last executing test programs: 28.714141362s ago: executing program 4 (id=51): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@delalloc}, {@nodioread_nolock}]}, 0x1, 0x51a, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPDvTOJtdjfFLiBUKigVLcpWsHbS0DZCCMoFTpWAcl9C4kRR7DiKnbKJKkjFf4CQQOLEiQsSfwBS1QMHjqhSJbggDggQCMEuHJCAHeTxWCSOvQm72TiNPx/pZd6bX9/3ZuTxzPhlJoCJ9UxEvBIRUxHxfESUi/FpkeKgl7rz3b3zxko3JZFlr/01iaQY119Xdx3TEXG9WGwmIr76pYhvJMfjtvf2N5cbjfpOUa51mtu19t7+zY3m8np9vb61uLjw0tLLSy8uzWeFh2pnpZ/58Rc/99anvvm7W3++8a1utT77oSjFQDvOUq/ppXxb9HW30c6jCDYG/X1eGndFAAA4le45/vsj4uP5+X85pvKzuQFT46gZAAAAcFayz8/Gv5OIDAAAALi00oiYjSStFn0BZiNNrxT3Bj4Y19JGq9355Fprd2u1Oy2iEqV0baNRny/6CleilHTLC0Uf2375hYHyYkQ8ERHfK1/Ny9WVVmN1zPc+AAAAYFJcH7j+/0c5zfMnG/J/AgAAAMDFVRlZAAAAAC4Ll/wAAABw+Q1e/781pnoAAAAAj8SXX321m7L++69XX9/b3Wy9fnO13t6sNndXqiutne3qequ1nj+zr3nS+hqt1vanY2v3dq1Tb3dq7b39W83W7lbn1saRV2ADAAAA5+iJj7396yQiDj5zNU9RPAcQ4Ig/jLsCwFmaGncFgLHxFG+YXKVxVwAYu+SE6TrvAADAe9/ch4///t9//797A3C56esDAJPH7/8wuUp6AMJESyPifb3sY6PmGfn7/y9PGyXLIt4pHx7j/iIAAJyv2TwlabW4DpiNNK1WIx6PSCtRStY2GvX54vrgV+XSY93yQr5kcmKfYQAAAAAAAAAAAAAAAAAAAAAAAACgJ8uSyAAAAIBLLSL9U5I/zT9irvzc7OD9gSvJP8vxx6Lww9e+f3u509lZ6I7/W/4urysR0flBMf6Fka8PAwAAAM5acjByUu86vRgunGutAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgAd++8sdJP5xn3L1+IiMqw+NMxkw9nohQR1/6exPSh5ZKImDqD+AdvRsSTw+IncS/LskpRi8H4aURcfcTxK/mmGR3/+hnEh0n2dvf488qwz18az+TD4Z+/6SI9rNHHv7SI/GR+nBt2/Hv82NqaQ2M89e5PaxG/+MjQ+G9GPDU9/PjTP/4mI+I/e2xt/8qy7HiMr39tf39U+7MfRcwN/f5JjsSqdZrbtfbe/s2N5vJ6fb2+tbi48NLSy0svLs3X1jYa9eLv0Bjf/ejP7o2K323/tSHxf/ub3vG3u3NGtf+5USsd8J93b9/5QC9bGhb/xrNDv39n+oPB+Gnx3feJIt+dPtfPH/Tyhz39k3eevl/7V0ds/5P2/41Ttv/5r3zn96ecFQA4B+29/c3lRqO+c5/MzCnmGUumf4r4gIv/fOZCtOL/zGTf7jX6otTnQTPpkR3Xb9UFqNihTHZusabigjQ5z5zFnS0AAOCi+d9J/7hrAgAAAAAAAAAAAAAAAAAAAJPrPB4nNhjzYDxNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4r/8GAAD//2PO2+Q=") 28.639618967s ago: executing program 4 (id=52): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000d100691058000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 28.594622359s ago: executing program 4 (id=55): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d50900ffea000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 28.478959316s ago: executing program 4 (id=56): creat(&(0x7f0000000180)='./file0\x00', 0x70) r0 = socket(0x5, 0x1, 0xfffffffd) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r2) r3 = epoll_create1(0x80000) r4 = mq_open(&(0x7f0000000540)='^n3\x91>[\xf0QW\x10\xd4\xba\xbc\x86~\xc4\x86\x1e\x88o]\xcd\xbag\x84W\x9a \xe2\xd7i9\xb9\xddO\xde\xf6\x8b \x92F;\x8a^+\xf1 E\xcd\xa5\xdd\xb3\x86D\xa7\xcbd%a0v\xec}\x8a\xbf+A\x1c\xe1\x87XE\xfat\x95\xf3\xa3\x13\x02a\x8d*0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f0000001500)={r6, @in6={{0xa, 0x4e20, 0x8001, @private2}}, 0xf}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xace388762cfecc97}) fsopen(&(0x7f0000000080)='ext3\x00', 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, &(0x7f00000001c0), 0x0}, 0x20) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r10, @ANYRES32=r12], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000000c40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000340), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x6, &(0x7f00000003c0)=[{0x5, 0xf7, 0x5, 0xeed2}, {0xfff, 0x9c, 0x5, 0x9}, {0xfffd, 0x7, 0x61, 0xffffffff}, {0x2a56, 0x2, 0xf, 0xfffffffc}, {0xb, 0x4, 0x1, 0x6}, {0x2000, 0x51, 0x40, 0x80}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x1) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000002000/0x1000)=nil) 28.42955515s ago: executing program 4 (id=57): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x10001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (fail_nth: 5) 27.957818747s ago: executing program 4 (id=64): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") 27.919756509s ago: executing program 32 (id=64): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") 3.975577246s ago: executing program 3 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000121400200000000000000000000000ffff0000000008000a000000000014001f0000000000000a920c0d739e8190000000060002"], 0x6c}, 0x1, 0x620b, 0xe4ffffffffffffff, 0x20000810}, 0x0) 1.370688179s ago: executing program 3 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007014000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.235055977s ago: executing program 3 (id=507): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x3ff) 1.212659399s ago: executing program 3 (id=508): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000fc00001c000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000010000000000000000000000000000000000000fbffffffffffffff0000000000000000ffffffff00"/192]}, 0x138) 1.171010611s ago: executing program 2 (id=510): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000c12, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xee00}}, {@map_off}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x4d59b1d3}}, {}, {@dmode={'dmode', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@check_strict}, {@mode={'mode', 0x3d, 0x921}}, {@unhide}, {@showassoc}, {@overriderock}]}, 0x3, 0xa3d, &(0x7f0000001440)="$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") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) connect$pptp(r4, &(0x7f00000002c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e) syz_clone(0x88000, &(0x7f0000000080)="e8b7c86e2b1f904e642b0f3de0521fc60a9e5a2c1f3e8401b6c9a32eb99a696c63", 0x21, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="2d8e5edb9c503714b303b25c2af7decc714c5f0059f51d3a20bb972ed596de21b9ec99e33db36035925719e037f460") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x13d, &(0x7f0000000580)=ANY=[@ANYBLOB="00000308004200012f0065000004219078ffffffffe0000001440c4af1aa64011d01ac1e010100000000ac1e01010a010102830b40ffffffffe00000019404000094040000940e1f17a3aee29a6034603b4476072b0affffffff0a01010164010102ffffffff0a0101010a010101ac141433ffffffffac1414bbac14143e004e204e2204819078f2c3316206d851bf409ff26b22ac6f30614ecad095c1b3d93393875f453b87d88663dc37d6b415496d63ba69165f6647207b06d5d8fdce7696544289bc3617d1da84124154fc477125adcd5b0c52b9a94b0100be22bc2df89a9e403001a457a9eebe3b0e02a8883e7dfece9784dcfe15ac325fb274bf24ea91540d609e9b2b07c7e6db43f8cde00000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000"], &(0x7f0000000240)={0x1, 0x1, [0x518, 0x5f1, 0xe93, 0x580]}) sendmsg$inet(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x2801) 1.140121463s ago: executing program 3 (id=511): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0x1c8, 0xf8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0xeb, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0xeb], 0x0, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x40000], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 1.139216923s ago: executing program 3 (id=512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x33fe0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x844, 0x0, 0x0) 907.590617ms ago: executing program 2 (id=517): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0xed, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 907.268956ms ago: executing program 2 (id=518): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x3ff) 906.968297ms ago: executing program 1 (id=519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0)='#', 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 899.431517ms ago: executing program 1 (id=520): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 889.876137ms ago: executing program 2 (id=521): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)=""/4096, 0x1000}, 0x89b0}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x10102, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffe000/0x2000)=nil, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000002f40)=ANY=[], 0x0) 805.406773ms ago: executing program 2 (id=523): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 420.709005ms ago: executing program 2 (id=525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/168}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x104, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2141, 0x9, 0x2, 0x5, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000080)=""/97, 0x61) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x30) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) socket$inet_tcp(0x2, 0x1, 0x0) 328.183671ms ago: executing program 1 (id=529): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000005140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) 254.984195ms ago: executing program 5 (id=531): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x3ff) 254.438315ms ago: executing program 0 (id=532): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@delalloc}, {@nodioread_nolock}]}, 0x1, 0x51a, &(0x7f0000000dc0)="$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") 203.580888ms ago: executing program 5 (id=533): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d50900eaff000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 203.244268ms ago: executing program 0 (id=534): syz_emit_ethernet(0xd81, &(0x7f0000002f40)=ANY=[], 0x0) 167.83053ms ago: executing program 5 (id=535): syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaae7fc00450000780000000000019078ac1e0001ac1414aa0c019078e00000e0470000000000000000110000ac1414a02eb36217e1fde38307900a010101443c00030a01012f00000000ac1414aa00000000ac1e000100000000ac1414bb000000007f00000100000000ac14142b00000800e0000002000000000000"], 0x0) (async) syz_mount_image$ext4(&(0x7f0000000d80)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@resgid}, {@stripe}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000005) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x2042) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0xfffffffffffffc90) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r4, r4}) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000780)=0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r2], 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) (async) r6 = socket(0x15, 0x803, 0x3) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 149.555861ms ago: executing program 1 (id=536): openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c004000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 128.582143ms ago: executing program 5 (id=537): r0 = socket$inet6(0xa, 0x2, 0x80000001) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) r1 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x4, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000040)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x22c0c0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r3}, {r3, 0x40}], 0x2, 0x5e5f) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x6, 0x200, 0xf}, 0x8) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 115.591423ms ago: executing program 1 (id=538): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000020b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 114.949463ms ago: executing program 0 (id=539): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8d3, 0x0, 0x31d, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x40008, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0xd7ed, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x8000000000000000, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) 69.533156ms ago: executing program 0 (id=540): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0x1c8, 0xf8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0xeb, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0xeb], 0x0, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x40000], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 68.847416ms ago: executing program 1 (id=541): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x8, 0x30, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00', @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000c40), 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) syz_socket_connect_nvme_tcp() sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x120, 0xa, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0xdb, 0xd, 0x1, 0x0, "be2084518138887b47ad91162485458a37e5564769c488a273db9f904ab3871ea0452e573df49234cf21c6e08814f9f489c7eea0644dbc2026f8f1e484e5e7f37a06901804fe028e309858607996f007c15a551d27ac77583b4f3d0091632953d552811a69134b41da8296783cff6795f31772b3b7d2a7c4b82b6624fb15a5d04191cd2abd6adce5cc17b528828ede32920a9b0953d4ec9bdad0ec14480cbe0ee8734792b72aec20262c3a64fddbcbe2fc8c3375b0708cef13d11f0b3f64be57373e7d56c08cb640f9cb0013c3d0d8cfb9ba8deb2fa2e8"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x400c044) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x74, r7, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec7304b81dd3", {0x0, 0xb}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0x4000}}}}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000000)="f62e2e7c8bd8018d531b71", 0xb}], 0x1) 68.242766ms ago: executing program 0 (id=542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r1 = io_uring_setup(0x28bb, &(0x7f0000000000)={0x0, 0x77a9, 0x1, 0x3, 0x19b}) io_uring_enter(r1, 0x45d3, 0x8073, 0x0, &(0x7f0000000080)={[0x8]}, 0x8) (async) socket$netlink(0x10, 0x3, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r4}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x29, 0x80, 0x67, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x10, 0x1, 0x81}}) 1.54173ms ago: executing program 5 (id=543): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8d3, 0x0, 0x31d, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x40008, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0xd7ed, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x8000000000000000, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.02049ms ago: executing program 0 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048044}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x49) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) setreuid(r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r6, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000014"], 0x38, 0x40044}}], 0x1, 0x4) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000400)='./file0\x00', 0x100, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, r16, 0x0, 0x0, r17, 0x2, 0x1}, 0x0, 0x0, 0x7ff, 0xe34, 0x4eb, 0xffffffffffffffff, 0x5, 0x10, 0x1, 0x800}) r18 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r19) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1000, 0x100, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x2}, [{}, {0x2, 0x1}, {0x2, 0x1, r5}, {0x2, 0x3, r6}, {0x2, 0x2, r9}, {0x2, 0x0, r11}, {0x2, 0x2, r12}], {0x4, 0x2}, [{0x8, 0x0, r13}, {0x8, 0x2, r14}, {0x8, 0x5, r17}, {0x8, 0x1, r19}, {0x8, 0x6, r20}, {0x8, 0x5, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x1}}, 0x8c, 0x2) splice(r4, &(0x7f0000000040)=0x80, r3, 0x0, 0x5, 0x2) pipe2(&(0x7f0000000000), 0x0) 0s ago: executing program 5 (id=545): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") setresuid(0xee00, 0xee00, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 5312][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.933612][ T28] audit: type=1400 audit(1770699080.982:77): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.963135][ T28] audit: type=1400 audit(1770699080.982:78): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.987971][ T28] audit: type=1400 audit(1770699080.982:79): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.998814][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.867004][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.922915][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.938753][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.967796][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.010151][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.017272][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.024439][ T3312] bridge_slave_0: entered allmulticast mode [ 36.031052][ T3312] bridge_slave_0: entered promiscuous mode [ 36.051985][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.059121][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.066438][ T3312] bridge_slave_1: entered allmulticast mode [ 36.073025][ T3312] bridge_slave_1: entered promiscuous mode [ 36.118567][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.125681][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.132958][ T3316] bridge_slave_0: entered allmulticast mode [ 36.139985][ T3316] bridge_slave_0: entered promiscuous mode [ 36.153882][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.173390][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.180559][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.187925][ T3309] bridge_slave_0: entered allmulticast mode [ 36.194614][ T3309] bridge_slave_0: entered promiscuous mode [ 36.201298][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.208474][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.215864][ T3316] bridge_slave_1: entered allmulticast mode [ 36.222441][ T3316] bridge_slave_1: entered promiscuous mode [ 36.230234][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.239565][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.246746][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.254326][ T3308] bridge_slave_0: entered allmulticast mode [ 36.261204][ T3308] bridge_slave_0: entered promiscuous mode [ 36.268142][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 36.280552][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.287806][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.295558][ T3309] bridge_slave_1: entered allmulticast mode [ 36.302083][ T3309] bridge_slave_1: entered promiscuous mode [ 36.327630][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.334739][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.342112][ T3308] bridge_slave_1: entered allmulticast mode [ 36.348740][ T3308] bridge_slave_1: entered promiscuous mode [ 36.369763][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.380111][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.406391][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.426186][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.436247][ T3312] team0: Port device team_slave_0 added [ 36.443149][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.453820][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.466875][ T3309] team0: Port device team_slave_0 added [ 36.482485][ T3312] team0: Port device team_slave_1 added [ 36.488869][ T3316] team0: Port device team_slave_0 added [ 36.502579][ T3309] team0: Port device team_slave_1 added [ 36.508995][ T3316] team0: Port device team_slave_1 added [ 36.552875][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.560169][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.586315][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.597985][ T3308] team0: Port device team_slave_0 added [ 36.603647][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.610936][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.618188][ T3311] bridge_slave_0: entered allmulticast mode [ 36.624872][ T3311] bridge_slave_0: entered promiscuous mode [ 36.636434][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.643426][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.669491][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.680673][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.687702][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.713751][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.725548][ T3308] team0: Port device team_slave_1 added [ 36.731288][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.738415][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.745660][ T3311] bridge_slave_1: entered allmulticast mode [ 36.752503][ T3311] bridge_slave_1: entered promiscuous mode [ 36.759119][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.766221][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.792239][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.803918][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.810953][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.836908][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.860095][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.867095][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.893213][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.928547][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.935677][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.961982][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.974129][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.983713][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.990778][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.016735][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.049035][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.071974][ T3316] hsr_slave_0: entered promiscuous mode [ 37.078173][ T3316] hsr_slave_1: entered promiscuous mode [ 37.095311][ T3311] team0: Port device team_slave_0 added [ 37.102398][ T3311] team0: Port device team_slave_1 added [ 37.110048][ T3312] hsr_slave_0: entered promiscuous mode [ 37.116174][ T3312] hsr_slave_1: entered promiscuous mode [ 37.122052][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.127972][ T3312] Cannot create hsr debugfs directory [ 37.136006][ T3309] hsr_slave_0: entered promiscuous mode [ 37.142243][ T3309] hsr_slave_1: entered promiscuous mode [ 37.148382][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 37.154120][ T3309] Cannot create hsr debugfs directory [ 37.209751][ T3308] hsr_slave_0: entered promiscuous mode [ 37.216356][ T3308] hsr_slave_1: entered promiscuous mode [ 37.222332][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 37.228152][ T3308] Cannot create hsr debugfs directory [ 37.234651][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.241998][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.268024][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.289582][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.296603][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.322624][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.398630][ T3311] hsr_slave_0: entered promiscuous mode [ 37.404714][ T3311] hsr_slave_1: entered promiscuous mode [ 37.410891][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 37.416697][ T3311] Cannot create hsr debugfs directory [ 37.558519][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.567992][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.585939][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.595130][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.611818][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.622706][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.631804][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.645346][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.679900][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.689463][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.700456][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.710419][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.751230][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.760555][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.773877][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.793570][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.808543][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.816011][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.828334][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.837304][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.852788][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.889293][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.905290][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.912550][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.930622][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.937741][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.951018][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.972662][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.983207][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.999159][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.014809][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021996][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.042600][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.049882][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.076462][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.087603][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.099884][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.110377][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.145844][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.158227][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.178592][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.185933][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.208978][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.216189][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.235454][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.242625][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.257391][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.264500][ T1658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.274417][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.288193][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.319913][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.338669][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.345801][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.363513][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.400513][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.407729][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.457247][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.512580][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.571910][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.614454][ T3316] veth0_vlan: entered promiscuous mode [ 38.636399][ T3316] veth1_vlan: entered promiscuous mode [ 38.710201][ T3309] veth0_vlan: entered promiscuous mode [ 38.729334][ T3309] veth1_vlan: entered promiscuous mode [ 38.753676][ T3312] veth0_vlan: entered promiscuous mode [ 38.763695][ T3308] veth0_vlan: entered promiscuous mode [ 38.779566][ T3316] veth0_macvtap: entered promiscuous mode [ 38.787428][ T3316] veth1_macvtap: entered promiscuous mode [ 38.795440][ T3311] veth0_vlan: entered promiscuous mode [ 38.803245][ T3312] veth1_vlan: entered promiscuous mode [ 38.815431][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.824425][ T3308] veth1_vlan: entered promiscuous mode [ 38.839175][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.847453][ T3311] veth1_vlan: entered promiscuous mode [ 38.859787][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.873664][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.885884][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.895119][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.912279][ T3309] veth0_macvtap: entered promiscuous mode [ 38.920019][ T3308] veth0_macvtap: entered promiscuous mode [ 38.934020][ T3308] veth1_macvtap: entered promiscuous mode [ 38.942109][ T3309] veth1_macvtap: entered promiscuous mode [ 38.951599][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.951616][ T28] audit: type=1400 audit(1770699086.062:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UJGnmt/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.973547][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.991936][ T3312] veth0_macvtap: entered promiscuous mode [ 38.997713][ T28] audit: type=1400 audit(1770699086.102:91): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.009543][ T3311] veth0_macvtap: entered promiscuous mode [ 39.019823][ T28] audit: type=1400 audit(1770699086.102:92): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UJGnmt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.032338][ T3311] veth1_macvtap: entered promiscuous mode [ 39.050638][ T28] audit: type=1400 audit(1770699086.102:93): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.050667][ T28] audit: type=1400 audit(1770699086.102:94): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UJGnmt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.085615][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.104662][ T28] audit: type=1400 audit(1770699086.102:95): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UJGnmt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.121704][ T3312] veth1_macvtap: entered promiscuous mode [ 39.139394][ T28] audit: type=1400 audit(1770699086.102:96): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.156133][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.173414][ T28] audit: type=1400 audit(1770699086.292:97): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.196295][ T28] audit: type=1400 audit(1770699086.292:98): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.222423][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.231441][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.240153][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.241329][ T1731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.265373][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.282730][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.297333][ T28] audit: type=1400 audit(1770699086.412:99): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.326866][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.353614][ T1731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394151][ T1731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.419458][ T1731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457218][ T1731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.472600][ T3488] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 39.483428][ T1731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.493679][ T1731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.531845][ T1731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.560742][ T1731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.580614][ T1731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.608741][ T1731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.653427][ T1731] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.695324][ T1731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.704294][ T3490] loop0: detected capacity change from 0 to 8192 [ 39.711116][ T3493] loop3: detected capacity change from 0 to 8192 [ 39.726170][ T1731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.740504][ T3498] loop2: detected capacity change from 0 to 1024 [ 39.763869][ T3493] FAULT_INJECTION: forcing a failure. [ 39.763869][ T3493] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.777259][ T3493] CPU: 1 UID: 0 PID: 3493 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.777295][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 39.777316][ T3493] Call Trace: [ 39.777327][ T3493] [ 39.777337][ T3493] __dump_stack+0x1d/0x30 [ 39.777369][ T3493] dump_stack_lvl+0x95/0xd0 [ 39.777458][ T3493] dump_stack+0x15/0x1b [ 39.777484][ T3493] should_fail_ex+0x263/0x280 [ 39.777521][ T3493] should_fail+0xb/0x20 [ 39.777608][ T3493] should_fail_usercopy+0x1a/0x20 [ 39.777641][ T3493] strncpy_from_user+0x27/0x250 [ 39.777668][ T3493] getname_flags+0xad/0x3b0 [ 39.777837][ T3493] do_sys_openat2+0x60/0x150 [ 39.777868][ T3493] __x64_sys_openat+0xf2/0x120 [ 39.777902][ T3493] x64_sys_call+0x2b07/0x3000 [ 39.777954][ T3493] do_syscall_64+0xc0/0x2a0 [ 39.777984][ T3493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.778089][ T3493] RIP: 0033:0x7f6305d4af79 [ 39.778114][ T3493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.778190][ T3493] RSP: 002b:00007f630479f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.778219][ T3493] RAX: ffffffffffffffda RBX: 00007f6305fc5fa0 RCX: 00007f6305d4af79 [ 39.778234][ T3493] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 39.778248][ T3493] RBP: 00007f630479f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.778260][ T3493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.778272][ T3493] R13: 00007f6305fc6038 R14: 00007f6305fc5fa0 R15: 00007fffcef7dfd8 [ 39.778350][ T3493] [ 39.779786][ T3498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 39.786841][ T1731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.805375][ T3498] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.856183][ T1731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.885416][ T3498] EXT4-fs error (device loop2): ext4_get_journal_inode:5854: inode #32: comm syz.2.3: iget: special inode unallocated [ 39.992665][ T3498] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 40.003216][ T3503] loop4: detected capacity change from 0 to 8192 [ 40.031546][ T3498] EXT4-fs (loop2): Remounting filesystem read-only [ 40.067588][ T3498] EXT4-fs (loop2): no journal found [ 40.072899][ T3498] EXT4-fs (loop2): can't get journal size [ 40.093802][ T3498] EXT4-fs (loop2): filesystem is read-only [ 40.100660][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.126893][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.212814][ T3520] FAULT_INJECTION: forcing a failure. [ 40.212814][ T3520] name failslab, interval 1, probability 0, space 0, times 0 [ 40.225537][ T3520] CPU: 1 UID: 0 PID: 3520 Comm: syz.4.15 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.225570][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 40.225586][ T3520] Call Trace: [ 40.225594][ T3520] [ 40.225601][ T3520] __dump_stack+0x1d/0x30 [ 40.225711][ T3520] dump_stack_lvl+0x95/0xd0 [ 40.225739][ T3520] dump_stack+0x15/0x1b [ 40.225760][ T3520] should_fail_ex+0x263/0x280 [ 40.225798][ T3520] should_failslab+0x8c/0xb0 [ 40.225889][ T3520] kmem_cache_alloc_noprof+0x68/0x490 [ 40.225913][ T3520] ? audit_log_start+0x34c/0x730 [ 40.225949][ T3520] audit_log_start+0x34c/0x730 [ 40.225984][ T3520] ? kstrtouint+0x76/0xc0 [ 40.226019][ T3520] audit_seccomp+0x47/0x100 [ 40.226094][ T3520] ? __seccomp_filter+0x8db/0x1350 [ 40.226139][ T3520] __seccomp_filter+0x8ec/0x1350 [ 40.226184][ T3520] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.226253][ T3520] ? vfs_write+0x86e/0x9f0 [ 40.226405][ T3520] __secure_computing+0x81/0x150 [ 40.226439][ T3520] syscall_trace_enter+0xce/0x1e0 [ 40.226476][ T3520] do_syscall_64+0x9a/0x2a0 [ 40.226513][ T3520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.226549][ T3520] RIP: 0033:0x7f9beb84af79 [ 40.226567][ T3520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.226585][ T3520] RSP: 002b:00007f9bea29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 40.226605][ T3520] RAX: ffffffffffffffda RBX: 00007f9bebac5fa0 RCX: 00007f9beb84af79 [ 40.226698][ T3520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 40.226716][ T3520] RBP: 00007f9bea29f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.226734][ T3520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.226751][ T3520] R13: 00007f9bebac6038 R14: 00007f9bebac5fa0 R15: 00007fff4b10e308 [ 40.226770][ T3520] [ 40.264875][ T3522] loop2: detected capacity change from 0 to 1024 [ 40.371392][ T3527] loop4: detected capacity change from 0 to 1024 [ 40.440284][ T3522] ======================================================= [ 40.440284][ T3522] WARNING: The mand mount option has been deprecated and [ 40.440284][ T3522] and is ignored by this kernel. Remove the mand [ 40.440284][ T3522] option from the mount to silence this warning. [ 40.440284][ T3522] ======================================================= [ 40.492039][ T3529] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.499070][ T3527] EXT4-fs: Ignoring removed oldalloc option [ 40.515629][ T3531] loop3: detected capacity change from 0 to 1024 [ 40.518622][ T3527] EXT4-fs: Mount option(s) incompatible with ext2 [ 40.535374][ T3531] EXT4-fs: Ignoring removed orlov option [ 40.549989][ T3522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.579309][ T3537] team0: Device gtp0 is up. Set it down before adding it as a team port [ 40.608559][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.620995][ T3531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.724004][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.735675][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.770318][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.823526][ C0] hrtimer: interrupt took 10587 ns [ 40.830409][ T3554] loop3: detected capacity change from 0 to 1024 [ 40.836954][ T3544] loop2: detected capacity change from 0 to 8192 [ 40.857371][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.876170][ T3544] vfat: Unknown parameter '0x00000000000000030x0000000000000003' [ 40.931994][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 41.136585][ T3560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.175364][ T3566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'. [ 41.207165][ T3560] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 41.215922][ T3564] Zero length message leads to an empty skb [ 41.387780][ T3582] loop4: detected capacity change from 0 to 1024 [ 41.443691][ T3582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.553803][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.751772][ T3554] syz.3.24 (3554) used greatest stack depth: 7232 bytes left [ 41.771952][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.772576][ T3605] FAULT_INJECTION: forcing a failure. [ 41.772576][ T3605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.772610][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.772642][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.772659][ T3605] Call Trace: [ 41.772668][ T3605] [ 41.772678][ T3605] __dump_stack+0x1d/0x30 [ 41.772759][ T3605] dump_stack_lvl+0x95/0xd0 [ 41.772788][ T3605] dump_stack+0x15/0x1b [ 41.772815][ T3605] should_fail_ex+0x263/0x280 [ 41.772848][ T3605] should_fail+0xb/0x20 [ 41.772878][ T3605] should_fail_usercopy+0x1a/0x20 [ 41.772930][ T3605] _copy_to_user+0x20/0xa0 [ 41.772955][ T3605] simple_read_from_buffer+0xb5/0x130 [ 41.772991][ T3605] proc_fail_nth_read+0x10e/0x150 [ 41.773021][ T3605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.773112][ T3605] vfs_read+0x1ab/0x7f0 [ 41.773155][ T3605] ? __rcu_read_unlock+0x4e/0x70 [ 41.773191][ T3605] ? __fget_files+0x184/0x1c0 [ 41.773217][ T3605] ? mutex_lock+0x57/0x90 [ 41.773271][ T3605] ksys_read+0xdc/0x1a0 [ 41.773304][ T3605] __x64_sys_read+0x40/0x50 [ 41.773375][ T3605] x64_sys_call+0x2889/0x3000 [ 41.773409][ T3605] do_syscall_64+0xc0/0x2a0 [ 41.773447][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.773473][ T3605] RIP: 0033:0x7f4c8126b84e [ 41.773514][ T3605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.773538][ T3605] RSP: 002b:00007f4c7fcfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.773608][ T3605] RAX: ffffffffffffffda RBX: 00007f4c7fcff6c0 RCX: 00007f4c8126b84e [ 41.773622][ T3605] RDX: 000000000000000f RSI: 00007f4c7fcff0a0 RDI: 0000000000000004 [ 41.773635][ T3605] RBP: 00007f4c7fcff090 R08: 0000000000000000 R09: 0000000000000000 [ 41.773719][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.773734][ T3605] R13: 00007f4c81526038 R14: 00007f4c81525fa0 R15: 00007ffc7f22c1a8 [ 41.773760][ T3605] [ 41.817031][ T3607] Illegal XDP return value 4294967282 on prog (id 10) dev N/A, expect packet loss! [ 41.930751][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.930773][ T3622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.930799][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.930846][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.965420][ T3627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.965469][ T3627] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 42.007530][ T3628] xt_CT: No such helper "netbios-ns" [ 42.107945][ T3640] netlink: 'syz.4.55': attribute type 4 has an invalid length. [ 42.107966][ T3640] netlink: 17 bytes leftover after parsing attributes in process `syz.4.55'. [ 42.208416][ T3642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.212331][ T3642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.219281][ T3642] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.219765][ T3642] EXT4-fs (loop4): 1 truncate cleaned up [ 42.220332][ T3642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.241467][ T3312] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 42.241667][ T3312] EXT4-fs (loop4): Remounting filesystem read-only [ 42.593771][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 42.642734][ T3645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.724607][ T1731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.798037][ T1731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.824322][ T3668] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 42.854903][ T3668] SELinux: failed to load policy [ 42.862380][ T1731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.874557][ T3670] EXT4-fs: Ignoring removed nobh option [ 42.908044][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.935765][ T1731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.936307][ T3677] tmpfs: Bad value for 'mpol' [ 42.957274][ T3670] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.070746][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.085671][ T1731] bridge_slave_1: left allmulticast mode [ 43.091385][ T1731] bridge_slave_1: left promiscuous mode [ 43.097176][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.127782][ T1731] bridge_slave_0: left allmulticast mode [ 43.133518][ T1731] bridge_slave_0: left promiscuous mode [ 43.139331][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.318448][ T1731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.336901][ T1731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.357676][ T1731] bond0 (unregistering): Released all slaves [ 43.432637][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.467187][ T1731] hsr_slave_0: left promiscuous mode [ 43.485073][ T1731] hsr_slave_1: left promiscuous mode [ 43.491035][ T1731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.498484][ T1731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.509454][ T1731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.513484][ T3714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, [ 43.517224][ T1731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.517219][ T3714] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.556355][ T3714] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 43.569036][ T3714] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.569036][ T3714] [ 43.578748][ T3714] EXT4-fs (loop0): Total free blocks count 0 [ 43.584904][ T3714] EXT4-fs (loop0): Free/Dirty block details [ 43.590843][ T3714] EXT4-fs (loop0): free_blocks=2415919504 [ 43.597059][ T3714] EXT4-fs (loop0): dirty_blocks=32 [ 43.602220][ T3714] EXT4-fs (loop0): Block reservation details [ 43.608505][ T3714] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 43.619375][ T1731] veth1_macvtap: left promiscuous mode [ 43.635045][ T1731] veth0_macvtap: left promiscuous mode [ 43.640918][ T1731] veth1_vlan: left promiscuous mode [ 43.648508][ T1731] veth0_vlan: left promiscuous mode [ 43.698647][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.797907][ T1731] team0 (unregistering): Port device team_slave_1 removed [ 43.808188][ T1731] team0 (unregistering): Port device team_slave_0 removed [ 43.904445][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.932570][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.007582][ T3755] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 44.007582][ T3755] program syz.3.87 not setting count and/or reply_len properly [ 44.038550][ T3751] EXT4-fs: Ignoring removed oldalloc option [ 44.063398][ T3671] chnl_net:caif_netlink_parms(): no params data found [ 44.070295][ T3753] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.081924][ T3753] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.102970][ T3751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.121217][ T3753] JBD2: no valid journal superblock found [ 44.127094][ T3753] EXT4-fs (loop0): Could not load journal inode [ 44.128587][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 44.128644][ T28] audit: type=1400 audit(1770699091.242:355): avc: denied { read } for pid=3747 comm="syz.2.85" path="/13/file1/ext4" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.194224][ T3765] EXT4-fs: Ignoring removed nobh option [ 44.258970][ T3765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.274015][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.286576][ T3765] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.321572][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.328874][ T3671] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.363278][ T28] audit: type=1400 audit(1770699091.452:356): avc: denied { append } for pid=3764 comm="syz.3.89" path="/14/mnt/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.388276][ T28] audit: type=1400 audit(1770699091.452:357): avc: denied { ioctl } for pid=3764 comm="syz.3.89" path="/14/mnt/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop3" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.418361][ T3671] bridge_slave_0: entered allmulticast mode [ 44.428821][ T3671] bridge_slave_0: entered promiscuous mode [ 44.432152][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.442016][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.450896][ T3671] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.458983][ T3671] bridge_slave_1: entered allmulticast mode [ 44.466086][ T3671] bridge_slave_1: entered promiscuous mode [ 44.472155][ T28] audit: type=1400 audit(1770699091.502:358): avc: denied { ioctl } for pid=3780 comm="syz.1.94" path="socket:[5494]" dev="sockfs" ino=5494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.485643][ T3784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.496742][ T28] audit: type=1400 audit(1770699091.542:359): avc: denied { bind } for pid=3780 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.551998][ T3671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.561315][ T3784] FAULT_INJECTION: forcing a failure. [ 44.561315][ T3784] name failslab, interval 1, probability 0, space 0, times 0 [ 44.561352][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.561461][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 44.561478][ T3784] Call Trace: [ 44.561485][ T3784] [ 44.561495][ T3784] __dump_stack+0x1d/0x30 [ 44.561526][ T3784] dump_stack_lvl+0x95/0xd0 [ 44.561559][ T3784] dump_stack+0x15/0x1b [ 44.561591][ T3784] should_fail_ex+0x263/0x280 [ 44.561625][ T3784] should_failslab+0x8c/0xb0 [ 44.561654][ T3784] __kmalloc_noprof+0xb8/0x580 [ 44.561744][ T3784] ? ext4_find_extent+0x16b/0x7a0 [ 44.561774][ T3784] ext4_find_extent+0x16b/0x7a0 [ 44.561804][ T3784] ext4_ext_map_blocks+0x128/0x38a0 [ 44.561834][ T3784] ? _prb_read_valid+0x8f5/0x950 [ 44.561873][ T3784] ? xas_load+0x413/0x430 [ 44.561901][ T3784] ? xas_load+0x413/0x430 [ 44.562039][ T3784] ext4_map_query_blocks+0xae/0x550 [ 44.562234][ T3784] ? ext4_es_lookup_extent+0x3ac/0x540 [ 44.562313][ T3784] ? xas_load+0x413/0x430 [ 44.562390][ T3784] ext4_map_blocks+0x398/0xd70 [ 44.562498][ T3784] ext4_getblk+0x128/0x530 [ 44.562606][ T3784] ext4_bread_batch+0x5c/0x320 [ 44.562710][ T3784] __ext4_find_entry+0x852/0xdf0 [ 44.562779][ T3784] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 44.562914][ T3784] ? __rcu_read_unlock+0x4e/0x70 [ 44.563006][ T3784] ? d_alloc_parallel+0xc01/0xce0 [ 44.563142][ T3784] ext4_lookup+0xcd/0x3a0 [ 44.563226][ T3784] __lookup_slow+0x19d/0x260 [ 44.563318][ T3784] lookup_slow+0x3c/0x60 [ 44.563463][ T3784] path_lookupat+0x2f7/0x500 [ 44.563578][ T3784] filename_lookup+0x190/0x390 [ 44.563719][ T3784] path_listxattrat+0xd1/0x2b0 [ 44.563746][ T3784] __x64_sys_listxattr+0x4a/0x60 [ 44.563855][ T3784] x64_sys_call+0x2a62/0x3000 [ 44.563983][ T3784] do_syscall_64+0xc0/0x2a0 [ 44.564087][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.564153][ T3784] RIP: 0033:0x7fed0554af79 [ 44.564207][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.564299][ T3784] RSP: 002b:00007fed03f9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 44.564430][ T3784] RAX: ffffffffffffffda RBX: 00007fed057c5fa0 RCX: 00007fed0554af79 [ 44.564484][ T3784] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000080 [ 44.564527][ T3784] RBP: 00007fed03f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.564569][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.564620][ T3784] R13: 00007fed057c6038 R14: 00007fed057c5fa0 R15: 00007ffd9a0f0978 [ 44.564695][ T3784] [ 44.835347][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.869513][ T3671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.923951][ T3802] capability: warning: `syz.3.99' uses 32-bit capabilities (legacy support in use) [ 44.944874][ T28] audit: type=1326 audit(1770699092.052:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c812aaf79 code=0x7ffc0000 [ 44.968568][ T28] audit: type=1326 audit(1770699092.052:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c812aaf79 code=0x7ffc0000 [ 44.994091][ T3806] set_capacity_and_notify: 13 callbacks suppressed [ 44.994106][ T3806] loop0: detected capacity change from 0 to 512 [ 44.999048][ T28] audit: type=1400 audit(1770699092.062:362): avc: denied { name_bind } for pid=3801 comm="syz.3.99" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.031098][ T3671] team0: Port device team_slave_0 added [ 45.037416][ T28] audit: type=1326 audit(1770699092.112:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c812aaf79 code=0x7ffc0000 [ 45.067437][ T3671] team0: Port device team_slave_1 added [ 45.073189][ T3806] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.076190][ T3810] loop3: detected capacity change from 0 to 736 [ 45.124415][ T28] audit: type=1400 audit(1770699092.222:364): avc: denied { mount } for pid=3808 comm="syz.3.101" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.159903][ T3671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.167086][ T3671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.193059][ T3671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.226822][ T3806] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 45.261312][ T3816] loop2: detected capacity change from 0 to 8192 [ 45.307689][ T3671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.314826][ T3671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.340845][ T3671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.433151][ T3840] loop0: detected capacity change from 0 to 512 [ 45.455346][ T3843] loop2: detected capacity change from 0 to 1024 [ 45.463622][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.481263][ T3840] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.501553][ T3843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.539796][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.554714][ T3671] hsr_slave_0: entered promiscuous mode [ 45.567728][ T3671] hsr_slave_1: entered promiscuous mode [ 45.574123][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.583974][ T3671] debugfs: 'hsr0' already exists in 'hsr' [ 45.589785][ T3671] Cannot create hsr debugfs directory [ 45.804958][ T3871] __nla_validate_parse: 7 callbacks suppressed [ 45.804981][ T3871] netlink: 52 bytes leftover after parsing attributes in process `syz.3.114'. [ 45.825993][ T3873] netlink: 52 bytes leftover after parsing attributes in process `syz.1.115'. [ 45.908154][ T3671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.931632][ T3671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.968591][ T3671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.008322][ T3671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.034143][ T3902] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 46.095651][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 46.121037][ T3918] netlink: 'syz.1.126': attribute type 4 has an invalid length. [ 46.130459][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 46.139834][ T3913] syzkaller0: entered promiscuous mode [ 46.145547][ T3913] syzkaller0: entered allmulticast mode [ 46.162432][ T3913] tipc: Started in network mode [ 46.167403][ T3913] tipc: Node identity 32b90301b36f, cluster identity 4711 [ 46.174688][ T3913] tipc: Enabled bearer , priority 0 [ 46.188420][ T3913] tipc: Resetting bearer [ 46.197380][ T3913] tipc: Disabling bearer [ 46.227967][ T3926] loop2: detected capacity change from 0 to 256 [ 46.242930][ T3671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.275675][ T3929] loop2: detected capacity change from 0 to 256 [ 46.293785][ T3671] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.328654][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.335788][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.350187][ T3930] loop3: detected capacity change from 0 to 1024 [ 46.367167][ T3935] loop1: detected capacity change from 0 to 128 [ 46.370043][ T3930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.420387][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.427637][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.450294][ T3935] syz.1.132: attempt to access beyond end of device [ 46.450294][ T3935] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 46.532943][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.604085][ T3671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.636249][ T3957] loop3: detected capacity change from 0 to 1024 [ 46.662088][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.956118][ T3979] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.956118][ T3979] program syz.1.142 not setting count and/or reply_len properly [ 47.001265][ T3671] veth0_vlan: entered promiscuous mode [ 47.019892][ T3671] veth1_vlan: entered promiscuous mode [ 47.044801][ T3984] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.058842][ T3671] veth0_macvtap: entered promiscuous mode [ 47.065180][ T3984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.143'. [ 47.077359][ T3671] veth1_macvtap: entered promiscuous mode [ 47.090093][ T3984] smc: removing net device bond0 with user defined pnetid SYZ2 [ 47.115727][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.162278][ T3987] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.144'. [ 47.171887][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.182783][ T3984] bond0 (unregistering): Released all slaves [ 47.193719][ T3987] 0XD: renamed from gretap0 (while UP) [ 47.202134][ T3987] 0XD: entered allmulticast mode [ 47.214827][ T3671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.231713][ T3671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.258325][ T309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.293253][ T3991] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 47.301044][ T3991] netlink: 17 bytes leftover after parsing attributes in process `syz.1.146'. [ 47.311349][ T309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.328280][ T309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.345542][ T309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.395709][ T3995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.405781][ T3995] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (65024!=33349) [ 47.415484][ T3995] EXT4-fs (loop2): group descriptors corrupted! [ 47.459029][ T3999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 47.532290][ T4003] batman_adv: batadv0: Adding interface: dummy0 [ 47.538659][ T4003] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.626271][ T4008] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.641024][ T4008] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.647560][ T4003] batman_adv: batadv0: Interface activated: dummy0 [ 47.652011][ T4008] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.150: bad orphan inode 15 [ 47.664099][ T4008] loop1: lost filesystem error report for type 5 error -117 [ 47.666681][ T4008] ext4_test_bit(bit=14, block=18) = 1 [ 47.679558][ T4008] is_bad_inode(inode)=0 [ 47.683900][ T4008] NEXT_ORPHAN(inode)=1023 [ 47.688508][ T4008] max_ino=32 [ 47.691780][ T4008] i_nlink=0 [ 47.697541][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.707695][ T3997] batadv0: mtu less than device minimum [ 47.713826][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.724289][ T4008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.150: bg 0: block 161: padding at end of block bitmap is not set [ 47.725222][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.738732][ T4008] loop1: lost filesystem error report for type 5 error -117 [ 47.749715][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.768313][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.779375][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.790274][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.801299][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.812418][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.823530][ T3997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.858129][ T4008] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 47.867089][ T4008] loop1: lost filesystem error report for type 5 error -117 [ 47.905838][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.992791][ T4024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'. [ 48.035394][ T4008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.067435][ T4024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.090160][ T4024] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.144903][ T3390] IPVS: starting estimator thread 0... [ 48.211557][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245066][ T4038] IPVS: using max 2112 ests per chain, 105600 per kthread [ 48.360065][ T4047] netlink: 9 bytes leftover after parsing attributes in process `syz.1.163'. [ 48.706296][ T4065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.724109][ T4068] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 48.732012][ T4068] SELinux: failed to load policy [ 48.750992][ T4065] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.786270][ T4065] netlink: 'syz.1.171': attribute type 7 has an invalid length. [ 48.840745][ T4074] tipc: Can't bind to reserved service type 0 [ 48.934363][ T4081] netlink: 'syz.5.176': attribute type 2 has an invalid length. [ 49.118687][ T4105] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 49.127807][ T4105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 49.135152][ T4105] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.185: bad orphan inode 15 [ 49.145165][ T4105] loop5: lost filesystem error report for type 5 error -117 [ 49.145450][ T4105] ext4_test_bit(bit=14, block=18) = 1 [ 49.158477][ T4105] is_bad_inode(inode)=0 [ 49.162652][ T4105] NEXT_ORPHAN(inode)=1023 [ 49.167329][ T4105] max_ino=32 [ 49.170661][ T4105] i_nlink=0 [ 49.174227][ T4105] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.185: bg 0: block 161: padding at end of block bitmap is not set [ 49.188546][ T4105] loop5: lost filesystem error report for type 5 error -117 [ 49.188788][ T4105] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 49.205096][ T4105] loop5: lost filesystem error report for type 5 error -117 [ 49.206050][ T4105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.226198][ T4105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.398591][ T4109] xt_hashlimit: size too large, truncated to 1048576 [ 49.450910][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 49.450930][ T28] audit: type=1400 audit(1770699096.562:502): avc: denied { connect } for pid=4108 comm="syz.5.186" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.568630][ T36] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.587825][ T4115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1114 sclass=netlink_route_socket pid=4115 comm=syz.0.188 [ 49.601058][ T36] EXT4-fs (loop1): Remounting filesystem read-only [ 49.610567][ T28] audit: type=1400 audit(1770699096.722:503): avc: denied { execmod } for pid=4114 comm="syz.0.188" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 49.636685][ T28] audit: type=1400 audit(1770699096.722:504): avc: denied { execute } for pid=4114 comm="syz.0.188" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 49.663500][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.698659][ T28] audit: type=1400 audit(1770699096.802:505): avc: denied { setcheckreqprot } for pid=4116 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.733050][ T4119] EXT4-fs: Ignoring removed nobh option [ 49.739069][ T4119] EXT4-fs: Ignoring removed oldalloc option [ 49.751191][ T4119] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.189: Parent and EA inode have the same ino 15 [ 49.763786][ T4119] loop1: lost filesystem error report for type 5 error -117 [ 49.771913][ T4119] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.189: Parent and EA inode have the same ino 15 [ 49.791520][ T4119] loop1: lost filesystem error report for type 5 error -117 [ 49.794855][ T4121] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.825950][ T4119] EXT4-fs (loop1): 1 orphan inode deleted [ 49.835213][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.836855][ T4121] EXT4-fs error (device loop0): ext4_get_journal_inode:5854: inode #3: comm syz.0.191: iget: special inode unallocated [ 49.860477][ T4121] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.861158][ T4121] EXT4-fs (loop0): no journal found [ 49.875674][ T4121] EXT4-fs (loop0): can't get journal size [ 49.881745][ T4121] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.891809][ T4121] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #3: comm syz.0.191: iget: special inode unallocated [ 49.904902][ T4121] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.905217][ T4121] EXT4-fs (loop0): failed to initialize system zone (-117) [ 49.923435][ T4121] EXT4-fs (loop0): mount failed [ 49.924231][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.958405][ T4129] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.977466][ T4129] EXT4-fs error (device loop0): ext4_get_journal_inode:5854: inode #3: comm syz.0.191: iget: special inode unallocated [ 49.990159][ T4129] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.010485][ T4129] EXT4-fs (loop0): no journal found [ 50.024985][ T4129] EXT4-fs (loop0): can't get journal size [ 50.032308][ T4131] batman_adv: batadv0: Adding interface: dummy0 [ 50.035493][ T4129] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.038932][ T4131] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.051661][ T4129] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #3: comm syz.0.191: iget: special inode unallocated [ 50.074035][ T4131] batman_adv: batadv0: Interface activated: dummy0 [ 50.086358][ T4129] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.100065][ T4129] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.116602][ T4129] EXT4-fs (loop0): mount failed [ 50.189287][ T28] audit: type=1400 audit(1770699097.302:506): avc: denied { listen } for pid=4132 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.272591][ T28] audit: type=1400 audit(1770699097.382:507): avc: denied { setopt } for pid=4152 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.292159][ T4153] set_capacity_and_notify: 12 callbacks suppressed [ 50.292180][ T4153] loop5: detected capacity change from 0 to 1024 [ 50.310609][ T4154] smc: adding net device bond0 with user defined pnetid SYZ2 [ 50.318630][ T4154] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 50.330124][ T4153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.332301][ T4154] smc: removing net device bond0 with user defined pnetid SYZ2 [ 50.343186][ T4153] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.350811][ T4154] bond0 (unregistering): Released all slaves [ 50.370227][ T4153] netlink: 'syz.5.200': attribute type 7 has an invalid length. [ 50.396940][ T4159] FAULT_INJECTION: forcing a failure. [ 50.396940][ T4159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.410298][ T4159] CPU: 0 UID: 0 PID: 4159 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.410322][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 50.410398][ T4159] Call Trace: [ 50.410405][ T4159] [ 50.410412][ T4159] __dump_stack+0x1d/0x30 [ 50.410434][ T4159] dump_stack_lvl+0x95/0xd0 [ 50.410453][ T4159] dump_stack+0x15/0x1b [ 50.410471][ T4159] should_fail_ex+0x263/0x280 [ 50.410559][ T4159] should_fail_alloc_page+0xf2/0x100 [ 50.410578][ T4159] __alloc_frozen_pages_noprof+0x108/0x350 [ 50.410605][ T4159] alloc_pages_mpol+0xb3/0x260 [ 50.410691][ T4159] folio_alloc_mpol_noprof+0x39/0x80 [ 50.410717][ T4159] shmem_get_folio_gfp+0x3da/0xd60 [ 50.410745][ T4159] shmem_fault+0xf6/0x250 [ 50.410769][ T4159] __do_fault+0xbc/0x200 [ 50.410872][ T4159] handle_mm_fault+0xfa1/0x3030 [ 50.410899][ T4159] ? _raw_spin_lock+0x52/0xa0 [ 50.410927][ T4159] ? __pte_offset_map_lock+0x1d9/0x240 [ 50.410962][ T4159] __get_user_pages+0x1023/0x1ea0 [ 50.410997][ T4159] __gup_longterm_locked+0xbad/0xe30 [ 50.411029][ T4159] ? should_fail_ex+0xd9/0x280 [ 50.411111][ T4159] pin_user_pages_remote+0x7e/0xb0 [ 50.411193][ T4159] process_vm_rw+0x49b/0x9c0 [ 50.411246][ T4159] __x64_sys_process_vm_writev+0x78/0x90 [ 50.411266][ T4159] x64_sys_call+0x27ef/0x3000 [ 50.411306][ T4159] do_syscall_64+0xc0/0x2a0 [ 50.411343][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.411377][ T4159] RIP: 0033:0x7fed0554af79 [ 50.411441][ T4159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.411457][ T4159] RSP: 002b:00007fed03f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 50.411474][ T4159] RAX: ffffffffffffffda RBX: 00007fed057c5fa0 RCX: 00007fed0554af79 [ 50.411487][ T4159] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000062 [ 50.411498][ T4159] RBP: 00007fed03f9f090 R08: 000000000000023a R09: 0000000000000000 [ 50.411510][ T4159] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 50.411551][ T4159] R13: 00007fed057c6038 R14: 00007fed057c5fa0 R15: 00007ffd9a0f0978 [ 50.411569][ T4159] [ 50.698391][ T4167] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 50.709348][ T4167] bond1 (unregistering): Released all slaves [ 50.822808][ T4179] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 50.822808][ T4179] program syz.1.209 not setting count and/or reply_len properly [ 50.859983][ T4180] loop0: detected capacity change from 0 to 256 [ 50.882301][ T4182] __nla_validate_parse: 7 callbacks suppressed [ 50.882321][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 51.096801][ T4189] loop1: detected capacity change from 0 to 512 [ 51.130633][ T12] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.156330][ T4189] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 51.165481][ T12] EXT4-fs (loop5): Remounting filesystem read-only [ 51.172685][ T3671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.214354][ T4194] FAULT_INJECTION: forcing a failure. [ 51.214354][ T4194] name failslab, interval 1, probability 0, space 0, times 0 [ 51.227869][ T4194] CPU: 1 UID: 0 PID: 4194 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.227898][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.227912][ T4194] Call Trace: [ 51.227922][ T4194] [ 51.227932][ T4194] __dump_stack+0x1d/0x30 [ 51.227965][ T4194] dump_stack_lvl+0x95/0xd0 [ 51.228010][ T4194] dump_stack+0x15/0x1b [ 51.228030][ T4194] should_fail_ex+0x263/0x280 [ 51.228060][ T4194] should_failslab+0x8c/0xb0 [ 51.228081][ T4194] kmem_cache_alloc_noprof+0x68/0x490 [ 51.228110][ T4194] ? skb_clone+0x151/0x1f0 [ 51.228209][ T4194] skb_clone+0x151/0x1f0 [ 51.228280][ T4194] __netlink_deliver_tap+0x2c9/0x500 [ 51.228348][ T4194] netlink_unicast+0x66b/0x690 [ 51.228387][ T4194] netlink_sendmsg+0x5c8/0x6f0 [ 51.228451][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.228494][ T4194] sock_write_iter+0x32a/0x360 [ 51.228562][ T4194] do_iter_readv_writev+0x4fd/0x5a0 [ 51.228643][ T4194] vfs_writev+0x2e1/0x900 [ 51.228681][ T4194] do_writev+0xe9/0x210 [ 51.228713][ T4194] __x64_sys_writev+0x45/0x50 [ 51.228738][ T4194] x64_sys_call+0x1ba5/0x3000 [ 51.228801][ T4194] do_syscall_64+0xc0/0x2a0 [ 51.228830][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.228868][ T4194] RIP: 0033:0x7fabd367af79 [ 51.228889][ T4194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.228922][ T4194] RSP: 002b:00007fabd20d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 51.228966][ T4194] RAX: ffffffffffffffda RBX: 00007fabd38f5fa0 RCX: 00007fabd367af79 [ 51.229005][ T4194] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 51.229020][ T4194] RBP: 00007fabd20d7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.229033][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.229045][ T4194] R13: 00007fabd38f6038 R14: 00007fabd38f5fa0 R15: 00007ffea80401f8 [ 51.229064][ T4194] [ 51.452359][ T4196] loop0: detected capacity change from 0 to 1024 [ 51.467905][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.494514][ T4196] FAULT_INJECTION: forcing a failure. [ 51.494514][ T4196] name failslab, interval 1, probability 0, space 0, times 0 [ 51.507321][ T4196] CPU: 1 UID: 0 PID: 4196 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.507349][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.507363][ T4196] Call Trace: [ 51.507371][ T4196] [ 51.507380][ T4196] __dump_stack+0x1d/0x30 [ 51.507412][ T4196] dump_stack_lvl+0x95/0xd0 [ 51.507488][ T4196] dump_stack+0x15/0x1b [ 51.507509][ T4196] should_fail_ex+0x263/0x280 [ 51.507614][ T4196] should_failslab+0x8c/0xb0 [ 51.507676][ T4196] kmem_cache_alloc_noprof+0x68/0x490 [ 51.507763][ T4196] ? __es_insert_extent+0x508/0xee0 [ 51.507795][ T4196] __es_insert_extent+0x508/0xee0 [ 51.507823][ T4196] ? widen_string+0x98/0x210 [ 51.507844][ T4196] ? ext4_es_cache_extent+0x5d/0x390 [ 51.507920][ T4196] ext4_es_cache_extent+0x28d/0x390 [ 51.507952][ T4196] ext4_find_extent+0x336/0x7a0 [ 51.508019][ T4196] ext4_ext_map_blocks+0x128/0x38a0 [ 51.508043][ T4196] ? _prb_read_valid+0x8f5/0x950 [ 51.508073][ T4196] ? try_charge_memcg+0x215/0xa10 [ 51.508108][ T4196] ? xas_load+0x413/0x430 [ 51.508153][ T4196] ? xas_load+0x413/0x430 [ 51.508183][ T4196] ext4_map_query_blocks+0xae/0x550 [ 51.508281][ T4196] ? ext4_es_lookup_extent+0x3ac/0x540 [ 51.508310][ T4196] ? xas_load+0x413/0x430 [ 51.508361][ T4196] ext4_map_blocks+0x398/0xd70 [ 51.508394][ T4196] ext4_getblk+0x128/0x530 [ 51.508455][ T4196] ext4_bread_batch+0x5c/0x320 [ 51.508484][ T4196] __ext4_find_entry+0x852/0xdf0 [ 51.508515][ T4196] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 51.508542][ T4196] ? __rcu_read_unlock+0x4e/0x70 [ 51.508631][ T4196] ? d_alloc_parallel+0xc01/0xce0 [ 51.508662][ T4196] ext4_lookup+0xcd/0x3a0 [ 51.508687][ T4196] __lookup_slow+0x19d/0x260 [ 51.508717][ T4196] lookup_slow+0x3c/0x60 [ 51.508809][ T4196] path_lookupat+0x2f7/0x500 [ 51.508892][ T4196] filename_lookup+0x190/0x390 [ 51.508928][ T4196] path_listxattrat+0xd1/0x2b0 [ 51.508987][ T4196] __x64_sys_listxattr+0x4a/0x60 [ 51.509018][ T4196] x64_sys_call+0x2a62/0x3000 [ 51.509045][ T4196] do_syscall_64+0xc0/0x2a0 [ 51.509143][ T4196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.509166][ T4196] RIP: 0033:0x7fed0554af79 [ 51.509183][ T4196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.509202][ T4196] RSP: 002b:00007fed03f9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 51.509264][ T4196] RAX: ffffffffffffffda RBX: 00007fed057c5fa0 RCX: 00007fed0554af79 [ 51.509279][ T4196] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000080 [ 51.509293][ T4196] RBP: 00007fed03f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.509307][ T4196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.509320][ T4196] R13: 00007fed057c6038 R14: 00007fed057c5fa0 R15: 00007ffd9a0f0978 [ 51.509341][ T4196] [ 51.510436][ T4205] FAULT_INJECTION: forcing a failure. [ 51.510436][ T4205] name failslab, interval 1, probability 0, space 0, times 0 [ 51.555863][ T4202] loop5: detected capacity change from 0 to 512 [ 51.559623][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.559744][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.559772][ T4205] Call Trace: [ 51.559803][ T4205] [ 51.559840][ T4205] __dump_stack+0x1d/0x30 [ 51.559942][ T4205] dump_stack_lvl+0x95/0xd0 [ 51.560172][ T4205] dump_stack+0x15/0x1b [ 51.560236][ T4205] should_fail_ex+0x263/0x280 [ 51.560345][ T4205] should_failslab+0x8c/0xb0 [ 51.560411][ T4205] kmem_cache_alloc_noprof+0x68/0x490 [ 51.560440][ T4205] ? skb_clone+0x151/0x1f0 [ 51.560512][ T4205] skb_clone+0x151/0x1f0 [ 51.560685][ T4205] __netlink_deliver_tap+0x2c9/0x500 [ 51.560808][ T4205] netlink_unicast+0x66b/0x690 [ 51.560902][ T4205] netlink_sendmsg+0x5c8/0x6f0 [ 51.561061][ T4205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.561242][ T4205] ____sys_sendmsg+0x5af/0x600 [ 51.561388][ T4205] ___sys_sendmsg+0x195/0x1e0 [ 51.561590][ T4205] __x64_sys_sendmsg+0xd4/0x160 [ 51.561774][ T4205] x64_sys_call+0x17ba/0x3000 [ 51.561858][ T4205] do_syscall_64+0xc0/0x2a0 [ 51.562007][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.562160][ T4205] RIP: 0033:0x7f4c812aaf79 [ 51.562213][ T4205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.562284][ T4205] RSP: 002b:00007f4c7fcff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.562376][ T4205] RAX: ffffffffffffffda RBX: 00007f4c81525fa0 RCX: 00007f4c812aaf79 [ 51.562420][ T4205] RDX: 0000000000048800 RSI: 0000200000000200 RDI: 0000000000000003 [ 51.562463][ T4205] RBP: 00007f4c7fcff090 R08: 0000000000000000 R09: 0000000000000000 [ 51.562520][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.562576][ T4205] R13: 00007f4c81526038 R14: 00007f4c81525fa0 R15: 00007ffc7f22c1a8 [ 51.562667][ T4205] [ 51.931684][ T4084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.954087][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.054541][ T28] audit: type=1400 audit(1770699099.162:508): avc: denied { read write } for pid=4209 comm="syz.3.221" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.078137][ T28] audit: type=1400 audit(1770699099.162:509): avc: denied { open } for pid=4209 comm="syz.3.221" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.106523][ T3390] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 52.113991][ T3390] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 52.135331][ T3390] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 52.142801][ T3390] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 52.150314][ T3390] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 52.157845][ T3390] hid-generic 0103:0004:0000.0001: item fetching failed at offset 8/12 [ 52.175162][ T3390] hid-generic 0103:0004:0000.0001: probe with driver hid-generic failed with error -22 [ 52.194257][ T28] audit: type=1400 audit(1770699099.302:510): avc: denied { create } for pid=4217 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 52.229187][ T28] audit: type=1400 audit(1770699099.342:511): avc: denied { write } for pid=4217 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 52.260675][ T4225] loop0: detected capacity change from 0 to 1024 [ 52.306367][ T4225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 52.338715][ T4227] loop1: detected capacity change from 0 to 1024 [ 52.369264][ T4237] netlink: 'syz.5.230': attribute type 1 has an invalid length. [ 52.379683][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.411719][ T4227] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.417290][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 52.438528][ T4227] netlink: 'syz.1.227': attribute type 7 has an invalid length. [ 52.520863][ T4238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.589313][ T4238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.639218][ T4238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.689224][ T4238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.772967][ T309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.795803][ T309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.804259][ T309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.813244][ T309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.842295][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 52.867158][ T4262] loop0: detected capacity change from 0 to 1024 [ 52.873941][ T4262] EXT4-fs: Ignoring removed orlov option [ 52.898613][ T4262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.938437][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.981874][ T309] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.990363][ T309] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.999129][ T309] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.007562][ T309] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.043488][ T4277] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 53.131403][ T12] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.145724][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 53.153095][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.209483][ T4295] loop0: detected capacity change from 0 to 2048 [ 53.239389][ T4298] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 53.247715][ T4298] netlink: 25 bytes leftover after parsing attributes in process `syz.1.249'. [ 53.275249][ T3541] loop0: p2 < > p4 [ 53.279141][ T3541] loop0: partition table partially beyond EOD, truncated [ 53.286704][ T3541] loop0: p2 start 4278190080 is beyond EOD, truncated [ 53.293583][ T3541] loop0: p4 size 8192 extends beyond EOD, truncated [ 53.305857][ T4295] loop0: p2 < > p4 [ 53.309729][ T4295] loop0: partition table partially beyond EOD, truncated [ 53.317087][ T4295] loop0: p2 start 4278190080 is beyond EOD, truncated [ 53.323939][ T4295] loop0: p4 size 8192 extends beyond EOD, truncated [ 53.363998][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 53.409844][ T4307] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 53.417847][ T4308] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 53.465654][ T4313] loop0: detected capacity change from 0 to 128 [ 54.371548][ T4319] netlink: 14 bytes leftover after parsing attributes in process `syz.0.256'. [ 54.384042][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.394502][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.404126][ T4319] bond0 (unregistering): Released all slaves [ 55.557763][ T4248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.624899][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 55.624924][ T28] audit: type=1400 audit(1770699102.732:527): avc: denied { write } for pid=4324 comm="syz.1.259" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.672086][ T4325] loop1: detected capacity change from 0 to 1024 [ 55.706711][ T4325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.741560][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.862094][ T4347] loop1: detected capacity change from 0 to 8192 [ 55.916700][ T28] audit: type=1400 audit(1770699103.022:528): avc: denied { write } for pid=4345 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.944649][ T4364] Cannot find del_set index 0 as target [ 55.997653][ T4369] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 56.008830][ T4369] bond1 (unregistering): Released all slaves [ 56.099527][ T28] audit: type=1400 audit(1770699103.212:529): avc: denied { bind } for pid=4380 comm="syz.5.280" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.120976][ T28] audit: type=1400 audit(1770699103.212:530): avc: denied { name_bind } for pid=4380 comm="syz.5.280" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.141926][ T28] audit: type=1400 audit(1770699103.212:531): avc: denied { node_bind } for pid=4380 comm="syz.5.280" saddr=172.20.20.187 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.391572][ T4393] SELinux: Context Y7j [ 56.391572][ T4393] u/$2Sٟ2'ks2- vjd #,N< [ 56.391572][ T4393] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 56.435976][ T4393] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 56.444623][ T28] audit: type=1400 audit(1770699103.552:532): avc: denied { write } for pid=4392 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.444701][ T4393] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 56.522884][ T4393] uSċkxIRI$4"lX7f9 is not valid (left unmapped). [ 56.544964][ T4393] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 56.592445][ T4396] FAULT_INJECTION: forcing a failure. [ 56.592445][ T4396] name failslab, interval 1, probability 0, space 0, times 0 [ 56.608704][ T4396] CPU: 0 UID: 0 PID: 4396 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.608771][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 56.608800][ T4396] Call Trace: [ 56.608808][ T4396] [ 56.608817][ T4396] __dump_stack+0x1d/0x30 [ 56.608855][ T4396] dump_stack_lvl+0x95/0xd0 [ 56.608948][ T4396] dump_stack+0x15/0x1b [ 56.608966][ T4396] should_fail_ex+0x263/0x280 [ 56.608993][ T4396] should_failslab+0x8c/0xb0 [ 56.609081][ T4396] __kmalloc_cache_noprof+0x64/0x4a0 [ 56.609178][ T4396] ? tty_alloc_file+0x31/0x70 [ 56.609229][ T4396] tty_alloc_file+0x31/0x70 [ 56.609245][ T4396] ptmx_open+0x46/0x2b0 [ 56.609274][ T4396] chrdev_open+0x2eb/0x3a0 [ 56.609292][ T4396] do_dentry_open+0x4ca/0xa90 [ 56.609333][ T4396] ? __pfx_chrdev_open+0x10/0x10 [ 56.609478][ T4396] vfs_open+0x37/0x1e0 [ 56.609500][ T4396] path_openat+0x1b70/0x2050 [ 56.609538][ T4396] do_filp_open+0x15d/0x280 [ 56.609574][ T4396] do_sys_openat2+0xa6/0x150 [ 56.609626][ T4396] __x64_sys_openat+0xf2/0x120 [ 56.609651][ T4396] x64_sys_call+0x2b07/0x3000 [ 56.609674][ T4396] do_syscall_64+0xc0/0x2a0 [ 56.609747][ T4396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.609771][ T4396] RIP: 0033:0x7f6305d4af79 [ 56.609824][ T4396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.609840][ T4396] RSP: 002b:00007f630479f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.609857][ T4396] RAX: ffffffffffffffda RBX: 00007f6305fc5fa0 RCX: 00007f6305d4af79 [ 56.609869][ T4396] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 56.609901][ T4396] RBP: 00007f630479f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.609918][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.609939][ T4396] R13: 00007f6305fc6038 R14: 00007f6305fc5fa0 R15: 00007fffcef7dfd8 [ 56.610009][ T4396] [ 56.878190][ T4401] FAULT_INJECTION: forcing a failure. [ 56.878190][ T4401] name failslab, interval 1, probability 0, space 0, times 0 [ 56.890914][ T4401] CPU: 0 UID: 0 PID: 4401 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.890953][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 56.890964][ T4401] Call Trace: [ 56.890970][ T4401] [ 56.890977][ T4401] __dump_stack+0x1d/0x30 [ 56.891002][ T4401] dump_stack_lvl+0x95/0xd0 [ 56.891068][ T4401] dump_stack+0x15/0x1b [ 56.891110][ T4401] should_fail_ex+0x263/0x280 [ 56.891150][ T4401] should_failslab+0x8c/0xb0 [ 56.891174][ T4401] kmem_cache_alloc_noprof+0x68/0x490 [ 56.891231][ T4401] ? skb_clone+0x151/0x1f0 [ 56.891261][ T4401] skb_clone+0x151/0x1f0 [ 56.891288][ T4401] __netlink_deliver_tap+0x2c9/0x500 [ 56.891328][ T4401] netlink_unicast+0x66b/0x690 [ 56.891356][ T4401] netlink_sendmsg+0x5c8/0x6f0 [ 56.891388][ T4401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.891485][ T4401] ____sys_sendmsg+0x5af/0x600 [ 56.891585][ T4401] ___sys_sendmsg+0x195/0x1e0 [ 56.891660][ T4401] __x64_sys_sendmsg+0xd4/0x160 [ 56.891755][ T4401] x64_sys_call+0x17ba/0x3000 [ 56.891778][ T4401] do_syscall_64+0xc0/0x2a0 [ 56.891811][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.891910][ T4401] RIP: 0033:0x7f6305d4af79 [ 56.891931][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.891947][ T4401] RSP: 002b:00007f630477e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.892023][ T4401] RAX: ffffffffffffffda RBX: 00007f6305fc6090 RCX: 00007f6305d4af79 [ 56.892044][ T4401] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.892055][ T4401] RBP: 00007f630477e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.892066][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.892077][ T4401] R13: 00007f6305fc6128 R14: 00007f6305fc6090 R15: 00007fffcef7dfd8 [ 56.892096][ T4401] [ 57.099497][ T28] audit: type=1400 audit(1770699104.212:533): avc: denied { getattr } for pid=4404 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.152458][ T28] audit: type=1400 audit(1770699104.262:534): avc: denied { read } for pid=4408 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.174705][ T28] audit: type=1400 audit(1770699104.262:535): avc: denied { open } for pid=4408 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.249936][ T28] audit: type=1400 audit(1770699104.362:536): avc: denied { create } for pid=4416 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.304266][ T4425] loop5: detected capacity change from 0 to 1024 [ 57.329242][ T4425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.341497][ T4425] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.436342][ T4439] loop0: detected capacity change from 0 to 256 [ 57.801851][ T4478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=4478 comm=syz.0.295 [ 57.877741][ T4485] loop0: detected capacity change from 0 to 1024 [ 57.896047][ T4485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.923044][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.944913][ T3417] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 57.954953][ T3417] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.144192][ T1658] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.158417][ T1658] EXT4-fs (loop5): Remounting filesystem read-only [ 58.165836][ T3671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.188589][ T4503] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 58.197035][ T4503] SELinux: failed to load policy [ 58.855670][ T4353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.893268][ T4508] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 58.899866][ T4508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.907753][ T4508] vhci_hcd vhci_hcd.0: Device attached [ 58.934001][ T4510] vhci_hcd: connection closed [ 58.934349][ T309] vhci_hcd vhci_hcd.1: stop threads [ 58.944488][ T309] vhci_hcd vhci_hcd.1: release socket [ 58.950077][ T309] vhci_hcd vhci_hcd.1: disconnect device [ 58.965733][ T4516] loop1: detected capacity change from 0 to 512 [ 58.976387][ T4518] xt_hashlimit: max too large, truncated to 1048576 [ 58.984463][ T4516] EXT4-fs error (device loop1): __ext4_fill_super:5558: inode #2: comm syz.1.309: iget: bad extra_isize 31 (inode size 256) [ 58.997571][ T4516] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 58.998135][ T4516] EXT4-fs (loop1): get root inode failed [ 59.012954][ T4516] EXT4-fs (loop1): mount failed [ 59.166393][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 59.186463][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 59.215554][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.237974][ T4534] bridge_slave_1: left allmulticast mode [ 59.243736][ T4534] bridge_slave_1: left promiscuous mode [ 59.249659][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.258520][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 59.268279][ T4542] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 59.286886][ T4537] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 59.327356][ T4545] loop5: detected capacity change from 0 to 512 [ 59.340959][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.322'. [ 59.371711][ T4551] loop0: detected capacity change from 0 to 1024 [ 59.408382][ T4545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.425172][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.434147][ T4545] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.444297][ T4537] batman_adv: batadv0: Interface deactivated: dummy0 [ 59.469059][ T4544] netlink: 7 bytes leftover after parsing attributes in process `syz.5.321'. [ 59.486614][ T4551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.508141][ T4551] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.519338][ T3671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.534184][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 59.573645][ T4567] loop5: detected capacity change from 0 to 512 [ 59.580532][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.588855][ T4567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.607087][ T4567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.620068][ T4567] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.631573][ T4567] EXT4-fs (loop5): shut down requested (0) [ 59.639503][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.650707][ T4567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 59.660137][ T4567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 59.669711][ T4567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 59.726893][ T4567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.753805][ T4558] veth1_macvtap: left promiscuous mode [ 59.784841][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.814650][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.825772][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.867387][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.986231][ T4598] netlink: 'syz.5.333': attribute type 1 has an invalid length. [ 60.009681][ T4598] bond1: (slave ip6gretap1): making interface the new active one [ 60.017912][ T4598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.025799][ T4598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.033735][ T4598] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 60.071176][ T4603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.341'. [ 60.110369][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.152216][ T4611] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.159889][ T4611] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 60.168213][ T4611] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 60.203109][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.388580][ T4636] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.388580][ T4636] program syz.1.356 not setting count and/or reply_len properly [ 60.446359][ T4611] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 60.447305][ T4639] loop0: detected capacity change from 0 to 512 [ 60.458453][ T4611] SELinux: failed to load policy [ 60.487984][ T4641] smc: adding net device bond0 with user defined pnetid SYZ2 [ 60.495864][ T4641] bond0: option primary: mode dependency failed, not supported in mode broadcast(3) [ 60.506033][ T4641] smc: removing net device bond0 with user defined pnetid SYZ2 [ 60.513925][ T4641] bond0 (unregistering): Released all slaves [ 60.539052][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.551426][ T4644] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.620339][ T4655] FAULT_INJECTION: forcing a failure. [ 60.620339][ T4655] name failslab, interval 1, probability 0, space 0, times 0 [ 60.634831][ T4655] CPU: 1 UID: 0 PID: 4655 Comm: syz.1.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.634898][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 60.634914][ T4655] Call Trace: [ 60.634922][ T4655] [ 60.634931][ T4655] __dump_stack+0x1d/0x30 [ 60.634963][ T4655] dump_stack_lvl+0x95/0xd0 [ 60.635062][ T4655] dump_stack+0x15/0x1b [ 60.635088][ T4655] should_fail_ex+0x263/0x280 [ 60.635124][ T4655] should_failslab+0x8c/0xb0 [ 60.635151][ T4655] __kmalloc_cache_noprof+0x64/0x4a0 [ 60.635242][ T4655] ? alloc_tty_struct+0x4c/0x3c0 [ 60.635275][ T4655] alloc_tty_struct+0x4c/0x3c0 [ 60.635340][ T4655] tty_init_dev+0x39/0x320 [ 60.635367][ T4655] ptmx_open+0x10b/0x2b0 [ 60.635407][ T4655] chrdev_open+0x2eb/0x3a0 [ 60.635429][ T4655] do_dentry_open+0x4ca/0xa90 [ 60.635534][ T4655] ? __pfx_chrdev_open+0x10/0x10 [ 60.635561][ T4655] vfs_open+0x37/0x1e0 [ 60.635665][ T4655] path_openat+0x1b70/0x2050 [ 60.635703][ T4655] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 60.635741][ T4655] ? kstrtouint+0x76/0xc0 [ 60.635830][ T4655] do_filp_open+0x15d/0x280 [ 60.635875][ T4655] do_sys_openat2+0xa6/0x150 [ 60.635908][ T4655] __x64_sys_openat+0xf2/0x120 [ 60.635936][ T4655] x64_sys_call+0x2b07/0x3000 [ 60.636017][ T4655] do_syscall_64+0xc0/0x2a0 [ 60.636049][ T4655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.636146][ T4655] RIP: 0033:0x7f4c812aaf79 [ 60.636173][ T4655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.636196][ T4655] RSP: 002b:00007f4c7fcff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.636224][ T4655] RAX: ffffffffffffffda RBX: 00007f4c81525fa0 RCX: 00007f4c812aaf79 [ 60.636242][ T4655] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 60.636301][ T4655] RBP: 00007f4c7fcff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.636355][ T4655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.636367][ T4655] R13: 00007f4c81526038 R14: 00007f4c81525fa0 R15: 00007ffc7f22c1a8 [ 60.636389][ T4655] [ 60.868352][ T4658] set_capacity_and_notify: 1 callbacks suppressed [ 60.868374][ T4658] loop2: detected capacity change from 0 to 1024 [ 60.889033][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 60.889752][ T4658] EXT4-fs: test_dummy_encryption option not supported [ 60.908825][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 60.908859][ T28] audit: type=1400 audit(1770699108.022:563): avc: denied { bind } for pid=4657 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.942385][ T28] audit: type=1400 audit(1770699108.052:564): avc: denied { create } for pid=4661 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.972565][ T28] audit: type=1400 audit(1770699108.082:565): avc: denied { setopt } for pid=4661 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.004922][ T4664] loop1: detected capacity change from 0 to 1024 [ 61.021270][ T4664] EXT4-fs: Ignoring removed bh option [ 61.048268][ T4666] loop3: detected capacity change from 0 to 1024 [ 61.049262][ T4664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.057106][ T4666] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.078202][ T4666] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.089372][ T4666] JBD2: no valid journal superblock found [ 61.095175][ T4666] EXT4-fs (loop3): Could not load journal inode [ 61.107667][ T4664] netlink: 104 bytes leftover after parsing attributes in process `syz.1.366'. [ 61.117762][ T28] audit: type=1400 audit(1770699108.222:566): avc: denied { ioctl } for pid=4663 comm="syz.1.366" path="/92/file1/file1" dev="loop1" ino=15 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.149870][ T28] audit: type=1400 audit(1770699108.232:567): avc: denied { name_bind } for pid=4663 comm="syz.1.366" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.206359][ T28] audit: type=1400 audit(1770699108.302:568): avc: denied { allowed } for pid=4672 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.274627][ T28] audit: type=1400 audit(1770699108.382:569): avc: denied { bind } for pid=4680 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.299000][ T28] audit: type=1326 audit(1770699108.392:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6305d4af79 code=0x7ffc0000 [ 61.322426][ T28] audit: type=1326 audit(1770699108.392:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6305d4af79 code=0x7ffc0000 [ 61.346260][ T28] audit: type=1326 audit(1770699108.412:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6305d4af79 code=0x7ffc0000 [ 61.429559][ T4689] loop3: detected capacity change from 0 to 512 [ 61.449492][ T4689] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 61.468404][ T4689] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.488255][ T4689] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.377: bad orphan inode 15 [ 61.498366][ T4689] loop3: lost filesystem error report for type 5 error -117 [ 61.506659][ T4689] ext4_test_bit(bit=14, block=18) = 1 [ 61.519627][ T4689] is_bad_inode(inode)=0 [ 61.523876][ T4689] NEXT_ORPHAN(inode)=1023 [ 61.528454][ T4689] max_ino=32 [ 61.531755][ T4689] i_nlink=0 [ 61.536970][ T4689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.377: bg 0: block 161: padding at end of block bitmap is not set [ 61.551312][ T4689] loop3: lost filesystem error report for type 5 error -117 [ 61.551611][ T4689] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 61.568203][ T4689] loop3: lost filesystem error report for type 5 error -117 [ 61.582746][ T4700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=4700 comm=syz.2.381 [ 61.690790][ T4710] loop3: detected capacity change from 0 to 1024 [ 61.713851][ T4714] loop0: detected capacity change from 0 to 1024 [ 61.735403][ T4710] FAULT_INJECTION: forcing a failure. [ 61.735403][ T4710] name failslab, interval 1, probability 0, space 0, times 0 [ 61.748228][ T4710] CPU: 0 UID: 0 PID: 4710 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.748270][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 61.748287][ T4710] Call Trace: [ 61.748297][ T4710] [ 61.748308][ T4710] __dump_stack+0x1d/0x30 [ 61.748341][ T4710] dump_stack_lvl+0x95/0xd0 [ 61.748397][ T4710] dump_stack+0x15/0x1b [ 61.748422][ T4710] should_fail_ex+0x263/0x280 [ 61.748453][ T4710] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 61.748482][ T4710] should_failslab+0x8c/0xb0 [ 61.748524][ T4710] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 61.748557][ T4710] ? ext4_alloc_inode+0x38/0x320 [ 61.748581][ T4710] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 61.748615][ T4710] ext4_alloc_inode+0x38/0x320 [ 61.748640][ T4710] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 61.748666][ T4710] alloc_inode+0x40/0x170 [ 61.748736][ T4710] iget_locked+0x101/0x440 [ 61.748767][ T4710] __ext4_iget+0x152/0x2350 [ 61.748862][ T4710] ? __rcu_read_unlock+0x4e/0x70 [ 61.748902][ T4710] ext4_lookup+0x173/0x3a0 [ 61.748934][ T4710] __lookup_slow+0x19d/0x260 [ 61.748971][ T4710] lookup_slow+0x3c/0x60 [ 61.749027][ T4710] path_lookupat+0x2f7/0x500 [ 61.749060][ T4710] filename_lookup+0x190/0x390 [ 61.749104][ T4710] path_listxattrat+0xd1/0x2b0 [ 61.749226][ T4710] __x64_sys_listxattr+0x4a/0x60 [ 61.749328][ T4710] x64_sys_call+0x2a62/0x3000 [ 61.749414][ T4710] do_syscall_64+0xc0/0x2a0 [ 61.749470][ T4710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.749550][ T4710] RIP: 0033:0x7f6305d4af79 [ 61.749567][ T4710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.749598][ T4710] RSP: 002b:00007f630479f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 61.749624][ T4710] RAX: ffffffffffffffda RBX: 00007f6305fc5fa0 RCX: 00007f6305d4af79 [ 61.749644][ T4710] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000080 [ 61.749723][ T4710] RBP: 00007f630479f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.749756][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.749773][ T4710] R13: 00007f6305fc6038 R14: 00007f6305fc5fa0 R15: 00007fffcef7dfd8 [ 61.749796][ T4710] [ 62.082515][ T4726] loop1: detected capacity change from 0 to 1024 [ 62.121795][ T4726] EXT4-fs: Ignoring removed orlov option [ 62.123050][ T4733] xt_hashlimit: max too large, truncated to 1048576 [ 62.154954][ T4736] loop2: detected capacity change from 0 to 128 [ 62.170190][ T4736] EXT4-fs: Ignoring removed nobh option [ 62.195129][ T4736] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.374038][ T4761] loop3: detected capacity change from 0 to 1024 [ 62.397054][ T4765] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.424845][ T4765] SELinux: failed to load policy [ 62.671532][ T4792] loop3: detected capacity change from 0 to 764 [ 62.697269][ T4782] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.708079][ T4782] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.733088][ T4792] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.752550][ T4793] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.770313][ T4792] Symlink component flag not implemented [ 62.776858][ T4792] Symlink component flag not implemented (7) [ 62.834155][ T4782] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.848336][ T4782] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.057802][ T4782] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.068862][ T4782] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.165765][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.174103][ T4807] bridge_slave_1: left allmulticast mode [ 63.179874][ T4807] bridge_slave_1: left promiscuous mode [ 63.185638][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.312645][ T4782] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.324118][ T4782] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.414692][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.423086][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.448244][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.456570][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.472918][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.481308][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.489797][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.498062][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542975][ T4818] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 63.558715][ T4818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.565401][ T4818] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.425: bad orphan inode 15 [ 63.575547][ T4818] loop0: lost filesystem error report for type 5 error -117 [ 63.576200][ T4818] ext4_test_bit(bit=14, block=18) = 1 [ 63.589106][ T4818] is_bad_inode(inode)=0 [ 63.593327][ T4818] NEXT_ORPHAN(inode)=1023 [ 63.597814][ T4818] max_ino=32 [ 63.601038][ T4818] i_nlink=0 [ 63.604617][ T4818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.425: bg 0: block 161: padding at end of block bitmap is not set [ 63.619059][ T4818] loop0: lost filesystem error report for type 5 error -117 [ 63.619380][ T4818] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 63.635670][ T4818] loop0: lost filesystem error report for type 5 error -117 [ 63.828159][ T4837] netlink: 'syz.2.433': attribute type 75 has an invalid length. [ 63.965615][ T4846] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 63.976530][ T4846] bond2 (unregistering): Released all slaves [ 64.123899][ T4861] pimreg: entered allmulticast mode [ 64.129615][ T4860] pimreg: left allmulticast mode [ 64.382237][ T4873] net_ratelimit: 30 callbacks suppressed [ 64.382273][ T4873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.433019][ T4876] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.466292][ T4876] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 64.484266][ T4881] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.508844][ T4881] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.529227][ T4881] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.450: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.606179][ T4891] team_slave_0: entered promiscuous mode [ 64.611867][ T4891] team_slave_1: entered promiscuous mode [ 64.618060][ T4891] macvtap1: entered promiscuous mode [ 64.623618][ T4891] team0: entered promiscuous mode [ 64.629937][ T4891] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 64.637297][ T4891] team0: Device macvtap1 is already an upper device of the team interface [ 64.646513][ T4891] team0: left promiscuous mode [ 64.651567][ T4891] team_slave_0: left promiscuous mode [ 64.657017][ T4891] team_slave_1: left promiscuous mode [ 64.659041][ T4893] __nla_validate_parse: 5 callbacks suppressed [ 64.659125][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 65.449673][ T4902] netlink: 52 bytes leftover after parsing attributes in process `syz.5.455'. [ 65.519330][ T4909] EXT4-fs: Ignoring removed i_version option [ 65.525530][ T4909] EXT4-fs: dax option not supported [ 65.570667][ T4913] Cannot find del_set index 0 as target [ 65.626877][ T4787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.682221][ T4919] FAULT_INJECTION: forcing a failure. [ 65.682221][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.695561][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.695645][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 65.695663][ T4919] Call Trace: [ 65.695670][ T4919] [ 65.695678][ T4919] __dump_stack+0x1d/0x30 [ 65.695714][ T4919] dump_stack_lvl+0x95/0xd0 [ 65.695747][ T4919] dump_stack+0x15/0x1b [ 65.695808][ T4919] should_fail_ex+0x263/0x280 [ 65.695840][ T4919] should_fail+0xb/0x20 [ 65.695865][ T4919] should_fail_usercopy+0x1a/0x20 [ 65.695916][ T4919] _copy_from_iter+0xcf/0xea0 [ 65.695948][ T4919] ? __alloc_skb+0x397/0x4b0 [ 65.695982][ T4919] ? __alloc_skb+0x219/0x4b0 [ 65.696033][ T4919] netlink_sendmsg+0x4ae/0x6f0 [ 65.696078][ T4919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.696132][ T4919] ____sys_sendmsg+0x5af/0x600 [ 65.696203][ T4919] ___sys_sendmsg+0x195/0x1e0 [ 65.696273][ T4919] __x64_sys_sendmsg+0xd4/0x160 [ 65.696316][ T4919] x64_sys_call+0x17ba/0x3000 [ 65.696350][ T4919] do_syscall_64+0xc0/0x2a0 [ 65.696388][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.696455][ T4919] RIP: 0033:0x7fed0554af79 [ 65.696475][ T4919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.696550][ T4919] RSP: 002b:00007fed03f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.696577][ T4919] RAX: ffffffffffffffda RBX: 00007fed057c5fa0 RCX: 00007fed0554af79 [ 65.696631][ T4919] RDX: 0000000000048800 RSI: 0000200000000200 RDI: 0000000000000003 [ 65.696649][ T4919] RBP: 00007fed03f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.696663][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.696676][ T4919] R13: 00007fed057c6038 R14: 00007fed057c5fa0 R15: 00007ffd9a0f0978 [ 65.696695][ T4919] [ 65.699647][ T4917] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.461: invalid indirect mapped block 256 (level 2) [ 65.901359][ T4917] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.902222][ T4917] EXT4-fs (loop5): 2 truncates cleaned up [ 65.920702][ T4917] netlink: 44 bytes leftover after parsing attributes in process `syz.5.461'. [ 65.946964][ T4930] ip6gre1: entered promiscuous mode [ 65.952439][ T4930] ip6gre1: entered allmulticast mode [ 66.005664][ T4938] set_capacity_and_notify: 8 callbacks suppressed [ 66.005680][ T4938] loop2: detected capacity change from 0 to 1024 [ 66.033906][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 66.033925][ T28] audit: type=1400 audit(1770699113.142:629): avc: denied { remount } for pid=4937 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.054392][ T4940] loop0: detected capacity change from 0 to 1024 [ 66.104458][ T28] audit: type=1400 audit(1770699113.202:630): avc: denied { execute } for pid=4937 comm="syz.2.469" path="/99/cpu.stat" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.127491][ T28] audit: type=1400 audit(1770699113.212:631): avc: denied { append } for pid=4937 comm="syz.2.469" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.150242][ T28] audit: type=1400 audit(1770699113.212:632): avc: denied { setattr } for pid=4941 comm="syz.1.471" name="NETLINK" dev="sockfs" ino=9825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.174034][ T28] audit: type=1400 audit(1770699113.212:633): avc: denied { create } for pid=4941 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.201607][ T28] audit: type=1400 audit(1770699113.312:634): avc: denied { getopt } for pid=4951 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.402265][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 66.486431][ T28] audit: type=1400 audit(1770699113.602:635): avc: denied { create } for pid=4977 comm="syz.5.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.499181][ T4979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.483'. [ 66.507229][ T28] audit: type=1400 audit(1770699113.612:636): avc: denied { bind } for pid=4977 comm="syz.5.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.534081][ T28] audit: type=1400 audit(1770699113.612:637): avc: denied { setopt } for pid=4977 comm="syz.5.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.553699][ T28] audit: type=1400 audit(1770699113.612:638): avc: denied { read append } for pid=4977 comm="syz.5.483" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.983495][ T4999] xt_hashlimit: max too large, truncated to 1048576 [ 67.132744][ T5001] loop0: detected capacity change from 0 to 1024 [ 67.146352][ T5001] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.492: Failed to acquire dquot type 0 [ 67.157646][ T5001] loop0: lost filesystem error report for type 5 error -117 [ 67.163878][ T5001] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 67.202100][ T5001] EXT4-fs (loop0): 1 truncate cleaned up [ 67.210728][ T5001] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.492: Failed to acquire dquot type 0 [ 67.265456][ T5008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.495'. [ 67.274408][ T5008] netlink: 43 bytes leftover after parsing attributes in process `syz.0.495'. [ 67.283535][ T5008] netlink: 43 bytes leftover after parsing attributes in process `syz.0.495'. [ 67.882031][ T5022] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.499'. [ 67.891272][ T5022] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.499'. [ 69.261846][ T4958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.439246][ T5038] loop2: detected capacity change from 0 to 1764 [ 69.504879][ T5050] Cannot find del_set index 0 as target [ 69.591184][ T5060] loop2: detected capacity change from 0 to 1764 [ 69.607797][ T5060] grow_buffers: requested out-of-range block 18446744072010032070 for device loop2 [ 69.617233][ T5060] isofs_fill_super: bread failed, dev=loop2, iso_blknum=1297723875, block=-1699519546 [ 69.643375][ T5063] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 69.786128][ T5079] loop1: detected capacity change from 0 to 512 [ 69.826303][ T5079] ------------[ cut here ]------------ [ 69.831876][ T5079] EA inode 11 i_nlink=2 [ 69.831905][ T5079] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.520/5079 [ 69.847003][ T5079] Modules linked in: [ 69.851097][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.1.520 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.860814][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 69.871038][ T5079] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 69.877987][ T5079] Code: a4 bd 9a ff 4c 8d 2d 5d 15 3e 05 49 8d 7e 40 e8 04 a9 b6 ff 49 8b 6e 40 4c 89 e7 e8 38 a4 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df e0 d0 03 66 66 66 66 66 66 2e [ 69.897681][ T5079] RSP: 0018:ffffc90009e1b778 EFLAGS: 00010246 [ 69.903866][ T5079] RAX: ffff88812366ebe8 RBX: ffff888107ab7af0 RCX: ffffffff81be2ae8 [ 69.912032][ T5079] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc4030 [ 69.920078][ T5079] RBP: 000000000000000b R08: 0001888107ab7aa3 R09: 0000000000000000 [ 69.928123][ T5079] R10: 0001c90001baf680 R11: 0001c90009e1b6a8 R12: ffff888107ab7aa0 [ 69.936158][ T5079] R13: ffffffff86fc4030 R14: ffff888107ab7a58 R15: 0000000000000001 [ 69.944150][ T5079] FS: 00007f4c7fcff6c0(0000) GS:ffff8882aec55000(0000) knlGS:0000000000000000 [ 69.953312][ T5079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.960283][ T5079] CR2: 00007f3cbcd0a000 CR3: 000000011afb8000 CR4: 00000000003506f0 [ 69.968337][ T5079] DR0: 0000000000007ffb DR1: 0000000000000000 DR2: 0000000000000000 [ 69.976528][ T5079] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 69.984628][ T5079] Call Trace: [ 69.987993][ T5079] [ 69.990953][ T5079] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 69.996928][ T5079] ? errseq_check+0x2c/0x50 [ 70.001575][ T5079] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 70.007172][ T5079] ? ext4_truncate+0x92b/0xad0 [ 70.011995][ T5079] ext4_evict_inode+0xa1f/0xd40 [ 70.017025][ T5079] ? __pfx_ext4_evict_inode+0x10/0x10 [ 70.022564][ T5079] evict+0x2af/0x510 [ 70.026695][ T5079] ? __dquot_initialize+0x146/0x7c0 [ 70.032038][ T5079] iput+0x41a/0x580 [ 70.035937][ T5079] ext4_process_orphan+0x1a9/0x1c0 [ 70.041088][ T5079] ext4_orphan_cleanup+0x6a8/0xa00 [ 70.046342][ T5079] ext4_fill_super+0x3476/0x3800 [ 70.051447][ T5079] ? set_blocksize+0x1a3/0x310 [ 70.056283][ T5079] ? setup_bdev_super+0x30e/0x370 [ 70.061412][ T5079] ? __pfx_ext4_fill_super+0x10/0x10 [ 70.066791][ T5079] get_tree_bdev_flags+0x291/0x300 [ 70.072138][ T5079] ? __pfx_ext4_fill_super+0x10/0x10 [ 70.077919][ T5079] get_tree_bdev+0x1f/0x30 [ 70.082399][ T5079] ext4_get_tree+0x1c/0x30 [ 70.087114][ T5079] vfs_get_tree+0x57/0x1d0 [ 70.091598][ T5079] do_new_mount+0x288/0x8d0 [ 70.096232][ T5079] path_mount+0x4d0/0xbc0 [ 70.100651][ T5079] ? user_path_at+0xbf/0x130 [ 70.105441][ T5079] __se_sys_mount+0x28c/0x2e0 [ 70.110210][ T5079] __x64_sys_mount+0x67/0x80 [ 70.114885][ T5079] x64_sys_call+0x2cca/0x3000 [ 70.119684][ T5079] do_syscall_64+0xc0/0x2a0 [ 70.124228][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.130205][ T5079] RIP: 0033:0x7f4c812ac20a [ 70.134649][ T5079] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.154438][ T5079] RSP: 002b:00007f4c7fcfee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.163359][ T5079] RAX: ffffffffffffffda RBX: 00007f4c7fcfeee0 RCX: 00007f4c812ac20a [ 70.171492][ T5079] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4c7fcfeea0 [ 70.179540][ T5079] RBP: 00002000000009c0 R08: 00007f4c7fcfeee0 R09: 0000000000800718 [ 70.187632][ T5079] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 70.195727][ T5079] R13: 00007f4c7fcfeea0 R14: 000000000000048d R15: 0000200000000200 [ 70.203744][ T5079] [ 70.206943][ T5079] ---[ end trace 0000000000000000 ]--- [ 70.213196][ T5079] EXT4-fs (loop1): 1 orphan inode deleted [ 70.220265][ T5079] EXT4-fs mount: 30 callbacks suppressed [ 70.220332][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.269041][ T5093] __nla_validate_parse: 1 callbacks suppressed [ 70.269063][ T5093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'. [ 70.340549][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.383651][ T5104] netlink: 'syz.5.530': attribute type 35 has an invalid length. [ 70.428153][ T5111] netlink: 'syz.5.533': attribute type 4 has an invalid length. [ 70.436111][ T5111] netlink: 17 bytes leftover after parsing attributes in process `syz.5.533'. [ 70.473051][ T5115] loop5: detected capacity change from 0 to 512 [ 70.480705][ T5115] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 70.491204][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 70.581471][ T5128] Cannot find del_set index 0 as target [ 70.631582][ T5134] loop1: detected capacity change from 0 to 512 [ 70.665604][ T2] ================================================================== [ 70.673929][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 70.680485][ T2] [ 70.682832][ T2] read-write to 0xffffffff86a600e8 of 4 bytes by task 3671 on cpu 0: [ 70.690931][ T2] free_pid+0xb9/0x1d0 [ 70.695036][ T2] free_pids+0x54/0xb0 [ 70.699130][ T2] release_task+0x9a7/0xb60 [ 70.703654][ T2] wait_consider_task+0x1160/0x1670 [ 70.708879][ T2] __do_wait+0xf9/0x510 [ 70.713052][ T2] do_wait+0xb6/0x240 [ 70.717052][ T2] kernel_wait4+0x19f/0x210 [ 70.721574][ T2] __x64_sys_wait4+0x91/0x120 [ 70.726280][ T2] x64_sys_call+0x28ec/0x3000 [ 70.730988][ T2] do_syscall_64+0xc0/0x2a0 [ 70.735528][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.741441][ T2] [ 70.743778][ T2] read to 0xffffffff86a600e8 of 4 bytes by task 2 on cpu 1: [ 70.751170][ T2] copy_process+0x17de/0x2010 [ 70.755930][ T2] kernel_clone+0x16b/0x5b0 [ 70.760464][ T2] kernel_thread+0xe5/0x120 [ 70.764994][ T2] kthreadd+0x26b/0x330 [ 70.769173][ T2] ret_from_fork+0x148/0x280 [ 70.773840][ T2] ret_from_fork_asm+0x1a/0x30 [ 70.778632][ T2] [ 70.781002][ T2] value changed: 0x800000e8 -> 0x800000e7 [ 70.786731][ T2] [ 70.789068][ T2] Reported by Kernel Concurrency Sanitizer on: [ 70.795240][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.806116][ T2] Tainted: [W]=WARN [ 70.809931][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 70.820097][ T2] ================================================================== [ 70.839569][ T5134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.852281][ T5134] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.863564][ T5142] loop5: detected capacity change from 0 to 256 [ 72.537953][ T5052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.571528][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.