] netlink: 128 bytes leftover after parsing attributes in process `syz.3.601'. [ 112.175507][ T5314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.164367][ T5318] program syz.1.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.174955][ T5318] netlink: 'syz.1.603': attribute type 9 has an invalid length. [ 113.898524][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 113.945091][ T5324] FAULT_INJECTION: forcing a failure. [ 113.945091][ T5324] name failslab, interval 1, probability 0, space 0, times 0 [ 114.123037][ T5324] CPU: 1 UID: 0 PID: 5324 Comm: syz.0.605 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.123096][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.123111][ T5324] Call Trace: [ 114.123118][ T5324] [ 114.123125][ T5324] __dump_stack+0x1d/0x30 [ 114.123147][ T5324] dump_stack_lvl+0x95/0xd0 [ 114.123165][ T5324] dump_stack+0x15/0x1b [ 114.123181][ T5324] should_fail_ex+0x25e/0x270 [ 114.123262][ T5324] should_failslab+0x8c/0xb0 [ 114.123388][ T5324] kmem_cache_alloc_noprof+0x66/0x3f0 [ 114.123417][ T5324] ? ipmr_mfc_add+0x41e/0x12f0 [ 114.123535][ T5324] ipmr_mfc_add+0x41e/0x12f0 [ 114.123572][ T5324] ? _copy_from_user+0x89/0xb0 [ 114.123601][ T5324] ip_mroute_setsockopt+0x799/0xa00 [ 114.123676][ T5324] do_ip_setsockopt+0xd36/0x22f0 [ 114.123706][ T5324] ip_setsockopt+0x58/0x110 [ 114.123727][ T5324] raw_setsockopt+0xbb/0x140 [ 114.123812][ T5324] sock_common_setsockopt+0x69/0x80 [ 114.123846][ T5324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 114.123894][ T5324] __sys_setsockopt+0x184/0x200 [ 114.123919][ T5324] __x64_sys_setsockopt+0x64/0x80 [ 114.123945][ T5324] x64_sys_call+0x2327/0x3020 [ 114.123972][ T5324] do_syscall_64+0x136/0x3c0 [ 114.124059][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.124077][ T5324] RIP: 0033:0x7f171d42ce59 [ 114.124090][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.124108][ T5324] RSP: 002b:00007f171be87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.124138][ T5324] RAX: ffffffffffffffda RBX: 00007f171d6a5fa0 RCX: 00007f171d42ce59 [ 114.124153][ T5324] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 114.124163][ T5324] RBP: 00007f171be87090 R08: 000000000000003c R09: 0000000000000000 [ 114.124173][ T5324] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 114.124183][ T5324] R13: 00007f171d6a6038 R14: 00007f171d6a5fa0 R15: 00007ffe21864d38 [ 114.124202][ T5324] [ 115.651288][ T5340] loop3: detected capacity change from 0 to 4096 [ 115.940026][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 115.940043][ T28] audit: type=1400 audit(1781460494.067:1289): avc: denied { getopt } for pid=5345 comm="syz.0.613" lport=58856 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.223298][ T5340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.282449][ T28] audit: type=1400 audit(1781460494.067:1290): avc: denied { connect } for pid=5345 comm="syz.0.613" lport=58856 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.307625][ T28] audit: type=1400 audit(1781460494.067:1291): avc: denied { name_connect } for pid=5345 comm="syz.0.613" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.678972][ T28] audit: type=1400 audit(1781460494.667:1292): avc: denied { write } for pid=5337 comm="syz.3.611" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.429024][ T28] audit: type=1400 audit(1781460495.837:1293): avc: denied { write } for pid=5337 comm="syz.3.611" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.449302][ T28] audit: type=1400 audit(1781460495.837:1294): avc: denied { write } for pid=5337 comm="syz.3.611" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.802997][ T5368] SET target dimension over the limit! [ 118.839235][ T5374] netlink: 128 bytes leftover after parsing attributes in process `syz.0.621'. [ 118.853504][ T5374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.868472][ T5368] loop1: detected capacity change from 0 to 1024 [ 118.928061][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.948759][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 119.031496][ T28] audit: type=1400 audit(1781460497.367:1295): avc: denied { write } for pid=5379 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.086522][ T28] audit: type=1400 audit(1781460497.367:1296): avc: denied { ioctl } for pid=5379 comm="syz.2.624" path="socket:[11322]" dev="sockfs" ino=11322 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.122075][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.276165][ T5392] loop0: detected capacity change from 0 to 512 [ 119.313009][ T5392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.325285][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.346349][ T5392] EXT4-fs (loop0): 1 truncate cleaned up [ 119.353511][ T5392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.032943][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.051541][ T5402] loop1: detected capacity change from 0 to 512 [ 120.058458][ T5402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.083686][ T5402] EXT4-fs (loop1): 1 truncate cleaned up [ 120.097590][ T5402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.125704][ T5409] loop0: detected capacity change from 0 to 512 [ 120.158010][ T5400] loop3: detected capacity change from 0 to 4096 [ 120.166936][ T5409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.185207][ T28] audit: type=1400 audit(1781460498.607:1297): avc: denied { mount } for pid=5404 comm="syz.2.632" name="/" dev="configfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 120.211772][ T28] audit: type=1400 audit(1781460498.607:1298): avc: denied { search } for pid=5404 comm="syz.2.632" name="/" dev="configfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.211797][ T5406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=5406 comm=syz.2.632 [ 120.218960][ T5400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.260942][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.310565][ T5409] EXT4-fs (loop0): 1 truncate cleaned up [ 120.332661][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.455382][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.660870][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.716481][ T5440] program syz.3.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.995423][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.029165][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.045929][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 121.045941][ T28] audit: type=1400 audit(1781460499.467:1305): avc: denied { create } for pid=5461 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 121.076732][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.096588][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.107086][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.116541][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.126206][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.136266][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.183065][ T5205] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.210749][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 121.222763][ T5470] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.372840][ T5478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.659'. [ 122.120380][ T3447] Bluetooth: hci1: Frame reassembly failed (-84) [ 122.367394][ T5205] Bluetooth: hci2: Frame reassembly failed (-84) [ 123.220580][ T3768] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.226877][ T5495] Bluetooth: hci0: command 0x1003 tx timeout [ 123.433139][ T5507] program syz.4.669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.481616][ T5511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.671'. [ 123.779511][ T5517] program syz.4.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.118372][ T5523] loop4: detected capacity change from 0 to 4096 [ 124.132673][ T5523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.281676][ T3702] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.328771][ T28] audit: type=1400 audit(1781460502.747:1306): avc: denied { write } for pid=5522 comm="syz.4.676" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.450561][ T3933] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 124.471719][ T28] audit: type=1400 audit(1781460502.887:1307): avc: denied { write } for pid=5522 comm="syz.4.676" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.508878][ T5532] loop0: detected capacity change from 0 to 4096 [ 124.627993][ T5532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.469066][ T28] audit: type=1400 audit(1781460502.887:1308): avc: denied { write } for pid=5522 comm="syz.4.676" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.503737][ T28] audit: type=1400 audit(1781460503.917:1309): avc: denied { write } for pid=5531 comm="syz.0.679" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.430794][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.466244][ T28] audit: type=1400 audit(1781460504.787:1310): avc: denied { write } for pid=5531 comm="syz.0.679" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.488163][ T28] audit: type=1400 audit(1781460504.787:1311): avc: denied { write } for pid=5531 comm="syz.0.679" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.526914][ T5543] program syz.1.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.678208][ T5547] syzkaller0: entered promiscuous mode [ 126.692143][ T5547] syzkaller0: entered allmulticast mode [ 126.920426][ T28] audit: type=1400 audit(1781460505.337:1312): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.940476][ T5552] loop3: detected capacity change from 0 to 4096 [ 126.965164][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.078545][ T28] audit: type=1400 audit(1781460505.407:1313): avc: denied { write } for pid=5551 comm="syz.3.686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.114583][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.132427][ T28] audit: type=1400 audit(1781460505.547:1314): avc: denied { write } for pid=5551 comm="syz.3.686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.188188][ T28] audit: type=1400 audit(1781460505.547:1315): avc: denied { write } for pid=5551 comm="syz.3.686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.353612][ T5576] FAULT_INJECTION: forcing a failure. [ 128.353612][ T5576] name failslab, interval 1, probability 0, space 0, times 0 [ 128.370052][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: syz.1.693 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.370079][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.370147][ T5576] Call Trace: [ 128.370154][ T5576] [ 128.370162][ T5576] __dump_stack+0x1d/0x30 [ 128.370183][ T5576] dump_stack_lvl+0x95/0xd0 [ 128.370263][ T5576] dump_stack+0x15/0x1b [ 128.370279][ T5576] should_fail_ex+0x25e/0x270 [ 128.370313][ T5576] should_failslab+0x8c/0xb0 [ 128.370348][ T5576] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 128.370415][ T5576] ? __alloc_skb+0x2d6/0x690 [ 128.370433][ T5576] __alloc_skb+0x2d6/0x690 [ 128.370531][ T5576] ? __alloc_skb+0x200/0x690 [ 128.370547][ T5576] netlink_alloc_large_skb+0xbf/0xf0 [ 128.370647][ T5576] netlink_sendmsg+0x40c/0x6f0 [ 128.370675][ T5576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.370699][ T5576] ____sys_sendmsg+0x532/0x580 [ 128.370786][ T5576] ___sys_sendmsg+0x195/0x1e0 [ 128.370819][ T5576] __x64_sys_sendmsg+0xd4/0x160 [ 128.370842][ T5576] x64_sys_call+0x194c/0x3020 [ 128.370920][ T5576] do_syscall_64+0x136/0x3c0 [ 128.370992][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.371011][ T5576] RIP: 0033:0x7fe8ee53ce59 [ 128.371053][ T5576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.371075][ T5576] RSP: 002b:00007fe8ecf8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.371104][ T5576] RAX: ffffffffffffffda RBX: 00007fe8ee7b5fa0 RCX: 00007fe8ee53ce59 [ 128.371155][ T5576] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 128.371168][ T5576] RBP: 00007fe8ecf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.371184][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.371199][ T5576] R13: 00007fe8ee7b6038 R14: 00007fe8ee7b5fa0 R15: 00007ffe32b882f8 [ 128.371224][ T5576] [ 128.582493][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.807347][ T5578] loop3: detected capacity change from 0 to 8192 [ 128.823641][ T5599] loop1: detected capacity change from 0 to 512 [ 128.824150][ T5595] Option ' Áš9H0òSŸËN n«§ÕUE£Nÿ wú¥\Yè‚Tõ@w÷™¿ƒ' to dns_resolver key: bad/missing value [ 128.843921][ T5599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.858436][ T5599] EXT4-fs (loop1): 1 truncate cleaned up [ 128.864943][ T5599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.978003][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.074556][ T5611] loop3: detected capacity change from 0 to 4096 [ 129.097372][ T5611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5611 comm=syz.3.706 [ 129.139683][ T5611] loop3: detected capacity change from 0 to 512 [ 129.200536][ T5611] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.706: dx entry: limit 1024 != root limit 124 [ 129.212629][ T5617] loop2: detected capacity change from 0 to 128 [ 129.216646][ T5611] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.706: Corrupt directory, running e2fsck is recommended [ 129.231936][ T5617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 129.243236][ T5617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.369045][ T5611] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 129.382432][ T5617] ext2 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.429278][ T5611] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.706: corrupted in-inode xattr: invalid ea_ino [ 129.452618][ T5611] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.453296][ T5611] EXT4-fs (loop3): Remounting filesystem read-only [ 129.462546][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 129.462583][ C1] EXT4-fs (loop3): initial error at time 1781460507: ext4_iget_extra_inode:5128: inode 15 [ 129.462629][ C1] EXT4-fs (loop3): last error at time 1781460507: ext4_iget_extra_inode:5128: inode 15 [ 129.597646][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 129.612241][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.632776][ T361] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.646116][ T361] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.676204][ T361] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.721867][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 129.732882][ T361] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.746719][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 129.761554][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 129.770469][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 129.779819][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.866498][ T5639] loop0: detected capacity change from 0 to 256 [ 129.874800][ T5639] vfat: Unknown parameter '' [ 129.976964][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.480453][ T28] audit: type=1400 audit(1781460508.897:1316): avc: denied { create } for pid=5653 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.956754][ T5663] loop3: detected capacity change from 0 to 4096 [ 130.993991][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.012663][ T28] audit: type=1400 audit(1781460509.437:1317): avc: denied { write } for pid=5662 comm="syz.3.721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.126374][ T5673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.720'. [ 131.173803][ T28] audit: type=1400 audit(1781460509.597:1318): avc: denied { read append } for pid=5660 comm="syz.1.720" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.202097][ T28] audit: type=1400 audit(1781460509.597:1319): avc: denied { open } for pid=5660 comm="syz.1.720" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.532225][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.747809][ T5709] program syz.2.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.783009][ T5709] netlink: 'syz.2.733': attribute type 9 has an invalid length. [ 136.193970][ T5720] loop2: detected capacity change from 0 to 4096 [ 136.815751][ T5720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.157208][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 137.157222][ T28] audit: type=1400 audit(1781460515.577:1323): avc: denied { write } for pid=5719 comm="syz.2.737" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.783388][ T5737] loop4: detected capacity change from 0 to 4096 [ 137.867766][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.943801][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.049984][ T28] audit: type=1400 audit(1781460516.407:1324): avc: denied { write } for pid=5736 comm="syz.4.741" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.169369][ T28] audit: type=1400 audit(1781460516.587:1325): avc: denied { write } for pid=5736 comm="syz.4.741" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.435985][ T28] audit: type=1400 audit(1781460516.587:1326): avc: denied { write } for pid=5736 comm="syz.4.741" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.617845][ T5753] netlink: 128 bytes leftover after parsing attributes in process `syz.2.745'. [ 138.660240][ T5753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.691510][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 138.806748][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.263420][ T5760] loop2: detected capacity change from 0 to 512 [ 139.319483][ T5760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.364452][ T5760] EXT4-fs (loop2): 1 truncate cleaned up [ 139.373589][ T5760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.417449][ T5767] loop3: detected capacity change from 0 to 512 [ 139.450756][ T5767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.513503][ T5767] EXT4-fs (loop3): 1 truncate cleaned up [ 139.541669][ T5767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.572179][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.608998][ T5770] futex_wake_op: syz.2.750 tries to shift op by 144; fix this program [ 139.747825][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.182060][ T5791] netlink: 128 bytes leftover after parsing attributes in process `syz.2.758'. [ 140.287407][ T5791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.406097][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 140.854072][ T28] audit: type=1400 audit(1781460519.277:1327): avc: denied { connect } for pid=5807 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.959656][ T28] audit: type=1400 audit(1781460519.297:1328): avc: denied { bind } for pid=5807 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.070277][ T28] audit: type=1400 audit(1781460519.317:1329): avc: denied { name_bind } for pid=5807 comm="syz.0.763" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.263569][ T28] audit: type=1400 audit(1781460519.317:1330): avc: denied { node_bind } for pid=5807 comm="syz.0.763" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 144.212170][ T5840] program syz.0.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.687305][ T5846] loop2: detected capacity change from 0 to 4096 [ 144.718832][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.735239][ T28] audit: type=1400 audit(1781460523.157:1331): avc: denied { write } for pid=5845 comm="syz.2.775" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.759114][ T28] audit: type=1400 audit(1781460523.157:1332): avc: denied { add_name } for pid=5845 comm="syz.2.775" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.822822][ T28] audit: type=1400 audit(1781460523.247:1333): avc: denied { write } for pid=5845 comm="syz.2.775" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.874483][ T28] audit: type=1400 audit(1781460523.247:1334): avc: denied { write } for pid=5845 comm="syz.2.775" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.896426][ T28] audit: type=1400 audit(1781460523.247:1335): avc: denied { remove_name } for pid=5845 comm="syz.2.775" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.939370][ T28] audit: type=1400 audit(1781460523.247:1336): avc: denied { rmdir } for pid=5845 comm="syz.2.775" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.954138][ T5864] syzkaller0: entered promiscuous mode [ 144.962714][ T28] audit: type=1400 audit(1781460523.247:1337): avc: denied { rename } for pid=5845 comm="syz.2.775" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.989101][ T5864] syzkaller0: entered allmulticast mode [ 144.998366][ T5857] loop3: detected capacity change from 0 to 128 [ 145.021401][ T5857] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 145.036130][ T5857] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.051764][ T5857] ext2 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.512250][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.579150][ T5872] loop1: detected capacity change from 0 to 128 [ 145.591570][ T5875] loop2: detected capacity change from 0 to 256 [ 145.732425][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.300404][ T5872] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 146.325369][ T5875] FAT-fs (loop2): Directory bread(block 64) failed [ 146.339869][ T5875] FAT-fs (loop2): Directory bread(block 65) failed [ 146.715098][ T5875] FAT-fs (loop2): Directory bread(block 66) failed [ 146.735227][ T5875] FAT-fs (loop2): Directory bread(block 67) failed [ 146.777870][ T5872] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.824496][ T5875] FAT-fs (loop2): Directory bread(block 68) failed [ 146.888680][ T5885] loop3: detected capacity change from 0 to 512 [ 146.898937][ T5875] FAT-fs (loop2): Directory bread(block 69) failed [ 146.907575][ T5872] ext2 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.924255][ T5885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.938970][ T5875] FAT-fs (loop2): Directory bread(block 70) failed [ 146.954304][ T5875] FAT-fs (loop2): Directory bread(block 71) failed [ 146.969583][ T5885] EXT4-fs (loop3): 1 truncate cleaned up [ 146.980350][ T5875] FAT-fs (loop2): Directory bread(block 72) failed [ 147.000727][ T5885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.019707][ T5889] process 'syz.0.788' launched '/dev/fd/4' with NULL argv: empty string added [ 147.028765][ T5875] FAT-fs (loop2): Directory bread(block 73) failed [ 147.111112][ T28] audit: type=1400 audit(1781460525.467:1338): avc: denied { execute_no_trans } for pid=5888 comm="syz.0.788" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.158815][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.166265][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.185543][ T5894] futex_wake_op: syz.0.791 tries to shift op by 144; fix this program [ 147.471743][ T5904] loop0: detected capacity change from 0 to 512 [ 147.536521][ T5904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.569526][ T5904] EXT4-fs (loop0): 1 truncate cleaned up [ 147.596570][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.676181][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.082347][ T5913] loop0: detected capacity change from 0 to 128 [ 148.222136][ T5920] syz.4.800 uses obsolete (PF_INET,SOCK_PACKET) [ 148.364872][ T5923] FAULT_INJECTION: forcing a failure. [ 148.364872][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 148.391915][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'. [ 148.435585][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.435617][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.435634][ T5923] Call Trace: [ 148.435641][ T5923] [ 148.435648][ T5923] __dump_stack+0x1d/0x30 [ 148.435673][ T5923] dump_stack_lvl+0x95/0xd0 [ 148.435693][ T5923] dump_stack+0x15/0x1b [ 148.435740][ T5923] should_fail_ex+0x25e/0x270 [ 148.435852][ T5923] should_failslab+0x8c/0xb0 [ 148.435888][ T5923] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 148.435959][ T5923] ? __alloc_skb+0x2d6/0x690 [ 148.435985][ T5923] __alloc_skb+0x2d6/0x690 [ 148.436009][ T5923] ? __alloc_skb+0x200/0x690 [ 148.436037][ T5923] netlink_alloc_large_skb+0xbf/0xf0 [ 148.436062][ T5923] netlink_sendmsg+0x40c/0x6f0 [ 148.436154][ T5923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.436185][ T5923] ____sys_sendmsg+0x532/0x580 [ 148.436211][ T5923] ___sys_sendmsg+0x195/0x1e0 [ 148.436292][ T5923] __x64_sys_sendmsg+0xd4/0x160 [ 148.436380][ T5923] x64_sys_call+0x194c/0x3020 [ 148.436401][ T5923] do_syscall_64+0x136/0x3c0 [ 148.436430][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.436496][ T5923] RIP: 0033:0x7fe8ee53ce59 [ 148.436513][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.436589][ T5923] RSP: 002b:00007fe8ecf8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.436607][ T5923] RAX: ffffffffffffffda RBX: 00007fe8ee7b5fa0 RCX: 00007fe8ee53ce59 [ 148.436618][ T5923] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 148.436629][ T5923] RBP: 00007fe8ecf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.436639][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.436649][ T5923] R13: 00007fe8ee7b6038 R14: 00007fe8ee7b5fa0 R15: 00007ffe32b882f8 [ 148.436668][ T5923] [ 148.837787][ T5927] netlink: 128 bytes leftover after parsing attributes in process `syz.1.803'. [ 148.854526][ T5927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.941207][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 148.964400][ T5913] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 149.013120][ T5930] futex_wake_op: syz.3.804 tries to shift op by 144; fix this program [ 149.028470][ T5913] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.087590][ T5913] ext2 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.184369][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.294973][ T5949] loop3: detected capacity change from 0 to 512 [ 149.303564][ T5949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.314533][ T28] audit: type=1400 audit(1781460527.727:1339): avc: denied { ioctl } for pid=5946 comm="syz.1.812" path="socket:[12793]" dev="sockfs" ino=12793 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.342644][ T5949] EXT4-fs (loop3): 1 truncate cleaned up [ 149.348877][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.398507][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.503607][ T5968] loop1: detected capacity change from 0 to 128 [ 149.511170][ T5968] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 149.535542][ T5968] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.550112][ T5968] ext2 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.638920][ T5973] loop3: detected capacity change from 0 to 4096 [ 149.647790][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.661911][ T28] audit: type=1400 audit(1781460528.087:1340): avc: denied { write } for pid=5972 comm="syz.3.820" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.847022][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.891388][ T5980] netlink: 128 bytes leftover after parsing attributes in process `syz.3.822'. [ 149.902312][ T5980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.936025][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 149.972401][ T5982] loop2: detected capacity change from 0 to 256 [ 149.979132][ T5982] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.994764][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 149.994776][ T28] audit: type=1400 audit(1781460528.417:1343): avc: denied { write } for pid=5981 comm="syz.2.823" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.039648][ T5983] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 150.082530][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 150.228164][ T5996] loop3: detected capacity change from 0 to 512 [ 150.244998][ T5996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.248828][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.268290][ T6000] FAULT_INJECTION: forcing a failure. [ 150.268290][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 150.291326][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.4.831 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.291409][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.291424][ T6000] Call Trace: [ 150.291432][ T6000] [ 150.291441][ T6000] __dump_stack+0x1d/0x30 [ 150.291466][ T6000] dump_stack_lvl+0x95/0xd0 [ 150.291513][ T6000] dump_stack+0x15/0x1b [ 150.291534][ T6000] should_fail_ex+0x25e/0x270 [ 150.291573][ T6000] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 150.291593][ T6000] should_failslab+0x8c/0xb0 [ 150.291632][ T6000] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 150.291667][ T6000] ? shmem_alloc_inode+0x34/0x50 [ 150.291694][ T6000] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 150.291720][ T6000] shmem_alloc_inode+0x34/0x50 [ 150.291746][ T6000] alloc_inode+0x40/0x170 [ 150.291773][ T6000] new_inode+0x1d/0xe0 [ 150.291789][ T6000] shmem_get_inode+0x24e/0x770 [ 150.291835][ T6000] __shmem_file_setup+0x14f/0x260 [ 150.291886][ T6000] shmem_file_setup+0x3b/0x50 [ 150.291907][ T6000] memfd_alloc_file+0x4e/0x300 [ 150.291930][ T6000] __se_sys_memfd_create+0x2e1/0x3b0 [ 150.292016][ T6000] __x64_sys_memfd_create+0x31/0x40 [ 150.292040][ T6000] x64_sys_call+0x1f22/0x3020 [ 150.292137][ T6000] do_syscall_64+0x136/0x3c0 [ 150.292174][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.292198][ T6000] RIP: 0033:0x7f3af257ce59 [ 150.292215][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.292235][ T6000] RSP: 002b:00007f3af0fcee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 150.292258][ T6000] RAX: ffffffffffffffda RBX: 00000000000002cc RCX: 00007f3af257ce59 [ 150.292270][ T6000] RDX: 00007f3af0fceee0 RSI: 0000000000000000 RDI: 00007f3af2612f4f [ 150.292282][ T6000] RBP: 00002000000003c0 R08: 00000000ffffffff R09: 0000000000000000 [ 150.292293][ T6000] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 150.292305][ T6000] R13: 00007f3af0fceee0 R14: 00007f3af0fceea0 R15: 0000200000000380 [ 150.292321][ T6000] [ 150.541089][ T5996] EXT4-fs (loop3): 1 truncate cleaned up [ 150.547230][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.554586][ T6005] loop1: detected capacity change from 0 to 4096 [ 150.568455][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.614750][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.627227][ T28] audit: type=1400 audit(1781460529.047:1344): avc: denied { write } for pid=6004 comm="syz.1.832" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.808332][ T28] audit: type=1400 audit(1781460529.227:1345): avc: denied { write } for pid=6004 comm="syz.1.832" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.883088][ T28] audit: type=1400 audit(1781460529.227:1346): avc: denied { write } for pid=6004 comm="syz.1.832" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.060130][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.425990][ T6021] FAULT_INJECTION: forcing a failure. [ 151.425990][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 151.438735][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.4.838 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.438788][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.438800][ T6021] Call Trace: [ 151.438806][ T6021] [ 151.438813][ T6021] __dump_stack+0x1d/0x30 [ 151.438839][ T6021] dump_stack_lvl+0x95/0xd0 [ 151.438864][ T6021] dump_stack+0x15/0x1b [ 151.438885][ T6021] should_fail_ex+0x25e/0x270 [ 151.438946][ T6021] should_failslab+0x8c/0xb0 [ 151.438998][ T6021] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 151.439035][ T6021] ? __d_alloc+0x34/0x320 [ 151.439117][ T6021] __d_alloc+0x34/0x320 [ 151.439143][ T6021] d_alloc+0x2e/0x100 [ 151.439169][ T6021] lookup_one_qstr_excl+0x95/0x240 [ 151.439213][ T6021] filename_create+0x155/0x220 [ 151.439240][ T6021] filename_mkdirat+0x81/0x300 [ 151.439349][ T6021] __se_sys_mkdirat+0x32/0xf0 [ 151.439374][ T6021] __x64_sys_mkdirat+0x43/0x50 [ 151.439477][ T6021] x64_sys_call+0x2c4e/0x3020 [ 151.439504][ T6021] do_syscall_64+0x136/0x3c0 [ 151.439536][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.439558][ T6021] RIP: 0033:0x7f3af257bcc7 [ 151.439634][ T6021] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.439650][ T6021] RSP: 002b:00007f3af0fcee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 151.439667][ T6021] RAX: ffffffffffffffda RBX: 00007f3af0fceee0 RCX: 00007f3af257bcc7 [ 151.439682][ T6021] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 151.439736][ T6021] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 151.439747][ T6021] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 151.439822][ T6021] R13: 00007f3af0fceea0 R14: 0000000000000000 R15: 0000000000000000 [ 151.439842][ T6021] [ 151.460064][ T6023] netlink: 128 bytes leftover after parsing attributes in process `syz.4.839'. [ 151.693601][ T6023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.808387][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 152.033650][ T6041] loop3: detected capacity change from 0 to 128 [ 152.040626][ T6041] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 152.050069][ T6041] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.062606][ T6041] ext2 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.786974][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.295856][ T6081] program syz.1.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.398192][ T6089] program syz.1.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.452578][ T6093] loop3: detected capacity change from 0 to 256 [ 154.753094][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.863'. [ 155.202544][ T6118] program syz.2.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.279264][ T6124] syzkaller0: entered promiscuous mode [ 155.290721][ T6124] syzkaller0: entered allmulticast mode [ 155.929731][ T6132] loop3: detected capacity change from 0 to 4096 [ 156.434440][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.753444][ T28] audit: type=1400 audit(1781460535.177:1347): avc: denied { write } for pid=6130 comm="syz.3.876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.279383][ T28] audit: type=1400 audit(1781460535.637:1348): avc: denied { write } for pid=6130 comm="syz.3.876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.301334][ T28] audit: type=1400 audit(1781460535.637:1349): avc: denied { write } for pid=6130 comm="syz.3.876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.584805][ T6162] loop0: detected capacity change from 0 to 512 [ 157.780930][ T6162] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.911503][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.922178][ T6162] EXT4-fs (loop0): 1 truncate cleaned up [ 157.938835][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.188231][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.199706][ T6169] loop1: detected capacity change from 0 to 256 [ 158.687687][ T6173] loop3: detected capacity change from 0 to 512 [ 158.930498][ T6173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.946929][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.887'. [ 158.994643][ T6173] EXT4-fs (loop3): 1 truncate cleaned up [ 159.000561][ T6178] loop0: detected capacity change from 0 to 512 [ 159.022895][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.056056][ T6178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.201807][ T6178] EXT4-fs (loop0): 1 truncate cleaned up [ 159.217792][ T6178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.356625][ T6187] program syz.4.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.368224][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.383629][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.440764][ T6187] netlink: 'syz.4.892': attribute type 9 has an invalid length. [ 159.465574][ T6195] syzkaller0: entered promiscuous mode [ 159.475369][ T6195] syzkaller0: entered allmulticast mode [ 159.679582][ T6212] program syz.2.902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.700989][ T6212] netlink: 'syz.2.902': attribute type 9 has an invalid length. [ 159.815819][ T6217] loop4: detected capacity change from 0 to 4096 [ 159.828194][ T6217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.870524][ T28] audit: type=1400 audit(1781460538.287:1350): avc: denied { write } for pid=6216 comm="syz.4.904" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.966362][ T28] audit: type=1400 audit(1781460538.387:1351): avc: denied { write } for pid=6216 comm="syz.4.904" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.103067][ T28] audit: type=1400 audit(1781460538.387:1352): avc: denied { write } for pid=6216 comm="syz.4.904" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.655579][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.468791][ T6237] program syz.0.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.485195][ T6234] syzkaller0: entered promiscuous mode [ 162.404785][ T6234] syzkaller0: entered allmulticast mode [ 162.425213][ T6237] netlink: 'syz.0.909': attribute type 9 has an invalid length. [ 163.233043][ T6267] loop4: detected capacity change from 0 to 512 [ 163.241571][ T6267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.255081][ T6267] EXT4-fs (loop4): 1 truncate cleaned up [ 163.285426][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.694174][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.058246][ T6297] syzkaller0: entered promiscuous mode [ 165.102841][ T6297] syzkaller0: entered allmulticast mode [ 165.921537][ T6316] syzkaller0: entered promiscuous mode [ 165.971530][ T6316] syzkaller0: entered allmulticast mode [ 168.750114][ T6336] loop2: detected capacity change from 0 to 512 [ 168.822200][ T6336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.862609][ T6336] EXT4-fs (loop2): 1 truncate cleaned up [ 168.871840][ T6336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.933278][ T6346] futex_wake_op: syz.4.947 tries to shift op by 144; fix this program [ 168.978932][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.989307][ T6349] program syz.1.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.011625][ T6349] netlink: 'syz.1.946': attribute type 9 has an invalid length. [ 169.117383][ T6342] loop3: detected capacity change from 0 to 128 [ 169.150304][ T6342] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 169.203950][ T6342] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.251896][ T6342] ext2 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.307826][ T6361] netlink: 128 bytes leftover after parsing attributes in process `syz.1.953'. [ 169.318351][ T6361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.362073][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 169.750461][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.773915][ T6373] loop2: detected capacity change from 0 to 512 [ 169.784920][ T6373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.957376][ T6373] EXT4-fs (loop2): 1 truncate cleaned up [ 169.976489][ T28] audit: type=1400 audit(1781460548.307:1353): avc: denied { mount } for pid=6374 comm="syz.4.959" name="/" dev="autofs" ino=14602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.000158][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.116200][ T6388] loop4: detected capacity change from 0 to 4096 [ 170.292147][ T6388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.313334][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.326035][ T28] audit: type=1400 audit(1781460548.747:1354): avc: denied { write } for pid=6387 comm="syz.4.961" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.513223][ T6397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.964'. [ 170.524575][ T28] audit: type=1400 audit(1781460548.947:1355): avc: denied { write } for pid=6387 comm="syz.4.961" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.647654][ T6397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.666532][ T28] audit: type=1400 audit(1781460548.947:1356): avc: denied { write } for pid=6387 comm="syz.4.961" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.728864][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 172.319420][ T6403] program syz.2.965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.333490][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.448823][ T6410] FAULT_INJECTION: forcing a failure. [ 172.448823][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.588975][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.1.967 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.589002][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.589012][ T6410] Call Trace: [ 172.589018][ T6410] [ 172.589023][ T6410] __dump_stack+0x1d/0x30 [ 172.589044][ T6410] dump_stack_lvl+0x95/0xd0 [ 172.589065][ T6410] dump_stack+0x15/0x1b [ 172.589134][ T6410] should_fail_ex+0x25e/0x270 [ 172.589172][ T6410] should_fail+0xb/0x20 [ 172.589248][ T6410] should_fail_usercopy+0x1a/0x20 [ 172.589297][ T6410] _copy_from_user+0x1c/0xb0 [ 172.589376][ T6410] futex_parse_waitv+0x86/0x2c0 [ 172.589449][ T6410] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.589474][ T6410] __se_sys_futex_waitv+0x121/0x1c0 [ 172.589533][ T6410] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 172.589597][ T6410] __x64_sys_futex_waitv+0x67/0x80 [ 172.589634][ T6410] x64_sys_call+0x2f5b/0x3020 [ 172.589660][ T6410] do_syscall_64+0x136/0x3c0 [ 172.589759][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.589777][ T6410] RIP: 0033:0x7fe8ee53ce59 [ 172.589794][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.589814][ T6410] RSP: 002b:00007fe8ecf8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 172.589836][ T6410] RAX: ffffffffffffffda RBX: 00007fe8ee7b5fa0 RCX: 00007fe8ee53ce59 [ 172.589916][ T6410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000004040 [ 172.589929][ T6410] RBP: 00007fe8ecf8f090 R08: 0000000000000001 R09: 0000000000000000 [ 172.589939][ T6410] R10: 00002000000040c0 R11: 0000000000000246 R12: 0000000000000001 [ 172.589960][ T6410] R13: 00007fe8ee7b6038 R14: 00007fe8ee7b5fa0 R15: 00007ffe32b882f8 [ 172.589982][ T6410] [ 172.897224][ T3565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.935689][ T28] audit: type=1400 audit(1781460551.317:1357): avc: denied { read write } for pid=6404 comm="syz.4.966" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.962680][ T6421] loop4: detected capacity change from 0 to 1024 [ 172.998380][ T6421] ext4: Bad value for 'resgid' [ 173.040266][ T3565] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.065204][ T6421] ext4: Bad value for 'resgid' [ 173.088939][ T6426] futex_wake_op: syz.3.973 tries to shift op by 144; fix this program [ 173.190763][ T28] audit: type=1400 audit(1781460551.317:1358): avc: denied { open } for pid=6404 comm="syz.4.966" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.317960][ T6430] fido_id[6430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.200345][ T6438] loop3: detected capacity change from 0 to 4096 [ 174.214242][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.323472][ T28] audit: type=1400 audit(1781460552.747:1359): avc: denied { write } for pid=6437 comm="syz.3.976" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.467486][ T6449] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.543554][ T28] audit: type=1400 audit(1781460552.967:1360): avc: denied { write } for pid=6437 comm="syz.3.976" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.614363][ T28] audit: type=1400 audit(1781460552.967:1361): avc: denied { write } for pid=6437 comm="syz.3.976" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.643051][ T6456] netlink: 128 bytes leftover after parsing attributes in process `syz.2.980'. [ 174.682342][ T6456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.696221][ T28] audit: type=1326 audit(1781460553.027:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6453 comm="syz.0.979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f171d42ce59 code=0x0 [ 174.795707][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 174.897310][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.059713][ T28] audit: type=1400 audit(1781460553.477:1363): avc: denied { create } for pid=6469 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.082631][ T6478] loop2: detected capacity change from 0 to 256 [ 175.225784][ T28] audit: type=1400 audit(1781460553.477:1364): avc: denied { connect } for pid=6469 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.442142][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.987'. [ 176.574830][ T6495] loop4: detected capacity change from 0 to 512 [ 176.600587][ T6495] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.773658][ T6495] EXT4-fs (loop4): 1 truncate cleaned up [ 176.791572][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.207705][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.388913][ T6508] loop1: detected capacity change from 0 to 4096 [ 177.459154][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.478437][ T6514] futex_wake_op: syz.3.997 tries to shift op by 144; fix this program [ 177.497494][ T28] audit: type=1400 audit(1781460555.917:1365): avc: denied { write } for pid=6507 comm="syz.1.995" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.500981][ T6512] loop0: detected capacity change from 0 to 4096 [ 177.873972][ T6512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.919547][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.363153][ T28] audit: type=1400 audit(1781460556.157:1366): avc: denied { write } for pid=6507 comm="syz.1.995" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.387203][ T28] audit: type=1400 audit(1781460556.157:1367): avc: denied { write } for pid=6507 comm="syz.1.995" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.415215][ T6525] loop2: detected capacity change from 0 to 512 [ 178.438775][ T28] audit: type=1400 audit(1781460556.377:1368): avc: denied { write } for pid=6511 comm="syz.0.996" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.462055][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.479926][ T28] audit: type=1400 audit(1781460556.527:1369): avc: denied { write } for pid=6511 comm="syz.0.996" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.501850][ T28] audit: type=1400 audit(1781460556.527:1370): avc: denied { write } for pid=6511 comm="syz.0.996" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.524925][ T6525] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.564788][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 178.573798][ T28] audit: type=1400 audit(1781460556.987:1371): avc: denied { write } for pid=6521 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.609235][ T6531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.616525][ T6531] IPv6: NLM_F_CREATE should be set when creating new route [ 178.629017][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.632186][ T28] audit: type=1400 audit(1781460556.987:1372): avc: denied { append } for pid=6521 comm="syz.2.999" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.661406][ T6533] loop1: detected capacity change from 0 to 4096 [ 178.681989][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.732648][ T6538] program syz.0.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.747187][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.747203][ T6539] loop3: detected capacity change from 0 to 256 [ 178.892684][ T6545] loop0: detected capacity change from 0 to 256 [ 179.037755][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'. [ 179.377226][ T6554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 179.441422][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.600632][ T6556] loop1: detected capacity change from 0 to 4096 [ 179.690576][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.790532][ T6561] loop2: detected capacity change from 0 to 512 [ 179.795812][ T6563] futex_wake_op: syz.4.1010 tries to shift op by 144; fix this program [ 179.824515][ T6561] EXT4-fs: Ignoring removed i_version option [ 179.849964][ T6561] EXT4-fs: Ignoring removed bh option [ 179.982194][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.022863][ T6561] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.073645][ T6561] mmap: syz.2.1005 (6561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.291427][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 180.291443][ T28] audit: type=1400 audit(1781460558.717:1380): avc: denied { getopt } for pid=6574 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.371304][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.474997][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 180.509998][ T6580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.517249][ T6580] IPv6: NLM_F_CREATE should be set when creating new route [ 180.835128][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.850468][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.695691][ T6585] loop1: detected capacity change from 0 to 1024 [ 183.488016][ T6585] ext4: Bad value for 'resgid' [ 183.547770][ T6598] loop0: detected capacity change from 0 to 2048 [ 183.996392][ T6585] ext4: Bad value for 'resgid' [ 184.494504][ T6600] loop4: detected capacity change from 0 to 512 [ 184.553718][ T6598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.656191][ T28] audit: type=1400 audit(1781460562.997:1381): avc: denied { write } for pid=6595 comm="syz.0.1018" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.703619][ T6600] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.761044][ T6600] EXT4-fs (loop4): orphan cleanup on readonly fs [ 184.767471][ T6600] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 184.778227][ T6600] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1019: attempt to clear invalid blocks 2 len 1 [ 184.791060][ T6600] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 184.792339][ T6600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 184.802304][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 184.802443][ C1] EXT4-fs (loop4): initial error at time 1781460563: ext4_clear_blocks:876: inode 13 [ 184.802713][ C1] EXT4-fs (loop4): last error at time 1781460563: ext4_clear_blocks:876: inode 13 [ 184.839114][ T6600] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 184.903012][ T6600] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1019: invalid indirect mapped block 1819239214 (level 0) [ 184.917614][ T6600] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 184.920366][ T6600] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1019: invalid indirect mapped block 1819239214 (level 1) [ 184.945008][ T6600] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 184.959175][ T6600] EXT4-fs (loop4): 1 truncate cleaned up [ 184.997940][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.041397][ T28] audit: type=1400 audit(1781460563.457:1382): avc: denied { read write } for pid=6599 comm="syz.4.1019" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.070223][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.133891][ T28] audit: type=1400 audit(1781460563.457:1383): avc: denied { open } for pid=6599 comm="syz.4.1019" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.214476][ T28] audit: type=1400 audit(1781460563.507:1384): avc: denied { ioctl } for pid=6599 comm="syz.4.1019" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.277592][ T6615] loop0: detected capacity change from 0 to 128 [ 185.286797][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.302801][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 185.321432][ T6617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.341497][ T6615] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 185.371950][ T6615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.388703][ T6615] ext2 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.406512][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.423608][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.472404][ T6622] loop3: detected capacity change from 0 to 512 [ 185.480479][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 185.489507][ T6627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.496776][ T6627] IPv6: NLM_F_CREATE should be set when creating new route [ 185.508542][ T6622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.511398][ T6626] futex_wake_op: syz.0.1027 tries to shift op by 144; fix this program [ 185.556994][ T6622] EXT4-fs (loop3): 1 truncate cleaned up [ 185.563082][ T6630] loop2: detected capacity change from 0 to 256 [ 185.621901][ T6622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.724586][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.855034][ T6641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 186.860749][ T6651] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 186.889532][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.917459][ T6651] bond1: (slave geneve2): making interface the new active one [ 186.945138][ T6651] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 186.971752][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 186.983062][ T6659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.990589][ T6662] loop0: detected capacity change from 0 to 512 [ 186.997537][ T6662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.034779][ T6662] EXT4-fs (loop0): 1 truncate cleaned up [ 187.041391][ T6662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.046913][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 187.064586][ T6663] loop3: detected capacity change from 0 to 128 [ 187.081013][ T6669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.085650][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.088277][ T6669] IPv6: NLM_F_CREATE should be set when creating new route [ 187.097451][ T6663] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 187.128442][ T6663] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.144107][ T6663] ext2 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.181347][ T28] audit: type=1400 audit(1781460565.607:1385): avc: denied { create } for pid=6665 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.241091][ T28] audit: type=1400 audit(1781460565.667:1386): avc: denied { bind } for pid=6665 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.262296][ T28] audit: type=1400 audit(1781460565.687:1387): avc: denied { listen } for pid=6665 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.268896][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1041'. [ 187.301883][ T6681] loop1: detected capacity change from 0 to 128 [ 187.309015][ T6681] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 187.320866][ T6681] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.333407][ T6681] ext2 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.876759][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.034381][ T6695] loop2: detected capacity change from 0 to 512 [ 188.061503][ T6695] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.120845][ T6695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 188.141078][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.158874][ T6695] System zones: 1-12 [ 188.169473][ T6695] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.200777][ T6695] EXT4-fs (loop2): 1 truncate cleaned up [ 188.218506][ T6695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.267249][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 188.287340][ T6701] loop3: detected capacity change from 0 to 128 [ 188.302188][ T28] audit: type=1400 audit(1781460566.717:1388): avc: denied { write } for pid=6694 comm="syz.2.1049" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.325720][ T6704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.345918][ T6701] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 188.460264][ T6701] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.474432][ T6710] loop1: detected capacity change from 0 to 512 [ 188.526743][ T6710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.540663][ T6701] ext2 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.609736][ T6710] EXT4-fs (loop1): 1 truncate cleaned up [ 188.644437][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.851434][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.919521][ T6713] loop1: detected capacity change from 0 to 512 [ 188.941949][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.960706][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.982724][ T6713] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 189.017045][ T6713] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 189.027250][ T6713] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1053: Failed to acquire dquot type 1 [ 189.038788][ T6713] loop1: lost filesystem error report for type 5 error -117 [ 189.039913][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 189.053681][ C1] EXT4-fs (loop1): initial error at time 1781460567: ext4_acquire_dquot:7034 [ 189.062503][ C1] EXT4-fs (loop1): last error at time 1781460567: ext4_acquire_dquot:7034 [ 189.074016][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1053: corrupted inode contents [ 189.086274][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.086724][ T6713] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1053: mark_inode_dirty error [ 189.109983][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.110145][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1053: corrupted inode contents [ 189.137797][ T6721] vfat: Unknown parameter 'check.relaxed' [ 189.165422][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.166010][ T6713] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1053: mark_inode_dirty error [ 189.227334][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.227576][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1053: corrupted inode contents [ 189.252480][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.252658][ T6713] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 189.270921][ T6713] loop1: lost filesystem error report for type 5 error -117 [ 189.271044][ T6713] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1053: corrupted inode contents [ 189.290577][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.290702][ T6713] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1053: mark_inode_dirty error [ 189.311334][ T6713] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.311502][ T6713] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 189.329781][ T6713] loop1: lost filesystem error report for type 5 error -117 [ 189.330320][ T6713] EXT4-fs (loop1): 1 truncate cleaned up [ 189.343934][ T6713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.374057][ T6728] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 189.385275][ T6713] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.397136][ T6713] SET target dimension over the limit! [ 189.404133][ T6728] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.425378][ T6728] ext2 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.481437][ T6730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.508608][ T28] audit: type=1400 audit(1781460567.927:1389): avc: denied { write } for pid=6729 comm="syz.2.1058" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.674493][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 189.680578][ T6713] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #12: block 13: comm syz.1.1053: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 189.707895][ T28] audit: type=1400 audit(1781460568.127:1390): avc: denied { write } for pid=6729 comm="syz.2.1058" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.713595][ T6713] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 189.741432][ T28] audit: type=1400 audit(1781460568.127:1391): avc: denied { write } for pid=6729 comm="syz.2.1058" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.768680][ T6713] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1053: Failed to acquire dquot type 1 [ 189.819821][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.902585][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.098023][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.573190][ T6770] syzkaller0: entered promiscuous mode [ 190.578887][ T6770] syzkaller0: entered allmulticast mode [ 190.699077][ T6772] syzkaller0: entered promiscuous mode [ 190.730040][ T6772] syzkaller0: entered allmulticast mode [ 191.213029][ T6789] set_capacity_and_notify: 3 callbacks suppressed [ 191.213044][ T6789] loop0: detected capacity change from 0 to 128 [ 191.252278][ T6789] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 191.307165][ T6789] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.329956][ T6789] ext2 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.756269][ T6798] loop1: detected capacity change from 0 to 128 [ 191.774777][ T6798] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 191.797589][ T6798] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.810349][ T6798] ext2 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.020286][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.033233][ T6806] program syz.3.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.250888][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.845983][ T6832] ================================================================== [ 193.854122][ T6832] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 193.861541][ T6832] [ 193.863902][ T6832] read-write to 0xffff88811b441fd8 of 8 bytes by interrupt on cpu 1: [ 193.871993][ T6832] __xa_clear_mark+0xf5/0x1e0 [ 193.876706][ T6832] __folio_end_writeback+0xf4/0x360 [ 193.881930][ T6832] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 193.888189][ T6832] folio_end_writeback+0x1c/0x70 [ 193.893147][ T6832] ext4_finish_bio+0x454/0x770 [ 193.897927][ T6832] ext4_end_bio+0x27f/0x380 [ 193.902462][ T6832] bio_endio+0x35b/0x3f0 [ 193.906765][ T6832] blk_update_request+0x338/0x710 [ 193.911802][ T6832] scsi_end_request+0x4b/0x4c0 [ 193.916582][ T6832] scsi_io_completion+0x7f/0x1d0 [ 193.921522][ T6832] scsi_finish_command+0x1c7/0x1e0 [ 193.926644][ T6832] scsi_complete+0x155/0x4d0 [ 193.931246][ T6832] blk_done_softirq+0x77/0xb0 [ 193.936027][ T6832] handle_softirqs+0xb9/0x280 [ 193.940725][ T6832] __irq_exit_rcu+0x42/0xd0 [ 193.945245][ T6832] common_interrupt+0x83/0x90 [ 193.949950][ T6832] asm_common_interrupt+0x26/0x40 [ 193.954996][ T6832] _raw_spin_unlock_irq+0x12/0x30 [ 193.960036][ T6832] folio_isolate_lru+0x2ca/0x310 [ 193.964989][ T6832] queue_folios_pte_range+0x6f8/0x8e0 [ 193.970385][ T6832] walk_pgd_range+0xa71/0x1520 [ 193.975181][ T6832] __walk_page_range+0xec/0x340 [ 193.980075][ T6832] walk_page_range_mm_unsafe+0x3e4/0x530 [ 193.985744][ T6832] walk_page_range+0x56/0x70 [ 193.990360][ T6832] queue_pages_range+0xc2/0x130 [ 193.995225][ T6832] __se_sys_mbind+0x7b3/0xdd0 [ 193.999925][ T6832] __x64_sys_mbind+0x78/0x90 [ 194.004569][ T6832] x64_sys_call+0x2b72/0x3020 [ 194.009261][ T6832] do_syscall_64+0x136/0x3c0 [ 194.013872][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.019776][ T6832] [ 194.022104][ T6832] read to 0xffff88811b441fd8 of 8 bytes by task 6832 on cpu 0: [ 194.029655][ T6832] xas_find_marked+0x211/0x650 [ 194.034437][ T6832] filemap_get_folios_tag+0xf7/0x400 [ 194.039738][ T6832] filemap_fdatawait_keep_errors+0x6c/0x190 [ 194.045648][ T6832] sync_inodes_sb+0x41e/0x4d0 [ 194.050341][ T6832] sync_inodes_one_sb+0x3d/0x50 [ 194.055205][ T6832] __iterate_supers+0x110/0x1f0 [ 194.060071][ T6832] iterate_supers+0x1f/0x30 [ 194.064584][ T6832] __ia32_sys_sync+0x5c/0xb0 [ 194.069224][ T6832] x64_sys_call+0x2f3a/0x3020 [ 194.073915][ T6832] do_syscall_64+0x136/0x3c0 [ 194.078522][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.084429][ T6832] [ 194.086767][ T6832] value changed: 0xffffff8000000000 -> 0xffffc00000000000 [ 194.093872][ T6832] [ 194.096205][ T6832] Reported by Kernel Concurrency Sanitizer on: [ 194.102355][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.1090 Not tainted syzkaller #0 PREEMPT(lazy) [ 194.111644][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.121700][ T6832] ==================================================================