last executing test programs: 21.178502714s ago: executing program 2 (id=813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0xf59f) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.087048458s ago: executing program 2 (id=815): openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x105b, &(0x7f0000000180)="$eJzsz72NwkAUBOBZ+35s6U669DLaoBAKISVy4hYogYAqyMlphQgZGcskxAghfV+yu7OjJ73wUh/3W5Wv/JZ8JoeyG4OuZKjm/5+59p381UlOzXE5vhd96vw3j/MmZTqGbVK69Vjo28vmlp3brPbP3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3sU1AAD//x8TDHI=") connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 19.808748821s ago: executing program 2 (id=821): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f0000001600), 0x0, 0x888) socket$xdp(0x2c, 0x3, 0x0) getrandom(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 19.457413811s ago: executing program 2 (id=823): unshare(0x4000100) 19.262402358s ago: executing program 2 (id=825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000eb070000000100000080000000", @ANYRES32=0x0, @ANYBLOB="2e88ca", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000001940)='./file0/../file0\x00', &(0x7f0000001a00)={{r2, r3/1000+10000}, {r4, r5/1000+60000}}) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0xa) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x6, 0x0, 0x8, 0x4, 0x0, 0x2, 0x10c0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x2, 0x93}, 0x2000, 0xffff, 0xb, 0x8, 0x3e0b, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x4}, r7, 0x7, 0xffffffffffffffff, 0x1) recvmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/250, 0xfa}], 0x5, &(0x7f0000000180)=""/2, 0x2}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ff0315000000000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r8, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) openat(0xffffffffffffffff, &(0x7f0000000580)='./file1\x00', 0x900, 0x81) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='/dev/ppp\x00', &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa', 0x0) socket$pppoe(0x18, 0x1, 0x0) 19.0994345s ago: executing program 2 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000800000000000170000001c000680"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r4, r3) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x404c00, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delqdisc={0x34, 0x25, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0x10}, {}, {0x2, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x45080}, 0x0) r7 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0xfffffff7, 0xfffffffd, 0x5, 0x41000, r3, 0x1c00, '\x00', r6, r7, 0x1, 0x4}, 0x50) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r12, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r12, 0x0, 0xd0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r13}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r13, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) (async) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r11, 0x1}, 0x14}}, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r10) (async, rerun: 32) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff3}, {0xffff, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2400480c) 6.602500103s ago: executing program 1 (id=936): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffffffff, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 5) 6.540632043s ago: executing program 1 (id=937): openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.550090004s ago: executing program 1 (id=943): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000200)) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x35, 0x0, 0x0, 0xffffffff}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents64(r2, &(0x7f0000000000)=""/229, 0xe5) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x2, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(r1, 0x1, 0x0, &(0x7f0000000180)) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0xfdef) 5.489927704s ago: executing program 4 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x2, 0x4, 0x6, 0xffffffff}, {0xfff0, 0x1, 0xf9, 0x1}, {0x1, 0x5, 0x7, 0x3}, {0x2, 0x4, 0x6, 0x31}]}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 5.441606476s ago: executing program 1 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x1d}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a5c01000000", 0xa}], 0x3) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x38}}, 0x40408c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xe}}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x0) gettid() syz_io_uring_setup(0x175c, &(0x7f00000007c0)={0x0, 0x1000260e, 0x10000, 0x2, 0x375}, &(0x7f00000003c0)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000780)=0x7ff, 0x0, 0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000110}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x33}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf9}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r8, r8, 0x0, 0xe3aa6ea) sendfile(r7, r7, 0x0, 0xe3aa6ea) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 5.384272316s ago: executing program 4 (id=948): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80009, @mcast2, 0xb}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b00100000000000000000004499791bd0a14000000fb030100"/40], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x400c801) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x4000000000000, 0x9e25, 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$kcm(0x2, 0x5, 0x84) 5.068419692s ago: executing program 0 (id=949): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x17b, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) write$eventfd(r3, &(0x7f00000001c0)=0x7, 0x8) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000180), 0x1) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x4, 0xf0e, 0x1ff, 0x50, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 3.718752482s ago: executing program 32 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000800000000000170000001c000680"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r4, r3) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x404c00, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delqdisc={0x34, 0x25, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0x10}, {}, {0x2, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x45080}, 0x0) r7 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0xfffffff7, 0xfffffffd, 0x5, 0x41000, r3, 0x1c00, '\x00', r6, r7, 0x1, 0x4}, 0x50) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r12, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r12, 0x0, 0xd0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r13}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r13, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) (async) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r11, 0x1}, 0x14}}, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r10) (async, rerun: 32) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff3}, {0xffff, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2400480c) 3.00251823s ago: executing program 4 (id=952): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.749667347s ago: executing program 0 (id=953): openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x105b, &(0x7f0000000180)="$eJzsz72NwkAUBOBZ+35s6U669DLaoBAKISVy4hYogYAqyMlphQgZGcskxAghfV+yu7OjJ73wUh/3W5Wv/JZ8JoeyG4OuZKjm/5+59p381UlOzXE5vhd96vw3j/MmZTqGbVK69Vjo28vmlp3brPbP3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3sU1AAD//x8TDHI=") unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.605261463s ago: executing program 1 (id=955): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, r0, r0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet6(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x5dfe, 0x3, 'ovf\x00', 0x1, 0x80005, 0x29}, 0x2c) 2.318431924s ago: executing program 4 (id=956): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7724, &(0x7f0000000380)={0x0, 0x46f2, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b00100000000000000000004499791bd0a14000000fb030100"/40], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x400c801) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x900c11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r11, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r10, 0x0}]) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00020000", @ANYRES16=r12, @ANYBLOB="1d0b26bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48850) socket$rds(0x15, 0x5, 0x0) 1.955708213s ago: executing program 3 (id=957): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.282290198s ago: executing program 3 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0xfeffff, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) 1.174340959s ago: executing program 1 (id=959): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x2af9, &(0x7f0000000640)={0x0, 0x1780, 0x800, 0x1, 0x164, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket(0xb, 0x80000, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x24004000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x1b, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x54, 0xa8, 0x2a, 0x20, 0x471, 0x2182, 0xe7d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x80, 0x9, 0x80, 0x10}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7, 0x8, 0x0, 0x20, 0x5}, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="050f300003141004e9b55fe26171000004000000000002000003100b141004092c273458a52360c90812b97d3e071d25"], 0x2, [{0xe4, &(0x7f0000001240)=@string={0xe4, 0x3, "727e7171f68c2af0997eea0080b21caf1628165380bfc5995d937a05d6d70bdda991cda7fcd1a3db192cd62eb7677ad10ede2d23d47489d341d9ae5e1365e38ac1f0e376d7423a1827378811f9e7036e89285d7ea24ece6cdfc462f7b644e484f1aa95ee226ba7413d918b30e4c2762e48fb31217325bda12fea2b3a26e4d14cd91f8adbe66b9b2a8caa80a3b76e486805e3ccd04856e9924b352dd14aa8ebad602a6d9ade78441f9901cc526ecdeb042df206cc7f2fb10f1ce105f3078c91d5876447cab858610cd3b960a73aeb5be5b07183cdd278cec80c107fe4bd2f42bc05ae"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x413}}]}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x4, 0x56f, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000061c0), r11) sendmsg$FOU_CMD_GET(r11, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x44490) 1.167928298s ago: executing program 0 (id=960): unshare(0x20060400) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) io_uring_enter(0xffffffffffffffff, 0x5a41, 0x3052, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="55544f4661848c20dfdbd28891f4", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.095322136s ago: executing program 4 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2400}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 1.026596184s ago: executing program 3 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 996.783729ms ago: executing program 0 (id=963): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_bp={0x0, 0x1}, 0x2002, 0x36, 0x43a1bd56, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000740)=""/4096}, 0x20) set_mempolicy(0x0, &(0x7f0000000340)=0x400, 0x100000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 944.98929ms ago: executing program 4 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x1d}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a5c01000000", 0xa}], 0x3) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x38}}, 0x40408c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xe}}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x0) gettid() syz_io_uring_setup(0x175c, &(0x7f00000007c0)={0x0, 0x1000260e, 0x10000, 0x2, 0x375}, &(0x7f00000003c0)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000780)=0x7ff, 0x0, 0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000110}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x33}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf9}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r8, r8, 0x0, 0xe3aa6ea) sendfile(r7, r7, 0x0, 0xe3aa6ea) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 818.550089ms ago: executing program 3 (id=965): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 773.545481ms ago: executing program 0 (id=966): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@delalloc}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0xf}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) (async) io_setup(0x401, &(0x7f0000000080)=0x0) io_getevents(r2, 0x200, 0xa, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) (async, rerun: 64) fallocate(r1, 0x8, 0x2000000, 0x1001f3) (rerun: 64) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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") (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xc7fad566a93e629f, 0x59) (rerun: 32) fstatfs(r3, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000000)=[{r0, 0x2410}, {r0, 0xc000}, {0xffffffffffffffff, 0x4000}, {r1, 0x400}, {r4, 0x49}, {r1, 0x41}, {r1, 0x2000}, {r0, 0x1410}, {r0, 0x20}], 0x9, 0xe17) 541.840362ms ago: executing program 3 (id=967): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x401, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 318.527893ms ago: executing program 3 (id=968): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 0 (id=969): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4622, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) kernel console output (not intermixed with test programs): 000 r/w without journal. Quota mode: none. [ 88.161540][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.218876][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.507618][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 88.507632][ T28] audit: type=1400 audit(1772561867.472:717): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.563082][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 88.743058][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.800101][ T4943] loop2: detected capacity change from 0 to 512 [ 88.827601][ T4943] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.862102][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 88.880838][ T4943] EXT4-fs (loop2): group descriptors corrupted! [ 88.893739][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 88.954284][ T28] audit: type=1400 audit(1772561867.922:718): avc: denied { mounton } for pid=4950 comm="syz.1.428" path="/proc/238/cgroup" dev="proc" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 88.979843][ T4954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.576119][ T4966] loop0: detected capacity change from 0 to 512 [ 89.628607][ T4966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.735449][ T4966] EXT4-fs (loop0): 1 truncate cleaned up [ 89.746450][ T4972] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 89.753558][ T4966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.764823][ T4972] bridge0: port 3(netdevsim1) entered blocking state [ 89.790264][ T4972] bridge0: port 3(netdevsim1) entered disabled state [ 89.808856][ T4972] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 89.819979][ T4972] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 89.849664][ T4972] bridge0: port 3(netdevsim1) entered blocking state [ 89.856413][ T4972] bridge0: port 3(netdevsim1) entered forwarding state [ 89.874241][ T4952] loop4: detected capacity change from 0 to 65536 [ 89.898080][ T28] audit: type=1400 audit(1772561868.872:719): avc: denied { watch } for pid=4951 comm="syz.4.427" path="/89/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 90.053999][ T28] audit: type=1400 audit(1772561869.022:720): avc: denied { write } for pid=4979 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.108569][ T28] audit: type=1400 audit(1772561869.082:721): avc: denied { read } for pid=4979 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.280254][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.413742][ T4990] loop4: detected capacity change from 0 to 128 [ 90.657769][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 91.595541][ T3304] loop2: p3 p4 < > [ 91.815832][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 91.824894][ T3304] loop2: p3 start 9895680 is beyond EOD, truncated [ 92.410328][ T4994] loop2: p3 p4 < > [ 92.414215][ T4994] loop2: p3 start 9895680 is beyond EOD, truncated [ 92.588698][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.598568][ T5011] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 92.616577][ T5020] FAULT_INJECTION: forcing a failure. [ 92.616577][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 92.629688][ T5020] CPU: 1 UID: 0 PID: 5020 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT(full) [ 92.629715][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.629793][ T5020] Call Trace: [ 92.629800][ T5020] [ 92.629809][ T5020] __dump_stack+0x1d/0x30 [ 92.629837][ T5020] dump_stack_lvl+0x95/0xd0 [ 92.629911][ T5020] dump_stack+0x15/0x1b [ 92.629950][ T5020] should_fail_ex+0x263/0x280 [ 92.630053][ T5020] should_failslab+0x8c/0xb0 [ 92.630077][ T5020] kmem_cache_alloc_noprof+0x66/0x400 [ 92.630158][ T5020] ? security_file_alloc+0x32/0xf0 [ 92.630289][ T5020] security_file_alloc+0x32/0xf0 [ 92.630324][ T5020] init_file+0x5b/0x1b0 [ 92.630419][ T5020] alloc_empty_file+0x8b/0x200 [ 92.630442][ T5020] path_openat+0x65/0x2050 [ 92.630475][ T5020] ? _parse_integer_limit+0x7c/0x190 [ 92.630497][ T5020] ? _parse_integer_limit+0x170/0x190 [ 92.630516][ T5020] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 92.630564][ T5020] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 92.630602][ T5020] ? irqentry_exit+0x91/0x520 [ 92.630627][ T5020] ? kstrtoull+0x111/0x140 [ 92.630649][ T5020] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 92.630682][ T5020] do_file_open+0x16c/0x290 [ 92.630754][ T5020] do_sys_openat2+0x94/0x130 [ 92.630783][ T5020] __x64_sys_openat+0xf2/0x120 [ 92.630813][ T5020] x64_sys_call+0x1e39/0x3020 [ 92.630917][ T5020] do_syscall_64+0x12c/0x370 [ 92.630938][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.630961][ T5020] RIP: 0033:0x7fe7eb3bcfce [ 92.630976][ T5020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.631034][ T5020] RSP: 002b:00007fe7e9e56f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.631053][ T5020] RAX: ffffffffffffffda RBX: 00007fe7e9e576c0 RCX: 00007fe7eb3bcfce [ 92.631067][ T5020] RDX: 0000000000000000 RSI: 00007fe7eb492270 RDI: ffffffffffffff9c [ 92.631103][ T5020] RBP: 00007fe7e9e57090 R08: 0000000000000000 R09: 0000000000000000 [ 92.631116][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.631127][ T5020] R13: 00007fe7eb676038 R14: 00007fe7eb675fa0 R15: 00007ffd36fb5378 [ 92.631144][ T5020] [ 92.632629][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.879009][ T5028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.448'. [ 92.893276][ T5028] bridge1: entered promiscuous mode [ 92.898501][ T5028] bridge1: entered allmulticast mode [ 92.910634][ T5030] xt_hashlimit: size too large, truncated to 1048576 [ 92.917928][ T5025] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 92.928617][ T28] audit: type=1400 audit(1772561871.893:722): avc: denied { load_policy } for pid=5019 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.950314][ T5025] SELinux: failed to load policy [ 92.965757][ T5033] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 92.977454][ T28] audit: type=1400 audit(1772561871.933:723): avc: denied { getopt } for pid=5032 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.067987][ T28] audit: type=1326 audit(1772561871.973:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2be4c799 code=0x7ffc0000 [ 93.100212][ T28] audit: type=1326 audit(1772561871.973:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fbf2be4c799 code=0x7ffc0000 [ 93.131350][ T28] audit: type=1326 audit(1772561871.973:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2be4c799 code=0x7ffc0000 [ 93.156555][ T5040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.452'. [ 93.244405][ T5053] set_capacity_and_notify: 1 callbacks suppressed [ 93.244420][ T5053] loop0: detected capacity change from 0 to 128 [ 93.254403][ T5045] lo speed is unknown, defaulting to 1000 [ 93.391759][ T5059] lo speed is unknown, defaulting to 1000 [ 93.419592][ T5067] netlink: 'syz.1.460': attribute type 6 has an invalid length. [ 93.557644][ T5067] netlink: 164480 bytes leftover after parsing attributes in process `syz.1.460'. [ 93.642968][ T5069] loop3: detected capacity change from 0 to 512 [ 93.774544][ T5069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.968854][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 93.968946][ T28] audit: type=1400 audit(1772561872.933:733): avc: denied { read } for pid=5082 comm="syz.1.463" path="socket:[10152]" dev="sockfs" ino=10152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.009087][ T5069] EXT4-fs (loop3): 1 truncate cleaned up [ 94.040956][ T5088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.464'. [ 94.104135][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.504015][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.730012][ T5106] loop2: detected capacity change from 0 to 8192 [ 94.745502][ T5106] msdos: Unknown parameter '' [ 94.897688][ T28] audit: type=1400 audit(1772561873.873:734): avc: granted { setsecparam } for pid=5111 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 94.960296][ T28] audit: type=1400 audit(1772561873.883:735): avc: granted { setsecparam } for pid=5111 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 94.981503][ T5114] loop2: detected capacity change from 0 to 1024 [ 94.998258][ T5114] ext4: Bad value for 'journal' [ 95.104233][ T28] audit: type=1400 audit(1772561874.073:736): avc: denied { sys_module } for pid=5117 comm="syz.3.468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.208008][ T28] audit: type=1400 audit(1772561874.183:737): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.277477][ T28] audit: type=1400 audit(1772561874.183:738): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.307616][ T28] audit: type=1400 audit(1772561874.183:739): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.333787][ T28] audit: type=1400 audit(1772561874.183:740): avc: denied { write } for pid=5115 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.354829][ T28] audit: type=1400 audit(1772561874.233:741): avc: denied { read write } for pid=5131 comm="syz.3.477" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.378986][ T28] audit: type=1400 audit(1772561874.233:742): avc: denied { open } for pid=5131 comm="syz.3.477" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.595385][ T5145] lo speed is unknown, defaulting to 1000 [ 95.661052][ T5147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 96.068027][ T5157] loop2: detected capacity change from 0 to 1024 [ 96.075974][ T5157] EXT4-fs: inline encryption not supported [ 96.097284][ T5149] loop3: detected capacity change from 0 to 512 [ 96.104833][ T5157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.129324][ T5158] loop0: detected capacity change from 0 to 164 [ 96.133779][ T5149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.157610][ T5158] iso9660: Bad value for 'map' [ 96.194614][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.209710][ T5149] EXT4-fs (loop3): 1 truncate cleaned up [ 96.266678][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.357989][ T5157] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 96.401718][ T5157] EXT4-fs (loop2): Remounting filesystem read-only [ 96.474346][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.825791][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.435988][ T5188] loop2: detected capacity change from 0 to 8192 [ 97.683597][ T3307] loop2: p3 p4 < > [ 97.687884][ T3307] loop2: p3 start 9895680 is beyond EOD, truncated [ 97.737748][ T5188] loop2: p3 p4 < > [ 97.741594][ T5188] loop2: p3 start 9895680 is beyond EOD, truncated [ 97.762440][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.490'. [ 97.792601][ T5197] IPVS: set_ctl: invalid protocol: 135 172.20.20.36:20004 [ 97.820846][ T5193] lo speed is unknown, defaulting to 1000 [ 98.080156][ T5201] loop3: detected capacity change from 0 to 128 [ 98.170720][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.330724][ T5214] Qħ6`Ҙ: renamed from lo (while UP) [ 98.372368][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.519291][ T5214] loop6: detected capacity change from 0 to 8 [ 98.551628][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.562285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.577302][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.587552][ T5225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=5225 comm=syz.2.502 [ 98.588047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.614604][ T5214] loop6: unable to read partition table [ 98.619746][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.626234][ T5214] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…˙ìžŬ×pà¨ĥ "ŭo§ĉ?<í ŻÊşöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 98.669520][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.680173][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.688174][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.698795][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.706691][ T3304] loop6: unable to read partition table [ 98.715898][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.726533][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.737321][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.747944][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.755956][ T5221] loop6: unable to read partition table [ 98.772292][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.782947][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.792790][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.803435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.811352][ T5221] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…˙ìžŬ×pà¨ĥ "ŭo§ĉ?<í ŻÊşöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 98.820214][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.835704][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.848555][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.859195][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.982288][ T28] kauditd_printk_skb: 1142 callbacks suppressed [ 98.982301][ T28] audit: type=1326 audit(1772561877.943:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7eb3f6517 code=0x7ffc0000 [ 99.008594][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 99.028859][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.035381][ T3319] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 99.067419][ T3319] audit: backlog limit exceeded [ 99.072571][ T3319] audit: audit_backlog=66 > audit_backlog_limit=64 [ 99.077340][ T28] audit: type=1326 audit(1772561877.943:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7eb39db19 code=0x7ffc0000 [ 99.090794][ T3319] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 99.123715][ T5236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.132038][ T5241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.138759][ T3319] audit: backlog limit exceeded [ 99.144291][ T3321] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.191488][ T5239] vlan0: entered promiscuous mode [ 99.193779][ T5243] loop0: detected capacity change from 0 to 8192 [ 99.218495][ T5239] bond1: entered promiscuous mode [ 99.223724][ T5239] vlan0: entered allmulticast mode [ 99.228989][ T5239] bond1: entered allmulticast mode [ 99.235277][ T5243] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.741378][ T5254] loop0: detected capacity change from 0 to 8192 [ 100.048038][ T5254] loop0: p3 p4 < > [ 100.052066][ T5254] loop0: p3 start 9895680 is beyond EOD, truncated [ 100.471549][ T5266] futex_wake_op: syz.2.513 tries to shift op by -65; fix this program [ 100.490396][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 100.580183][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 100.652195][ T5272] loop2: detected capacity change from 0 to 2048 [ 100.756749][ T3307] loop2: p1 p3 [ 100.768631][ T3307] loop2: p3 start 8388352 is beyond EOD, truncated [ 100.776409][ T5272] loop2: p1 p3 [ 100.785322][ T5272] loop2: p3 start 8388352 is beyond EOD, truncated [ 100.973599][ T5277] loop2: detected capacity change from 0 to 1024 [ 101.023105][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.066864][ T5277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.187325][ T5277] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.250421][ T5287] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 101.279985][ T5277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.517: bg 0: block 112: padding at end of block bitmap is not set [ 101.336605][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.395813][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.435350][ T5286] loop4: detected capacity change from 0 to 512 [ 101.535207][ T5286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.661816][ T5286] EXT4-fs (loop4): 1 truncate cleaned up [ 101.711615][ T5286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.831422][ T5306] FAULT_INJECTION: forcing a failure. [ 101.831422][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.887140][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: syz.3.526 Not tainted syzkaller #0 PREEMPT(full) [ 101.887168][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.887182][ T5306] Call Trace: [ 101.887190][ T5306] [ 101.887198][ T5306] __dump_stack+0x1d/0x30 [ 101.887287][ T5306] dump_stack_lvl+0x95/0xd0 [ 101.887312][ T5306] dump_stack+0x15/0x1b [ 101.887338][ T5306] should_fail_ex+0x263/0x280 [ 101.887365][ T5306] should_fail+0xb/0x20 [ 101.887388][ T5306] should_fail_usercopy+0x1a/0x20 [ 101.887458][ T5306] _copy_from_user+0x1c/0xb0 [ 101.887483][ T5306] copy_from_sockptr_offset+0x66/0xa0 [ 101.887547][ T5306] do_arpt_set_ctl+0x637/0xad0 [ 101.887678][ T5306] ? _raw_spin_unlock_bh+0x18/0x20 [ 101.887702][ T5306] ? tcp_release_cb+0xf1/0x370 [ 101.887725][ T5306] ? _raw_spin_unlock_bh+0x18/0x20 [ 101.887752][ T5306] nf_setsockopt+0x199/0x1b0 [ 101.887809][ T5306] ip_setsockopt+0x102/0x110 [ 101.887835][ T5306] tcp_setsockopt+0x98/0xb0 [ 101.887859][ T5306] sock_common_setsockopt+0x69/0x80 [ 101.887879][ T5306] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.887902][ T5306] __sys_setsockopt+0x184/0x200 [ 101.888008][ T5306] __x64_sys_setsockopt+0x64/0x80 [ 101.888034][ T5306] x64_sys_call+0x2327/0x3020 [ 101.888091][ T5306] do_syscall_64+0x12c/0x370 [ 101.888140][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.888166][ T5306] RIP: 0033:0x7fe7eb3fc799 [ 101.888184][ T5306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.888215][ T5306] RSP: 002b:00007fe7e9e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.888236][ T5306] RAX: ffffffffffffffda RBX: 00007fe7eb675fa0 RCX: 00007fe7eb3fc799 [ 101.888292][ T5306] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 101.888306][ T5306] RBP: 00007fe7e9e57090 R08: 0000000000000440 R09: 0000000000000000 [ 101.888318][ T5306] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 101.888328][ T5306] R13: 00007fe7eb676038 R14: 00007fe7eb675fa0 R15: 00007ffd36fb5378 [ 101.888345][ T5306] [ 102.140792][ T5296] loop2: detected capacity change from 0 to 8192 [ 102.557707][ T5321] loop0: detected capacity change from 0 to 1024 [ 102.600705][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.602903][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.657382][ T5321] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.689749][ T5321] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.532: bg 0: block 112: padding at end of block bitmap is not set [ 102.937086][ T5316] syz.3.531 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.010698][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.218520][ T5334] loop4: detected capacity change from 0 to 1024 [ 103.544749][ T5349] loop0: detected capacity change from 0 to 1024 [ 103.635224][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.666020][ T5349] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.712730][ T5358] lo speed is unknown, defaulting to 1000 [ 103.719857][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 103.809834][ T5349] EXT4-fs (loop0): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 103.877344][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.043743][ T28] kauditd_printk_skb: 5742 callbacks suppressed [ 104.043758][ T28] audit: type=1400 audit(1772561883.013:7562): avc: denied { map } for pid=5369 comm="syz.0.547" path="/proc/329/net/vlan/vlan0" dev="proc" ino=4026533312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.084378][ T28] audit: type=1400 audit(1772561883.043:7563): avc: denied { execute } for pid=5369 comm="syz.0.547" path="/proc/329/net/vlan/vlan0" dev="proc" ino=4026533312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.109416][ T28] audit: type=1400 audit(1772561883.043:7564): avc: denied { open } for pid=5360 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.140516][ T28] audit: type=1400 audit(1772561883.053:7565): avc: denied { perfmon } for pid=5360 comm="syz.1.545" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.164651][ T28] audit: type=1400 audit(1772561883.053:7566): avc: denied { kernel } for pid=5360 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.227023][ T28] audit: type=1400 audit(1772561883.053:7567): avc: denied { prog_load } for pid=5360 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.303619][ T28] audit: type=1400 audit(1772561883.053:7568): avc: denied { bpf } for pid=5360 comm="syz.1.545" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.352893][ T5361] syz.1.545 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 104.407553][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT(full) [ 104.407575][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.407621][ T5361] Call Trace: [ 104.407626][ T5361] [ 104.407632][ T5361] __dump_stack+0x1d/0x30 [ 104.407729][ T5361] dump_stack_lvl+0x95/0xd0 [ 104.407766][ T5361] dump_stack+0x15/0x1b [ 104.407784][ T5361] dump_header+0x80/0x240 [ 104.407803][ T5361] oom_kill_process+0x295/0x350 [ 104.407822][ T5361] out_of_memory+0x97d/0xb80 [ 104.407888][ T5361] try_charge_memcg+0x62e/0xa10 [ 104.407927][ T5361] obj_cgroup_charge_pages+0x23/0xc0 [ 104.407996][ T5361] __memcg_kmem_charge_page+0x9e/0x170 [ 104.408023][ T5361] __alloc_frozen_pages_noprof+0x18a/0x360 [ 104.408058][ T5361] alloc_pages_mpol+0xb3/0x260 [ 104.408130][ T5361] alloc_pages_noprof+0x8f/0x130 [ 104.408162][ T5361] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 104.408218][ T5361] __kvmalloc_node_noprof+0x3d4/0x650 [ 104.408292][ T5361] ? ip_set_alloc+0x24/0x30 [ 104.408312][ T5361] ? ip_set_alloc+0x24/0x30 [ 104.408332][ T5361] ? __kmalloc_cache_noprof+0x18a/0x410 [ 104.408358][ T5361] ip_set_alloc+0x24/0x30 [ 104.408461][ T5361] hash_netiface_create+0x282/0x740 [ 104.408482][ T5361] ? __pfx_hash_netiface_create+0x10/0x10 [ 104.408506][ T5361] ip_set_create+0x3cf/0x970 [ 104.408561][ T5361] ? __nla_parse+0x40/0x60 [ 104.408667][ T5361] nfnetlink_rcv_msg+0x509/0x5d0 [ 104.408719][ T5361] netlink_rcv_skb+0x123/0x220 [ 104.408800][ T5361] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 104.408836][ T5361] nfnetlink_rcv+0x167/0x1720 [ 104.408863][ T5361] ? probe_sched_wakeup+0x84/0xa0 [ 104.408954][ T5361] ? preempt_schedule_common+0x11/0x30 [ 104.408976][ T5361] ? preempt_schedule_thunk+0x16/0x30 [ 104.409064][ T5361] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 104.409089][ T5361] ? audit_log_end+0x23d/0x250 [ 104.409194][ T5361] ? kmem_cache_free+0xc8/0x380 [ 104.409235][ T5361] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 104.409260][ T5361] ? audit_log_end+0x23d/0x250 [ 104.409277][ T5361] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 104.409365][ T5361] ? common_lsm_audit+0x1c9/0x230 [ 104.409393][ T5361] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 104.409477][ T5361] ? _raw_spin_lock_bh+0x56/0xb0 [ 104.409513][ T5361] ? _raw_spin_unlock_bh+0x18/0x20 [ 104.409535][ T5361] ? selinux_nlmsg_lookup+0x99/0x890 [ 104.409564][ T5361] ? __rcu_read_unlock+0x33/0x70 [ 104.409640][ T5361] ? __netlink_lookup+0x276/0x2b0 [ 104.409670][ T5361] netlink_unicast+0x5c0/0x690 [ 104.409698][ T5361] netlink_sendmsg+0x5c8/0x6f0 [ 104.409807][ T5361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.409834][ T5361] ____sys_sendmsg+0x5af/0x600 [ 104.409905][ T5361] ___sys_sendmsg+0x195/0x1e0 [ 104.409940][ T5361] __x64_sys_sendmsg+0xd4/0x160 [ 104.410057][ T5361] x64_sys_call+0x194c/0x3020 [ 104.410081][ T5361] do_syscall_64+0x12c/0x370 [ 104.410099][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.410200][ T5361] RIP: 0033:0x7f6a021ec799 [ 104.410216][ T5361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.410237][ T5361] RSP: 002b:00007f6a00c3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.410258][ T5361] RAX: ffffffffffffffda RBX: 00007f6a02465fa0 RCX: 00007f6a021ec799 [ 104.410281][ T5361] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 104.410292][ T5361] RBP: 00007f6a02282bd9 R08: 0000000000000000 R09: 0000000000000000 [ 104.410303][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.410313][ T5361] R13: 00007f6a02466038 R14: 00007f6a02465fa0 R15: 00007ffd07532798 [ 104.410345][ T5361] [ 104.420089][ T28] audit: type=1400 audit(1772561883.053:7569): avc: denied { perfmon } for pid=5360 comm="syz.1.545" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.450677][ T5361] memory: usage 250248kB, limit 307200kB, failcnt 2630 [ 104.492310][ T28] audit: type=1400 audit(1772561883.053:7570): avc: denied { prog_load } for pid=5360 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.581648][ T5361] memory+swap: usage 210356kB, limit 9007199254740988kB, failcnt 0 [ 104.860946][ T28] audit: type=1400 audit(1772561883.053:7571): avc: denied { prog_run } for pid=5360 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.880394][ T5361] kmem: usage 168480kB, limit 9007199254740988kB, failcnt 0 [ 104.907968][ T5361] Memory cgroup stats for /syz1: [ 104.908144][ T5361] cache 1048576 [ 104.916813][ T5361] rss 114688 [ 104.920058][ T5361] shmem 0 [ 104.923003][ T5361] mapped_file 94208 [ 104.945902][ T5361] dirty 32768 [ 104.997145][ T5361] writeback 0 [ 105.000602][ T5361] workingset_refault_anon 277 [ 105.005362][ T5361] workingset_refault_file 1336 [ 105.026039][ T5361] swap 90112 [ 105.048572][ T5361] swapcached 3186688 [ 105.052490][ T5361] pgpgin 83806 [ 105.055875][ T5361] pgpgout 83521 [ 105.097081][ T5361] pgfault 58414 [ 105.101175][ T5361] pgmajfault 127 [ 105.104797][ T5361] inactive_anon 24576 [ 105.108822][ T5361] active_anon 94208 [ 105.122223][ T5361] inactive_file 0 [ 105.132346][ T5361] active_file 1024000 [ 105.137367][ T5361] unevictable 0 [ 105.140894][ T5361] hierarchical_memory_limit 314572800 [ 105.146284][ T5361] hierarchical_memsw_limit 9223372036854771712 [ 105.164798][ T5397] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 105.225752][ T5361] total_cache 1048576 [ 105.226628][ T5398] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 105.229781][ T5361] total_rss 114688 [ 105.229790][ T5361] total_shmem 0 [ 105.244609][ T5361] total_mapped_file 94208 [ 105.249429][ T5361] total_dirty 32768 [ 105.259051][ T5361] total_writeback 0 [ 105.262887][ T5361] total_workingset_refault_anon 277 [ 105.268125][ T5361] total_workingset_refault_file 1336 [ 105.273441][ T5361] total_swap 90112 [ 105.278781][ T5361] total_swapcached 3186688 [ 105.283317][ T5361] total_pgpgin 83806 [ 105.287357][ T5361] total_pgpgout 83521 [ 105.291457][ T5361] total_pgfault 58414 [ 105.295606][ T5361] total_pgmajfault 127 [ 105.396605][ T5404] loop0: detected capacity change from 0 to 8192 [ 105.405620][ T5361] total_inactive_anon 24576 [ 105.410364][ T5361] total_active_anon 94208 [ 105.414915][ T5361] total_inactive_file 0 [ 105.419241][ T5361] total_active_file 1024000 [ 105.423969][ T5361] total_unevictable 0 [ 105.429490][ T5404] loop0: p3 p4 < > [ 105.433573][ T5404] loop0: p3 start 9895680 is beyond EOD, truncated [ 105.473222][ T5361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.545,pid=5360,uid=0 [ 105.516927][ T3000] loop0: p3 p4 < > [ 105.531752][ T3000] loop0: p3 start 9895680 is beyond EOD, truncated [ 105.550682][ T5361] Memory cgroup out of memory: Killed process 5361 (syz.1.545) total-vm:94160kB, anon-rss:1336kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 105.866490][ T5409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 105.904100][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.097620][ T5421] loop3: detected capacity change from 0 to 8192 [ 106.262653][ T5421] loop3: p3 p4 < > [ 106.266635][ T5421] loop3: p3 start 9895680 is beyond EOD, truncated [ 106.404753][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 106.418687][ T3000] loop3: p3 p4 < > [ 106.422599][ T3000] loop3: p3 start 9895680 is beyond EOD, truncated [ 106.539633][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 106.757663][ T5428] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 106.814662][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 106.869016][ T5441] netlink: 232 bytes leftover after parsing attributes in process `syz.1.566'. [ 106.893213][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 106.963852][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 107.018130][ T5447] lo speed is unknown, defaulting to 1000 [ 107.034665][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 107.151581][ T5448] loop3: detected capacity change from 0 to 8192 [ 107.559746][ T5456] loop0: detected capacity change from 0 to 512 [ 107.632010][ T5456] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.802996][ T5461] loop4: detected capacity change from 0 to 8192 [ 107.838374][ T5461] loop4: p3 p4 < > [ 107.842308][ T5461] loop4: p3 start 9895680 is beyond EOD, truncated [ 107.926279][ T5456] EXT4-fs (loop0): 1 truncate cleaned up [ 107.946781][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.955358][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 107.962925][ T4071] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.094401][ T5456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.311768][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.373200][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.492653][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.508741][ T5470] loop2: detected capacity change from 0 to 4096 [ 108.516360][ T5470] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.597214][ T5470] EXT4-fs: test_dummy_encryption option not supported [ 108.637248][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.047345][ T28] kauditd_printk_skb: 528 callbacks suppressed [ 109.047363][ T28] audit: type=1400 audit(1772561888.023:8100): avc: denied { ioctl } for pid=5483 comm="syz.2.583" path="socket:[10994]" dev="sockfs" ino=10994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.083489][ T5490] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 109.098491][ T28] audit: type=1400 audit(1772561888.023:8101): avc: denied { write } for pid=5483 comm="syz.2.583" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.186707][ T28] audit: type=1400 audit(1772561888.043:8102): avc: denied { create } for pid=5485 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.216848][ T28] audit: type=1400 audit(1772561888.053:8103): avc: denied { bind } for pid=5483 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.243438][ T28] audit: type=1400 audit(1772561888.053:8104): avc: denied { setopt } for pid=5483 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.317744][ T28] audit: type=1400 audit(1772561888.063:8105): avc: denied { map_create } for pid=5489 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.381577][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.394471][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.396709][ T28] audit: type=1400 audit(1772561888.063:8106): avc: denied { bpf } for pid=5489 comm="syz.1.585" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.423622][ T5500] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 109.507810][ T5500] netlink: 'syz.1.586': attribute type 39 has an invalid length. [ 109.561238][ T5506] lo speed is unknown, defaulting to 1000 [ 109.690794][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 109.894425][ T5518] loop4: detected capacity change from 0 to 8192 [ 109.974727][ T3307] loop4: p3 p4 < > [ 110.014299][ T3307] loop4: p3 start 9895680 is beyond EOD, truncated [ 110.166230][ T5518] loop4: p3 p4 < > [ 110.170174][ T5518] loop4: p3 start 9895680 is beyond EOD, truncated [ 110.428178][ T5537] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 111.180063][ T5529] bond2: (slave geneve2): making interface the new active one [ 111.305823][ T5529] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 111.390318][ T5554] loop4: detected capacity change from 0 to 512 [ 111.412540][ T55] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 111.472251][ T5554] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.481723][ T55] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 111.520899][ T5554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 111.538271][ T5541] lo speed is unknown, defaulting to 1000 [ 111.575041][ T5554] System zones: 1-12 [ 111.590677][ T55] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 111.608260][ T5554] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.676609][ T5554] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.601: iget: bad i_size value: 12154761577498 [ 111.689241][ T55] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 111.768400][ T5554] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 111.768640][ T5554] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.601: couldn't read orphan inode 13 (err -117) [ 111.778006][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 111.778023][ C0] EXT4-fs (loop4): initial error at time 1772561890: ext4_orphan_get:1391: inode 13 [ 111.778045][ C0] EXT4-fs (loop4): last error at time 1772561890: ext4_orphan_get:1391: inode 13 [ 112.014953][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 112.120255][ T5554] loop4: lost filesystem error report for type 5 error -117 [ 112.122353][ T5554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.358231][ T5554] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 3: comm syz.4.601: lblock 0 mapped to illegal pblock 3 (length 1) [ 112.382752][ T5554] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.601: error -117 reading directory block [ 112.408034][ T5580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.609'. [ 112.418484][ T5575] lo speed is unknown, defaulting to 1000 [ 112.436506][ T5579] futex_wake_op: syz.1.611 tries to shift op by -65; fix this program [ 112.468269][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.826377][ T5593] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 112.983464][ T5600] loop3: detected capacity change from 0 to 8192 [ 113.662643][ T5609] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 113.797941][ T5612] netlink: 124 bytes leftover after parsing attributes in process `syz.4.618'. [ 113.817004][ T5612] loop4: detected capacity change from 0 to 256 [ 113.861690][ T5612] FAT-fs (loop4): Directory bread(block 64) failed [ 113.868317][ T5612] FAT-fs (loop4): Directory bread(block 65) failed [ 113.874935][ T5612] FAT-fs (loop4): Directory bread(block 66) failed [ 113.881593][ T5612] FAT-fs (loop4): Directory bread(block 67) failed [ 113.888196][ T5612] FAT-fs (loop4): Directory bread(block 68) failed [ 113.894736][ T5612] FAT-fs (loop4): Directory bread(block 69) failed [ 113.901360][ T5612] FAT-fs (loop4): Directory bread(block 70) failed [ 113.907968][ T5612] FAT-fs (loop4): Directory bread(block 71) failed [ 113.914544][ T5612] FAT-fs (loop4): Directory bread(block 72) failed [ 113.921160][ T5612] FAT-fs (loop4): Directory bread(block 73) failed [ 114.071603][ T28] kauditd_printk_skb: 548 callbacks suppressed [ 114.071624][ T28] audit: type=1400 audit(1772561893.044:8616): avc: denied { accept } for pid=5606 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.498498][ T28] audit: type=1400 audit(1772561893.044:8617): avc: denied { create } for pid=5606 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.622905][ T5621] loop3: detected capacity change from 0 to 512 [ 114.639620][ T5625] futex_wake_op: syz.1.623 tries to shift op by -65; fix this program [ 114.681751][ T28] audit: type=1400 audit(1772561893.044:8618): avc: denied { read } for pid=5606 comm="syz.4.618" path="socket:[12134]" dev="sockfs" ino=12134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.720547][ T5621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.804533][ T5621] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 114.869645][ T28] audit: type=1400 audit(1772561893.104:8619): avc: denied { create } for pid=5606 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.960671][ T5636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.969589][ T5635] lo speed is unknown, defaulting to 1000 [ 115.004903][ T28] audit: type=1400 audit(1772561893.104:8620): avc: denied { write } for pid=5606 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.039413][ T5638] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.050288][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.066822][ T5636] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 115.106138][ T5637] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 115.169565][ T5637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 115.380702][ T5643] loop3: detected capacity change from 0 to 512 [ 115.415909][ T5643] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.445269][ T5643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.626: bg 0: block 104: invalid block bitmap [ 115.462298][ T5643] loop3: lost filesystem error report for type 5 error -117 [ 115.466351][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 115.480134][ C1] EXT4-fs (loop3): initial error at time 1772561894: ext4_validate_block_bitmap:432 [ 115.489552][ C1] EXT4-fs (loop3): last error at time 1772561894: ext4_validate_block_bitmap:432 [ 115.498914][ T5645] loop4: detected capacity change from 0 to 1024 [ 115.508908][ T5643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 115.521004][ T5643] loop3: lost filesystem error report for type 5 error -117 [ 115.521291][ T5643] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.626: invalid indirect mapped block 1 (level 1) [ 115.567819][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.599073][ T5643] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.599503][ T5645] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.626443][ T5643] EXT4-fs (loop3): 1 truncate cleaned up [ 115.658599][ T5645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.628: bg 0: block 112: padding at end of block bitmap is not set [ 115.683068][ T5643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.897819][ T5658] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 115.964278][ T5658] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 115.975332][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 115.986024][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 116.023525][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.034619][ T5660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.225982][ T5658] syz_tun: entered promiscuous mode [ 116.246497][ T5658] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.271401][ T5658] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 116.449082][ T5669] loop2: detected capacity change from 0 to 8192 [ 116.767596][ T5429] loop2: p3 p4 < > [ 116.780878][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 116.781076][ T5429] loop2: p3 start 9895680 is beyond EOD, [ 116.800089][ T5674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 116.805218][ T5429] truncated [ 116.859244][ T5669] loop2: p3 p4 < > [ 116.863214][ T5669] loop2: p3 start 9895680 is beyond EOD, truncated [ 116.999909][ T5678] futex_wake_op: syz.0.635 tries to shift op by -65; fix this program [ 117.043785][ T5680] 9p: Bad value for 'wfdno' [ 117.241136][ T5688] lo speed is unknown, defaulting to 1000 [ 117.264409][ T5687] loop2: detected capacity change from 0 to 512 [ 117.299707][ T5691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.638'. [ 117.504398][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 117.566689][ T5698] loop2: detected capacity change from 0 to 1024 [ 117.620944][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.656135][ T5698] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.704232][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 117.719293][ T5703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 117.981091][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.999605][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.182206][ T5708] loop3: detected capacity change from 0 to 1024 [ 118.229750][ T5708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 118.241859][ T5713] futex_wake_op: syz.1.647 tries to shift op by -65; fix this program [ 118.277926][ T5708] System zones: 0-1, 3-36 [ 118.316200][ T5708] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.645: bad orphan inode 134217728 [ 118.350069][ T5723] SELinux: policydb version 0 does not match my version range 15-35 [ 118.357125][ T5706] loop4: detected capacity change from 0 to 1024 [ 118.358447][ T5723] SELinux: failed to load policy [ 118.390035][ T5708] loop3: lost filesystem error report for type 5 error -117 [ 118.396182][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 118.409938][ C0] EXT4-fs (loop3): initial error at time 1772561897: ext4_orphan_get:1417 [ 118.418479][ C0] EXT4-fs (loop3): last error at time 1772561897: ext4_orphan_get:1417 [ 118.437982][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.459462][ T5724] lo speed is unknown, defaulting to 1000 [ 118.621632][ T5734] FAULT_INJECTION: forcing a failure. [ 118.621632][ T5734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.656344][ T5706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 118.666629][ T5706] System zones: 0-1, 3-36 [ 118.676168][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT(full) [ 118.676196][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.676244][ T5734] Call Trace: [ 118.676250][ T5734] [ 118.676257][ T5734] __dump_stack+0x1d/0x30 [ 118.676313][ T5734] dump_stack_lvl+0x95/0xd0 [ 118.676337][ T5734] dump_stack+0x15/0x1b [ 118.676377][ T5734] should_fail_ex+0x263/0x280 [ 118.676402][ T5734] should_fail+0xb/0x20 [ 118.676502][ T5734] should_fail_usercopy+0x1a/0x20 [ 118.676527][ T5734] _copy_from_user+0x1c/0xb0 [ 118.676577][ T5734] snd_seq_write+0x1d5/0x560 [ 118.676614][ T5734] ? __pfx_snd_seq_write+0x10/0x10 [ 118.676673][ T5734] vfs_write+0x269/0x9f0 [ 118.676784][ T5734] ? __rcu_read_unlock+0x4e/0x70 [ 118.676844][ T5734] ? __fget_files+0x184/0x1c0 [ 118.676871][ T5734] ksys_write+0xdc/0x1a0 [ 118.676932][ T5734] __x64_sys_write+0x40/0x50 [ 118.676949][ T5734] x64_sys_call+0x27e1/0x3020 [ 118.676975][ T5734] do_syscall_64+0x12c/0x370 [ 118.676996][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.677036][ T5734] RIP: 0033:0x7f003ce8c799 [ 118.677052][ T5734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.677096][ T5734] RSP: 002b:00007f003b8df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.677116][ T5734] RAX: ffffffffffffffda RBX: 00007f003d105fa0 RCX: 00007f003ce8c799 [ 118.677136][ T5734] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 118.677149][ T5734] RBP: 00007f003b8df090 R08: 0000000000000000 R09: 0000000000000000 [ 118.677177][ T5734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.677189][ T5734] R13: 00007f003d106038 R14: 00007f003d105fa0 R15: 00007ffebf958ae8 [ 118.677209][ T5734] [ 118.946406][ T5706] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.644: bad orphan inode 134217728 [ 119.078949][ T5706] loop4: lost filesystem error report for type 5 error -117 [ 119.088993][ T5726] lo speed is unknown, defaulting to 1000 [ 119.119089][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.147663][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 119.184216][ T28] kauditd_printk_skb: 457 callbacks suppressed [ 119.184232][ T28] audit: type=1400 audit(1772561898.154:9066): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.244397][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 119.290998][ T28] audit: type=1400 audit(1772561898.214:9067): avc: denied { mount } for pid=5705 comm="syz.4.644" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.447454][ T28] audit: type=1400 audit(1772561898.234:9068): avc: denied { read write } for pid=5705 comm="syz.4.644" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.581402][ T28] audit: type=1400 audit(1772561898.234:9069): avc: denied { open } for pid=5705 comm="syz.4.644" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.607595][ T5750] loop2: detected capacity change from 0 to 1024 [ 119.668412][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.693476][ T28] audit: type=1400 audit(1772561898.264:9070): avc: denied { create } for pid=5741 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.714574][ T5750] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.764185][ T28] audit: type=1400 audit(1772561898.294:9071): avc: denied { create } for pid=5741 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.817634][ T28] audit: type=1400 audit(1772561898.294:9072): avc: denied { create } for pid=5741 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.845419][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.865698][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.941777][ T28] audit: type=1400 audit(1772561898.294:9073): avc: denied { create } for pid=5741 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.033151][ T28] audit: type=1400 audit(1772561898.294:9074): avc: denied { write } for pid=5741 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.098636][ T28] audit: type=1400 audit(1772561898.294:9075): avc: denied { add_name } for pid=5705 comm="syz.4.644" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.955954][ T5771] futex_wake_op: syz.0.660 tries to shift op by -65; fix this program [ 121.198614][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.385283][ T5779] loop2: detected capacity change from 0 to 512 [ 121.468422][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.515792][ T5779] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.650788][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz.2.664: Directory hole found for htree leaf block 0 [ 121.695064][ T5779] EXT4-fs (loop2): Remounting filesystem read-only [ 121.859222][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.909061][ T3514] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 121.999639][ T5804] netlink: 'syz.4.670': attribute type 27 has an invalid length. [ 122.173996][ T5809] loop2: detected capacity change from 0 to 1024 [ 122.606291][ T5820] futex_wake_op: syz.0.676 tries to shift op by -65; fix this program [ 123.007749][ T5830] loop4: detected capacity change from 0 to 1024 [ 123.071015][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.114244][ T5830] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.335928][ T5718] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 123.617568][ T5851] loop0: detected capacity change from 0 to 8192 [ 123.898061][ T5429] loop0: p3 p4 < > [ 123.906523][ T5429] loop0: p3 start 9895680 is beyond EOD, [ 123.906895][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.923350][ T5429] truncated [ 123.937876][ T5851] loop0: p3 p4 < > [ 123.941738][ T5851] loop0: p3 start 9895680 is beyond EOD, truncated [ 124.192202][ T28] kauditd_printk_skb: 541 callbacks suppressed [ 124.192218][ T28] audit: type=1400 audit(1772561903.164:9615): avc: denied { read } for pid=5857 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.228735][ T5850] loop2: detected capacity change from 0 to 512 [ 124.235588][ T5862] futex_wake_op: syz.3.687 tries to shift op by -65; fix this program [ 124.268763][ T28] audit: type=1400 audit(1772561903.204:9616): avc: denied { create } for pid=5857 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.352113][ T28] audit: type=1400 audit(1772561903.204:9617): avc: denied { name_bind } for pid=5857 comm="syz.4.686" src=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 124.409446][ T5850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.448501][ T28] audit: type=1400 audit(1772561903.204:9618): avc: denied { node_bind } for pid=5857 comm="syz.4.686" saddr=9c00:0:300:: src=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 124.482174][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 124.511861][ T5850] EXT4-fs (loop2): 1 truncate cleaned up [ 124.528141][ T28] audit: type=1400 audit(1772561903.284:9619): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.554803][ T5850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.575959][ T28] audit: type=1400 audit(1772561903.284:9620): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.600175][ T28] audit: type=1400 audit(1772561903.284:9621): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.675840][ T28] audit: type=1400 audit(1772561903.284:9622): avc: denied { mounton } for pid=5849 comm="syz.2.684" path="/146/file1" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.733699][ T5878] loop0: detected capacity change from 0 to 512 [ 124.744108][ T28] audit: type=1400 audit(1772561903.364:9623): avc: denied { name_bind } for pid=5864 comm="syz.3.688" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 124.767132][ T5878] EXT4-fs: Ignoring removed nobh option [ 124.840534][ T28] audit: type=1400 audit(1772561903.364:9624): avc: denied { node_bind } for pid=5864 comm="syz.3.688" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 124.874315][ T5878] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 3: comm syz.0.692: lblock 0 mapped to illegal pblock 3 (length 1) [ 124.949219][ T5878] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 124.949393][ T5878] EXT4-fs (loop0): Remounting filesystem read-only [ 124.958552][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 124.958568][ C0] EXT4-fs (loop0): initial error at time 1772561903: ext4_map_blocks:776: inode 2: block 3 [ 124.958593][ C0] EXT4-fs (loop0): last error at time 1772561903: ext4_map_blocks:776: inode 2: block 3 [ 125.069859][ T5878] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.692: error -117 reading directory block [ 125.090907][ T5878] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 125.149732][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.188835][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.271886][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.514045][ T5900] futex_wake_op: syz.0.699 tries to shift op by -65; fix this program [ 125.710327][ T5907] lo speed is unknown, defaulting to 1000 [ 125.787591][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'. [ 125.850540][ T5911] loop0: detected capacity change from 0 to 8192 [ 126.396389][ T5892] loop2: detected capacity change from 0 to 1024 [ 126.459853][ T5892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 126.470452][ T5892] System zones: 0-1, 3-36 [ 126.479079][ T5892] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.695: bad orphan inode 134217728 [ 126.490151][ T5892] loop2: lost filesystem error report for type 5 error -117 [ 126.497098][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.760250][ T5933] syzkaller0: entered promiscuous mode [ 126.775747][ T5933] syzkaller0: entered allmulticast mode [ 126.822079][ T5933] syzkaller0: mtu greater than device maximum [ 127.036784][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.056953][ T5938] loop3: detected capacity change from 0 to 8192 [ 127.076746][ T5938] msdos: Unknown parameter '@' [ 127.124385][ T5945] loop2: detected capacity change from 0 to 512 [ 127.138995][ T5945] ext4: Unknown parameter 'dont_appraise' [ 127.169626][ T5944] futex_wake_op: syz.0.712 tries to shift op by -65; fix this program [ 128.052973][ T5953] loop2: detected capacity change from 0 to 8192 [ 128.140939][ T5954] loop4: detected capacity change from 0 to 8192 [ 128.386121][ T5954] loop4: p3 p4 < > [ 128.390018][ T5954] loop4: p3 start 9895680 is beyond EOD, truncated [ 128.446721][ T3306] loop2: p3 p4 < > [ 128.452611][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 128.453116][ T5958] lo speed is unknown, defaulting to 1000 [ 128.467433][ T3306] loop2: p3 start 9895680 is beyond EOD, truncated [ 128.508663][ T5953] loop2: p3 p4 < > [ 128.512647][ T5953] loop2: p3 start 9895680 is beyond EOD, truncated [ 128.823552][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 128.843736][ T5972] syzkaller0: entered promiscuous mode [ 128.851452][ T5972] syzkaller0: entered allmulticast mode [ 129.002437][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 129.145219][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 129.203180][ T28] kauditd_printk_skb: 535 callbacks suppressed [ 129.203194][ T28] audit: type=1400 audit(1772561908.175:10160): avc: denied { open } for pid=5981 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 129.239030][ T28] audit: type=1400 audit(1772561908.215:10161): avc: denied { perfmon } for pid=5981 comm="syz.4.724" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.295600][ T28] audit: type=1400 audit(1772561908.215:10162): avc: denied { kernel } for pid=5981 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 129.316491][ T28] audit: type=1400 audit(1772561908.215:10163): avc: denied { perfmon } for pid=5981 comm="syz.4.724" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.338032][ T28] audit: type=1400 audit(1772561908.225:10164): avc: denied { write } for pid=5981 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 129.379823][ T5987] futex_wake_op: syz.0.725 tries to shift op by -65; fix this program [ 129.395995][ T5985] loop4: detected capacity change from 0 to 512 [ 129.403771][ T5985] msdos: Unknown parameter 'smackfsroot' [ 129.422716][ T28] audit: type=1400 audit(1772561908.245:10165): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.501804][ T28] audit: type=1400 audit(1772561908.245:10166): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.553068][ T28] audit: type=1400 audit(1772561908.245:10167): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.579492][ T28] audit: type=1400 audit(1772561908.245:10168): avc: denied { create } for pid=5981 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.649596][ T28] audit: type=1400 audit(1772561908.255:10169): avc: denied { bind } for pid=5981 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.655941][ T5978] loop3: detected capacity change from 0 to 1024 [ 129.918655][ T5991] lo speed is unknown, defaulting to 1000 [ 129.941961][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 129.963811][ T5978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.978986][ T5978] System zones: 0-1 [ 130.132263][ T6007] loop2: detected capacity change from 0 to 8192 [ 130.166030][ T5978] , 3-36 [ 130.177700][ T5978] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.722: bad orphan inode 134217728 [ 130.188994][ T5978] loop3: lost filesystem error report for type 5 error -117 [ 130.196757][ T5978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.083128][ T6002] lo speed is unknown, defaulting to 1000 [ 131.188902][ T5429] loop2: p3 p4 < > [ 131.192827][ T5429] loop2: p3 start 9895680 is beyond EOD, truncated [ 131.231454][ T6007] loop2: p3 p4 < > [ 131.235336][ T6007] loop2: p3 start 9895680 is beyond EOD, truncated [ 131.333981][ T6004] lo speed is unknown, defaulting to 1000 [ 131.357704][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.766998][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 131.934951][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 132.174426][ T6033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 132.181083][ T6033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.215444][ T6033] vhci_hcd vhci_hcd.0: Device attached [ 132.248346][ T6033] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(19) [ 132.254979][ T6033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.281839][ T6033] vhci_hcd vhci_hcd.0: Device attached [ 132.302783][ T6035] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(22) [ 132.309390][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.346115][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 132.392300][ T6033] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 132.398921][ T6033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.419526][ T6033] vhci_hcd vhci_hcd.0: Device attached [ 132.465488][ T23] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 132.474661][ T6033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.500194][ T6033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.509476][ T6035] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(26) [ 132.516130][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.544758][ T6065] futex_wake_op: syz.2.742 tries to shift op by -65; fix this program [ 132.557659][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 132.559769][ T6033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.593476][ T6052] vhci_hcd: connection closed [ 132.593593][ T6048] vhci_hcd: connection closed [ 132.597649][ T71] vhci_hcd vhci_hcd.0: stop threads [ 132.599565][ T6060] vhci_hcd: connection closed [ 132.609736][ T71] vhci_hcd vhci_hcd.0: release socket [ 132.615702][ T6039] vhci_hcd: connection reset by peer [ 132.628764][ T6043] vhci_hcd: connection closed [ 132.632354][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 132.655705][ T71] vhci_hcd vhci_hcd.0: stop threads [ 132.664457][ T71] vhci_hcd vhci_hcd.0: release socket [ 132.675544][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 132.689045][ T71] vhci_hcd vhci_hcd.0: stop threads [ 132.697517][ T71] vhci_hcd vhci_hcd.0: release socket [ 132.702987][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 132.709678][ T71] vhci_hcd vhci_hcd.0: stop threads [ 132.714933][ T71] vhci_hcd vhci_hcd.0: release socket [ 132.721395][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 132.727491][ T71] vhci_hcd vhci_hcd.0: stop threads [ 132.732818][ T71] vhci_hcd vhci_hcd.0: release socket [ 132.739413][ T71] vhci_hcd vhci_hcd.0: disconnect device [ 132.836464][ T6072] loop2: detected capacity change from 0 to 512 [ 132.860970][ T6072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.888124][ T6072] EXT4-fs (loop2): 1 truncate cleaned up [ 132.902629][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.042455][ T6078] lo speed is unknown, defaulting to 1000 [ 133.085335][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.745'. [ 133.433141][ T6086] FAULT_INJECTION: forcing a failure. [ 133.433141][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.446743][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(full) [ 133.446798][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.446823][ T6086] Call Trace: [ 133.446828][ T6086] [ 133.446834][ T6086] __dump_stack+0x1d/0x30 [ 133.446857][ T6086] dump_stack_lvl+0x95/0xd0 [ 133.446915][ T6086] dump_stack+0x15/0x1b [ 133.446940][ T6086] should_fail_ex+0x263/0x280 [ 133.446962][ T6086] should_fail+0xb/0x20 [ 133.446978][ T6086] should_fail_usercopy+0x1a/0x20 [ 133.446999][ T6086] _copy_to_user+0x20/0xa0 [ 133.447026][ T6086] simple_read_from_buffer+0xb5/0x130 [ 133.447162][ T6086] proc_fail_nth_read+0x10e/0x150 [ 133.447188][ T6086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.447217][ T6086] vfs_read+0x1ab/0x7f0 [ 133.447251][ T6086] ? __rcu_read_unlock+0x4e/0x70 [ 133.447321][ T6086] ? __fget_files+0x184/0x1c0 [ 133.447347][ T6086] ? mutex_lock+0x57/0x90 [ 133.447421][ T6086] ksys_read+0xdc/0x1a0 [ 133.447449][ T6086] __x64_sys_read+0x40/0x50 [ 133.447484][ T6086] x64_sys_call+0x2886/0x3020 [ 133.447570][ T6086] do_syscall_64+0x12c/0x370 [ 133.447593][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.447760][ T6086] RIP: 0033:0x7fb1ce5dcfce [ 133.447777][ T6086] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.447827][ T6086] RSP: 002b:00007fb1cd055fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.447881][ T6086] RAX: ffffffffffffffda RBX: 00007fb1cd0566c0 RCX: 00007fb1ce5dcfce [ 133.447896][ T6086] RDX: 000000000000000f RSI: 00007fb1cd0560a0 RDI: 0000000000000005 [ 133.447907][ T6086] RBP: 00007fb1cd056090 R08: 0000000000000000 R09: 0000000000000000 [ 133.447917][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.447928][ T6086] R13: 00007fb1ce896128 R14: 00007fb1ce896090 R15: 00007ffcb0e2fbf8 [ 133.447945][ T6086] [ 133.721009][ T6094] loop4: detected capacity change from 0 to 512 [ 133.746091][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.832855][ T6094] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.750: inode #0: comm syz.4.750: iget: illegal inode # [ 133.855878][ T6094] loop4: lost filesystem error report for type 5 error -117 [ 133.856013][ T6094] EXT4-fs (loop4): get orphan inode failed [ 133.869198][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 133.869218][ C0] EXT4-fs (loop4): initial error at time 1772561912: ext4_init_orphan_info:583 [ 133.869243][ C0] EXT4-fs (loop4): last error at time 1772561912: ext4_init_orphan_info:583 [ 133.893576][ T6094] EXT4-fs (loop4): mount failed [ 133.977955][ T6099] lo speed is unknown, defaulting to 1000 [ 134.057243][ T6107] futex_wake_op: syz.2.755 tries to shift op by -65; fix this program [ 134.081924][ T6102] lo speed is unknown, defaulting to 1000 [ 134.215911][ T28] kauditd_printk_skb: 521 callbacks suppressed [ 134.215927][ T28] audit: type=1400 audit(1772561913.195:10691): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.292400][ T6113] lo speed is unknown, defaulting to 1000 [ 134.500298][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 135.201651][ T28] audit: type=1400 audit(1772561913.225:10692): avc: denied { read write open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.226979][ T28] audit: type=1400 audit(1772561913.225:10693): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.307798][ T6132] FAULT_INJECTION: forcing a failure. [ 135.307798][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 135.334682][ T3317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.343834][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(full) [ 135.343887][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.343914][ T6132] Call Trace: [ 135.343920][ T6132] [ 135.343929][ T6132] __dump_stack+0x1d/0x30 [ 135.343959][ T6132] dump_stack_lvl+0x95/0xd0 [ 135.343987][ T6132] dump_stack+0x15/0x1b [ 135.344012][ T6132] should_fail_ex+0x263/0x280 [ 135.344072][ T6132] should_failslab+0x8c/0xb0 [ 135.344097][ T6132] kmem_cache_alloc_noprof+0x66/0x400 [ 135.344121][ T6132] ? proc_reg_open+0x16a/0x350 [ 135.344161][ T6132] proc_reg_open+0x16a/0x350 [ 135.344221][ T6132] do_dentry_open+0x4ca/0xa90 [ 135.344244][ T6132] ? __pfx_proc_reg_open+0x10/0x10 [ 135.344274][ T6132] vfs_open+0x37/0x1e0 [ 135.344303][ T6132] path_openat+0x1b70/0x2050 [ 135.344363][ T6132] do_file_open+0x16c/0x290 [ 135.344409][ T6132] do_sys_openat2+0x94/0x130 [ 135.344442][ T6132] __x64_sys_openat+0xf2/0x120 [ 135.344523][ T6132] x64_sys_call+0x1e39/0x3020 [ 135.344610][ T6132] do_syscall_64+0x12c/0x370 [ 135.344633][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.344702][ T6132] RIP: 0033:0x7fb1ce61c799 [ 135.344723][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.344746][ T6132] RSP: 002b:00007fb1cd077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.344767][ T6132] RAX: ffffffffffffffda RBX: 00007fb1ce895fa0 RCX: 00007fb1ce61c799 [ 135.344781][ T6132] RDX: 0000000000001800 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 135.344832][ T6132] RBP: 00007fb1cd077090 R08: 0000000000000000 R09: 0000000000000000 [ 135.344848][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.344864][ T6132] R13: 00007fb1ce896038 R14: 00007fb1ce895fa0 R15: 00007ffcb0e2fbf8 [ 135.344923][ T6132] [ 135.530781][ T3317] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 135.538706][ T3317] audit: backlog limit exceeded [ 135.556428][ T6134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.564124][ T6134] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64 [ 135.571920][ T6134] audit: backlog limit exceeded [ 135.581070][ T6134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.038925][ T6144] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 136.045560][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.071648][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 136.087052][ T6146] vhci_hcd: connection closed [ 136.087329][ T3514] vhci_hcd vhci_hcd.2: stop threads [ 136.106481][ T3514] vhci_hcd vhci_hcd.2: release socket [ 136.114148][ T3514] vhci_hcd vhci_hcd.2: disconnect device [ 136.153534][ T6142] loop4: detected capacity change from 0 to 512 [ 136.197182][ T6142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.233959][ T6142] EXT4-fs (loop4): 1 truncate cleaned up [ 136.273187][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.822940][ T6178] syz.1.772: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 136.837454][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.1.772 Not tainted syzkaller #0 PREEMPT(full) [ 136.837479][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.837492][ T6178] Call Trace: [ 136.837497][ T6178] [ 136.837508][ T6178] __dump_stack+0x1d/0x30 [ 136.837542][ T6178] dump_stack_lvl+0x95/0xd0 [ 136.837616][ T6178] dump_stack+0x15/0x1b [ 136.837637][ T6178] warn_alloc+0x145/0x1c0 [ 136.837666][ T6178] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 136.837731][ T6178] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 136.837767][ T6178] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 136.837800][ T6178] ? slow_avc_audit+0x14c/0x190 [ 136.837834][ T6178] ? should_fail_ex+0x30/0x280 [ 136.837938][ T6178] ? xskq_create+0x36/0xe0 [ 136.837958][ T6178] vmalloc_user_noprof+0x7d/0xb0 [ 136.837984][ T6178] ? xskq_create+0x80/0xe0 [ 136.838018][ T6178] xskq_create+0x80/0xe0 [ 136.838066][ T6178] xsk_init_queue+0x70/0xb0 [ 136.838087][ T6178] xsk_setsockopt+0x3f5/0x640 [ 136.838164][ T6178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.838208][ T6178] __sys_setsockopt+0x184/0x200 [ 136.838281][ T6178] __x64_sys_setsockopt+0x64/0x80 [ 136.838315][ T6178] x64_sys_call+0x2327/0x3020 [ 136.838352][ T6178] do_syscall_64+0x12c/0x370 [ 136.838379][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.838419][ T6178] RIP: 0033:0x7f6a021ec799 [ 136.838453][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.838474][ T6178] RSP: 002b:00007f6a007da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.838506][ T6178] RAX: ffffffffffffffda RBX: 00007f6a02466270 RCX: 00007f6a021ec799 [ 136.838521][ T6178] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 136.838538][ T6178] RBP: 00007f6a02282bd9 R08: 0000000000000004 R09: 0000000000000000 [ 136.838624][ T6178] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.838652][ T6178] R13: 00007f6a02466308 R14: 00007f6a02466270 R15: 00007ffd07532798 [ 136.838673][ T6178] [ 136.838685][ T6178] Mem-Info: [ 137.059890][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.069365][ T6178] active_anon:9790 inactive_anon:12170 isolated_anon:0 [ 137.069365][ T6178] active_file:18295 inactive_file:2349 isolated_file:0 [ 137.069365][ T6178] unevictable:0 dirty:416 writeback:0 [ 137.069365][ T6178] slab_reclaimable:3479 slab_unreclaimable:18641 [ 137.069365][ T6178] mapped:30803 shmem:14402 pagetables:3235 [ 137.069365][ T6178] sec_pagetables:0 bounce:0 [ 137.069365][ T6178] kernel_misc_reclaimable:0 [ 137.069365][ T6178] free:1859400 free_pcp:3891 free_cma:0 [ 137.186779][ T6178] Node 0 active_anon:40088kB inactive_anon:48680kB active_file:73180kB inactive_file:9396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126228kB dirty:1664kB writeback:0kB shmem:57492kB kernel_stack:3616kB pagetables:12708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.242550][ T6187] loop4: detected capacity change from 0 to 1024 [ 137.246832][ T6178] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.279495][ T6178] lowmem_reserve[]: 0 2879 7857 7857 [ 137.298749][ T6190] lo speed is unknown, defaulting to 1000 [ 137.304645][ T6178] Node 0 DMA32 free:2944668kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 137.357779][ T6187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.377422][ T6178] lowmem_reserve[]: 0 0 4978 4978 [ 137.387768][ T6187] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 137.392646][ T6178] Node 0 [ 137.402734][ T6187] FAULT_INJECTION: forcing a failure. [ 137.402734][ T6187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.418976][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.4.776 Not tainted syzkaller #0 PREEMPT(full) [ 137.419101][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.419112][ T6187] Call Trace: [ 137.419118][ T6187] [ 137.419158][ T6187] __dump_stack+0x1d/0x30 [ 137.419211][ T6187] dump_stack_lvl+0x95/0xd0 [ 137.419383][ T6187] dump_stack+0x15/0x1b [ 137.419427][ T6187] should_fail_ex+0x263/0x280 [ 137.419448][ T6187] should_fail+0xb/0x20 [ 137.419468][ T6187] should_fail_usercopy+0x1a/0x20 [ 137.419495][ T6187] copy_folio_from_iter_atomic+0x269/0x1170 [ 137.419581][ T6187] generic_perform_write+0x2c1/0x490 [ 137.419612][ T6187] ext4_buffered_write_iter+0x1ee/0x3c0 [ 137.419702][ T6187] ext4_file_write_iter+0x380/0xfa0 [ 137.419735][ T6187] ? kstrtouint_from_user+0xa8/0xf0 [ 137.419759][ T6187] ? selinux_file_permission+0x1f2/0x690 [ 137.419838][ T6187] ? proc_fail_nth_write+0x13b/0x160 [ 137.419871][ T6187] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 137.419932][ T6187] vfs_write+0x5a6/0x9f0 [ 137.419963][ T6187] __x64_sys_pwrite64+0xfd/0x150 [ 137.419980][ T6187] x64_sys_call+0xa2a/0x3020 [ 137.420076][ T6187] do_syscall_64+0x12c/0x370 [ 137.420095][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.420115][ T6187] RIP: 0033:0x7fb1ce61c799 [ 137.420128][ T6187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.420157][ T6187] RSP: 002b:00007fb1cd077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 137.420172][ T6187] RAX: ffffffffffffffda RBX: 00007fb1ce895fa0 RCX: 00007fb1ce61c799 [ 137.420183][ T6187] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 137.420194][ T6187] RBP: 00007fb1cd077090 R08: 0000000000000000 R09: 0000000000000000 [ 137.420208][ T6187] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000002 [ 137.420272][ T6187] R13: 00007fb1ce896038 R14: 00007fb1ce895fa0 R15: 00007ffcb0e2fbf8 [ 137.420294][ T6187] [ 137.421840][ T6187] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.495412][ T6178] Normal free:4470996kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40668kB inactive_anon:48680kB active_file:73180kB inactive_file:9396kB unevictable:0kB writepending:1664kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:11496kB local_pcp:1748kB free_cma:0kB [ 137.496574][ T6187] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.496574][ T6187] [ 137.535807][ T6178] lowmem_reserve[]: [ 137.537145][ T23] usb 1-1: enqueue for inactive port 0 [ 137.681768][ T6178] 0 0 0 0 [ 137.685117][ T6178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.698364][ T6187] EXT4-fs (loop4): Total free blocks count 0 [ 137.704378][ T6187] EXT4-fs (loop4): Free/Dirty block details [ 137.713228][ T6187] EXT4-fs (loop4): free_blocks=20480 [ 137.718587][ T6178] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944668kB [ 137.734867][ T6187] EXT4-fs (loop4): dirty_blocks=80 [ 137.740095][ T6191] lo speed is unknown, defaulting to 1000 [ 137.745911][ T6187] EXT4-fs (loop4): Block reservation details [ 137.762092][ T6187] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 137.772418][ T6178] Node 0 Normal: 178*4kB (UE) 511*8kB (UME) 632*16kB (UME) 746*32kB (UME) 467*64kB (UME) 347*128kB (UME) 282*256kB (UM) 217*512kB (UME) 193*1024kB (UME) 154*2048kB (UME) 892*4096kB (UM) = 4463040kB [ 137.822846][ T6178] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.850134][ T3514] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 137.861938][ T6178] 38040 total pagecache pages [ 137.868989][ T23] usb 1-1: enqueue for inactive port 0 [ 137.876705][ T6178] 47 pages in swap cache [ 137.881044][ T6178] Free swap = 107220kB [ 137.940170][ T6178] Total swap = 124996kB [ 137.945199][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 137.945505][ T6178] 2097051 pages RAM [ 138.016513][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 138.025203][ T6178] 0 pages HighMem/MovableOnly [ 138.037900][ T6178] 81603 pages reserved [ 138.043520][ T6199] lo speed is unknown, defaulting to 1000 [ 138.650143][ T6221] loop4: detected capacity change from 0 to 8192 [ 138.686460][ T6221] loop4: p3 p4 < > [ 138.690483][ T6221] loop4: p3 start 9895680 is beyond EOD, truncated [ 139.225472][ T28] kauditd_printk_skb: 529 callbacks suppressed [ 139.225547][ T28] audit: type=1400 audit(1772561918.205:11161): avc: denied { prog_run } for pid=6223 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.345035][ T28] audit: type=1400 audit(1772561918.235:11162): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.384227][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 139.423206][ T28] audit: type=1400 audit(1772561918.235:11163): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.487844][ T28] audit: type=1400 audit(1772561918.235:11164): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.559076][ T28] audit: type=1400 audit(1772561918.335:11165): avc: denied { map_create } for pid=6223 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.606712][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 139.659397][ T28] audit: type=1400 audit(1772561918.375:11166): avc: denied { open } for pid=6223 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.713180][ T6243] loop4: detected capacity change from 0 to 256 [ 139.726895][ T6243] FAT-fs (loop4): Directory bread(block 1285) failed [ 139.735011][ T6243] FAT-fs (loop4): Directory bread(block 1286) failed [ 139.741725][ T6243] FAT-fs (loop4): Directory bread(block 1287) failed [ 139.762932][ T28] audit: type=1400 audit(1772561918.375:11167): avc: denied { perfmon } for pid=6223 comm="syz.0.786" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.768242][ T6243] FAT-fs (loop4): Directory bread(block 1288) failed [ 139.831009][ T6243] FAT-fs (loop4): Directory bread(block 1285) failed [ 139.835033][ T28] audit: type=1400 audit(1772561918.375:11168): avc: denied { kernel } for pid=6223 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.845598][ T6243] FAT-fs (loop4): Directory bread(block 1286) failed [ 139.886121][ T6243] FAT-fs (loop4): Directory bread(block 1287) failed [ 139.934979][ T28] audit: type=1400 audit(1772561918.425:11169): avc: denied { perfmon } for pid=6223 comm="syz.0.786" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.984594][ T6243] FAT-fs (loop4): Directory bread(block 1288) failed [ 140.042818][ T28] audit: type=1400 audit(1772561918.475:11170): avc: denied { block_suspend } for pid=6231 comm="syz.4.788" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.115281][ T6243] usb usb1: usbfs: process 6243 (syz.4.788) did not claim interface 0 before use [ 140.349361][ T6252] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 140.498513][ T6250] loop3: detected capacity change from 0 to 1024 [ 140.838235][ T6250] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 140.899093][ T6250] System zones: 0-1, 3-36 [ 140.982948][ T6250] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.791: bad orphan inode 134217728 [ 141.037227][ T6250] loop3: lost filesystem error report for type 5 error -117 [ 141.044964][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 141.059881][ C0] EXT4-fs (loop3): initial error at time 1772561920: ext4_orphan_get:1417 [ 141.069262][ C0] EXT4-fs (loop3): last error at time 1772561920: ext4_orphan_get:1417 [ 141.132688][ T6264] lo speed is unknown, defaulting to 1000 [ 141.166228][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.198076][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.794'. [ 141.854945][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.191425][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.648531][ T6299] loop3: detected capacity change from 0 to 8192 [ 142.727600][ T6308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.804'. [ 144.096975][ T6338] loop2: detected capacity change from 0 to 8192 [ 144.253010][ T28] kauditd_printk_skb: 372 callbacks suppressed [ 144.253023][ T28] audit: type=1400 audit(1772561923.225:11543): avc: denied { allowed } for pid=6339 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.421710][ T5429] loop2: p3 p4 < > [ 144.425650][ T5429] loop2: p3 start 9895680 is beyond EOD, truncated [ 144.432497][ T28] audit: type=1400 audit(1772561923.265:11544): avc: denied { allowed } for pid=6334 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.460651][ T6338] loop2: p3 p4 < > [ 144.460733][ T6338] loop2: p3 start 9895680 is beyond EOD, truncated [ 144.478780][ T28] audit: type=1400 audit(1772561923.265:11545): avc: denied { create } for pid=6334 comm="syz.2.815" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.478804][ T28] audit: type=1400 audit(1772561923.265:11546): avc: denied { map } for pid=6334 comm="syz.2.815" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.478840][ T28] audit: type=1400 audit(1772561923.265:11547): avc: denied { read write } for pid=6334 comm="syz.2.815" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.478870][ T28] audit: type=1400 audit(1772561923.345:11548): avc: denied { sqpoll } for pid=6339 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.478924][ T28] audit: type=1400 audit(1772561923.365:11549): avc: denied { create } for pid=6339 comm="syz.3.817" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.478950][ T28] audit: type=1400 audit(1772561923.375:11550): avc: denied { map } for pid=6339 comm="syz.3.817" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.478975][ T28] audit: type=1400 audit(1772561923.375:11551): avc: denied { read write } for pid=6339 comm="syz.3.817" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.479005][ T28] audit: type=1400 audit(1772561923.385:11552): avc: denied { read } for pid=6337 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 144.566938][ T6343] lo speed is unknown, defaulting to 1000 [ 144.772071][ T6350] lo speed is unknown, defaulting to 1000 [ 144.984869][ T6359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.992887][ T6322] loop4: detected capacity change from 0 to 1024 [ 145.291213][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 145.366879][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 145.403643][ T6322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 145.453812][ T6322] System zones: 0-1, 3-36 [ 145.598343][ T6322] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.811: bad orphan inode 134217728 [ 145.682924][ T6322] loop4: lost filesystem error report for type 5 error -117 [ 145.689477][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.824839][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'. [ 145.886229][ T6379] loop0: detected capacity change from 0 to 512 [ 145.967335][ T6379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.007299][ T6379] EXT4-fs (loop0): 1 truncate cleaned up [ 146.020973][ T6379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.213866][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.306556][ T6405] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.354671][ T6405] SELinux: failed to load policy [ 146.567344][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.578008][ T6408] lo speed is unknown, defaulting to 1000 [ 146.761933][ T6415] loop4: detected capacity change from 0 to 512 [ 147.040483][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 147.160882][ T6427] loop4: detected capacity change from 0 to 8192 [ 147.405359][ T6433] hub 9-0:1.0: USB hub found [ 147.417616][ T6433] hub 9-0:1.0: 8 ports detected [ 149.255210][ T28] kauditd_printk_skb: 479 callbacks suppressed [ 149.255225][ T28] audit: type=1400 audit(1772561928.236:12032): avc: denied { bpf } for pid=6465 comm="syz.0.853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.314508][ T28] audit: type=1400 audit(1772561928.256:12033): avc: denied { create } for pid=6465 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.342147][ T28] audit: type=1400 audit(1772561928.266:12034): avc: denied { create } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.342175][ T28] audit: type=1400 audit(1772561928.266:12035): avc: denied { write } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.342267][ T28] audit: type=1400 audit(1772561928.266:12036): avc: denied { create } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.342356][ T28] audit: type=1400 audit(1772561928.266:12037): avc: denied { write } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.342430][ T28] audit: type=1400 audit(1772561928.266:12038): avc: denied { map_create } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.342534][ T28] audit: type=1400 audit(1772561928.266:12039): avc: denied { bpf } for pid=6463 comm="syz.3.852" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.342558][ T28] audit: type=1400 audit(1772561928.266:12040): avc: denied { map_read map_write } for pid=6463 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.342590][ T28] audit: type=1400 audit(1772561928.266:12041): avc: denied { bind } for pid=6465 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.717512][ T6482] loop4: detected capacity change from 0 to 164 [ 149.719535][ T6482] rock: directory entry would overflow storage [ 149.719543][ T6482] rock: sig=0x5252, size=5, remaining=3 [ 150.073749][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 150.082772][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.857'. [ 150.265555][ T6506] lo speed is unknown, defaulting to 1000 [ 150.332224][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'. [ 150.369075][ T6509] lo speed is unknown, defaulting to 1000 [ 150.477779][ T6497] lo speed is unknown, defaulting to 1000 [ 151.074482][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 151.174463][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 151.264972][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 151.284362][ T6550] bond0: Unable to set down delay as MII monitoring is disabled [ 151.481893][ T6555] lo speed is unknown, defaulting to 1000 [ 151.524418][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 151.883473][ T6568] loop4: detected capacity change from 0 to 512 [ 151.966359][ T6568] EXT4-fs (loop4): 1 truncate cleaned up [ 151.973650][ T6568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.107604][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.444770][ T6580] loop3: detected capacity change from 0 to 512 [ 152.524694][ T6580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.582302][ T6580] EXT4-fs (loop3): 1 truncate cleaned up [ 152.593531][ T6594] lo speed is unknown, defaulting to 1000 [ 152.618994][ T6580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.673358][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.889'. [ 153.112977][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.362613][ T6626] loop3: detected capacity change from 0 to 512 [ 153.393327][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 153.414274][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 153.752502][ T6635] lo speed is unknown, defaulting to 1000 [ 153.773890][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'. [ 153.809271][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 154.320809][ T28] kauditd_printk_skb: 785 callbacks suppressed [ 154.320824][ T28] audit: type=1400 audit(1772561933.296:12827): avc: denied { create } for pid=6649 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.394243][ T28] audit: type=1400 audit(1772561933.356:12828): avc: denied { write } for pid=6649 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.642679][ T6648] loop0: detected capacity change from 0 to 512 [ 154.839611][ T28] audit: type=1400 audit(1772561933.446:12829): avc: denied { open } for pid=6651 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.858870][ T28] audit: type=1400 audit(1772561933.446:12830): avc: denied { perfmon } for pid=6651 comm="syz.4.908" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.879744][ T28] audit: type=1400 audit(1772561933.446:12831): avc: denied { kernel } for pid=6651 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.905642][ T28] audit: type=1400 audit(1772561933.456:12832): avc: denied { prog_load } for pid=6651 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.925479][ T6648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.944573][ T28] audit: type=1400 audit(1772561933.456:12833): avc: denied { bpf } for pid=6651 comm="syz.4.908" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.967648][ T6648] EXT4-fs (loop0): 1 truncate cleaned up [ 154.985934][ T6648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.004195][ T28] audit: type=1400 audit(1772561933.456:12834): avc: denied { allowed } for pid=6651 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.082759][ T28] audit: type=1400 audit(1772561933.466:12835): avc: denied { create } for pid=6651 comm="syz.4.908" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.164096][ T28] audit: type=1400 audit(1772561933.466:12836): avc: denied { map } for pid=6651 comm="syz.4.908" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.395421][ T6674] lo speed is unknown, defaulting to 1000 [ 155.414506][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.459665][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'. [ 155.704174][ T6680] loop3: detected capacity change from 0 to 8192 [ 155.970639][ T6678] loop0: detected capacity change from 0 to 1024 [ 156.072918][ T6692] loop4: detected capacity change from 0 to 1024 [ 156.095757][ T6678] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 156.125354][ T6678] System zones: 0-1, 3-36 [ 156.134919][ T6692] EXT4-fs: inline encryption not supported [ 156.164282][ T6678] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.915: bad orphan inode 134217728 [ 156.176004][ T6692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.184203][ T6678] loop0: lost filesystem error report for type 5 error -117 [ 156.213484][ T6678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.347549][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.377276][ T6692] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 156.393948][ T6692] EXT4-fs (loop4): Remounting filesystem read-only [ 156.774854][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.801172][ T6706] FAULT_INJECTION: forcing a failure. [ 156.801172][ T6706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.839899][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(full) [ 156.839941][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.839961][ T6706] Call Trace: [ 156.839968][ T6706] [ 156.839974][ T6706] __dump_stack+0x1d/0x30 [ 156.840001][ T6706] dump_stack_lvl+0x95/0xd0 [ 156.840084][ T6706] dump_stack+0x15/0x1b [ 156.840104][ T6706] should_fail_ex+0x263/0x280 [ 156.840127][ T6706] should_fail_alloc_page+0xf2/0x100 [ 156.840149][ T6706] __alloc_frozen_pages_noprof+0x108/0x360 [ 156.840189][ T6706] alloc_pages_mpol+0xb3/0x260 [ 156.840217][ T6706] folio_alloc_mpol_noprof+0x39/0x80 [ 156.840245][ T6706] shmem_get_folio_gfp+0x3da/0xd60 [ 156.840277][ T6706] shmem_write_begin+0xfc/0x1f0 [ 156.840345][ T6706] generic_perform_write+0x183/0x490 [ 156.840506][ T6706] shmem_file_write_iter+0xc5/0xf0 [ 156.840544][ T6706] do_iter_readv_writev+0x4fd/0x5a0 [ 156.840573][ T6706] vfs_writev+0x2e1/0x900 [ 156.840624][ T6706] __se_sys_pwritev2+0xfc/0x1c0 [ 156.840649][ T6706] __x64_sys_pwritev2+0x67/0x80 [ 156.840673][ T6706] x64_sys_call+0xe07/0x3020 [ 156.840751][ T6706] do_syscall_64+0x12c/0x370 [ 156.840789][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.840813][ T6706] RIP: 0033:0x7f6a021ec799 [ 156.840830][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.840849][ T6706] RSP: 002b:00007f6a00c3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 156.840931][ T6706] RAX: ffffffffffffffda RBX: 00007f6a02465fa0 RCX: 00007f6a021ec799 [ 156.840946][ T6706] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 156.841046][ T6706] RBP: 00007f6a00c3f090 R08: 0000000000029000 R09: 0000000000000003 [ 156.841059][ T6706] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 156.841071][ T6706] R13: 00007f6a02466038 R14: 00007f6a02465fa0 R15: 00007ffd07532798 [ 156.841091][ T6706] [ 157.101916][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.358398][ T6720] lo speed is unknown, defaulting to 1000 [ 157.415466][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'. [ 157.533750][ T6721] loop0: detected capacity change from 0 to 512 [ 157.591958][ T6721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.625370][ T6721] EXT4-fs (loop0): 1 truncate cleaned up [ 157.665993][ T6721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.110269][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.190188][ T6751] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 158.244795][ T6751] gretap1: entered allmulticast mode [ 158.264052][ T6751] bond2: (slave gretap1): making interface the new active one [ 158.306666][ T6748] loop0: detected capacity change from 0 to 512 [ 158.330506][ T6751] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 158.410700][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.438990][ T6748] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.187715][ T6776] lo speed is unknown, defaulting to 1000 [ 159.235444][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.246846][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 159.345420][ T28] kauditd_printk_skb: 1040 callbacks suppressed [ 159.345434][ T28] audit: type=1400 audit(1772561938.316:13877): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.436807][ T28] audit: type=1400 audit(1772561938.326:13878): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.472705][ T28] audit: type=1400 audit(1772561938.326:13879): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.497910][ T28] audit: type=1400 audit(1772561938.326:13880): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.523670][ T28] audit: type=1400 audit(1772561938.326:13881): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.549464][ T6790] loop4: detected capacity change from 0 to 512 [ 159.600665][ T28] audit: type=1400 audit(1772561938.326:13882): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.644975][ T28] audit: type=1400 audit(1772561938.356:13883): avc: denied { create } for pid=6784 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.645087][ T6790] ------------[ cut here ]------------ [ 159.670088][ T6790] EA inode 11 i_nlink=2 [ 159.670114][ T6790] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.948/6790 [ 159.684960][ T6790] Modules linked in: [ 159.688878][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.4.948 Not tainted syzkaller #0 PREEMPT(full) [ 159.698375][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.708597][ T6790] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 159.715269][ T6790] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 159.735045][ T6790] RSP: 0018:ffffc900156db5a8 EFLAGS: 00010246 [ 159.741129][ T6790] RAX: ffff888103f2ef38 RBX: ffff88810834ba88 RCX: ffffffff81bffae8 [ 159.749257][ T6790] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de510 [ 159.754048][ T28] audit: type=1400 audit(1772561938.356:13884): avc: denied { module_request } for pid=6784 comm="syz.0.944" kmod="net-pf-10-proto-0-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.757310][ T6790] RBP: 000000000000000b R08: 000188810834ba3b R09: 0000000000000000 [ 159.788115][ T6790] R10: ffffc900156db4d8 R11: 0001c900156db4d8 R12: ffff88810834ba38 [ 159.796120][ T6790] R13: ffffffff871de510 R14: ffff88810834b9f0 R15: 0000000000000001 [ 159.804127][ T6790] FS: 00007fb1cd0776c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 159.813082][ T6790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.819698][ T6790] CR2: 0000001b3411fff8 CR3: 000000012d594000 CR4: 00000000003506f0 [ 159.827701][ T6790] Call Trace: [ 159.831033][ T6790] [ 159.834051][ T6790] ext4_xattr_set_entry+0x77c/0x1010 [ 159.839381][ T6790] ext4_xattr_ibody_set+0x184/0x3c0 [ 159.844660][ T6790] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 159.850542][ T6790] __ext4_expand_extra_isize+0x246/0x280 [ 159.856240][ T6790] __ext4_mark_inode_dirty+0x29b/0x400 [ 159.861293][ T28] audit: type=1400 audit(1772561938.376:13885): avc: denied { module_request } for pid=6784 comm="syz.0.944" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.861723][ T6790] ext4_evict_inode+0x7c3/0xd60 [ 159.888814][ T6790] ? __pfx_ext4_evict_inode+0x10/0x10 [ 159.894287][ T6790] evict+0x2af/0x510 [ 159.898237][ T6790] ? __dquot_initialize+0x146/0x7c0 [ 159.903483][ T6790] iput+0x41a/0x580 [ 159.907457][ T6790] ext4_process_orphan+0x1a9/0x1c0 [ 159.912597][ T6790] ext4_orphan_cleanup+0x6a8/0xa00 [ 159.917765][ T6790] ext4_fill_super+0x3408/0x37c0 [ 159.922725][ T6790] ? set_blocksize+0x14c/0x270 [ 159.927559][ T6790] ? setup_bdev_super+0x30e/0x370 [ 159.932614][ T6790] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.937955][ T6790] get_tree_bdev_flags+0x291/0x300 [ 159.943158][ T6790] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.946745][ T28] audit: type=1400 audit(1772561938.436:13886): avc: denied { execmem } for pid=6791 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.948541][ T6790] get_tree_bdev+0x1f/0x30 [ 159.972092][ T6790] ext4_get_tree+0x1c/0x30 [ 159.976643][ T6790] vfs_get_tree+0x57/0x1d0 [ 159.981089][ T6790] do_new_mount+0x288/0x8d0 [ 159.983985][ T6801] loop0: detected capacity change from 0 to 128 [ 159.985692][ T6790] path_mount+0x4d0/0xbc0 [ 159.996209][ T6790] __se_sys_mount+0x28c/0x2e0 [ 159.998484][ T6801] msdos: Bad value for 'uid' [ 160.000925][ T6790] __x64_sys_mount+0x67/0x80 [ 160.010143][ T6790] x64_sys_call+0x2d61/0x3020 [ 160.014863][ T6790] do_syscall_64+0x12c/0x370 [ 160.016937][ T6801] msdos: Bad value for 'uid' [ 160.019499][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.029981][ T6790] RIP: 0033:0x7fb1ce61da0a [ 160.034426][ T6790] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.054108][ T6790] RSP: 002b:00007fb1cd076e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.062538][ T6790] RAX: ffffffffffffffda RBX: 00007fb1cd076ee0 RCX: 00007fb1ce61da0a [ 160.070545][ T6790] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb1cd076ea0 [ 160.078607][ T6790] RBP: 0000200000000180 R08: 00007fb1cd076ee0 R09: 0000000000800700 [ 160.086636][ T6790] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 160.094689][ T6790] R13: 00007fb1cd076ea0 R14: 000000000000046f R15: 000000000000002c [ 160.102687][ T6790] [ 160.105766][ T6790] ---[ end trace 0000000000000000 ]--- [ 160.244377][ T6790] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.948: iget: bad extra_isize 90 (inode size 256) [ 160.257954][ T6790] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 160.260362][ T6790] EXT4-fs (loop4): Remounting filesystem read-only [ 160.269585][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 160.269602][ C0] EXT4-fs (loop4): initial error at time 1772561939: ext4_xattr_inode_iget:441: inode 18 [ 160.269634][ C0] EXT4-fs (loop4): last error at time 1772561939: ext4_xattr_inode_iget:441: inode 18 [ 160.726527][ T6790] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30) [ 160.737521][ T6808] loop0: detected capacity change from 0 to 256 [ 160.745485][ T6803] loop3: detected capacity change from 0 to 8192 [ 160.814161][ T6803] loop3: p3 p4 < > [ 160.818061][ T6803] loop3: p3 start 9895680 is beyond EOD, truncated [ 160.853598][ T6808] FAT-fs (loop0): Directory bread(block 64) failed [ 160.860202][ T6808] FAT-fs (loop0): Directory bread(block 65) failed [ 160.866746][ T6808] FAT-fs (loop0): Directory bread(block 66) failed [ 160.873304][ T6808] FAT-fs (loop0): Directory bread(block 67) failed [ 160.879860][ T6808] FAT-fs (loop0): Directory bread(block 68) failed [ 160.886472][ T6808] FAT-fs (loop0): Directory bread(block 69) failed [ 160.893045][ T6808] FAT-fs (loop0): Directory bread(block 70) failed [ 160.899569][ T6808] FAT-fs (loop0): Directory bread(block 71) failed [ 160.906158][ T6808] FAT-fs (loop0): Directory bread(block 72) failed [ 160.912672][ T6808] FAT-fs (loop0): Directory bread(block 73) failed [ 161.080599][ T6790] EXT4-fs (loop4): 1 orphan inode deleted [ 161.118088][ T6790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.549665][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 161.726830][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.044887][ T6814] lo speed is unknown, defaulting to 1000 [ 162.371548][ T6833] loop0: detected capacity change from 0 to 8192 [ 162.704396][ T5429] loop0: p3 p4 < > [ 162.811503][ T5429] loop0: p3 start 9895680 is beyond EOD, truncated [ 162.838032][ T6833] loop0: p3 p4 < > [ 162.841978][ T6833] loop0: p3 start 9895680 is beyond EOD, truncated [ 163.185468][ T6849] serio: Serial port ptm0 [ 163.292461][ T6850] lo speed is unknown, defaulting to 1000 [ 163.400734][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 163.558939][ T9] IPVS: starting estimator thread 0... [ 163.569631][ T6814] chnl_net:caif_netlink_parms(): no params data found [ 163.673648][ T6852] IPVS: using max 2640 ests per chain, 132000 per kthread [ 163.749788][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.759182][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.773741][ T6814] bridge_slave_0: entered allmulticast mode [ 163.780138][ T6814] bridge_slave_0: entered promiscuous mode [ 163.798904][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.807012][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 163.813720][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.822877][ T6814] bridge_slave_1: entered allmulticast mode [ 163.838434][ T6814] bridge_slave_1: entered promiscuous mode [ 163.879525][ T6866] ipvlan2: entered allmulticast mode [ 163.895351][ T6866] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 163.920091][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 163.999192][ T6814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.046926][ T6814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.068567][ T6877] loop0: detected capacity change from 0 to 2048 [ 164.100949][ T6877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.118511][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 164.151296][ T6877] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 164.158131][ T6876] loop4: detected capacity change from 0 to 512 [ 164.168273][ T6814] team0: Port device team_slave_0 added [ 164.198371][ T6876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.213467][ T6814] team0: Port device team_slave_1 added [ 164.232209][ T6876] EXT4-fs (loop4): 1 truncate cleaned up [ 164.270708][ T6876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.373601][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 164.373638][ T28] audit: type=1400 audit(1772561943.347:14238): avc: denied { add_name } for pid=6870 comm="syz.4.964" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.404669][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.411694][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.475079][ T28] audit: type=1400 audit(1772561943.347:14239): avc: denied { create } for pid=6870 comm="syz.4.964" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.495521][ T6814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.506079][ T28] audit: type=1400 audit(1772561943.357:14240): avc: denied { read write } for pid=6870 comm="syz.4.964" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.534583][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.542888][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.570164][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.968'. [ 164.585004][ T28] audit: type=1400 audit(1772561943.357:14241): avc: denied { open } for pid=6870 comm="syz.4.964" path="/195/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.609293][ T28] audit: type=1400 audit(1772561943.357:14242): avc: denied { read write } for pid=6875 comm="syz.0.966" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.626798][ T5429] udevd[5429]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 164.634739][ T28] audit: type=1400 audit(1772561943.357:14243): avc: denied { read write open } for pid=6875 comm="syz.0.966" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.656405][ T6814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.698888][ T28] audit: type=1400 audit(1772561943.377:14244): avc: denied { read write } for pid=6870 comm="syz.4.964" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.740081][ T6888] lo speed is unknown, defaulting to 1000 [ 164.770640][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.780064][ T28] audit: type=1400 audit(1772561943.377:14245): avc: denied { open } for pid=6870 comm="syz.4.964" path="/195/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.810640][ T6814] hsr_slave_0: entered promiscuous mode [ 164.826731][ T6814] hsr_slave_1: entered promiscuous mode [ 164.832864][ T6814] debugfs: 'hsr0' already exists in 'hsr' [ 164.853182][ T6814] Cannot create hsr debugfs directory [ 164.871443][ T6876] ================================================================== [ 164.873612][ T28] audit: type=1400 audit(1772561943.387:14246): avc: denied { read write } for pid=6875 comm="syz.0.966" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.879589][ T6876] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 164.910581][ T6876] [ 164.912918][ T6876] read-write to 0xffff88810828a238 of 8 bytes by task 6887 on cpu 1: [ 164.920991][ T6876] xas_set_mark+0x82/0x140 [ 164.925465][ T6876] tag_pages_for_writeback+0xe3/0x2e0 [ 164.930876][ T6876] ext4_do_writepages+0x6b9/0x2840 [ 164.936041][ T6876] ext4_writepages+0x18f/0x320 [ 164.940844][ T6876] do_writepages+0x1c6/0x310 [ 164.945463][ T6876] filemap_write_and_wait_range+0x166/0x370 [ 164.950519][ T28] audit: type=1400 audit(1772561943.387:14247): avc: denied { read write open } for pid=6875 comm="syz.0.966" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.951380][ T6876] kiocb_write_and_wait+0x7a/0x110 [ 164.981312][ T6876] __iomap_dio_rw+0x5de/0x14c0 [ 164.986100][ T6876] iomap_dio_rw+0x40/0x90 [ 164.990447][ T6876] ext4_file_read_iter+0x20f/0x290 [ 164.995575][ T6876] copy_splice_read+0x471/0x6c0 [ 165.000435][ T6876] splice_direct_to_actor+0x28f/0x670 [ 165.005815][ T6876] do_splice_direct+0x119/0x1a0 [ 165.010681][ T6876] do_sendfile+0x382/0x650 [ 165.015110][ T6876] __x64_sys_sendfile64+0x105/0x150 [ 165.020323][ T6876] x64_sys_call+0x2dc4/0x3020 [ 165.025020][ T6876] do_syscall_64+0x12c/0x370 [ 165.029619][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.035521][ T6876] [ 165.037854][ T6876] read to 0xffff88810828a238 of 8 bytes by task 6876 on cpu 0: [ 165.045398][ T6876] xas_find_marked+0x213/0x620 [ 165.050265][ T6876] filemap_get_folios_tag+0xfa/0x510 [ 165.055561][ T6876] mpage_prepare_extent_to_map+0x328/0xc50 [ 165.061383][ T6876] ext4_do_writepages+0x70f/0x2840 [ 165.066523][ T6876] ext4_writepages+0x18f/0x320 [ 165.071314][ T6876] do_writepages+0x1c6/0x310 [ 165.075921][ T6876] file_write_and_wait_range+0x178/0x2f0 [ 165.081564][ T6876] generic_buffers_fsync_noflush+0x45/0x130 [ 165.087473][ T6876] ext4_sync_file+0x1aa/0x6b0 [ 165.092156][ T6876] vfs_fsync_range+0xc5/0xe0 [ 165.096766][ T6876] ext4_buffered_write_iter+0x34f/0x3c0 [ 165.102318][ T6876] ext4_file_write_iter+0xbff/0xfa0 [ 165.107530][ T6876] iter_file_splice_write+0x6c4/0xa80 [ 165.112909][ T6876] direct_splice_actor+0x156/0x2a0 [ 165.118034][ T6876] splice_direct_to_actor+0x311/0x670 [ 165.123413][ T6876] do_splice_direct+0x119/0x1a0 [ 165.128268][ T6876] do_sendfile+0x382/0x650 [ 165.132698][ T6876] __x64_sys_sendfile64+0x105/0x150 [ 165.137899][ T6876] x64_sys_call+0x2dc4/0x3020 [ 165.142586][ T6876] do_syscall_64+0x12c/0x370 [ 165.147198][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.153105][ T6876] [ 165.155433][ T6876] value changed: 0x00000000ffff0000 -> 0x00000000ffe00000 [ 165.162546][ T6876] [ 165.164874][ T6876] Reported by Kernel Concurrency Sanitizer on: [ 165.171092][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.4.964 Tainted: G W syzkaller #0 PREEMPT(full) [ 165.181869][ T6876] Tainted: [W]=WARN [ 165.185762][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.195821][ T6876] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.566117][ T6892] bond0: (slave syz_tun): Releasing backup interface [ 165.668219][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.683495][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.695777][ T6876] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.718279][ T6876] bond0: (slave syz_tun): Releasing backup interface [ 165.737033][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.747322][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.827495][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.837905][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.876807][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.887176][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.186905][ T71] bridge_slave_1: left allmulticast mode [ 166.192658][ T71] bridge_slave_1: left promiscuous mode [ 166.223638][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.266231][ T71] bridge_slave_0: left allmulticast mode [ 166.271930][ T71] bridge_slave_0: left promiscuous mode [ 166.286683][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.300047][ T71] bridge_slave_1: left allmulticast mode [ 166.306299][ T71] bridge_slave_1: left promiscuous mode [ 166.311973][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.321841][ T71] bridge_slave_0: left allmulticast mode [ 166.327696][ T71] bridge_slave_0: left promiscuous mode [ 166.333308][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.399226][ T71] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 166.409358][ T71] bond0 (unregistering): Released all slaves [ 166.417457][ T71] bond1 (unregistering): Released all slaves [ 166.455235][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.464766][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.474628][ T71] bond0 (unregistering): Released all slaves [ 166.625776][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.635439][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.644413][ T71] bond0 (unregistering): Released all slaves [ 166.652771][ T71] bond1 (unregistering): Released all slaves [ 166.719293][ T71] tipc: Disabling bearer [ 166.725643][ T71] tipc: Left network mode [ 166.789324][ T71] hsr_slave_0: left promiscuous mode [ 166.795070][ T71] hsr_slave_1: left promiscuous mode [ 166.800832][ T71] hsr_slave_0: left promiscuous mode [ 166.809681][ T71] hsr_slave_1: left promiscuous mode [ 166.815587][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.823114][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.832037][ T71] hsr_slave_0: left promiscuous mode [ 166.838504][ T71] hsr_slave_1: left promiscuous mode [ 166.844900][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.852419][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.862844][ T71] veth1_macvtap: left promiscuous mode [ 166.868470][ T71] veth0_macvtap: left promiscuous mode [ 166.873969][ T71] veth1_vlan: left promiscuous mode [ 166.879209][ T71] veth0_vlan: left promiscuous mode [ 166.980811][ T71] team0 (unregistering): Port device team_slave_1 removed [ 166.990323][ T71] team0 (unregistering): Port device team_slave_0 removed [ 167.037723][ T71] team0 (unregistering): Port device team_slave_1 removed [ 167.047522][ T71] team0 (unregistering): Port device team_slave_0 removed [ 167.078057][ T50] smc: removing ib device syU× [ 167.709517][ T71] IPVS: stop unused estimator thread 0... [ 167.982449][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.027497][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.076297][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.117493][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.192849][ T71] bridge_slave_1: left allmulticast mode [ 168.206117][ T71] bridge_slave_1: left promiscuous mode [ 168.211777][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.259338][ T71] bridge_slave_0: left allmulticast mode [ 168.265159][ T71] bridge_slave_0: left promiscuous mode [ 168.270837][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.284458][ T71] bridge_slave_1: left allmulticast mode [ 168.290097][ T71] bridge_slave_1: left promiscuous mode [ 168.295917][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.304056][ T71] bridge_slave_0: left allmulticast mode [ 168.309692][ T71] bridge_slave_0: left promiscuous mode [ 168.315492][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.324649][ T71] bond_slave_0: left promiscuous mode [ 168.330053][ T71] bond_slave_1: left promiscuous mode [ 168.406858][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.416570][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.426414][ T71] bond0 (unregistering): Released all slaves [ 168.434985][ T71] bond1 (unregistering): (slave veth3): Releasing backup interface [ 168.443619][ T71] bond1 (unregistering): Released all slaves [ 168.462715][ T71] bond2 (unregistering): (slave gretap1): Releasing active interface [ 168.495137][ T71] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 168.503818][ T71] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 168.515766][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.525604][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.535514][ T71] bond0 (unregistering): Released all slaves [ 168.544248][ T71] bond1 (unregistering): Released all slaves [ 168.552634][ T71] bond2 (unregistering): Released all slaves [ 168.598900][ T71] tipc: Disabling bearer [ 168.604182][ T71] tipc: Left network mode [ 168.612090][ T71] hsr_slave_0: left promiscuous mode [ 168.618059][ T71] hsr_slave_1: left promiscuous mode [ 168.623652][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.632324][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.641891][ T71] hsr_slave_0: left promiscuous mode [ 168.648345][ T71] hsr_slave_1: left promiscuous mode [ 168.654997][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.662406][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.670203][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.678163][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.688296][ T71] veth1_macvtap: left promiscuous mode [ 168.694225][ T71] veth0_macvtap: left promiscuous mode [ 168.727602][ T71] pimreg3 (unregistering): left allmulticast mode [ 168.767350][ T71] team0 (unregistering): Port device team_slave_1 removed [ 168.777777][ T71] team0 (unregistering): Port device team_slave_0 removed [ 169.395030][ T28] kauditd_printk_skb: 1461 callbacks suppressed [ 169.395048][ T28] audit: type=1400 audit(1772561948.377:15709): avc: denied { search } for pid=7110 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.424217][ T28] audit: type=1400 audit(1772561948.377:15710): avc: denied { search } for pid=7110 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.448374][ T28] audit: type=1400 audit(1772561948.377:15711): avc: denied { search } for pid=7110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.472296][ T28] audit: type=1400 audit(1772561948.377:15712): avc: denied { search } for pid=7110 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.496420][ T28] audit: type=1400 audit(1772561948.377:15713): avc: denied { search } for pid=7111 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.520213][ T28] audit: type=1400 audit(1772561948.377:15714): avc: denied { search } for pid=7111 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.544158][ T28] audit: type=1400 audit(1772561948.377:15715): avc: denied { search } for pid=7111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.568274][ T7120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.570050][ T28] audit: type=1400 audit(1772561948.377:15716): avc: denied { read open } for pid=7111 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.575128][ T7120] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64