last executing test programs: 4.213538901s ago: executing program 2 (id=690): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(&(0x7f0000000200)='./bus\x00', 0x14507c, 0x1) 4.056010072s ago: executing program 2 (id=699): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x501800, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x5, 0xc, 0x8, 0xfe, @time={0x2, 0x8}, {0x8, 0x9c}, {}, @ext={0x0, 0x0}}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200006, 0x801, 0x4, 0x7, 0xb0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9e}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.144275837s ago: executing program 1 (id=715): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x80, 0x7}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0xfb02132be6f46233, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4556}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x2, 0x4, 0x4, 0x5, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x0, 0x3, 0x2002f691851f2829, 0x1, 0x6, 0xfffffffffffffff4, 0x4}, @generic={0xd, 0x0, 0x7, 0x1, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x1}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000003c0)='syzkaller\x00', 0x40, 0x1000, &(0x7f00000011c0)=""/4096, 0x40f00, 0x74, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29ceb, r1, 0x2, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0xe, 0x8}, {0x5, 0x4, 0x1, 0x4}], 0x10, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0x6}}, './file0\x00'}) accept$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r9, 0x0, 0x0, 0xa, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x1600, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.620085163s ago: executing program 3 (id=726): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.342971262s ago: executing program 2 (id=729): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x2, 0x68}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x78, 0x0, 0x7f, 0x0, 0x8, 0x400, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x14800, 0x6ea3, 0xaa, 0x9, 0x6, 0xd, 0x1000, 0x0, 0xc09, 0x0, 0x32c0}, r1, 0xffffffffffffffff, r0, 0x9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.236487173s ago: executing program 1 (id=730): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x22ac82) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f26ab0f407962c220a2e11b44e65d7662acb010852f426072a", 0x2a}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r3) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffda6}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) read(r2, &(0x7f0000001300)=""/4075, 0xfeb) inotify_init1(0x40800) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x35}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0xfffffffc, 0x100, 0x8000, 0x0, "000014000000000000000000000300"}) 1.904275374s ago: executing program 1 (id=735): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) 1.892179901s ago: executing program 1 (id=736): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getsig(0x4202, r1, 0xe8, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0xa00000000, 0x2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r4, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1.805824246s ago: executing program 3 (id=737): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.436447389s ago: executing program 4 (id=740): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.430456408s ago: executing program 2 (id=741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(&(0x7f0000000200)='./bus\x00', 0x14507c, 0x1) 1.377446218s ago: executing program 2 (id=742): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000d40)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0xfffe, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xffffffffffffff60, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.276327s ago: executing program 2 (id=743): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x20006, 0x0, &(0x7f00000003c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0301"], 0xc8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') getdents(r3, &(0x7f0000000740)=""/4096, 0x1000) read$eventfd(r3, &(0x7f0000000100), 0xfffffd79) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x93) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write(r8, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r8, r7, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r6, 0x0, 0x300}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4018, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,cache=mmap,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB=',posixacl,nodevmap,version=9p2000.u,version=9p2000.u,posixacl,audit,uid=', @ANYRESDEC=r9, @ANYBLOB=',fowner>', @ANYRESDEC=r10, @ANYBLOB="78686173002c01"]) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.21947013s ago: executing program 4 (id=746): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000002", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0, @ANYBLOB="ac"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1.214349139s ago: executing program 3 (id=747): r0 = socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xf8030000], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 1.100370268s ago: executing program 4 (id=748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c40), 0x208000, 0x0) signalfd4(r4, &(0x7f0000000c80)={[0xa3]}, 0x8, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {0x6, 0xd}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004041}, 0x41) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 977.654526ms ago: executing program 4 (id=750): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200030088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) 844.420392ms ago: executing program 4 (id=751): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x2, 0x68}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x78, 0x0, 0x7f, 0x0, 0x8, 0x400, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x14800, 0x6ea3, 0xaa, 0x9, 0x6, 0xd, 0x1000, 0x0, 0xc09, 0x0, 0x32c0}, r1, 0xffffffffffffffff, r0, 0x9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 843.856802ms ago: executing program 1 (id=753): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(0x0, 0x14507c, 0x1) 631.517684ms ago: executing program 1 (id=757): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x4, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000540)={0x202020000, &(0x7f0000000340)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x0, {0x33}, &(0x7f0000000400)=""/13, 0xd, &(0x7f0000000600)=""/225, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) wait4(r5, 0x0, 0x1, &(0x7f0000000700)) r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) unshare(0x20000680) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, 0x0, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x8, 0x0, &(0x7f0000002140)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000007c0)={0x0, "4d73c208c586159ea764d407e4df14a1"}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002180)={r11, "1f8837fb476f6b395efab314bdb1c3ce"}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x38, 0x48, 0xe01, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x30}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) 559.057491ms ago: executing program 3 (id=758): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x25, 0x4, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9a4, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4012, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646ef9ff", @ANYRESHEX, @ANYBLOB=',\x00']) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 439.035349ms ago: executing program 3 (id=761): r0 = socket(0x10, 0x3, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000006800010000000000feffffff0a00000000000000140006000000000000000000000000000080000108000500", @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x90) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa6a1310ebf7ff1f0) r2 = syz_socket_connect_nvme_tcp() ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) r3 = geteuid() r4 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000010c0)={0x10c8, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x19}, [@typed={0x8, 0x9e, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x153, 0x0, 0x0, @u64=0x5}, @generic="6777cff56856e5788e036c15162b92c042314f9b899a9009cfcbe96e52fd7cfa9d958e87590e1e6474391acfe9778e5d8eb48509e65566dbd4c9cafb7f15", @generic="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", @typed={0x8, 0xf2, 0x0, 0x0, @uid=r3}, @nested={0x49, 0x7f, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x115}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x5e}, @generic="986568cac5ef381654217beb9e12c18c941fd3350b2883bdeeddac44ea3631b808", @nested={0x4, 0x157}, @nested={0x4, 0x99}, @nested={0x4, 0xdd}]}, @typed={0xc, 0x24, 0x0, 0x0, @u64=0x8}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) 332.423149ms ago: executing program 3 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}], 0x1, 0x0, &(0x7f0000000240)={[0x2]}, 0x8) io_uring_setup(0x1f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x20000680) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200005, 0x0) accept$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f001f005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 196.818425ms ago: executing program 0 (id=764): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(&(0x7f0000000200)='./bus\x00', 0x14507c, 0x1) 173.363821ms ago: executing program 0 (id=765): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = epoll_create1(0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000002000000000000000400000000000000100000000000010020"], 0x24, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x60000015}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x0, 0x100000000000}) 108.449229ms ago: executing program 0 (id=766): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x47d, &(0x7f0000000200)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) 108.334999ms ago: executing program 0 (id=767): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(0x0, 0x14507c, 0x1) 90.269306ms ago: executing program 0 (id=768): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffdfffe, {0x0, 0x9, 0x3, 0x0, {0x4e25, 0x100, [0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x4], 0x0, [0x1]}, 0xf0fffffe, 0xc00e0000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "88000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 64.081691ms ago: executing program 0 (id=769): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x25, 0x4, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet6(0xa, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9a4, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4012, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646ef9ff", @ANYRESHEX, @ANYBLOB=',\x00']) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=770): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = getpid() capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000200)={0x61b3, 0xd35, 0xbc9, 0x80000001, 0x1ff, 0x4}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8002, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000580), 0x8}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0004000000200000140003006e657464657673696d30000000000000140014006e657464657673696d300000000000005c0016805800018054000c80140001"], 0xa4}}, 0x4008040) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1000001, 0x12, r4, 0x28c92000) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001e0001003dbd7000fedbdf2507e9"], 0x48}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) readv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000600)=""/32, 0x20}, {0x0}], 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x89, @multicast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000280)={0x8, 0x7, 0x1, 'queue1\x00', 0x55c}) ioctl$LOOP_CLR_FD(r0, 0x4c01) kernel console output (not intermixed with test programs): T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.753502][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.775109][ T3823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.101'. [ 42.778712][ T3815] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.805126][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.823811][ T3823] bond0: entered promiscuous mode [ 43.342793][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 43.342821][ T28] audit: type=1400 audit(1771953004.168:206): avc: denied { read write } for pid=3807 comm="syz.2.97" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.373618][ T3823] bond_slave_0: entered promiscuous mode [ 43.387175][ T3823] bond_slave_1: entered promiscuous mode [ 43.639433][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.657556][ T28] audit: type=1400 audit(1771953004.178:207): avc: denied { open } for pid=3807 comm="syz.2.97" path="/17/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.680529][ T28] audit: type=1400 audit(1771953004.228:208): avc: denied { perfmon } for pid=3807 comm="syz.2.97" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.697252][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.711422][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.757189][ T28] audit: type=1400 audit(1771953004.598:209): avc: denied { bpf } for pid=3832 comm="syz.0.103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.816087][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.857065][ T3842] FAULT_INJECTION: forcing a failure. [ 43.857065][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.887687][ T3842] CPU: 0 UID: 0 PID: 3842 Comm: syz.0.107 Tainted: G W syzkaller #0 PREEMPT(full) [ 43.887789][ T3842] Tainted: [W]=WARN [ 43.887795][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.887807][ T3842] Call Trace: [ 43.887814][ T3842] [ 43.887823][ T3842] __dump_stack+0x1d/0x30 [ 43.887876][ T3842] dump_stack_lvl+0x95/0xd0 [ 43.887897][ T3842] dump_stack+0x15/0x1b [ 43.887921][ T3842] should_fail_ex+0x263/0x280 [ 43.887944][ T3842] ? __pfx_ucma_resolve_route+0x10/0x10 [ 43.888043][ T3842] should_fail+0xb/0x20 [ 43.888065][ T3842] should_fail_usercopy+0x1a/0x20 [ 43.888090][ T3842] _copy_from_user+0x1c/0xb0 [ 43.888115][ T3842] ucma_resolve_route+0x4b/0x370 [ 43.888197][ T3842] ? __pfx_ucma_resolve_route+0x10/0x10 [ 43.888231][ T3842] ucma_write+0x1c9/0x260 [ 43.888265][ T3842] vfs_writev+0x42b/0x900 [ 43.888300][ T3842] ? __pfx_ucma_write+0x10/0x10 [ 43.888371][ T3842] do_writev+0xe9/0x210 [ 43.888404][ T3842] __x64_sys_writev+0x45/0x50 [ 43.888426][ T3842] x64_sys_call+0x1c0c/0x3020 [ 43.888455][ T3842] do_syscall_64+0x12c/0x370 [ 43.888562][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.888586][ T3842] RIP: 0033:0x7fc7da34c629 [ 43.888605][ T3842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.888624][ T3842] RSP: 002b:00007fc7d8d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 43.888647][ T3842] RAX: ffffffffffffffda RBX: 00007fc7da5c5fa0 RCX: 00007fc7da34c629 [ 43.888706][ T3842] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 43.888719][ T3842] RBP: 00007fc7d8d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.888731][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.888750][ T3842] R13: 00007fc7da5c6038 R14: 00007fc7da5c5fa0 R15: 00007ffe22bc1ff8 [ 43.888804][ T3842] [ 44.102229][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 44.111668][ T3843] loop1: detected capacity change from 0 to 256 [ 44.123525][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.163706][ T3843] FAT-fs (loop1): Directory bread(block 64) failed [ 44.170313][ T3843] FAT-fs (loop1): Directory bread(block 65) failed [ 44.176996][ T3843] FAT-fs (loop1): Directory bread(block 66) failed [ 44.183612][ T3843] FAT-fs (loop1): Directory bread(block 67) failed [ 44.190182][ T3843] FAT-fs (loop1): Directory bread(block 68) failed [ 44.196911][ T3843] FAT-fs (loop1): Directory bread(block 69) failed [ 44.203483][ T3843] FAT-fs (loop1): Directory bread(block 70) failed [ 44.210085][ T3843] FAT-fs (loop1): Directory bread(block 71) failed [ 44.216781][ T3843] FAT-fs (loop1): Directory bread(block 72) failed [ 44.223418][ T3843] FAT-fs (loop1): Directory bread(block 73) failed [ 44.697258][ T28] audit: type=1400 audit(1771953005.588:210): avc: denied { cpu } for pid=3847 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.842432][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.421702][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.387651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.423254][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.431524][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.439750][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.450525][ T28] audit: type=1400 audit(1771953007.338:211): avc: denied { name_bind } for pid=3854 comm="syz.4.108" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.623565][ T28] audit: type=1400 audit(1771953007.348:212): avc: denied { node_bind } for pid=3854 comm="syz.4.108" saddr=172.30.0.5 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.667153][ T28] audit: type=1400 audit(1771953007.558:213): avc: denied { create } for pid=3869 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.692361][ T28] audit: type=1400 audit(1771953007.558:214): avc: denied { setopt } for pid=3869 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.777847][ T28] audit: type=1326 audit(1771953007.668:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7408ac629 code=0x0 [ 46.816711][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 46.832573][ T3881] loop3: detected capacity change from 0 to 1024 [ 46.848297][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 46.871852][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 46.938860][ T3881] ext4: Unknown parameter 'fsname' [ 47.002694][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 48.013350][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.393587][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 48.393686][ T28] audit: type=1400 audit(1771953009.248:217): avc: denied { write } for pid=3888 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.682133][ T3895] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 48.737520][ T28] audit: type=1400 audit(1771953009.498:218): avc: denied { remount } for pid=3893 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.780303][ T3897] loop3: detected capacity change from 0 to 512 [ 48.806559][ T3895] team0 (unregistering): Port device team_slave_0 removed [ 48.837772][ T28] audit: type=1400 audit(1771953009.498:219): avc: denied { bind } for pid=3893 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.872240][ T3895] team0 (unregistering): Failed to send options change via netlink (err -105) [ 48.912710][ T3895] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 48.939025][ T28] audit: type=1400 audit(1771953009.528:220): avc: denied { setopt } for pid=3893 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.972177][ T3895] team0 (unregistering): Port device team_slave_1 removed [ 48.989017][ T3897] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.121: bad orphan inode 15 [ 49.027046][ T3897] loop3: lost filesystem error report for type 5 error -117 [ 49.027529][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.041325][ C0] EXT4-fs (loop3): initial error at time 1771953009: ext4_orphan_get:1417 [ 49.049855][ C0] EXT4-fs (loop3): last error at time 1771953009: ext4_orphan_get:1417 [ 49.060372][ T3897] ext4_test_bit(bit=14, block=5) = 0 [ 49.072867][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.157197][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.490004][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.498663][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.525421][ T3914] loop3: detected capacity change from 0 to 512 [ 49.563493][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.125: iget: bad extra_isize 90 (inode size 256) [ 49.581181][ T3914] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.581403][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.125: error while reading EA inode 11 err=-117 [ 49.590699][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.590718][ C0] EXT4-fs (loop3): initial error at time 1771953010: ext4_xattr_inode_iget:441: inode 11 [ 49.590751][ C0] EXT4-fs (loop3): last error at time 1771953010: ext4_xattr_inode_iget:441: inode 11 [ 49.630259][ T3914] loop3: lost filesystem error report for type 5 error -117 [ 49.630446][ T3914] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.630507][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.125: iget: bad extra_isize 90 (inode size 256) [ 49.630533][ T3914] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.630764][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.125: error while reading EA inode 11 err=-117 [ 49.630797][ T3914] loop3: lost filesystem error report for type 5 error -117 [ 49.630896][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.125: iget: bad extra_isize 90 (inode size 256) [ 49.630925][ T3914] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 49.632414][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.125: error while reading EA inode 18 err=-117 [ 49.632440][ T3914] loop3: lost filesystem error report for type 5 error -117 [ 49.632896][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.125: iget: bad extra_isize 90 (inode size 256) [ 49.632926][ T3914] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 49.634390][ T3914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.125: error while reading EA inode 18 err=-117 [ 49.634423][ T3914] loop3: lost filesystem error report for type 5 error -117 [ 49.643548][ T3914] EXT4-fs (loop3): 1 orphan inode deleted [ 49.643971][ T3914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.664263][ T3927] 9pnet_fd: Insufficient options for proto=fd [ 49.689431][ T3914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 49.792646][ T3930] loop2: detected capacity change from 0 to 512 [ 49.795985][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.841565][ T28] audit: type=1400 audit(1771953010.728:221): avc: denied { create } for pid=3923 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.861866][ T3930] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.882339][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.891557][ T28] audit: type=1400 audit(1771953010.738:222): avc: denied { bind } for pid=3923 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.911711][ T28] audit: type=1400 audit(1771953010.738:223): avc: denied { listen } for pid=3923 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.954370][ T3934] Cannot find add_set index 0 as target [ 49.993400][ T3932] loop1: detected capacity change from 0 to 512 [ 50.063902][ T3932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.085553][ T3932] EXT4-fs (loop1): 1 truncate cleaned up [ 50.091951][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.143842][ T3939] Cannot find add_set index 0 as target [ 50.244246][ T28] audit: type=1400 audit(1771953011.128:224): avc: denied { write } for pid=3923 comm="syz.1.132" path="/21/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.354869][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.420322][ T28] audit: type=1400 audit(1771953011.278:225): avc: denied { block_suspend } for pid=3945 comm="syz.3.138" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.571546][ T28] audit: type=1400 audit(1771953011.418:226): avc: denied { module_request } for pid=3947 comm="syz.1.139" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.909359][ T3961] loop4: detected capacity change from 0 to 512 [ 50.992345][ T3966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.144'. [ 51.045726][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.187152][ T3974] 9pnet_fd: Insufficient options for proto=fd [ 51.221480][ T3975] tipc: Enabling of bearer rejected, failed to enable media [ 51.765623][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.811524][ T3981] loop2: detected capacity change from 0 to 512 [ 51.844881][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.857758][ T3981] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.954109][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=3991 comm=syz.1.153 [ 52.067635][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.165960][ T3996] netlink: 68 bytes leftover after parsing attributes in process `syz.1.155'. [ 52.173999][ T4003] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 52.182639][ T3996] netlink: 64 bytes leftover after parsing attributes in process `syz.1.155'. [ 52.263857][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.397604][ T4018] process 'syz.2.162' launched './file1' with NULL argv: empty string added [ 52.578514][ T4023] loop3: detected capacity change from 0 to 512 [ 52.586604][ T4023] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.665942][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 52.815427][ T4027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 52.863731][ T4027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 52.908630][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 53.107735][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.406823][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.500654][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 53.500672][ T28] audit: type=1400 audit(1771953014.398:308): avc: denied { watch watch_reads } for pid=4042 comm="syz.0.172" path="/proc/74" dev="proc" ino=5905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.599412][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 53.648176][ T4050] Non-string source [ 53.674735][ T28] audit: type=1400 audit(1771953014.508:309): avc: denied { create } for pid=4044 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.734995][ T4052] bridge1: port 1(ip6gretap1) entered blocking state [ 53.755789][ T4052] bridge1: port 1(ip6gretap1) entered disabled state [ 53.762905][ T28] audit: type=1400 audit(1771953014.508:310): avc: denied { bind } for pid=4044 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.784516][ T4052] ip6gretap1: entered allmulticast mode [ 53.791583][ T4052] ip6gretap1: entered promiscuous mode [ 53.797869][ T28] audit: type=1400 audit(1771953014.508:311): avc: denied { name_bind } for pid=4044 comm="syz.4.173" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 53.823089][ T28] audit: type=1400 audit(1771953014.508:312): avc: denied { node_bind } for pid=4044 comm="syz.4.173" saddr=fe88::105 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 53.845528][ T28] audit: type=1400 audit(1771953014.508:313): avc: denied { ioctl } for pid=4044 comm="syz.4.173" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.878872][ T28] audit: type=1400 audit(1771953014.548:314): avc: denied { bind } for pid=4042 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.936208][ T28] audit: type=1400 audit(1771953014.548:315): avc: denied { setopt } for pid=4042 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.974471][ T4048] bridge1: port 2(veth3) entered blocking state [ 53.987623][ T4048] bridge1: port 2(veth3) entered disabled state [ 53.998229][ T4048] veth3: entered allmulticast mode [ 54.009481][ T28] audit: type=1400 audit(1771953014.638:316): avc: denied { shutdown } for pid=4049 comm="syz.4.175" lport=34982 faddr=2001::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.039728][ T4048] veth3: entered promiscuous mode [ 54.045216][ T4048] bridge1: port 2(veth3) entered blocking state [ 54.051630][ T4048] bridge1: port 2(veth3) entered forwarding state [ 54.079977][ T50] bridge1: port 2(veth3) entered disabled state [ 54.140784][ T4059] loop1: detected capacity change from 0 to 512 [ 54.150310][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.171689][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.251130][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.280015][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.387137][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.395932][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.404205][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.933907][ T4070] 9pnet_fd: Insufficient options for proto=fd [ 55.199909][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 55.228338][ T4081] FAULT_INJECTION: forcing a failure. [ 55.228338][ T4081] name failslab, interval 1, probability 0, space 0, times 0 [ 55.242875][ T4081] CPU: 1 UID: 0 PID: 4081 Comm: syz.3.183 Tainted: G W syzkaller #0 PREEMPT(full) [ 55.242906][ T4081] Tainted: [W]=WARN [ 55.242913][ T4081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.242932][ T4081] Call Trace: [ 55.242938][ T4081] [ 55.242944][ T4081] __dump_stack+0x1d/0x30 [ 55.242970][ T4081] dump_stack_lvl+0x95/0xd0 [ 55.243074][ T4081] dump_stack+0x15/0x1b [ 55.243099][ T4081] should_fail_ex+0x263/0x280 [ 55.243129][ T4081] ? gred_dump+0x13c/0x1720 [ 55.243155][ T4081] should_failslab+0x8c/0xb0 [ 55.243253][ T4081] __kmalloc_cache_noprof+0x5f/0x410 [ 55.243282][ T4081] gred_dump+0x13c/0x1720 [ 55.243314][ T4081] ? tick_nohz_tick_stopped+0x32/0x40 [ 55.243411][ T4081] ? __irq_work_queue_local+0x116/0x2d0 [ 55.243449][ T4081] ? irq_work_queue+0x93/0x100 [ 55.243539][ T4081] ? vprintk_emit+0x572/0x600 [ 55.243565][ T4081] ? nla_put+0xe3/0x110 [ 55.243593][ T4081] tc_fill_qdisc+0x3ca/0x990 [ 55.243618][ T4081] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 55.243661][ T4081] tc_dump_qdisc_root+0x10e/0x340 [ 55.243687][ T4081] tc_dump_qdisc+0x2cd/0x6f0 [ 55.243781][ T4081] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 55.243825][ T4081] rtnl_dumpit+0x71/0x140 [ 55.243855][ T4081] netlink_dump+0x455/0x8a0 [ 55.243889][ T4081] __netlink_dump_start+0x43e/0x520 [ 55.243914][ T4081] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 55.243987][ T4081] rtnetlink_rcv_msg+0x59f/0x720 [ 55.244021][ T4081] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 55.244064][ T4081] ? __pfx_rtnl_dumpit+0x10/0x10 [ 55.244157][ T4081] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 55.244178][ T4081] netlink_rcv_skb+0x123/0x220 [ 55.244203][ T4081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.244241][ T4081] rtnetlink_rcv+0x1c/0x30 [ 55.244259][ T4081] netlink_unicast+0x5c0/0x690 [ 55.244280][ T4081] netlink_sendmsg+0x5c8/0x6f0 [ 55.244299][ T4081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.244344][ T4081] ____sys_sendmsg+0x5af/0x600 [ 55.244420][ T4081] ___sys_sendmsg+0x195/0x1e0 [ 55.244444][ T4081] __x64_sys_sendmsg+0xd4/0x160 [ 55.244503][ T4081] x64_sys_call+0x194c/0x3020 [ 55.244582][ T4081] do_syscall_64+0x12c/0x370 [ 55.244604][ T4081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.244618][ T4081] RIP: 0033:0x7fe7408ac629 [ 55.244630][ T4081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.244710][ T4081] RSP: 002b:00007fe73f307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.244726][ T4081] RAX: ffffffffffffffda RBX: 00007fe740b25fa0 RCX: 00007fe7408ac629 [ 55.244735][ T4081] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000006 [ 55.244817][ T4081] RBP: 00007fe73f307090 R08: 0000000000000000 R09: 0000000000000000 [ 55.244825][ T4081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.244865][ T4081] R13: 00007fe740b26038 R14: 00007fe740b25fa0 R15: 00007fff1b76c3d8 [ 55.244883][ T4081] [ 55.579610][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.613876][ T4089] loop4: detected capacity change from 0 to 512 [ 55.743410][ T4097] loop0: detected capacity change from 0 to 512 [ 55.750343][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.750284][ T4098] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 55.750483][ T4098] veth0_vlan: entered allmulticast mode [ 55.782199][ T4097] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.190: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0) [ 55.785542][ T4089] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.825583][ T4097] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 55.827501][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 55.843018][ C0] EXT4-fs (loop0): initial error at time 1771953016: ext4_ext_check_inode:521: inode 2 [ 55.852793][ C0] EXT4-fs (loop0): last error at time 1771953016: ext4_ext_check_inode:521: inode 2 [ 55.889554][ T4097] EXT4-fs (loop0): get root inode failed [ 55.895354][ T4097] EXT4-fs (loop0): mount failed [ 56.000012][ T4098] veth0_vlan: left promiscuous mode [ 56.025336][ T4105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 56.039635][ T4098] veth0_vlan: entered promiscuous mode [ 56.103643][ T4098] team0: Device veth0_vlan failed to register rx_handler [ 56.543070][ T4112] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 56.563262][ T3421] net_ratelimit: 134 callbacks suppressed [ 56.563278][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.677354][ T28] audit: type=1400 audit(1771953017.568:317): avc: denied { create } for pid=4115 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.680027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.704740][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.712843][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.283145][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 57.300692][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 57.310574][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 57.373905][ T4128] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 57.382470][ T4128] syzkaller1: entered promiscuous mode [ 57.388304][ T4128] syzkaller1: entered allmulticast mode [ 57.580957][ T4130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 57.590603][ T4130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.197'. [ 57.618515][ T4130] lo speed is unknown, defaulting to 1000 [ 57.624350][ T4130] lo speed is unknown, defaulting to 1000 [ 57.630526][ T4130] lo speed is unknown, defaulting to 1000 [ 57.636534][ T4130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.644235][ T4130] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.678108][ T4130] lo speed is unknown, defaulting to 1000 [ 57.686103][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.696662][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.679925][ T4130] lo speed is unknown, defaulting to 1000 [ 58.689760][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 58.689848][ T28] audit: type=1400 audit(1771953019.588:323): avc: denied { write } for pid=4137 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.717826][ T4130] lo speed is unknown, defaulting to 1000 [ 58.723915][ T4130] lo speed is unknown, defaulting to 1000 [ 58.730421][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.759207][ T4130] lo speed is unknown, defaulting to 1000 [ 58.876307][ T4152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4152 comm=syz.1.201 [ 58.975591][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 58.989558][ T4155] loop4: detected capacity change from 0 to 8192 [ 58.999201][ T28] audit: type=1400 audit(1771953019.898:324): avc: denied { read } for pid=4163 comm="syz.1.210" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.023247][ T4155] vfat: Unknown parameter '0x0000000000000003000000000000000000000030x0000000000000003Â*qù3' [ 59.039693][ T4161] vlan2: entered allmulticast mode [ 59.058661][ T4161] bridge0: port 3(vlan2) entered blocking state [ 59.069390][ T28] audit: type=1400 audit(1771953019.898:325): avc: denied { open } for pid=4163 comm="syz.1.210" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.098033][ T4161] bridge0: port 3(vlan2) entered disabled state [ 59.140394][ T4161] vlan2: entered promiscuous mode [ 59.188259][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.750662][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.759575][ T4177] FAULT_INJECTION: forcing a failure. [ 59.759575][ T4177] name failslab, interval 1, probability 0, space 0, times 0 [ 59.825615][ T4177] CPU: 1 UID: 0 PID: 4177 Comm: syz.2.214 Tainted: G W syzkaller #0 PREEMPT(full) [ 59.825650][ T4177] Tainted: [W]=WARN [ 59.825658][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.825670][ T4177] Call Trace: [ 59.825678][ T4177] [ 59.825685][ T4177] __dump_stack+0x1d/0x30 [ 59.825713][ T4177] dump_stack_lvl+0x95/0xd0 [ 59.825738][ T4177] dump_stack+0x15/0x1b [ 59.825761][ T4177] should_fail_ex+0x263/0x280 [ 59.825785][ T4177] should_failslab+0x8c/0xb0 [ 59.825806][ T4177] kmem_cache_alloc_noprof+0x66/0x400 [ 59.825829][ T4177] ? vm_area_alloc+0x2c/0xb0 [ 59.825853][ T4177] vm_area_alloc+0x2c/0xb0 [ 59.825877][ T4177] mmap_region+0x11ce/0x2050 [ 59.825935][ T4177] do_mmap+0x9b2/0xbd0 [ 59.825963][ T4177] vm_mmap_pgoff+0x183/0x2d0 [ 59.825985][ T4177] ksys_mmap_pgoff+0xc1/0x310 [ 59.826012][ T4177] ? __x64_sys_mmap+0x49/0x70 [ 59.826045][ T4177] x64_sys_call+0x14df/0x3020 [ 59.826074][ T4177] do_syscall_64+0x12c/0x370 [ 59.826112][ T4177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.826136][ T4177] RIP: 0033:0x7fdae047c392 [ 59.826154][ T4177] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 59.826173][ T4177] RSP: 002b:00007fdadeed6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.826196][ T4177] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdae047c392 [ 59.826209][ T4177] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 59.826223][ T4177] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 59.826236][ T4177] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 59.826250][ T4177] R13: 00007fdadeed6ee0 R14: 00007fdadeed6ea0 R15: 0000200000000180 [ 59.826270][ T4177] [ 60.160966][ T28] audit: type=1400 audit(1771953021.008:326): avc: denied { create } for pid=4192 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.180357][ T28] audit: type=1400 audit(1771953021.008:327): avc: denied { setopt } for pid=4192 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.197756][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.228088][ T28] audit: type=1400 audit(1771953021.008:328): avc: denied { shutdown } for pid=4192 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.337070][ T4209] loop3: detected capacity change from 0 to 2048 [ 60.398990][ T28] audit: type=1400 audit(1771953021.298:329): avc: denied { connect } for pid=4206 comm="syz.0.223" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.428877][ T28] audit: type=1400 audit(1771953021.298:330): avc: denied { map } for pid=4206 comm="syz.0.223" path="/proc/111/task/112/environ" dev="proc" ino=7074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 60.454695][ T4216] loop0: detected capacity change from 0 to 512 [ 60.487285][ T4216] ------------[ cut here ]------------ [ 60.492837][ T4216] EA inode 11 i_nlink=2 [ 60.492853][ T4216] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.223/4216 [ 60.507755][ T4216] Modules linked in: [ 60.511844][ T4216] CPU: 1 UID: 0 PID: 4216 Comm: syz.0.223 Tainted: G W syzkaller #0 PREEMPT(full) [ 60.522726][ T4216] Tainted: [W]=WARN [ 60.526546][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.536691][ T4216] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 60.543385][ T4216] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 60.563079][ T4216] RSP: 0018:ffffc90010f37778 EFLAGS: 00010246 [ 60.569286][ T4216] RAX: ffff888104109af8 RBX: ffff88811c082048 RCX: ffffffff81bff418 [ 60.577315][ T4216] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de420 [ 60.585365][ T4216] RBP: 000000000000000b R08: 000188811c081ffb R09: 0000000000000000 [ 60.593462][ T4216] R10: ffffc90010f376a8 R11: 0001c90010f376a8 R12: ffff88811c081ff8 [ 60.593687][ T4210] loop2: detected capacity change from 0 to 1024 [ 60.601503][ T4216] R13: ffffffff871de420 R14: ffff88811c081fb0 R15: 0000000000000001 [ 60.601525][ T4216] FS: 00007fc7d8d5d6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 60.624873][ T4216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.631552][ T4216] CR2: 00007fcf5fc58000 CR3: 000000011c780000 CR4: 00000000003506f0 [ 60.639587][ T4216] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.647660][ T4216] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 60.655733][ T4216] Call Trace: [ 60.659063][ T4216] [ 60.660393][ T4227] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.662041][ T4216] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 60.676981][ T4216] ? errseq_check+0x2c/0x50 [ 60.681554][ T4216] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 60.687057][ T4216] ? ext4_truncate+0x92b/0xb00 [ 60.691885][ T4216] ext4_evict_inode+0xa1f/0xd60 [ 60.696769][ T4216] ? __pfx_ext4_evict_inode+0x10/0x10 [ 60.702293][ T4216] evict+0x2af/0x510 [ 60.706235][ T4216] ? __dquot_initialize+0x146/0x7c0 [ 60.709781][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 60.711530][ T4216] iput+0x41a/0x580 [ 60.724238][ T4216] ext4_process_orphan+0x1a9/0x1c0 [ 60.729423][ T4216] ext4_orphan_cleanup+0x6a8/0xa00 [ 60.734563][ T4216] ext4_fill_super+0x3408/0x37c0 [ 60.739569][ T4216] ? set_blocksize+0x14c/0x270 [ 60.740806][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 60.744396][ T4216] ? setup_bdev_super+0x30e/0x370 [ 60.758369][ T4216] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.763707][ T4216] get_tree_bdev_flags+0x291/0x300 [ 60.768894][ T4216] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.774200][ T4216] get_tree_bdev+0x1f/0x30 [ 60.778666][ T4216] ext4_get_tree+0x1c/0x30 [ 60.783090][ T4216] vfs_get_tree+0x57/0x1d0 [ 60.787627][ T4216] do_new_mount+0x288/0x8d0 [ 60.792170][ T4216] path_mount+0x4d0/0xbc0 [ 60.796558][ T4216] __se_sys_mount+0x28c/0x2e0 [ 60.801302][ T4216] __x64_sys_mount+0x67/0x80 [ 60.805923][ T4216] x64_sys_call+0x2d61/0x3020 [ 60.810721][ T4216] do_syscall_64+0x12c/0x370 [ 60.813534][ T4228] bond1: entered promiscuous mode [ 60.815424][ T4216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.826404][ T4216] RIP: 0033:0x7fc7da34d8ca [ 60.830866][ T4216] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.850618][ T4216] RSP: 002b:00007fc7d8d5ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.850817][ T4228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.859079][ T4216] RAX: ffffffffffffffda RBX: 00007fc7d8d5cee0 RCX: 00007fc7da34d8ca [ 60.873688][ T4216] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fc7d8d5cea0 [ 60.881724][ T4216] RBP: 00002000000009c0 R08: 00007fc7d8d5cee0 R09: 0000000000800718 [ 60.889737][ T4216] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 60.897794][ T4216] R13: 00007fc7d8d5cea0 R14: 000000000000048d R15: 0000200000000200 [ 60.905833][ T4216] [ 60.908945][ T4216] ---[ end trace 0000000000000000 ]--- [ 60.917904][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.924467][ T4210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.926517][ T4216] EXT4-fs (loop0): 1 orphan inode deleted [ 60.948405][ T4216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.960525][ T3523] loop3: p1 < > p3 < > p4 < > [ 60.965295][ T3523] loop3: partition table partially beyond EOD, truncated [ 60.972698][ T3523] loop3: p1 start 3405774849 is beyond EOD, truncated [ 60.979610][ T3523] loop3: p3 start 2304 is beyond EOD, truncated [ 60.987634][ T4210] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.988674][ T4209] loop3: p1 < > p3 < > p4 < > [ 61.006169][ T4209] loop3: partition table partially beyond EOD, truncated [ 61.006693][ T4210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.038037][ T4209] loop3: p1 start 3405774849 is beyond EOD, truncated [ 61.045378][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 61.057591][ T4209] loop3: p3 start 2304 is beyond EOD, truncated [ 61.154681][ T4240] 9pnet_fd: Insufficient options for proto=fd [ 61.187393][ T4237] netlink: 15 bytes leftover after parsing attributes in process `syz.1.229'. [ 61.224205][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 61.357556][ T28] audit: type=1326 audit(1771953022.238:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 61.383646][ T28] audit: type=1326 audit(1771953022.238:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 61.388794][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.436013][ T4249] loop4: detected capacity change from 0 to 4096 [ 61.448881][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 61.475518][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.497870][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 61.603075][ T4210] loop2: detected capacity change from 0 to 512 [ 61.619029][ T4269] x_tables: ip_tables: osf match: only valid for protocol 6 [ 61.626923][ T4210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.679415][ T4210] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 61.705191][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.774616][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.792807][ T4276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=4276 comm=syz.4.241 [ 61.806576][ T4276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52496 sclass=netlink_route_socket pid=4276 comm=syz.4.241 [ 61.832746][ T4274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.840014][ T4274] IPv6: NLM_F_CREATE should be set when creating new route [ 61.990135][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.056954][ T4292] Cannot find add_set index 0 as target [ 62.091482][ T4294] loop2: detected capacity change from 0 to 1024 [ 62.100640][ T4294] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.125807][ T4294] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 3: comm syz.2.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.140008][ T4294] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.140186][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.249: Failed to acquire dquot type 0 [ 62.149255][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.149276][ C0] EXT4-fs (loop2): initial error at time 1771953023: ext4_map_blocks:818: inode 3: block 3 [ 62.149307][ C0] EXT4-fs (loop2): last error at time 1771953023: ext4_map_blocks:818: inode 3: block 3 [ 62.186909][ T4294] loop2: lost filesystem error report for type 5 error -117 [ 62.187349][ T4294] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 3: comm syz.2.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.213187][ T4294] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.213698][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.249: Failed to acquire dquot type 0 [ 62.236225][ T4294] loop2: lost filesystem error report for type 5 error -117 [ 62.236577][ T4294] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.249: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.262410][ T4297] loop0: detected capacity change from 0 to 256 [ 62.284656][ T4294] loop2: lost filesystem error report for type 5 error -117 [ 62.285694][ T4294] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 3: comm syz.2.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.349099][ T4297] FAT-fs (loop0): Directory bread(block 64) failed [ 62.355890][ T4297] FAT-fs (loop0): Directory bread(block 65) failed [ 62.362481][ T4297] FAT-fs (loop0): Directory bread(block 66) failed [ 62.369125][ T4297] FAT-fs (loop0): Directory bread(block 67) failed [ 62.375712][ T4297] FAT-fs (loop0): Directory bread(block 68) failed [ 62.382342][ T4297] FAT-fs (loop0): Directory bread(block 69) failed [ 62.389636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.398713][ T4297] FAT-fs (loop0): Directory bread(block 70) failed [ 62.405263][ T4297] FAT-fs (loop0): Directory bread(block 71) failed [ 62.411844][ T4297] FAT-fs (loop0): Directory bread(block 72) failed [ 62.418390][ T4297] FAT-fs (loop0): Directory bread(block 73) failed [ 62.479364][ T4294] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.480363][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.249: Failed to acquire dquot type 0 [ 62.593364][ T4294] loop2: lost filesystem error report for type 5 error -117 [ 62.594480][ T4294] EXT4-fs (loop2): 1 orphan inode deleted [ 62.655036][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.925881][ T4305] loop3: detected capacity change from 0 to 512 [ 63.019223][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.253: corrupted inode contents [ 63.037300][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.115903][ T4305] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.116654][ T4305] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.253: mark_inode_dirty error [ 63.125757][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.125790][ C1] EXT4-fs (loop3): initial error at time 1771953024: ext4_do_update_inode:5569: inode 3 [ 63.125818][ C1] EXT4-fs (loop3): last error at time 1771953024: ext4_do_update_inode:5569: inode 3 [ 63.177127][ T4314] loop1: detected capacity change from 0 to 1024 [ 63.184952][ T4314] EXT4-fs: Ignoring removed orlov option [ 63.207253][ T4314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.301362][ T4305] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.302596][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.253: corrupted inode contents [ 63.381017][ T4305] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.381665][ T4305] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.253: mark_inode_dirty error [ 63.454290][ T4305] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.456242][ T4305] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.253: Failed to acquire dquot type 0 [ 63.495996][ T4305] loop3: lost filesystem error report for type 5 error -117 [ 63.497031][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.253: corrupted inode contents [ 63.516748][ T4305] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.517114][ T4305] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.253: mark_inode_dirty error [ 63.538132][ T4305] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.538386][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.253: corrupted inode contents [ 63.559883][ T4305] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.560306][ T4305] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.253: mark_inode_dirty error [ 63.581382][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.253: corrupted inode contents [ 63.594248][ T4305] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 63.604463][ T4305] loop3: lost filesystem error report for type 5 error -117 [ 63.604696][ T4305] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.253: corrupted inode contents [ 63.624589][ T4305] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.253: mark_inode_dirty error [ 63.636455][ T4305] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 63.645649][ T4305] loop3: lost filesystem error report for type 5 error -117 [ 63.646663][ T4305] EXT4-fs (loop3): 1 truncate cleaned up [ 63.661284][ T4305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.675892][ T4305] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.083975][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.113929][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.118571][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.162007][ T4325] loop0: detected capacity change from 0 to 512 [ 64.239175][ T4331] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.332620][ T4330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=4330 comm=syz.2.255 [ 64.351106][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.446076][ T28] kauditd_printk_skb: 368 callbacks suppressed [ 64.446095][ T28] audit: type=1400 audit(1771953025.338:694): avc: denied { bind } for pid=4335 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.472414][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 64.490401][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.501879][ T28] audit: type=1400 audit(1771953025.368:695): avc: denied { name_bind } for pid=4335 comm="syz.0.262" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 64.524194][ T28] audit: type=1400 audit(1771953025.368:696): avc: denied { node_bind } for pid=4335 comm="syz.0.262" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 64.546756][ T28] audit: type=1400 audit(1771953025.398:697): avc: denied { associate } for pid=4339 comm="syz.2.265" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.634695][ T4344] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 64.701556][ T28] audit: type=1400 audit(1771953025.598:698): avc: denied { append } for pid=4346 comm="syz.1.266" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.537302][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.547506][ T28] audit: type=1400 audit(1771953026.158:699): avc: denied { setopt } for pid=4346 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.750244][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.776012][ T28] audit: type=1400 audit(1771953026.488:700): avc: denied { write } for pid=4346 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.802577][ T4352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.267'. [ 65.832111][ T4355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 65.843144][ T28] audit: type=1400 audit(1771953026.648:701): avc: denied { ioctl } for pid=4346 comm="syz.1.266" path="socket:[7329]" dev="sockfs" ino=7329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.038808][ T28] audit: type=1400 audit(1771953026.778:702): avc: denied { mount } for pid=4351 comm="syz.3.267" name="/" dev="ramfs" ino=7347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.121961][ T4370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 66.172264][ T28] audit: type=1400 audit(1771953026.778:703): avc: denied { write } for pid=4351 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.289863][ T4381] set_capacity_and_notify: 1 callbacks suppressed [ 66.289880][ T4381] loop1: detected capacity change from 0 to 512 [ 66.368155][ T4386] loop0: detected capacity change from 0 to 1024 [ 66.390277][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.418151][ T4386] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.479224][ T4381] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.496133][ T4386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.517116][ T4384] loop2: detected capacity change from 0 to 8192 [ 66.532367][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.700160][ T4384] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.739690][ T4384] FAULT_INJECTION: forcing a failure. [ 66.739690][ T4384] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.785939][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.809899][ T4384] CPU: 1 UID: 0 PID: 4384 Comm: syz.2.279 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.809937][ T4384] Tainted: [W]=WARN [ 66.809945][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.809978][ T4384] Call Trace: [ 66.809986][ T4384] [ 66.809996][ T4384] __dump_stack+0x1d/0x30 [ 66.810103][ T4384] dump_stack_lvl+0x95/0xd0 [ 66.810189][ T4384] dump_stack+0x15/0x1b [ 66.810211][ T4384] should_fail_ex+0x263/0x280 [ 66.810243][ T4384] should_fail_alloc_page+0xf2/0x100 [ 66.810263][ T4384] __alloc_frozen_pages_noprof+0x108/0x360 [ 66.810383][ T4384] alloc_pages_mpol+0xb3/0x260 [ 66.810417][ T4384] folio_alloc_noprof+0x96/0x150 [ 66.810450][ T4384] filemap_alloc_folio_noprof+0x92/0x220 [ 66.810492][ T4384] __filemap_get_folio_mpol+0x295/0x680 [ 66.810516][ T4384] cont_write_begin+0x5ca/0x970 [ 66.810609][ T4384] ? generic_write_end+0x133/0x150 [ 66.810670][ T4384] fat_write_begin+0x4f/0xe0 [ 66.810707][ T4384] ? __pfx_fat_get_block+0x10/0x10 [ 66.810731][ T4384] generic_perform_write+0x183/0x490 [ 66.810759][ T4384] __generic_file_write_iter+0x9e/0x120 [ 66.810805][ T4384] ? __pfx_generic_file_write_iter+0x10/0x10 [ 66.810836][ T4384] generic_file_write_iter+0x8d/0x310 [ 66.810865][ T4384] ? _parse_integer_limit+0x170/0x190 [ 66.810981][ T4384] ? _parse_integer+0x27/0x40 [ 66.811018][ T4384] ? kstrtoull+0x111/0x140 [ 66.811074][ T4384] ? kstrtouint+0x76/0xc0 [ 66.811105][ T4384] ? avc_policy_seqno+0x15/0x30 [ 66.811126][ T4384] ? selinux_file_permission+0x1f2/0x690 [ 66.811172][ T4384] ? __pfx_generic_file_write_iter+0x10/0x10 [ 66.811196][ T4384] vfs_write+0x5a6/0x9f0 [ 66.811236][ T4384] ksys_write+0xdc/0x1a0 [ 66.811396][ T4384] __x64_sys_write+0x40/0x50 [ 66.811457][ T4384] x64_sys_call+0x27e1/0x3020 [ 66.811494][ T4384] do_syscall_64+0x12c/0x370 [ 66.811526][ T4384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.811651][ T4384] RIP: 0033:0x7fdae047c629 [ 66.811669][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.811686][ T4384] RSP: 002b:00007fdadeed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.811714][ T4384] RAX: ffffffffffffffda RBX: 00007fdae06f5fa0 RCX: 00007fdae047c629 [ 66.811731][ T4384] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 66.811747][ T4384] RBP: 00007fdadeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.811762][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.811811][ T4384] R13: 00007fdae06f6038 R14: 00007fdae06f5fa0 R15: 00007ffc7b55e468 [ 66.811835][ T4384] [ 67.116318][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.181924][ T4408] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 67.264841][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.329746][ T4425] loop3: detected capacity change from 0 to 512 [ 67.343744][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.360756][ T4425] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.549480][ T4432] loop2: detected capacity change from 0 to 8192 [ 67.951569][ T3523] loop2: p1 < > p2 p4 < p5 > [ 68.013777][ T3523] loop2: partition table partially beyond EOD, truncated [ 68.055217][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.066005][ T3523] loop2: p1 start 134217728 is beyond EOD, truncated [ 68.072783][ T3523] loop2: p2 size 591360 extends beyond EOD, truncated [ 68.082437][ T3523] loop2: p5 size 591360 extends beyond EOD, truncated [ 68.095480][ T4432] loop2: p1 < > p2 p4 < p5 > [ 68.108240][ T4432] loop2: partition table partially beyond EOD, truncated [ 68.115376][ T4432] loop2: p1 start 134217728 is beyond EOD, truncated [ 68.125964][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 68.151438][ T4432] loop2: p2 size 591360 extends beyond EOD, truncated [ 68.159250][ T4432] loop2: p5 size 591360 extends beyond EOD, truncated [ 68.207846][ T4420] delete_channel: no stack [ 68.230501][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.331307][ T4461] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 68.362074][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 68.362074][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 68.377618][ T4461] bridge1: entered promiscuous mode [ 68.381780][ T4464] FAULT_INJECTION: forcing a failure. [ 68.381780][ T4464] name failslab, interval 1, probability 0, space 0, times 0 [ 68.401001][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 68.410911][ T4462] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 68.421174][ T4462] bridge2: entered promiscuous mode [ 68.421708][ T4465] loop0: detected capacity change from 0 to 512 [ 68.432945][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.2.306 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.432979][ T4464] Tainted: [W]=WARN [ 68.432986][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.433063][ T4464] Call Trace: [ 68.433072][ T4464] [ 68.433081][ T4464] __dump_stack+0x1d/0x30 [ 68.433171][ T4464] dump_stack_lvl+0x95/0xd0 [ 68.433254][ T4464] dump_stack+0x15/0x1b [ 68.433280][ T4464] should_fail_ex+0x263/0x280 [ 68.433349][ T4464] should_failslab+0x8c/0xb0 [ 68.433372][ T4464] __kmalloc_noprof+0xb8/0x4e0 [ 68.433403][ T4464] ? security_bpf_prog_load+0x60/0x140 [ 68.433432][ T4464] ? strncpy_from_user+0x13a/0x250 [ 68.433520][ T4464] security_bpf_prog_load+0x60/0x140 [ 68.433552][ T4464] bpf_prog_load+0xf00/0x1140 [ 68.433602][ T4464] ? security_bpf+0x2b/0x90 [ 68.433658][ T4464] __sys_bpf+0x505/0x7e0 [ 68.433749][ T4464] __x64_sys_bpf+0x41/0x50 [ 68.433785][ T4464] x64_sys_call+0x10cb/0x3020 [ 68.433817][ T4464] do_syscall_64+0x12c/0x370 [ 68.433901][ T4464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.433927][ T4464] RIP: 0033:0x7fdae047c629 [ 68.433947][ T4464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.433965][ T4464] RSP: 002b:00007fdadeed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.433998][ T4464] RAX: ffffffffffffffda RBX: 00007fdae06f5fa0 RCX: 00007fdae047c629 [ 68.434013][ T4464] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 68.434025][ T4464] RBP: 00007fdadeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.434065][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.434077][ T4464] R13: 00007fdae06f6038 R14: 00007fdae06f5fa0 R15: 00007ffc7b55e468 [ 68.434095][ T4464] [ 68.653915][ T4465] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.305: bad orphan inode 15 [ 68.675121][ T4465] loop0: lost filesystem error report for type 5 error -117 [ 68.675257][ T4465] ext4_test_bit(bit=14, block=5) = 0 [ 68.682869][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.682893][ C0] EXT4-fs (loop0): initial error at time 1771953029: ext4_orphan_get:1417 [ 68.682917][ C0] EXT4-fs (loop0): last error at time 1771953029: ext4_orphan_get:1417 [ 68.712693][ T4465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.730851][ T4460] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 68.746969][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 68.760135][ T4480] loop1: detected capacity change from 0 to 512 [ 68.774780][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 68.788498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.790449][ T4482] loop4: detected capacity change from 0 to 128 [ 68.824959][ T4460] team0 (unregistering): Failed to send options change via netlink (err -105) [ 68.839581][ T4460] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 68.853281][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.907660][ T4478] netlink: 15 bytes leftover after parsing attributes in process `syz.2.318'. [ 68.918225][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 68.925564][ T4480] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.013894][ T4487] loop3: detected capacity change from 0 to 1024 [ 69.029380][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.158645][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.173421][ T4493] loop4: detected capacity change from 0 to 1024 [ 69.198547][ T4493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.222293][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.235769][ T4487] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.249824][ T4493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 69.259651][ T4493] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.271922][ T4487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.277666][ T4493] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.306775][ T4493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.316973][ T4493] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.314: Inode bitmap for bg 0 marked uninitialized [ 69.337660][ T4493] loop4: lost filesystem error report for type 5 error -117 [ 69.340489][ T4493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.434038][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.463156][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.473728][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.556890][ T4504] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 69.606472][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.607722][ T4513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.321'. [ 69.615943][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.707369][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.709113][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 69.709127][ T28] audit: type=1400 audit(1771953030.598:805): avc: denied { create } for pid=4522 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.877760][ T4540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 69.904099][ T4540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.914776][ T4540] gretap1: entered allmulticast mode [ 69.917599][ T28] audit: type=1400 audit(1771953030.798:806): avc: denied { lock } for pid=4537 comm="syz.1.327" path="socket:[7722]" dev="sockfs" ino=7722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.994132][ T4487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.007165][ T4487] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 70.169726][ T10] IPVS: starting estimator thread 0... [ 70.257559][ T4549] IPVS: using max 2448 ests per chain, 122400 per kthread [ 70.460741][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.639619][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.740257][ T4561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.888988][ T4561] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.062740][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 71.160940][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.175789][ T28] audit: type=1400 audit(1771953032.068:807): avc: denied { write } for pid=4578 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.329277][ T28] audit: type=1400 audit(1771953032.228:808): avc: denied { create } for pid=4578 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.357128][ T4586] netlink: 'syz.3.343': attribute type 13 has an invalid length. [ 71.377538][ T4587] set_capacity_and_notify: 3 callbacks suppressed [ 71.377556][ T4587] loop4: detected capacity change from 0 to 128 [ 71.396582][ T28] audit: type=1400 audit(1771953032.288:809): avc: denied { ioctl } for pid=4588 comm="syz.0.344" path="socket:[8573]" dev="sockfs" ino=8573 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.448376][ T4591] loop3: detected capacity change from 0 to 512 [ 71.494993][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.343: iget: bad extra_isize 90 (inode size 256) [ 71.559250][ T4591] fserror_report: 4 callbacks suppressed [ 71.559299][ T4591] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.596304][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.343: error while reading EA inode 11 err=-117 [ 71.605557][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 71.605624][ C0] EXT4-fs (loop3): initial error at time 1771953032: ext4_xattr_inode_iget:441: inode 11 [ 71.605656][ C0] EXT4-fs (loop3): last error at time 1771953032: ext4_xattr_inode_iget:441: inode 11 [ 71.680433][ T4591] loop3: lost filesystem error report for type 5 error -117 [ 71.680808][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.343: iget: bad extra_isize 90 (inode size 256) [ 71.710417][ T28] audit: type=1400 audit(1771953032.608:810): avc: denied { accept } for pid=4578 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.723668][ T4591] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.731408][ T4587] syz.4.341: attempt to access beyond end of device [ 71.731408][ T4587] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 71.753955][ T4587] syz.4.341: attempt to access beyond end of device [ 71.753955][ T4587] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 71.754107][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.343: error while reading EA inode 11 err=-117 [ 71.754176][ T4587] syz.4.341: attempt to access beyond end of device [ 71.754176][ T4587] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 71.793465][ T4587] syz.4.341: attempt to access beyond end of device [ 71.793465][ T4587] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 71.794169][ T4591] loop3: lost filesystem error report for type 5 error -117 [ 71.806846][ T4587] syz.4.341: attempt to access beyond end of device [ 71.806846][ T4587] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 71.806912][ T4587] syz.4.341: attempt to access beyond end of device [ 71.806912][ T4587] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 71.814616][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.343: iget: bad extra_isize 90 (inode size 256) [ 71.837671][ T4587] syz.4.341: attempt to access beyond end of device [ 71.837671][ T4587] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 71.841479][ T4591] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 71.861105][ T4587] syz.4.341: attempt to access beyond end of device [ 71.861105][ T4587] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 71.868138][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.343: error while reading EA inode 18 err=-117 [ 71.879168][ T4587] syz.4.341: attempt to access beyond end of device [ 71.879168][ T4587] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 71.890477][ T4591] loop3: lost filesystem error report for type 5 error -117 [ 71.914150][ T4587] syz.4.341: attempt to access beyond end of device [ 71.914150][ T4587] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 71.917249][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.343: iget: bad extra_isize 90 (inode size 256) [ 71.949923][ T4591] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 71.950598][ T4591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.343: error while reading EA inode 18 err=-117 [ 71.972083][ T4591] loop3: lost filesystem error report for type 5 error -117 [ 71.972311][ T4591] EXT4-fs (loop3): 1 orphan inode deleted [ 72.002689][ T4602] loop2: detected capacity change from 0 to 256 [ 72.010461][ T4591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.024201][ T4602] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.045265][ T4602] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.291724][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.298951][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.391797][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.405663][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.613286][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.654668][ T50] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.707530][ T3768] Bluetooth: hci0: command 0x1003 tx timeout [ 72.713639][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.724922][ T50] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.833356][ T50] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.854989][ T50] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.223983][ T28] audit: type=1400 audit(1771953034.118:811): avc: denied { bind } for pid=4617 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.361343][ T4626] loop3: detected capacity change from 0 to 128 [ 73.570288][ T4634] xt_cluster: node mask cannot exceed total number of nodes [ 74.144948][ T4640] wireguard0: entered promiscuous mode [ 74.176688][ T4640] wireguard0: entered allmulticast mode [ 74.307920][ T4660] loop2: detected capacity change from 0 to 128 [ 74.364393][ T28] audit: type=1400 audit(1771953035.258:812): avc: denied { ioctl } for pid=4663 comm="syz.4.363" path="socket:[7893]" dev="sockfs" ino=7893 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.396521][ T4660] loop2: detected capacity change from 0 to 2048 [ 74.500890][ T4670] loop2: detected capacity change from 0 to 128 [ 74.647895][ T28] audit: type=1400 audit(1771953035.538:813): avc: denied { mount } for pid=4680 comm="syz.2.369" name="/" dev="hugetlbfs" ino=7947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 74.688789][ T4690] netlink: 'syz.2.369': attribute type 13 has an invalid length. [ 74.750113][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.757538][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.804495][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.814559][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.872732][ T28] audit: type=1400 audit(1771953035.768:814): avc: denied { create } for pid=4699 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.916845][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.925847][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.935157][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.944372][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.974763][ T4702] loop4: detected capacity change from 0 to 128 [ 74.993266][ T4702] netlink: 'syz.4.377': attribute type 14 has an invalid length. [ 75.001139][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 75.043729][ T4704] loop4: detected capacity change from 0 to 256 [ 75.058195][ T4704] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.073741][ T4704] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.090768][ T4708] Cannot find add_set index 0 as target [ 75.115957][ T4704] netlink: 'syz.4.378': attribute type 13 has an invalid length. [ 75.140910][ T28] audit: type=1400 audit(1771953036.038:815): avc: denied { allowed } for pid=4713 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.187456][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 75.324311][ T4728] loop4: detected capacity change from 0 to 128 [ 75.384370][ T4732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'. [ 75.394776][ T4732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'. [ 75.416117][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 75.428754][ T4732] sctp: [Deprecated]: syz.4.389 (pid 4732) Use of int in max_burst socket option. [ 75.428754][ T4732] Use struct sctp_assoc_value instead [ 75.468946][ T28] audit: type=1400 audit(1771953036.368:816): avc: denied { getopt } for pid=4735 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.521069][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 75.554313][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.394'. [ 75.563373][ T4741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 75.583931][ T4741] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 75.594522][ T4741] bond1 (unregistering): Released all slaves [ 75.760681][ T28] audit: type=1400 audit(1771953036.658:817): avc: denied { ioctl } for pid=4750 comm="syz.1.398" path="socket:[8807]" dev="sockfs" ino=8807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.942590][ T28] audit: type=1400 audit(1771953036.838:818): avc: denied { mount } for pid=4761 comm="syz.4.402" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.997539][ T28] audit: type=1400 audit(1771953036.888:819): avc: denied { name_bind } for pid=4769 comm="syz.2.404" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.031395][ T28] audit: type=1400 audit(1771953036.918:820): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 76.090901][ T28] audit: type=1400 audit(1771953036.988:821): avc: denied { mounton } for pid=4779 comm="syz.1.409" path="/76/file0" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.316749][ T4793] xt_hashlimit: size too large, truncated to 1048576 [ 76.323749][ T28] audit: type=1400 audit(1771953037.208:822): avc: denied { setopt } for pid=4792 comm="syz.1.414" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.885399][ T4799] capability: warning: `syz.3.416' uses deprecated v2 capabilities in a way that may be insecure [ 77.179308][ T4806] set_capacity_and_notify: 3 callbacks suppressed [ 77.179368][ T4806] loop3: detected capacity change from 0 to 512 [ 77.217080][ T4806] EXT4-fs (loop3): failed to initialize system zone (-117) [ 77.245828][ T4806] EXT4-fs (loop3): mount failed [ 77.283979][ T28] audit: type=1400 audit(1771953037.998:823): avc: denied { ioctl } for pid=4802 comm="syz.3.417" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.412492][ T4817] loop1: detected capacity change from 0 to 128 [ 78.364783][ T4830] loop0: detected capacity change from 0 to 512 [ 78.376607][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 78.489812][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.425: iget: bad extra_isize 90 (inode size 256) [ 78.515745][ T4830] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.517520][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 78.528719][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.425: error while reading EA inode 11 err=-117 [ 78.533121][ C1] EXT4-fs (loop0): initial error at time 1771953039: ext4_xattr_inode_iget:441: inode 11 [ 78.545333][ T4830] loop0: lost filesystem error report for type 5 error -117 [ 78.555093][ C1] EXT4-fs (loop0): last error at time 1771953039: ext4_xattr_inode_iget:441: inode 11 [ 78.584909][ T4840] loop3: detected capacity change from 0 to 128 [ 78.627272][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.425: iget: bad extra_isize 90 (inode size 256) [ 78.652018][ T4830] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.652195][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.425: error while reading EA inode 11 err=-117 [ 78.683104][ T4846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.432'. [ 78.683944][ T4847] loop3: detected capacity change from 0 to 2048 [ 78.699715][ T4830] loop0: lost filesystem error report for type 5 error -117 [ 78.699943][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.425: iget: bad extra_isize 90 (inode size 256) [ 78.721709][ T4830] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 78.721918][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.425: error while reading EA inode 18 err=-117 [ 78.728704][ T4849] loop4: detected capacity change from 0 to 128 [ 78.731584][ T4830] loop0: lost filesystem error report for type 5 error -117 [ 78.750304][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.425: iget: bad extra_isize 90 (inode size 256) [ 78.807930][ T4830] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 78.808093][ T4830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.425: error while reading EA inode 18 err=-117 [ 78.839422][ T4830] loop0: lost filesystem error report for type 5 error -117 [ 78.839620][ T4830] EXT4-fs (loop0): 1 orphan inode deleted [ 78.854817][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.888175][ T4856] loop2: detected capacity change from 0 to 512 [ 78.908334][ T4856] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 78.923551][ T4856] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.436: bg 0: block 288: padding at end of block bitmap is not set [ 78.923990][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.937895][ T4856] loop2: lost filesystem error report for type 5 error -117 [ 78.957211][ T4856] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 78.957550][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 78.964678][ T4856] loop2: lost filesystem error report for type 5 error -117 [ 78.973211][ C1] EXT4-fs (loop2): initial error at time 1771953039: ext4_validate_block_bitmap:441 [ 78.973258][ C1] EXT4-fs (loop2): last error at time 1771953039: ext4_validate_block_bitmap:441 [ 79.010131][ T4856] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.436: attempt to clear invalid blocks 1024 len 1 [ 79.023260][ T4856] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.023536][ T4856] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.436: invalid indirect mapped block 1819239214 (level 0) [ 79.057774][ T4856] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.058208][ T4856] EXT4-fs (loop2): 1 truncate cleaned up [ 79.073746][ T4856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.088285][ T4861] Cannot find del_set index 29 as target [ 79.369194][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.382746][ T4879] loop1: detected capacity change from 0 to 128 [ 79.760559][ T4881] netlink: 'syz.3.446': attribute type 4 has an invalid length. [ 79.821199][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.836097][ T4900] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 79.860323][ T4900] bond0: (slave gre0): Error -95 calling set_mac_address [ 79.950318][ T4900] ip6gretap1: entered promiscuous mode [ 80.036258][ T4900] ip6gretap1: entered allmulticast mode [ 80.244828][ T4908] loop3: detected capacity change from 0 to 1764 [ 80.403092][ T4908] grow_buffers: requested out-of-range block 18446744072010032070 for device loop3 [ 80.602143][ T4908] isofs_fill_super: bread failed, dev=loop3, iso_blknum=1297723875, block=-1699519546 [ 80.927938][ T4929] ipvlan2: entered promiscuous mode [ 81.046404][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 81.046419][ T28] audit: type=1400 audit(1771953041.938:852): avc: denied { getopt } for pid=4930 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.072321][ T4933] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 81.797555][ T4948] netlink: 'syz.4.465': attribute type 11 has an invalid length. [ 81.806854][ T4942] loop0: detected capacity change from 0 to 8192 [ 81.817968][ T4942] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.832648][ T4948] __nla_validate_parse: 6 callbacks suppressed [ 81.832664][ T4948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.465'. [ 81.855510][ T4942] FAULT_INJECTION: forcing a failure. [ 81.855510][ T4942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.873295][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.0.462 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.873404][ T4942] Tainted: [W]=WARN [ 81.873412][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.873424][ T4942] Call Trace: [ 81.873430][ T4942] [ 81.873499][ T4942] __dump_stack+0x1d/0x30 [ 81.873530][ T4942] dump_stack_lvl+0x95/0xd0 [ 81.873554][ T4942] dump_stack+0x15/0x1b [ 81.873610][ T4942] should_fail_ex+0x263/0x280 [ 81.873635][ T4942] should_fail+0xb/0x20 [ 81.873657][ T4942] should_fail_usercopy+0x1a/0x20 [ 81.873684][ T4942] copy_folio_from_iter_atomic+0x269/0x1170 [ 81.873825][ T4942] ? fat_write_begin+0x4f/0xe0 [ 81.873848][ T4942] ? __pfx_fat_get_block+0x10/0x10 [ 81.873873][ T4942] generic_perform_write+0x2c1/0x490 [ 81.873908][ T4942] __generic_file_write_iter+0x9e/0x120 [ 81.873940][ T4942] ? __pfx_generic_file_write_iter+0x10/0x10 [ 81.874013][ T4942] generic_file_write_iter+0x8d/0x310 [ 81.874043][ T4942] ? _parse_integer_limit+0x170/0x190 [ 81.874084][ T4942] ? _parse_integer+0x27/0x40 [ 81.874175][ T4942] ? kstrtoull+0x111/0x140 [ 81.874211][ T4942] ? kstrtouint+0x76/0xc0 [ 81.874244][ T4942] ? avc_policy_seqno+0x15/0x30 [ 81.874342][ T4942] ? selinux_file_permission+0x1f2/0x690 [ 81.874370][ T4942] ? __pfx_generic_file_write_iter+0x10/0x10 [ 81.874408][ T4942] vfs_write+0x5a6/0x9f0 [ 81.874448][ T4942] ksys_write+0xdc/0x1a0 [ 81.874560][ T4942] __x64_sys_write+0x40/0x50 [ 81.874589][ T4942] x64_sys_call+0x27e1/0x3020 [ 81.874693][ T4942] do_syscall_64+0x12c/0x370 [ 81.874784][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.874806][ T4942] RIP: 0033:0x7fc7da34c629 [ 81.874865][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.874886][ T4942] RSP: 002b:00007fc7d8d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.874911][ T4942] RAX: ffffffffffffffda RBX: 00007fc7da5c5fa0 RCX: 00007fc7da34c629 [ 81.874929][ T4942] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 81.874945][ T4942] RBP: 00007fc7d8d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.874957][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.875034][ T4942] R13: 00007fc7da5c6038 R14: 00007fc7da5c5fa0 R15: 00007ffe22bc1ff8 [ 81.875053][ T4942] [ 82.257088][ T4965] loop4: detected capacity change from 0 to 4096 [ 82.296585][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.335210][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.492735][ T4987] loop0: detected capacity change from 0 to 128 [ 82.653438][ T28] audit: type=1400 audit(1771953043.548:853): avc: denied { mounton } for pid=4986 comm="syz.0.473" path="/71/file0/file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 82.849891][ T28] audit: type=1400 audit(1771953043.618:854): avc: denied { create } for pid=4986 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.899124][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 82.924452][ T5003] bridge1: port 1(ip6gretap1) entered blocking state [ 82.970808][ T5003] bridge1: port 1(ip6gretap1) entered disabled state [ 82.997687][ T5003] ip6gretap1: entered allmulticast mode [ 83.006872][ T5003] ip6gretap1: entered promiscuous mode [ 83.033906][ T5006] bridge1: port 2(veth5) entered blocking state [ 83.040411][ T5006] bridge1: port 2(veth5) entered disabled state [ 83.046815][ T5006] veth5: entered allmulticast mode [ 83.058176][ T5006] veth5: entered promiscuous mode [ 83.064700][ T5006] bridge1: port 2(veth5) entered blocking state [ 83.071121][ T5006] bridge1: port 2(veth5) entered forwarding state [ 83.137555][ T28] audit: type=1400 audit(1771953044.028:855): avc: denied { sys_admin } for pid=4986 comm="syz.0.473" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 83.285112][ T50] bridge1: port 2(veth5) entered disabled state [ 83.943308][ T5025] netlink: 'syz.1.483': attribute type 39 has an invalid length. [ 84.004378][ T5025] hsr_slave_1 (unregistering): left promiscuous mode [ 84.210457][ T28] audit: type=1400 audit(1771953045.098:856): avc: denied { getopt } for pid=5031 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.281801][ T5040] loop1: detected capacity change from 0 to 512 [ 84.320248][ T28] audit: type=1400 audit(1771953045.098:857): avc: denied { write } for pid=5031 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.394333][ T5040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.402361][ T28] audit: type=1400 audit(1771953045.148:858): avc: denied { name_bind } for pid=5037 comm="syz.4.488" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.437861][ T5040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.502582][ T28] audit: type=1400 audit(1771953045.318:859): avc: denied { accept } for pid=5039 comm="syz.1.489" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.591586][ T28] audit: type=1400 audit(1771953045.488:860): avc: denied { create } for pid=5039 comm="syz.1.489" name=747275737465642EFFFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.761606][ T5052] loop2: detected capacity change from 0 to 128 [ 84.955612][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 85.135821][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.613975][ T28] audit: type=1400 audit(1771953046.508:861): avc: denied { setopt } for pid=5073 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.947638][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 85.998835][ T5087] loop1: detected capacity change from 0 to 128 [ 86.031450][ T5089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.504'. [ 86.160463][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.227660][ T5098] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.299730][ T5103] FAULT_INJECTION: forcing a failure. [ 86.299730][ T5103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.337655][ T5103] CPU: 1 UID: 0 PID: 5103 Comm: syz.4.509 Tainted: G W syzkaller #0 PREEMPT(full) [ 86.337695][ T5103] Tainted: [W]=WARN [ 86.337735][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.337746][ T5103] Call Trace: [ 86.337752][ T5103] [ 86.337761][ T5103] __dump_stack+0x1d/0x30 [ 86.337792][ T5103] dump_stack_lvl+0x95/0xd0 [ 86.337820][ T5103] dump_stack+0x15/0x1b [ 86.337845][ T5103] should_fail_ex+0x263/0x280 [ 86.337932][ T5103] should_fail+0xb/0x20 [ 86.337949][ T5103] should_fail_usercopy+0x1a/0x20 [ 86.337971][ T5103] _copy_from_iter+0xcf/0xea0 [ 86.338025][ T5103] ? __alloc_skb+0x4f6/0x690 [ 86.338050][ T5103] ? __alloc_skb+0x200/0x690 [ 86.338076][ T5103] netlink_sendmsg+0x4ae/0x6f0 [ 86.338109][ T5103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.338160][ T5103] ____sys_sendmsg+0x5af/0x600 [ 86.338249][ T5103] ___sys_sendmsg+0x195/0x1e0 [ 86.338290][ T5103] __x64_sys_sendmsg+0xd4/0x160 [ 86.338360][ T5103] x64_sys_call+0x194c/0x3020 [ 86.338386][ T5103] do_syscall_64+0x12c/0x370 [ 86.338423][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.338448][ T5103] RIP: 0033:0x7f193ad1c629 [ 86.338518][ T5103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.338535][ T5103] RSP: 002b:00007f193976f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.338557][ T5103] RAX: ffffffffffffffda RBX: 00007f193af95fa0 RCX: 00007f193ad1c629 [ 86.338580][ T5103] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000f [ 86.338628][ T5103] RBP: 00007f193976f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.338640][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.338652][ T5103] R13: 00007f193af96038 R14: 00007f193af95fa0 R15: 00007ffd2a867978 [ 86.338672][ T5103] [ 86.759490][ T28] audit: type=1400 audit(1771953047.658:862): avc: denied { append } for pid=5083 comm="syz.2.502" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.027033][ T28] audit: type=1400 audit(1771953047.918:863): avc: denied { setattr } for pid=5118 comm="syz.3.513" name="PACKET" dev="sockfs" ino=9813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.154328][ T5124] loop4: detected capacity change from 0 to 1024 [ 87.231348][ T5126] loop2: detected capacity change from 0 to 128 [ 87.245175][ T5127] xt_bpf: check failed: parse error [ 87.247556][ T5124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.259129][ T5124] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 87.268828][ T5124] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.302049][ T28] audit: type=1400 audit(1771953048.188:864): avc: denied { write } for pid=5129 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.467555][ T5124] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 87.475611][ T5124] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.495381][ T5132] FAULT_INJECTION: forcing a failure. [ 87.495381][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.577544][ T5124] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.511: Inode bitmap for bg 0 marked uninitialized [ 87.590041][ T5124] loop4: lost filesystem error report for type 5 error -117 [ 87.593462][ T5132] CPU: 0 UID: 0 PID: 5132 Comm: syz.2.517 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.593499][ T5132] Tainted: [W]=WARN [ 87.593581][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.593596][ T5132] Call Trace: [ 87.593604][ T5132] [ 87.593614][ T5132] __dump_stack+0x1d/0x30 [ 87.593645][ T5132] dump_stack_lvl+0x95/0xd0 [ 87.593734][ T5132] dump_stack+0x15/0x1b [ 87.593760][ T5132] should_fail_ex+0x263/0x280 [ 87.593896][ T5132] should_fail+0xb/0x20 [ 87.593990][ T5132] should_fail_usercopy+0x1a/0x20 [ 87.594012][ T5132] _copy_from_user+0x1c/0xb0 [ 87.594094][ T5132] ___sys_sendmsg+0xc1/0x1e0 [ 87.594125][ T5132] ? path_openat+0x1b01/0x2050 [ 87.594248][ T5132] __sys_sendmmsg+0x185/0x320 [ 87.594289][ T5132] __x64_sys_sendmmsg+0x57/0x70 [ 87.594321][ T5132] x64_sys_call+0x27aa/0x3020 [ 87.594420][ T5132] do_syscall_64+0x12c/0x370 [ 87.594498][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.594524][ T5132] RIP: 0033:0x7fdae047c629 [ 87.594566][ T5132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.594582][ T5132] RSP: 002b:00007fdadeed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.594605][ T5132] RAX: ffffffffffffffda RBX: 00007fdae06f5fa0 RCX: 00007fdae047c629 [ 87.594622][ T5132] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000003 [ 87.594637][ T5132] RBP: 00007fdadeed7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.594652][ T5132] R10: 000000002400c0c6 R11: 0000000000000246 R12: 0000000000000001 [ 87.594719][ T5132] R13: 00007fdae06f6038 R14: 00007fdae06f5fa0 R15: 00007ffc7b55e468 [ 87.594739][ T5132] [ 87.597492][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 87.671332][ T5142] pim6reg: entered allmulticast mode [ 87.672204][ C1] EXT4-fs (loop4): initial error at time 1771953048: ext4_read_inode_bitmap:167 [ 87.688928][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 87.691190][ C1] [ 87.691199][ C1] EXT4-fs (loop4): last error at time 1771953048: ext4_read_inode_bitmap:167 [ 87.691716][ T5124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.801712][ T5148] xt_cluster: node mask cannot exceed total number of nodes [ 87.868568][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 87.934702][ T28] audit: type=1400 audit(1771953048.828:865): avc: denied { map } for pid=5155 comm="syz.0.526" path="socket:[9903]" dev="sockfs" ino=9903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.045088][ T5158] loop3: detected capacity change from 0 to 128 [ 88.051882][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.087699][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 88.088806][ T28] audit: type=1400 audit(1771953048.978:866): avc: denied { bind } for pid=5162 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.116871][ T5165] chnl_net:caif_netlink_parms(): no params data found [ 88.177211][ T5170] loop2: detected capacity change from 0 to 256 [ 88.274133][ T5170] FAT-fs (loop2): Directory bread(block 64) failed [ 88.280883][ T5170] FAT-fs (loop2): Directory bread(block 65) failed [ 88.287494][ T5170] FAT-fs (loop2): Directory bread(block 66) failed [ 88.294073][ T5170] FAT-fs (loop2): Directory bread(block 67) failed [ 88.300768][ T5170] FAT-fs (loop2): Directory bread(block 68) failed [ 88.307323][ T5170] FAT-fs (loop2): Directory bread(block 69) failed [ 88.314011][ T5170] FAT-fs (loop2): Directory bread(block 70) failed [ 88.320684][ T5170] FAT-fs (loop2): Directory bread(block 71) failed [ 88.327294][ T5170] FAT-fs (loop2): Directory bread(block 72) failed [ 88.333922][ T5170] FAT-fs (loop2): Directory bread(block 73) failed [ 88.347163][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.598135][ T5173] loop3: detected capacity change from 0 to 1024 [ 89.200442][ T28] audit: type=1400 audit(1771953050.098:867): avc: denied { wake_alarm } for pid=5185 comm="syz.0.536" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.639612][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 90.654864][ T5212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.875074][ T5212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.891757][ T28] audit: type=1400 audit(1771953051.788:868): avc: denied { bind } for pid=5216 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.893873][ T5217] loop1: detected capacity change from 0 to 512 [ 90.911114][ T28] audit: type=1400 audit(1771953051.788:869): avc: denied { node_bind } for pid=5216 comm="syz.1.546" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.943196][ T28] audit: type=1400 audit(1771953051.788:870): avc: denied { name_bind } for pid=5216 comm="syz.1.546" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 90.979434][ T5217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.022076][ T5217] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.546: bad orphan inode 131083 [ 91.037564][ T5217] loop1: lost filesystem error report for type 5 error -117 [ 91.038263][ T5217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.058921][ T5212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.112771][ T5212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.134653][ T28] audit: type=1400 audit(1771953052.008:871): avc: denied { bind } for pid=5222 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.178873][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.257670][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.278886][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.415956][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.441742][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.460766][ T5244] : renamed from bond_slave_0 [ 91.971137][ T28] audit: type=1400 audit(1771953058.867:872): avc: denied { execute } for pid=5256 comm="syz.2.558" name="file1" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.101047][ T28] audit: type=1400 audit(1771953059.025:873): avc: denied { read } for pid=5261 comm="syz.4.560" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.183553][ T28] audit: type=1400 audit(1771953059.025:874): avc: denied { open } for pid=5261 comm="syz.4.560" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.216262][ T28] audit: type=1400 audit(1771953059.025:875): avc: denied { ioctl } for pid=5261 comm="syz.4.560" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.315314][ T5270] loop3: detected capacity change from 0 to 512 [ 92.325787][ T28] audit: type=1326 audit(1771953059.025:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.362354][ T5270] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 92.410751][ T28] audit: type=1326 audit(1771953059.025:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.447663][ T28] audit: type=1326 audit(1771953059.025:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.482012][ T28] audit: type=1326 audit(1771953059.025:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.561577][ T28] audit: type=1326 audit(1771953059.025:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.622767][ T28] audit: type=1326 audit(1771953059.319:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ad1c629 code=0x7ffc0000 [ 92.782691][ T5296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.944299][ T5310] netlink: 68 bytes leftover after parsing attributes in process `syz.2.579'. [ 94.978776][ T5310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.579'. [ 95.114420][ T5326] netlink: 64 bytes leftover after parsing attributes in process `syz.4.585'. [ 95.157466][ T5326] lo speed is unknown, defaulting to 1000 [ 95.186408][ T5326] lo speed is unknown, defaulting to 1000 [ 95.223728][ T5326] lo speed is unknown, defaulting to 1000 [ 95.269288][ T5326] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.282789][ T5326] lo speed is unknown, defaulting to 1000 [ 95.289767][ T5326] lo speed is unknown, defaulting to 1000 [ 95.296000][ T5326] lo speed is unknown, defaulting to 1000 [ 95.663701][ T5326] lo speed is unknown, defaulting to 1000 [ 95.669970][ T5326] lo speed is unknown, defaulting to 1000 [ 95.769605][ T5341] loop2: detected capacity change from 0 to 128 [ 95.895988][ T5346] loop2: detected capacity change from 0 to 164 [ 95.928771][ T5346] Invalid option length (453) for dns_resolver key [ 96.261281][ T5371] loop3: detected capacity change from 0 to 128 [ 96.278397][ T5371] vfat: Unknown parameter '' [ 96.480454][ T5375] loop1: detected capacity change from 0 to 128 [ 96.487287][ T5373] infiniband syz0: set down [ 96.491924][ T5373] infiniband syz0: added veth0_vlan [ 96.503061][ T5375] vfat: Unknown parameter '01777777777777777777777' [ 96.506705][ T5373] RDS/IB: syz0: added [ 96.532045][ T5373] smc: adding ib device syz0 with port count 1 [ 96.577060][ T5373] smc: ib device syz0 port 1 has no pnetid [ 96.634003][ T5385] loop1: detected capacity change from 0 to 128 [ 96.812411][ T5388] ip6erspan0: entered promiscuous mode [ 97.427094][ T5394] loop1: detected capacity change from 0 to 8192 [ 97.654937][ T3523] loop1: p1 < > p2 p4 < p5 > [ 97.674442][ T3523] loop1: partition table partially beyond EOD, truncated [ 97.709775][ T3523] loop1: p1 start 134217728 is beyond EOD, truncated [ 97.725228][ T3523] loop1: p2 size 591360 extends beyond EOD, truncated [ 97.741569][ T3523] loop1: p5 size 591360 extends beyond EOD, truncated [ 97.760989][ T5404] bridge_slave_1: left allmulticast mode [ 97.766075][ T5389] delete_channel: no stack [ 97.777956][ T5394] loop1: p1 < > p2 p4 < p5 > [ 97.783850][ T5404] bridge_slave_1: left promiscuous mode [ 97.798900][ T5394] loop1: partition table partially beyond EOD, truncated [ 97.816280][ T5394] loop1: p1 start 134217728 is beyond EOD, truncated [ 97.824906][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.829191][ T5394] loop1: p2 size 591360 extends beyond EOD, truncated [ 97.872871][ T5394] loop1: p5 size 591360 extends beyond EOD, truncated [ 97.875531][ T5411] IPv6: sit1: Disabled Multicast RS [ 97.920613][ T5411] sit1: entered allmulticast mode [ 97.939157][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 97.950229][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 97.961423][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 97.977153][ T5418] loop3: detected capacity change from 0 to 512 [ 97.979307][ T5411] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 97.991564][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 97.993434][ T5419] loop1: detected capacity change from 0 to 128 [ 98.021726][ T5411] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 98.047037][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 98.058142][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 98.084979][ T5418] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.619: corrupted inode contents [ 98.097758][ T5418] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.097981][ T5418] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 98.107152][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 98.107175][ C1] EXT4-fs (loop3): initial error at time 1771953065: ext4_do_update_inode:5569: inode 15 [ 98.107206][ C1] EXT4-fs (loop3): last error at time 1771953065: ext4_do_update_inode:5569: inode 15 [ 98.141932][ T5418] loop3: lost filesystem error report for type 5 error -117 [ 98.146915][ T5418] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.619: corrupted inode contents [ 98.228045][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 98.243545][ T5428] loop1: detected capacity change from 0 to 512 [ 98.250023][ T5418] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.257458][ T5418] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.619: mark_inode_dirty error [ 98.288419][ T5428] EXT4-fs: Ignoring removed i_version option [ 98.307335][ T5428] EXT4-fs: Ignoring removed bh option [ 98.316779][ T5418] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.318171][ T5418] EXT4-fs (loop3): 1 orphan inode deleted [ 98.359127][ T5428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.380432][ T5418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.411713][ T5442] loop4: detected capacity change from 0 to 512 [ 98.421442][ T5428] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.449888][ T5442] EXT4-fs: Ignoring removed oldalloc option [ 98.469673][ T5444] netlink: 'syz.2.629': attribute type 10 has an invalid length. [ 98.482754][ T5428] netlink: 45 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.493282][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.503571][ T5428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.512612][ T5428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 98.526228][ T5444] netlink: 2 bytes leftover after parsing attributes in process `syz.2.629'. [ 98.531605][ T5442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.547917][ T5444] bond0: entered promiscuous mode [ 98.554153][ T5444] bond_slave_0: entered promiscuous mode [ 98.560164][ T5444] bond_slave_1: entered promiscuous mode [ 98.567007][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.574714][ T5442] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.586457][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.622988][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 98.623005][ T28] audit: type=1400 audit(1771953065.881:902): avc: denied { map } for pid=5441 comm="syz.4.628" path="/160/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.669923][ T5452] FAT-fs (loop3): bogus number of FAT sectors [ 98.684025][ T5452] FAT-fs (loop3): Can't find a valid FAT filesystem [ 98.721487][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 98.748768][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.868620][ T5469] xt_hashlimit: size too large, truncated to 1048576 [ 99.028636][ T5473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5473 comm=syz.1.642 [ 99.096197][ T28] audit: type=1400 audit(1771953066.364:903): avc: denied { create } for pid=5488 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.126502][ T28] audit: type=1400 audit(1771953066.385:904): avc: denied { getopt } for pid=5486 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.156130][ T5495] FAULT_INJECTION: forcing a failure. [ 99.156130][ T5495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.158854][ T28] audit: type=1400 audit(1771953066.395:905): avc: denied { listen } for pid=5488 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.171260][ T5495] CPU: 1 UID: 0 PID: 5495 Comm: syz.4.648 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.171292][ T5495] Tainted: [W]=WARN [ 99.171299][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.171311][ T5495] Call Trace: [ 99.171318][ T5495] [ 99.171327][ T5495] __dump_stack+0x1d/0x30 [ 99.171355][ T5495] dump_stack_lvl+0x95/0xd0 [ 99.171406][ T5495] dump_stack+0x15/0x1b [ 99.171462][ T5495] should_fail_ex+0x263/0x280 [ 99.171485][ T5495] should_fail+0xb/0x20 [ 99.171528][ T5495] should_fail_usercopy+0x1a/0x20 [ 99.171552][ T5495] _copy_from_iter+0xcf/0xea0 [ 99.171662][ T5495] ? __alloc_skb+0x4f6/0x690 [ 99.171685][ T5495] ? __alloc_skb+0x200/0x690 [ 99.171729][ T5495] netlink_sendmsg+0x4ae/0x6f0 [ 99.171758][ T5495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.171860][ T5495] ____sys_sendmsg+0x5af/0x600 [ 99.171970][ T5495] ___sys_sendmsg+0x195/0x1e0 [ 99.172010][ T5495] __x64_sys_sendmsg+0xd4/0x160 [ 99.172062][ T5495] x64_sys_call+0x194c/0x3020 [ 99.172090][ T5495] do_syscall_64+0x12c/0x370 [ 99.172125][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.172160][ T5495] RIP: 0033:0x7f193ad1c629 [ 99.172178][ T5495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.172197][ T5495] RSP: 002b:00007f193976f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.172275][ T5495] RAX: ffffffffffffffda RBX: 00007f193af95fa0 RCX: 00007f193ad1c629 [ 99.172320][ T5495] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000f [ 99.172333][ T5495] RBP: 00007f193976f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.172347][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.172360][ T5495] R13: 00007f193af96038 R14: 00007f193af95fa0 R15: 00007ffd2a867978 [ 99.172422][ T5495] [ 99.458978][ T5502] ucma_write: process 458 (syz.4.650) changed security contexts after opening file descriptor, this is not allowed. [ 99.504209][ T5509] FAULT_INJECTION: forcing a failure. [ 99.504209][ T5509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.521756][ T5509] CPU: 0 UID: 0 PID: 5509 Comm: syz.4.654 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.521873][ T5509] Tainted: [W]=WARN [ 99.521881][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.521895][ T5509] Call Trace: [ 99.521902][ T5509] [ 99.521910][ T5509] __dump_stack+0x1d/0x30 [ 99.521941][ T5509] dump_stack_lvl+0x95/0xd0 [ 99.522030][ T5509] dump_stack+0x15/0x1b [ 99.522055][ T5509] should_fail_ex+0x263/0x280 [ 99.522142][ T5509] should_fail+0xb/0x20 [ 99.522207][ T5509] should_fail_usercopy+0x1a/0x20 [ 99.522312][ T5509] strncpy_from_user+0x27/0x250 [ 99.522348][ T5509] path_setxattrat+0xeb/0x310 [ 99.522394][ T5509] __x64_sys_fsetxattr+0x6b/0x80 [ 99.522424][ T5509] x64_sys_call+0x2f0e/0x3020 [ 99.522522][ T5509] do_syscall_64+0x12c/0x370 [ 99.522650][ T5509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.522676][ T5509] RIP: 0033:0x7f193ad1c629 [ 99.522697][ T5509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.522752][ T5509] RSP: 002b:00007f193976f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 99.522778][ T5509] RAX: ffffffffffffffda RBX: 00007f193af95fa0 RCX: 00007f193ad1c629 [ 99.522796][ T5509] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000004 [ 99.522842][ T5509] RBP: 00007f193976f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.522856][ T5509] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 99.522871][ T5509] R13: 00007f193af96038 R14: 00007f193af95fa0 R15: 00007ffd2a867978 [ 99.522988][ T5509] [ 99.984426][ T5521] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 100.034575][ T5521] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 100.169396][ T28] audit: type=1400 audit(1771953067.498:906): avc: denied { view } for pid=5520 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 100.458755][ T5527] lo speed is unknown, defaulting to 1000 [ 100.554836][ T5531] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 100.562069][ T28] audit: type=1400 audit(1771953067.907:907): avc: denied { sqpoll } for pid=5530 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.645823][ T28] audit: type=1400 audit(1771953068.002:908): avc: denied { bind } for pid=5536 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.673869][ T5541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 100.716762][ T28] audit: type=1400 audit(1771953068.033:909): avc: denied { ioctl } for pid=5536 comm="syz.2.663" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11137 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.797914][ T5549] set_capacity_and_notify: 3 callbacks suppressed [ 100.797934][ T5549] loop1: detected capacity change from 0 to 128 [ 100.931152][ T28] audit: type=1400 audit(1771953068.296:910): avc: denied { connect } for pid=5558 comm="syz.4.672" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.953245][ T28] audit: type=1400 audit(1771953068.317:911): avc: denied { setopt } for pid=5558 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.001891][ T5563] loop1: detected capacity change from 0 to 128 [ 101.039520][ T5568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.677'. [ 101.057171][ T5565] lo speed is unknown, defaulting to 1000 [ 101.106196][ T5574] loop1: detected capacity change from 0 to 128 [ 101.259979][ T5584] loop4: detected capacity change from 0 to 2048 [ 101.333966][ T5584] loop4: p1 < > p3 < > p4 < > [ 101.338789][ T5584] loop4: partition table partially beyond EOD, truncated [ 101.352971][ T5584] loop4: p1 start 3405774849 is beyond EOD, truncated [ 101.371354][ T5584] loop4: p3 start 2304 is beyond EOD, truncated [ 101.377762][ T5597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.688'. [ 101.378870][ T5596] loop1: detected capacity change from 0 to 128 [ 101.426028][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 101.447868][ T5602] loop2: detected capacity change from 0 to 128 [ 101.468234][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 101.499643][ T5606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 101.579912][ T5606] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 101.598749][ T5606] bond2 (unregistering): Released all slaves [ 101.802209][ T5642] netlink: 48 bytes leftover after parsing attributes in process `syz.0.703'. [ 102.368374][ T5674] IPv6: Can't replace route, no match found [ 102.539087][ T5683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.716'. [ 102.640847][ T5689] lo: Caught tx_queue_len zero misconfig [ 102.707298][ T5693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 102.717611][ T5693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 102.735197][ T5693] sctp: [Deprecated]: syz.4.720 (pid 5693) Use of int in max_burst socket option. [ 102.735197][ T5693] Use struct sctp_assoc_value instead [ 102.757134][ T5697] Cannot find add_set index 0 as target [ 103.513086][ T5726] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 103.852107][ T5755] loop3: detected capacity change from 0 to 512 [ 103.868901][ T5755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.885268][ T5755] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.001992][ T5763] loop1: detected capacity change from 0 to 512 [ 104.030768][ T5763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.043420][ T5763] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.104270][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 104.104306][ T28] audit: type=1400 audit(1771953071.613:942): avc: denied { map } for pid=5752 comm="syz.1.736" path="/140/file1/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.310458][ T28] audit: type=1400 audit(1771953071.844:943): avc: denied { getopt } for pid=5774 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.415477][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.440266][ T5783] netlink: 'syz.4.746': attribute type 14 has an invalid length. [ 104.465291][ T5783] bond0: option xmit_hash_policy: invalid value (172) [ 104.480601][ T5787] xt_hashlimit: size too large, truncated to 1048576 [ 104.521963][ T5788] lo speed is unknown, defaulting to 1000 [ 104.529769][ T5790] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 104.544342][ T5790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.580357][ T5790] bond2: (slave gretap1): making interface the new active one [ 104.592270][ T5790] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.673212][ T5794] 9p: Bad value for 'rfdno' [ 104.677869][ T28] audit: type=1326 audit(1771953072.233:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.749819][ T28] audit: type=1326 audit(1771953072.233:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.753409][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.773534][ T28] audit: type=1326 audit(1771953072.233:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.806286][ T28] audit: type=1326 audit(1771953072.233:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.859217][ T28] audit: type=1326 audit(1771953072.233:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.919671][ T5809] loop1: detected capacity change from 0 to 128 [ 104.968784][ T28] audit: type=1326 audit(1771953072.233:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 104.997572][ T28] audit: type=1326 audit(1771953072.233:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 105.032728][ T28] audit: type=1326 audit(1771953072.233:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da34c629 code=0x7ffc0000 [ 105.113878][ T5818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=5818 comm=syz.0.759 [ 105.208306][ T5823] loop3: detected capacity change from 0 to 128 [ 105.363210][ T5830] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 105.488305][ T5837] __nla_validate_parse: 5 callbacks suppressed [ 105.488332][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 105.650370][ T5846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.714908][ T5775] ================================================================== [ 105.723034][ T5775] BUG: KCSAN: data-race in touch_atime / touch_atime [ 105.729741][ T5775] [ 105.732074][ T5775] write to 0xffff88811eca0f78 of 4 bytes by task 5778 on cpu 0: [ 105.739713][ T5775] touch_atime+0x1d7/0x330 [ 105.744161][ T5775] shmem_file_read_iter+0x477/0x540 [ 105.749383][ T5775] copy_splice_read+0x471/0x6c0 [ 105.754275][ T5775] splice_direct_to_actor+0x28f/0x670 [ 105.759657][ T5775] do_splice_direct+0x119/0x1a0 [ 105.764533][ T5775] do_sendfile+0x382/0x650 [ 105.768967][ T5775] __x64_sys_sendfile64+0x105/0x150 [ 105.774276][ T5775] x64_sys_call+0x2dc4/0x3020 [ 105.778983][ T5775] do_syscall_64+0x12c/0x370 [ 105.783608][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.789537][ T5775] [ 105.791880][ T5775] read to 0xffff88811eca0f78 of 4 bytes by task 5775 on cpu 1: [ 105.799432][ T5775] touch_atime+0x16c/0x330 [ 105.803870][ T5775] shmem_file_read_iter+0x477/0x540 [ 105.809108][ T5775] copy_splice_read+0x471/0x6c0 [ 105.814001][ T5775] splice_direct_to_actor+0x28f/0x670 [ 105.819395][ T5775] do_splice_direct+0x119/0x1a0 [ 105.824261][ T5775] do_sendfile+0x382/0x650 [ 105.828701][ T5775] __x64_sys_sendfile64+0x105/0x150 [ 105.833927][ T5775] x64_sys_call+0x2dc4/0x3020 [ 105.838633][ T5775] do_syscall_64+0x12c/0x370 [ 105.843241][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.849158][ T5775] [ 105.851489][ T5775] value changed: 0x12c2aa60 -> 0x1362def0 [ 105.857219][ T5775] [ 105.859551][ T5775] Reported by Kernel Concurrency Sanitizer on: [ 105.865807][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.2.743 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.876579][ T5775] Tainted: [W]=WARN [ 105.880391][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.890466][ T5775] ==================================================================