last executing test programs: 3.756784232s ago: executing program 2 (id=796): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 3.584870701s ago: executing program 2 (id=803): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a030a00000000000000000a00000a0900010073797a31000000002c0000000b0a010800000000000000000a0000020c001040f622c4000000000000007f90d200000000000000030900010033797a3100000000140000001100010000ff0700000000000500000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x80000000000005, &(0x7f0000000280)='u', 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="003e7b76fe1c4fff925b990d02290000000000020000000000", 0x19}], 0x1, 0xffff, 0xfffffffc, 0x0) r7 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r8 = signalfd4(r7, &(0x7f0000000100)={[0x6]}, 0x8, 0x80000) ioctl$BLKBSZGET(r8, 0x80081270, &(0x7f0000000140)) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)={0x20, r9, 0x5, 0x0, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0xffffffff, 0x3, 0x3}, 0x10) r10 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 3.380601185s ago: executing program 0 (id=805): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc14", 0x7, 0x4, &(0x7f0000000140)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.330213453s ago: executing program 0 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.060474169s ago: executing program 0 (id=808): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900), 0x10, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$eJzs3U1oXFsdAPD/vZNp+pGaCgoqXRQVKpROkn5oVYR2WywUCgpuNEymoWSSKZmJNiFgui9iF2Klm7rTheBGcaEgbly6dePH+kF5De9B08V785jMnXSSzKTTvGTmNfP7wc2cc+/J/Z9z7z1n7r3cywQwtM41/qQRX46I20nEeNuykcgWnmuW21hfLb5aXy0mUa/feT+JJCJerq8WW+WT7PNURKxFxJci4h/5iAvp1iqPtRLV5ZW56XK5tJjlJ2rz9yeqyysX781Pz5ZmSwuXv/Xtq9euXJ26NNVe3Vf19ly+lxZObqUe/ffxLx796+azx7//w9m14q+mk7geY9my9nYcpCSr6PUd868cRrABSrblngysHrydXNbPG13pizEeuazXd1JvHxxG+1I94BDVRyPqW9qSwBBI9tfpv2usgHdd6zygcf3bmvp5/vH8RvMCpBF3Y321+PNoxR9p3puI45vXJic/SLZdmTSuN8/0s6IcSWsPI2JyZGT38Z9kx9/+TR5EBTlUf7/R3FG793+6Nf5Eh/FnrHXv9FNqjX8b2fi30SF+rsv4d7vHGB/96P+/6Rr/4Wh8ZVv8/FaEVvykQ/w0In7SY/ynP/zLtW7L6r+NOB/b2r/Wih/xOrXH/eGJu/fKpcnm344x/nr+7He6tz/iZHTa/kl2z/b4ZkXa238sq1PaY/v//M8/fXVtj/jf+Nre+7/T9j8REb/sMf7nX/7u+92WPX+YvGicBXRq/17xk8jHsx7jf/P6uf9kSXcNAQAAAAAAAADgAKWbz7IlaWErnaaFQvMd3i/EybRcqdYu3K0sLcw0n3k7E/m09aTVeDOfNPJT2fO4rfylHfnLuSxg7sRmvlCslGcG3HYAAAAAAAAAAAAAAAAAAAD4rDi14/3/D3Ob7//v/Llq4Kjq/pPfwFGn/8Pw2t7/k4HVA+g/3/8wtOr6Pwwv/R+G15v6//c2+lQRoO98/8Pw6tj/T/S/HkD/7e7/f3swkIoAfef8HwAAAAAAAAAAAAAAAAAAAAAAAAAADsXtW7caU/3V+mqxkZ8ZWV6aq/z04kypOleYXyoWipXF+4XZSmW2XCoUK/NvWl9SqdyfjIWlBxO1UrU2UV1e+fF8ZWmh9ZuipfyhtwgAAAAAAAAAAAAAAAAAAADePWObU5IWIvLNfJoWChGnI+JMEsnde+XSZER8LiL+ncuPNvJTg640AAAAAAAAAAAAAAAAAAAAHDHV5ZW56XK5tNgl8cdcs9xeZd6QGMlC9fZf/6vtI0TviZG3KRwRawdbjcYa3/q/8tkGPMTNMjyJXI/H4Z6J0W374nTsLhPRn0P08BKDGpEAAAAAAAAAAAAAAAAAAGB4tb+x/NrNH3QrPxof96VeAAAAAAAAAAAAAAAAAAAAMFzS95KIaEznx78+tnPpsWQjt/kZET97eufXD6ZrtcWpxvwXW/NrT7L5lzqtP9+HNgB7yjU/Wv00jYhGPwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeqy6vzE2Xy6XFfSZGeygz6DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7McnAQAA///H68pW") r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000019040), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000019440), 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0x6000) sendfile(r5, r4, 0x0, 0x7fffffff) 2.538994825s ago: executing program 1 (id=809): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='net/raw\x00') pread64(r1, &(0x7f0000002240)=""/226, 0xe2, 0x4eb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 2.489945834s ago: executing program 2 (id=810): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x0, 0xa, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x8000, &(0x7f0000000640), 0x1, 0x5b1, &(0x7f0000001200)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00002000000000000000000000000000000020004e692bb9a7280e4d73a66b28a67fb3fd5d6adda50cf2fa72f0456f6a52f0fed0b5ccb841ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.957763303s ago: executing program 0 (id=813): timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300, 0x18}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.766386615s ago: executing program 3 (id=815): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r7, &(0x7f0000000040), 0x0}, 0x20) r8 = syz_io_uring_setup(0x7af1, &(0x7f00000002c0)={0x0, 0x5039, 0x400, 0x1, 0x10d}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000580)) io_uring_enter(r8, 0x2a1f, 0x3090, 0x4c, &(0x7f00000005c0)={[0x8]}, 0x8) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8120000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0xe8}, 0x1, 0x0, 0x0, 0xc025}, 0x4040000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) 1.637041626s ago: executing program 1 (id=816): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc14", 0x7, 0x4, &(0x7f0000000140)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.489852141s ago: executing program 1 (id=818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.488574871s ago: executing program 3 (id=819): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1811c0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc8, &(0x7f00000002c0)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "d9100a34baedc116", "a3c6fbe00569ac4e7ac3bf70ca6539b2", "246323f9", "69f4f072d581a52d"}, 0x28) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x7, 0xfffffffd, 0x4, 0x2, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000140)={0x4, {{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2d3}}, {{0xa, 0x4e23, 0x8, @private0, 0x6}}}, 0x108) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x20000, 0x200}, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket(0x2, 0x80805, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x70, 0x0, 0x2000000}]}, 0x10) 1.463901005s ago: executing program 2 (id=820): syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1f, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1f, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r2 = socket(0x15, 0xa, 0x400) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 1.460737766s ago: executing program 4 (id=821): r0 = syz_clone(0x241c4000, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) tkill(r0, 0x21) 1.388515338s ago: executing program 2 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x9fff, r1, 0x0, 0xffffff40, 0x1}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r1, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.387971468s ago: executing program 4 (id=823): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.37704062s ago: executing program 4 (id=824): socket$unix(0x1, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0x10cfe, 0x10000000, 0x8000008, 0x10001, 0x4, 0x80000003, 0x0, 0x0, 0x8}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="cc844563e4c9244a5a6c34c01a08", 0xe}, {&(0x7f00000004c0)="88d614e973aa1914683b71e0a96e7c764e0568b840c107cb026f513c22aa212fe9700da784cf9aa5699b57656addc69b9d53af624569d3612bea2754cc896abf7c9e34ca6fa1a58c12889b8c7aacb1d702c2af46c64f46598a20ceb0b496bbfd5224365489433097a206a4c2e7616cc77dc403a2c7e0e424d467c2e747e621dbbc7e2fa0700b82a6891c1e5f0a2dae56f4e3a63f12fcb65a248692ff0c2b5df3f9a43f75f3805ac7c2497b", 0xab}, {&(0x7f0000000680)="4d94a2f3af2d3b8eadc6e273d4ef62930ef6e26eab691e55847378eaca14d299f637426f76e33d6067c5cb5a3809a398bdb50a24be83727be4fdaa9221e96e2e3bcc3b30ab7214b0208771053698857556dc06fbe58f033c45e908f055f96fa317ac1e8662aa5896410530ca14cf0b11d36e57fa8d6c23e1b4cd02e8fe96dfd350835573fe87", 0x86}, {&(0x7f0000000740)="d938d93e59a6a68fb8622acea153ca0792db2b7aaf5356c7296f3d21c2efc03a53eaf10000000099b743c32799837d605b22c98e7ca6133d9ab1e203d601a494613a70d02ec33ad6b69ad5d0ed197832142d4f70caff2f228297be", 0x5b}, {&(0x7f00000007c0)="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", 0xfd}, {&(0x7f00000009c0)="edda5efe55a33c536aef9e21cb88033aa2889c4f7913c764b0c2cd542706b0273571b8f4e46fb9d5a1a63ebd14e38ac8f1345d86a67bd9c91ceb09ea6c963b1a11a3be55066e248c07efb9ccbb79dd2b66e49107dc13", 0x56}, {&(0x7f0000000a40)="9bbb3a", 0x3}, {&(0x7f0000000a80)="9350a445bf8b390ebcb3ff3e3f59d937a7deed94d4750da309dce79f74259479931c2b1e77dfc53e3af01dcb3f385af5b3519e189d7d524328d157b8b8c45209c5db3e6ec182c985c9677db543da7d5f3ced91a79e15d3e46441e752", 0x5c}, {&(0x7f0000000bc0)="2322024e36eb56ab7690780fe35511d50a872d641c95b5263aac20d5622f7f2aad0e056da32cdd4a481f7ee349189f480f584b4ac90ae584764a989a0945204b017581d73aeb7ce19c42389ed8eb8be15e80b58a7905f7931b935edc428d77c374f5738dde7f4877fd6706917bc1892e87909382826115cd133c5720c0eae42e5d526ecd57d53e139fd285debb59b0b44c25d10ec5d06e54ae8a8777605377d8b42dc218549313137e96137b2476b9db8b6766634afd72e1fa55918e40c41a77f126dfa6853c25312f2f45db12ad521364815fb2fb1dc5da3b887cf6385f1b98fd9e0f513622d3960a7fc9", 0xeb}, {&(0x7f0000000080)="a248898407cb9ba4e1898b6467619cfa2a8f379bc5adf4335c920351eed70ed3bbd1000000000000000000", 0x2b}], 0xa, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x490}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x1) read$eventfd(r3, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.151723188s ago: executing program 3 (id=825): syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000a6, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) fchdir(0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 676.292867ms ago: executing program 0 (id=826): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, 0x0, 0x0) 378.648046ms ago: executing program 0 (id=827): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='net/raw\x00') pread64(r1, &(0x7f0000002240)=""/226, 0xe2, 0x4eb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) shutdown(r1, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 366.283919ms ago: executing program 1 (id=828): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc14", 0x7, 0x4, &(0x7f0000000140)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 342.372443ms ago: executing program 4 (id=829): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x4, 0xe686, 0x3, 0x6, 0x3, [0x9, 0xa, 0x7fff, 0x4]}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x30480, &(0x7f0000000080)={@align=0xffffffff, {0x3, 0xf, 0x0, 0x2}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) ioctl$VT_WAITACTIVE(r1, 0x5607) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)={0x3c, 0xe, '\x00', [@generic={0x6, 0x75, "cdeeec5907c6269dbb9e323993caac9cd92592a12ff2ac5c38fcdb7309877416a7114343118cade6036725d7f840dea1fcae147ab9b4fbc275960e3be74ea7bf5aa45e83c147cbe2fe2043c86a20cf4ae69379a5467d3ea2d0fee56251314156df75ac0a221eb71d2d184a6f7758f33889245b287c"}]}, 0x80) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "98ecfe4f462f0a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r6, 0x2a, 0xffffffffffff0001, 0x0, 0x3b7, 0x5, 0x10001, 0x8001, 0x1, 0x101, 0x2, 0x76a0, 0x1, 0x8f9, 0x6}}) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000002280)) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000022c0)) sendmsg$inet6(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002300)="901972df3d605ee00db468b6c2bad443285f8621ec42ed50342db7f8d48af084c849b6880c7d1e3301f04f033bcfedcdad04ac05c2492d9af2469b7345fd6277ac5e6b146b8276044a79e3cd15f602b038659d58d9237ae1166ae8bd8a8a27dbbeca889cc33afaba75801f36901a", 0x6e}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="759843ba852419c559048ca75c9652ecb1b0c9e45b8e67de5c116fe82d4ecec8b1c9ad27fe94d197a263e24616213bbfd6c07d38f41098fb65f9dc5d207d94bfd942cf175c79bafe7556f51d455352f10d592201b957e354207a932c35d1fec76562ae0f651e79945da91b64ea5f47261ac8601b5de349091c8de7472a3d86d57d79be7031079e2bd4ae6dff432c058e7f49b0c765c1f30dcbb16ae04793077e7551f3716ac4b653872730e9ae24a0db1db7872e4ae199c45bd0d8c1c2120108ce221e209b73f4cfba44", 0xca}, {&(0x7f0000003480)="47e0c2ac6808830a1ec1a6127b713c40da46d7c9cbf0c760aa0f3010d69b31484dd14c5bffaceb70a57bf430ece93cc0f564d70b91af3f50fa0c384cc3bd1f6c0c41697e7676a6c6c246246560949ea5ad5a6f91915d0475b140bea8125e8b7acc25fe7f573977657e67dcd278fe30fbca5cb408ce2b4b1dd1a80978e273ff46acc51627c996da4895149b97d48860e9021234086be7856dafd669a27ad3112deb9f72b379ccb260d053e1c9a6ca98347245573cb81e3a0ade485b468474ad1aab8bdadb1ec1dfeef0e785ec24d6946e", 0xd0}], 0x4, &(0x7f00000035c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1e0}}, @dstopts={{0x60, 0x29, 0x37, {0x6c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0x6, [0x9, 0x2, 0x2, 0x8000, 0x10000, 0x7, 0x81]}}, @pad1]}}}], 0x90}, 0x8001) r8 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003780)={'ip6tnl0\x00', &(0x7f0000003700)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x1, 0x2, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7, 0x8000, 0xffff8001, 0x8d0}}) getsockname$packet(r1, &(0x7f00000037c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003800)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003900)={'ip_vti0\x00', &(0x7f0000003840)={'gre0\x00', 0x0, 0x20, 0x10, 0xfffffffd, 0x1, {{0x1c, 0x4, 0x2, 0x19, 0x70, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, {[@timestamp={0x44, 0x1c, 0xf3, 0x0, 0x8, [0x80, 0x4, 0x208b, 0x7f, 0x10, 0x3]}, @timestamp={0x44, 0xc, 0x1, 0x0, 0x7, [0x10, 0x10]}, @cipso={0x86, 0x25, 0x3, [{0x2, 0x6, "c0cf34c2"}, {0x0, 0xa, "d6c4f553933646d9"}, {0x7, 0x7, "75d70648ae"}, {0x5, 0x8, "16243aea4405"}]}, @lsrr={0x83, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0xd}, @empty, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003940)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003a00)={'ip6tnl0\x00', &(0x7f0000003980)={'syztnl0\x00', 0x0, 0x2f, 0x87, 0x6, 0x8, 0x2, @rand_addr=' \x01\x00', @mcast1, 0x80, 0x8, 0x7, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003ac0)={'sit0\x00', &(0x7f0000003a40)={'gre0\x00', 0x0, 0x7800, 0x8, 0x2, 0x8, {{0xe, 0x4, 0x2, 0xe, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xb3, [@multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xe9, [@local, @remote, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003b00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003b40)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003c40)={'gre0\x00', &(0x7f0000003b80)={'sit0\x00', 0x0, 0x7f08, 0x8, 0x4f9e, 0x0, {{0x22, 0x4, 0x1, 0x15, 0x88, 0x67, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty, {[@cipso={0x86, 0x16, 0x1, [{0x7, 0xd, "8faeb06847a8d0c2253ab9"}, {0x6, 0x3, "e8"}]}, @lsrr={0x83, 0xb, 0x9e, [@empty, @multicast2]}, @end, @lsrr={0x83, 0xf, 0x8c, [@dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010102]}, @generic={0x82, 0xe, "aee21dbda92e365db594a500"}, @noop, @generic={0x82, 0x8, "2744d891003e"}, @timestamp_prespec={0x44, 0x2c, 0x71, 0x3, 0xb, [{@empty, 0x3}, {@multicast2, 0xffff}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) getsockname$packet(r4, &(0x7f0000003c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003cc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003d80)={'syztnl1\x00', &(0x7f0000003d00)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x5, 0xc, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, 0x700, 0x8, 0x4, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003dc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000003ec0)={'sit0\x00', &(0x7f0000003e00)={'tunl0\x00', 0x0, 0x8, 0x7, 0xffffffff, 0x1000, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x66, 0x0, 0x40, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x9f, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}, @rr={0x7, 0x7, 0x69, [@multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x10, [@multicast1, @empty]}, @ra={0x94, 0x4, 0x967e}, @ssrr={0x89, 0x2b, 0x66, [@multicast2, @rand_addr=0x64010100, @local, @empty, @loopback, @private=0xa010101, @private=0xa010102, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000004100)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000040c0)={&(0x7f0000003fc0)={0xf4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4895) 301.629209ms ago: executing program 4 (id=830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x19, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x8}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 239.51989ms ago: executing program 3 (id=831): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x59c, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) 175.42067ms ago: executing program 2 (id=832): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x0, 0xa, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x8000, &(0x7f0000000640), 0x1, 0x5b1, &(0x7f0000001200)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00002000000000000000000000000000000020004e692bb9a7280e4d73a66b28a67fb3fd5d6adda50cf2fa72f0456f6a52f0fed0b5ccb841ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 127.849789ms ago: executing program 1 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000209010200000000000000000300000a0c00048008000140000000020900010073797a30000000000900010073797a30000000000800020080"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x839157857a0fd2ca) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[], 0x88, 0x2c8, &(0x7f0000000a80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x1db) write$binfmt_script(r5, &(0x7f0000000040), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_io_uring_setup(0x4173, &(0x7f0000000180)={0x0, 0xbf55, 0x10000, 0x2, 0x2d0}, &(0x7f0000001040), 0x0, &(0x7f0000000000)) io_uring_enter(r8, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x51) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x9, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000029d60000000000000000000018240000", @ANYRES32=r5, @ANYBLOB="0000000000020000182b00009b69a5653a36f1af07273cefece7741ce6312906e1661c83040877b0d6ddada2a57fc83dd35cad5415600b1d8ec2b43ce1cf380c5cd9d76db5528b0601d6af2f8f0fee37b1054313c6f807748ac4065726306f1902edb275eef8948e79a5b1f9bfd28390cbbce231b7f6c3c257ea0ad4c91f385f74309b3e14faca70e3a17eaab1d906018ce88a9419b65deb15e86ae100ccf8700db5fef9be5373e1339191bd238a08cfc97a282f451bb061c5d63ce7efc474ec15bec935b161f8", @ANYRES32, @ANYBLOB="0000000000080000852000000200000085200000020000009500000000000000"], &(0x7f00000013c0)='syzkaller\x00', 0x5, 0xaa, &(0x7f0000001400)=""/170, 0x41100, 0x10, '\x00', r3, 0x25, r6, 0x8, &(0x7f00000014c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xc, 0x3, 0xd}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001540)=[{0x1, 0x1, 0xf, 0x2}, {0x1, 0x4, 0x0, 0x5}, {0x1, 0x4, 0x4, 0xc}], 0x10, 0x9}, 0x94) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r10, &(0x7f0000000080)={'#! ', './file1'}, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000180)=""/74) write$binfmt_misc(r10, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r10, 0x5000940a, &(0x7f0000000340)={{}, "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"}) close(r10) 126.974079ms ago: executing program 3 (id=834): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x706, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000004, &(0x7f0000001100)={0x2, 0x4e23, @empty}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/197, 0xc5}], 0x6, 0x6, 0x7f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 28.931995ms ago: executing program 3 (id=835): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x400) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0x1dd, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r3], &(0x7f00000001c0)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8}, 0x94) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x4001, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000000600)="$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") syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086a1606410a600180400000000000000000000db000000000000ff02000000000000000000000000000116410000000000000708000000010002000000a1f65e5bff971a4cf52d9ec4a500000000009f960132d3de9e938161c552"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x200, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a2f00000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) socket$key(0xf, 0x3, 0x2) 8.502198ms ago: executing program 1 (id=836): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000009c0)={[{@usrjquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dax}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x466, &(0x7f0000000c00)="$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") unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) unshare(0x20060400) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) 0s ago: executing program 4 (id=837): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 335] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.477734][ T4349] syzkaller0: entered promiscuous mode [ 60.483424][ T4349] syzkaller0: entered allmulticast mode [ 60.763252][ T4357] netlink: 76 bytes leftover after parsing attributes in process `syz.2.264'. [ 61.056390][ T4370] loop0: detected capacity change from 0 to 512 [ 61.089447][ T4370] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.300549][ T4378] loop3: detected capacity change from 0 to 512 [ 61.398997][ T4378] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.419294][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 61.673600][ T4368] SELinux: failed to load policy [ 61.694085][ T4376] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 61.704671][ T4376] SELinux: failed to load policy [ 61.716641][ T4390] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 61.730425][ T4390] SELinux: failed to load policy [ 61.846377][ T4398] loop1: detected capacity change from 0 to 512 [ 61.950731][ T4398] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.298163][ T4395] SELinux: failed to load policy [ 62.314860][ T4407] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 62.355468][ T4407] SELinux: failed to load policy [ 62.956128][ T4419] SELinux: failed to load policy [ 63.048189][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 63.086264][ T4431] loop4: detected capacity change from 0 to 512 [ 63.106844][ T4431] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.149062][ T4436] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.220886][ T4437] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.438942][ T4444] syzkaller0: entered promiscuous mode [ 63.444487][ T4444] syzkaller0: entered allmulticast mode [ 63.459088][ T4446] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.498610][ T4453] set_capacity_and_notify: 3 callbacks suppressed [ 63.498636][ T4453] loop3: detected capacity change from 0 to 512 [ 63.571413][ T4453] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.688494][ T4462] loop2: detected capacity change from 0 to 512 [ 63.728283][ T4462] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.076055][ T4464] SELinux: failed to load policy [ 64.163793][ T4477] loop1: detected capacity change from 0 to 512 [ 64.226736][ T4477] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.349127][ T28] audit: type=1400 audit(1776000503.386:185): avc: denied { shutdown } for pid=4472 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.777664][ T4487] loop3: detected capacity change from 0 to 512 [ 64.787408][ T4489] loop6: detected capacity change from 0 to 7 [ 64.800749][ T4489] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.813635][ T4491] loop2: detected capacity change from 0 to 512 [ 64.814020][ T4487] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.828894][ T4489] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.840770][ T4489] loop6: unable to read partition table [ 64.849170][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.857358][ T4489] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 64.870859][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.879115][ T4491] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.879592][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.897952][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.910174][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.009243][ T4498] loop1: detected capacity change from 0 to 512 [ 65.019415][ T4500] netlink: 76 bytes leftover after parsing attributes in process `syz.0.300'. [ 65.029727][ T4502] loop4: detected capacity change from 0 to 512 [ 65.047350][ T4500] syzkaller0: entered promiscuous mode [ 65.064527][ T4502] siw: device registration error -23 [ 65.066548][ T4498] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.080388][ T4500] syzkaller0: entered allmulticast mode [ 65.142342][ T4510] loop3: detected capacity change from 0 to 1024 [ 65.155674][ T4510] EXT4-fs: Ignoring removed bh option [ 65.158624][ T4512] xt_hashlimit: size too large, truncated to 1048576 [ 65.193298][ T4510] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.268068][ T4522] tipc: Enabling of bearer rejected, failed to enable media [ 65.391993][ T4519] loop6: detected capacity change from 0 to 7 [ 65.428782][ T4519] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.441045][ T4530] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.467238][ T28] audit: type=1400 audit(1776000504.506:186): avc: denied { mount } for pid=4529 comm="syz.3.308" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 65.496583][ T4519] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.506366][ T4530] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.515674][ T4530] Symlink component flag not implemented [ 65.523267][ T4530] Symlink component flag not implemented [ 65.523468][ T4533] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.529583][ T4530] Symlink component flag not implemented (7) [ 65.545735][ T4530] Symlink component flag not implemented (116) [ 65.552933][ T4519] loop6: unable to read partition table [ 65.573489][ T4519] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 65.587853][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.597886][ T4530] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 65.623196][ T4530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.679287][ T4541] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.752200][ T4551] bond1: (slave geneve2): making interface the new active one [ 65.771631][ T4551] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.782757][ T3812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.800003][ T28] audit: type=1400 audit(1776000504.816:187): avc: denied { read append } for pid=4529 comm="syz.3.308" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.800461][ T3812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.824451][ T28] audit: type=1400 audit(1776000504.816:188): avc: denied { open } for pid=4529 comm="syz.3.308" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.862613][ T28] audit: type=1400 audit(1776000504.816:189): avc: denied { ioctl } for pid=4529 comm="syz.3.308" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.886069][ T4550] netlink: 76 bytes leftover after parsing attributes in process `syz.2.313'. [ 65.897999][ T3812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916497][ T3812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.920770][ T28] audit: type=1400 audit(1776000504.956:190): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 65.926344][ T4550] syzkaller0: entered promiscuous mode [ 65.951484][ T4550] syzkaller0: entered allmulticast mode [ 66.603030][ T4570] netlink: 76 bytes leftover after parsing attributes in process `syz.0.318'. [ 66.690451][ T4570] syzkaller0: entered promiscuous mode [ 66.741881][ T4570] syzkaller0: entered allmulticast mode [ 66.866938][ T4573] loop6: unable to read partition table [ 66.874227][ T4573] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 67.075287][ T28] audit: type=1400 audit(1776000506.106:191): avc: denied { name_connect } for pid=4579 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 67.199389][ T4580] netlink: 280 bytes leftover after parsing attributes in process `syz.4.322'. [ 67.236268][ T4587] syzkaller0: entered promiscuous mode [ 67.282812][ T4585] EXT4-fs mount: 41 callbacks suppressed [ 67.282866][ T4585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.312625][ T4587] syzkaller0: entered allmulticast mode [ 67.319802][ T4592] netlink: 'syz.4.322': attribute type 20 has an invalid length. [ 67.336626][ T28] audit: type=1400 audit(1776000506.146:192): avc: denied { accept } for pid=4579 comm="syz.4.322" lport=37310 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.369677][ T4592] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.382652][ T4585] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.397168][ T4592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.404412][ T4592] IPv6: NLM_F_CREATE should be set when creating new route [ 67.425681][ T28] audit: type=1400 audit(1776000506.146:193): avc: denied { write } for pid=4579 comm="syz.4.322" lport=37310 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.634292][ T4596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.693330][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.722215][ T28] audit: type=1400 audit(1776000506.156:194): avc: denied { setopt } for pid=4579 comm="syz.4.322" lport=37310 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.778413][ T4596] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.799559][ T4568] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.814455][ T4568] EXT4-fs (loop2): mount failed [ 68.022819][ T4601] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 68.129069][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.179997][ T4601] SELinux: failed to load policy [ 68.327092][ T4613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.339926][ T4613] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.373322][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 68.489929][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.617812][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.740998][ T4649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.342'. [ 68.879233][ T4634] SELinux: failed to load policy [ 68.910754][ T4640] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 68.958613][ T4640] SELinux: failed to load policy [ 69.161797][ T4662] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 69.192403][ T4662] SELinux: failed to load policy [ 69.241947][ T4663] set_capacity_and_notify: 9 callbacks suppressed [ 69.242008][ T4663] loop2: detected capacity change from 0 to 512 [ 69.338641][ T4663] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.353635][ T4663] EXT4-fs (loop2): mount failed [ 69.574822][ T4669] netlink: 64 bytes leftover after parsing attributes in process `syz.3.349'. [ 69.591462][ T4669] syzkaller1: entered promiscuous mode [ 69.597738][ T4669] syzkaller1: entered allmulticast mode [ 69.818094][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 69.818118][ T28] audit: type=1400 audit(1776000508.856:199): avc: denied { create } for pid=4678 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.149601][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.163239][ T4681] netlink: 'syz.1.352': attribute type 12 has an invalid length. [ 70.298584][ T4684] syzkaller0: entered promiscuous mode [ 70.304135][ T4684] syzkaller0: entered allmulticast mode [ 70.363558][ T4695] loop0: detected capacity change from 0 to 512 [ 70.400438][ T4695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.475467][ T4695] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.204507][ T4707] syzkaller0: entered promiscuous mode [ 71.215145][ T4707] syzkaller0: entered allmulticast mode [ 71.248785][ T4709] loop6: detected capacity change from 0 to 7 [ 71.268849][ T4709] buffer_io_error: 6 callbacks suppressed [ 71.268866][ T4709] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.285834][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.285914][ T4709] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.303968][ T4709] loop6: unable to read partition table [ 71.310490][ T4709] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 71.312202][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.369778][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.380030][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.389370][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.397914][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.426358][ T4715] loop6: detected capacity change from 0 to 7 [ 71.447435][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.455751][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.463758][ T3549] loop6: unable to read partition table [ 71.471235][ T3549] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.499457][ T4715] loop6: unable to read partition table [ 71.514282][ T4715] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 71.553710][ T4729] loop4: detected capacity change from 0 to 512 [ 71.585883][ T4729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.605058][ T4729] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.621028][ T4732] loop6: detected capacity change from 0 to 7 [ 71.631482][ T3300] loop6: unable to read partition table [ 71.666412][ T4732] loop6: unable to read partition table [ 71.673857][ T4732] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 71.713232][ T4737] loop0: detected capacity change from 0 to 512 [ 71.750371][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.783683][ T4739] loop6: detected capacity change from 0 to 7 [ 71.802806][ T3300] loop6: unable to read partition table [ 71.803665][ T4737] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.827019][ T4739] loop6: unable to read partition table [ 71.838622][ T4739] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 71.922357][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.959032][ T4747] loop0: detected capacity change from 0 to 128 [ 71.969398][ T4747] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.987238][ T4747] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.007489][ T28] audit: type=1400 audit(1776000511.046:200): avc: denied { mount } for pid=4745 comm="syz.0.369" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.009767][ T4747] FAULT_INJECTION: forcing a failure. [ 72.009767][ T4747] name failslab, interval 1, probability 0, space 0, times 1 [ 72.042071][ T4747] CPU: 0 UID: 0 PID: 4747 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(full) [ 72.042154][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.042169][ T4747] Call Trace: [ 72.042176][ T4747] [ 72.042185][ T4747] __dump_stack+0x1d/0x30 [ 72.042274][ T4747] dump_stack_lvl+0x95/0xd0 [ 72.042300][ T4747] dump_stack+0x15/0x1b [ 72.042405][ T4747] should_fail_ex+0x263/0x280 [ 72.042437][ T4747] ? getname_long+0x32/0x100 [ 72.042472][ T4747] should_failslab+0x8c/0xb0 [ 72.042495][ T4747] __kmalloc_cache_noprof+0x5f/0x410 [ 72.042522][ T4747] ? should_fail_usercopy+0x1a/0x20 [ 72.042672][ T4747] getname_long+0x32/0x100 [ 72.042701][ T4747] do_getname+0x12e/0x1c0 [ 72.042724][ T4747] getname_flags+0x1d/0x30 [ 72.042748][ T4747] do_sys_openat2+0x60/0x130 [ 72.042793][ T4747] __x64_sys_openat+0xf2/0x120 [ 72.042826][ T4747] x64_sys_call+0x1e39/0x3020 [ 72.042923][ T4747] do_syscall_64+0x12c/0x370 [ 72.042954][ T4747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.042976][ T4747] RIP: 0033:0x7f0bed53c819 [ 72.043020][ T4747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.043039][ T4747] RSP: 002b:00007f0bebf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.043064][ T4747] RAX: ffffffffffffffda RBX: 00007f0bed7b5fa0 RCX: 00007f0bed53c819 [ 72.043079][ T4747] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 72.043095][ T4747] RBP: 00007f0bebf97090 R08: 0000000000000000 R09: 0000000000000000 [ 72.043108][ T4747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.043167][ T4747] R13: 00007f0bed7b6038 R14: 00007f0bed7b5fa0 R15: 00007ffeb7329398 [ 72.043187][ T4747] [ 72.249637][ T28] audit: type=1400 audit(1776000511.286:201): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.365606][ T4757] syzkaller0: entered promiscuous mode [ 72.378294][ T4759] loop0: detected capacity change from 0 to 512 [ 72.386070][ T4757] syzkaller0: entered allmulticast mode [ 72.444471][ T4759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.459939][ T4759] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.496236][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.516153][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.564578][ T28] audit: type=1400 audit(1776000511.596:202): avc: denied { mounton } for pid=4768 comm="syz.0.375" path="/68/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.573687][ T4764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.635181][ T4764] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.652168][ T28] audit: type=1400 audit(1776000511.686:203): avc: denied { bpf } for pid=4763 comm="syz.1.376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.679106][ T28] audit: type=1400 audit(1776000511.716:204): avc: denied { perfmon } for pid=4763 comm="syz.1.376" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.834103][ T4777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.880358][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.931415][ T4780] syzkaller0: entered promiscuous mode [ 72.937222][ T4780] syzkaller0: entered allmulticast mode [ 72.961045][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.229902][ T28] audit: type=1400 audit(1776000512.266:205): avc: denied { read write } for pid=4790 comm="syz.3.384" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.263863][ T28] audit: type=1400 audit(1776000512.266:206): avc: denied { open } for pid=4790 comm="syz.3.384" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.337542][ T4788] loop6: unable to read partition table [ 73.344788][ T4788] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 73.435798][ T28] audit: type=1400 audit(1776000512.466:207): avc: denied { read } for pid=4796 comm="syz.4.385" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.466142][ T28] audit: type=1400 audit(1776000512.466:208): avc: denied { open } for pid=4796 comm="syz.4.385" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.788531][ T4802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.895870][ T4802] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.930104][ T4809] loop6: unable to read partition table [ 73.951413][ T4809] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 74.170282][ T4817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.197529][ T4817] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.227473][ T4824] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.277783][ T4822] syzkaller0: entered promiscuous mode [ 74.285215][ T4822] syzkaller0: entered allmulticast mode [ 74.350340][ T4826] set_capacity_and_notify: 6 callbacks suppressed [ 74.350715][ T4826] loop6: detected capacity change from 0 to 7 [ 74.368224][ T4826] loop6: unable to read partition table [ 74.373901][ T4826] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 74.394028][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.519453][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 74.550468][ T4841] delete_channel: no stack [ 74.560051][ T4841] delete_channel: no stack [ 74.560347][ T4838] ip6gre1: entered promiscuous mode [ 74.590406][ T4838] ip6gre1: entered allmulticast mode [ 74.767805][ T4828] SELinux: failed to load policy [ 74.820653][ T4846] netlink: 64 bytes leftover after parsing attributes in process `syz.3.402'. [ 74.849854][ T4846] syzkaller1: entered promiscuous mode [ 74.867425][ T4846] syzkaller1: entered allmulticast mode [ 75.045084][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.088215][ T4857] loop3: detected capacity change from 0 to 512 [ 75.096950][ T4859] syzkaller0: entered promiscuous mode [ 75.102694][ T4859] syzkaller0: entered allmulticast mode [ 75.125503][ T4857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.142088][ T4857] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.288974][ T4865] loop6: detected capacity change from 0 to 7 [ 75.307105][ T3300] loop6: unable to read partition table [ 75.335481][ T4865] loop6: unable to read partition table [ 75.348574][ T4865] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 75.402667][ T4867] syzkaller0: entered promiscuous mode [ 75.410914][ T4867] syzkaller0: entered allmulticast mode [ 75.438114][ T4869] syzkaller0: entered promiscuous mode [ 75.443746][ T4869] syzkaller0: entered allmulticast mode [ 75.668814][ T4877] loop0: detected capacity change from 0 to 512 [ 75.703694][ T4877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.742503][ T4877] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.911920][ T4875] SELinux: failed to load policy [ 75.923579][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.025545][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.086605][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 76.100335][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 76.100353][ T28] audit: type=1400 audit(1776000515.136:223): avc: denied { create } for pid=4885 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.155843][ T28] audit: type=1400 audit(1776000515.146:224): avc: denied { setopt } for pid=4885 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.157282][ T4891] loop4: detected capacity change from 0 to 512 [ 76.195133][ T28] audit: type=1400 audit(1776000515.146:225): avc: denied { module_request } for pid=4885 comm="syz.0.415" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.240223][ T4891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.262933][ T4893] syzkaller0: entered promiscuous mode [ 76.268678][ T4893] syzkaller0: entered allmulticast mode [ 76.281593][ T4897] syzkaller0: entered promiscuous mode [ 76.287327][ T4897] syzkaller0: entered allmulticast mode [ 76.294445][ T4895] syzkaller0: entered promiscuous mode [ 76.300348][ T4895] syzkaller0: entered allmulticast mode [ 76.310741][ T4891] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.481469][ T4912] syzkaller0: entered promiscuous mode [ 76.487045][ T4912] syzkaller0: entered allmulticast mode [ 76.498420][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.557931][ T4916] loop0: detected capacity change from 0 to 512 [ 76.578069][ T4916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.578520][ T4918] loop4: detected capacity change from 0 to 1024 [ 76.605358][ T4918] ======================================================= [ 76.605358][ T4918] WARNING: The mand mount option has been deprecated and [ 76.605358][ T4918] and is ignored by this kernel. Remove the mand [ 76.605358][ T4918] option from the mount to silence this warning. [ 76.605358][ T4918] ======================================================= [ 76.641574][ T4916] siw: device registration error -23 [ 76.708124][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.739291][ T4918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.778380][ T4918] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.830678][ T28] audit: type=1400 audit(1776000515.866:226): avc: denied { read write } for pid=4917 comm="syz.4.427" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.854089][ T4918] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.427: bg 0: block 112: padding at end of block bitmap is not set [ 76.876828][ T4930] syzkaller0: entered promiscuous mode [ 76.882472][ T4930] syzkaller0: entered allmulticast mode [ 76.919541][ T28] audit: type=1400 audit(1776000515.956:227): avc: denied { map } for pid=4917 comm="syz.4.427" path="/98/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.954752][ T4918] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 3: comm syz.4.427: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.972273][ T4918] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 77.030009][ T4918] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.427: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.056190][ T4934] syzkaller0: entered promiscuous mode [ 77.061753][ T4934] syzkaller0: entered allmulticast mode [ 77.087018][ T28] audit: type=1400 audit(1776000516.126:228): avc: denied { watch } for pid=4917 comm="syz.4.427" path="/98/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.150471][ T28] audit: type=1400 audit(1776000516.156:229): avc: denied { create } for pid=4917 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.192013][ T28] audit: type=1400 audit(1776000516.156:230): avc: denied { connect } for pid=4917 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.218831][ T4928] SELinux: failed to load policy [ 77.394844][ T4939] syzkaller0: entered promiscuous mode [ 77.407653][ T4939] syzkaller0: entered allmulticast mode [ 77.416550][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.419755][ T4942] syzkaller0: entered promiscuous mode [ 77.442438][ T4942] syzkaller0: entered allmulticast mode [ 77.455347][ T4947] loop0: detected capacity change from 0 to 164 [ 77.483824][ T4947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.493789][ T4947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.506997][ T4947] Symlink component flag not implemented [ 77.513128][ T4947] Symlink component flag not implemented [ 77.519159][ T4947] Symlink component flag not implemented (7) [ 77.526403][ T4947] Symlink component flag not implemented (116) [ 77.540071][ T4951] loop4: detected capacity change from 0 to 512 [ 77.552852][ T4951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.603147][ T4951] siw: device registration error -23 [ 77.615850][ T4954] syzkaller0: entered promiscuous mode [ 77.621580][ T4954] syzkaller0: entered allmulticast mode [ 77.714439][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.725515][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.728783][ T4959] syzkaller0: entered promiscuous mode [ 77.734782][ T28] audit: type=1400 audit(1776000516.746:231): avc: denied { write } for pid=4956 comm="syz.2.442" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.740417][ T4959] syzkaller0: entered allmulticast mode [ 77.766806][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.786295][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 77.788619][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.802881][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.815788][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.870174][ T4964] syzkaller0: entered promiscuous mode [ 77.875738][ T4964] syzkaller0: entered allmulticast mode [ 77.899321][ T28] audit: type=1400 audit(1776000516.936:232): avc: denied { create } for pid=4956 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.078276][ T4970] syzkaller0: entered promiscuous mode [ 78.084052][ T4970] syzkaller0: entered allmulticast mode [ 78.429800][ T4981] loop4: detected capacity change from 0 to 512 [ 78.457738][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.501633][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.598210][ T4990] syzkaller0: entered promiscuous mode [ 78.606220][ T4990] syzkaller0: entered allmulticast mode [ 78.703083][ T4993] syzkaller0: entered promiscuous mode [ 78.709318][ T4993] syzkaller0: entered allmulticast mode [ 78.755904][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.838959][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.887576][ T5004] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 78.903438][ T5004] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 79.071792][ T5018] syzkaller0: entered promiscuous mode [ 79.073346][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 79.077540][ T5018] syzkaller0: entered allmulticast mode [ 79.091432][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.460095][ T5022] set_capacity_and_notify: 3 callbacks suppressed [ 79.460197][ T5022] loop2: detected capacity change from 0 to 1024 [ 79.573237][ T5022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.677630][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.701261][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.736433][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.775892][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.785477][ T5033] syzkaller0: entered promiscuous mode [ 79.791083][ T5033] syzkaller0: entered allmulticast mode [ 79.822538][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.945910][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.460186][ T5052] syzkaller0: entered promiscuous mode [ 80.460242][ T5052] syzkaller0: entered allmulticast mode [ 80.580010][ T5054] loop3: detected capacity change from 0 to 512 [ 80.640463][ T5050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 80.651063][ T5054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.669027][ T5059] syzkaller0: entered promiscuous mode [ 80.677862][ T5059] syzkaller0: entered allmulticast mode [ 80.948837][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.964871][ T5071] loop6: detected capacity change from 0 to 7 [ 81.002892][ T3300] buffer_io_error: 64 callbacks suppressed [ 81.002910][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.027521][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.035718][ T3300] loop6: unable to read partition table [ 81.043212][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.061121][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.069452][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.088838][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.097079][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.121578][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.138063][ T5071] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.170020][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.193916][ T5071] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.232835][ T5071] loop6: unable to read partition table [ 81.270042][ T5071] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 81.275236][ T5084] loop0: detected capacity change from 0 to 512 [ 81.340514][ T5084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.491186][ T5097] loop6: detected capacity change from 0 to 7 [ 81.497611][ T5097] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.505522][ T5097] loop6: unable to read partition table [ 81.511178][ T5097] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 81.523351][ T5084] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.238950][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.281390][ T5102] syzkaller0: entered promiscuous mode [ 82.300213][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 82.300231][ T28] audit: type=1400 audit(1776000521.336:244): avc: denied { create } for pid=5103 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.325015][ T5102] syzkaller0: entered allmulticast mode [ 82.362086][ T28] audit: type=1400 audit(1776000521.336:245): avc: denied { write } for pid=5103 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.393923][ T5109] loop6: detected capacity change from 0 to 7 [ 82.420220][ T5109] loop6: unable to read partition table [ 82.439374][ T5109] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 82.537545][ T5113] FAULT_INJECTION: forcing a failure. [ 82.537545][ T5113] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.576993][ T5113] CPU: 0 UID: 0 PID: 5113 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT(full) [ 82.577027][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.577097][ T5113] Call Trace: [ 82.577104][ T5113] [ 82.577119][ T5113] __dump_stack+0x1d/0x30 [ 82.577204][ T5113] dump_stack_lvl+0x95/0xd0 [ 82.577233][ T5113] dump_stack+0x15/0x1b [ 82.577257][ T5113] should_fail_ex+0x263/0x280 [ 82.577336][ T5113] should_fail+0xb/0x20 [ 82.577360][ T5113] should_fail_usercopy+0x1a/0x20 [ 82.577473][ T5113] copy_fpstate_to_sigframe+0x650/0x7f0 [ 82.577508][ T5113] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 82.577620][ T5113] ? x86_task_fpu+0x36/0x60 [ 82.577647][ T5113] get_sigframe+0x34c/0x470 [ 82.577724][ T5113] ? get_signal+0xdc3/0xf60 [ 82.577758][ T5113] x64_setup_rt_frame+0xa7/0x4e0 [ 82.577787][ T5113] arch_do_signal_or_restart+0x24b/0x450 [ 82.577866][ T5113] exit_to_user_mode_loop+0x6a/0x6f0 [ 82.577892][ T5113] do_syscall_64+0x249/0x370 [ 82.577924][ T5113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.577989][ T5113] RIP: 0033:0x7f23c708c817 [ 82.578008][ T5113] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 82.578030][ T5113] RSP: 002b:00007f23c5ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.578053][ T5113] RAX: 0000000000000000 RBX: 00007f23c7305fa0 RCX: 00007f23c708c819 [ 82.578068][ T5113] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000007 [ 82.578082][ T5113] RBP: 00007f23c5ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.578152][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.578165][ T5113] R13: 00007f23c7306038 R14: 00007f23c7305fa0 R15: 00007ffc50c1f3f8 [ 82.578189][ T5113] [ 82.808388][ T5107] loop0: detected capacity change from 0 to 1024 [ 82.829947][ T5107] ext4: Unknown parameter 'fowner' [ 82.941351][ T5122] FAULT_INJECTION: forcing a failure. [ 82.941351][ T5122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.943319][ T5119] loop6: detected capacity change from 0 to 7 [ 82.975006][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) [ 82.975038][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.975051][ T5122] Call Trace: [ 82.975057][ T5122] [ 82.975065][ T5122] __dump_stack+0x1d/0x30 [ 82.975156][ T5122] dump_stack_lvl+0x95/0xd0 [ 82.975254][ T5122] dump_stack+0x15/0x1b [ 82.975277][ T5122] should_fail_ex+0x263/0x280 [ 82.975306][ T5122] should_fail+0xb/0x20 [ 82.975329][ T5122] should_fail_usercopy+0x1a/0x20 [ 82.975398][ T5122] _copy_from_user+0x1c/0xb0 [ 82.975430][ T5122] sock_do_ioctl+0xe5/0x230 [ 82.975456][ T5122] sock_ioctl+0x41b/0x610 [ 82.975480][ T5122] ? mutex_lock+0x57/0x90 [ 82.975567][ T5122] ? __pfx_sock_ioctl+0x10/0x10 [ 82.975592][ T5122] __se_sys_ioctl+0xce/0x140 [ 82.975615][ T5122] __x64_sys_ioctl+0x43/0x50 [ 82.975705][ T5122] x64_sys_call+0x1563/0x3020 [ 82.975734][ T5122] do_syscall_64+0x12c/0x370 [ 82.975832][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.975856][ T5122] RIP: 0033:0x7f23c708c819 [ 82.975875][ T5122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.975894][ T5122] RSP: 002b:00007f23c5ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.975967][ T5122] RAX: ffffffffffffffda RBX: 00007f23c7305fa0 RCX: 00007f23c708c819 [ 82.976014][ T5122] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 82.976028][ T5122] RBP: 00007f23c5ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.976042][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.976055][ T5122] R13: 00007f23c7306038 R14: 00007f23c7305fa0 R15: 00007ffc50c1f3f8 [ 82.976075][ T5122] [ 82.977160][ T5119] loop6: unable to read partition table [ 83.190354][ T5119] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 83.219752][ T5126] loop2: detected capacity change from 0 to 512 [ 83.247627][ T28] audit: type=1400 audit(1776000522.276:246): avc: denied { accept } for pid=5106 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.290391][ T5126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.295109][ T28] audit: type=1400 audit(1776000522.326:247): avc: denied { setattr } for pid=5128 comm="syz.4.498" name="timer" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 83.363581][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 83.372279][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.388567][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.414215][ T5134] loop4: detected capacity change from 0 to 512 [ 83.493084][ T5134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.513295][ T5134] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.582414][ T5142] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 83.623778][ T28] audit: type=1400 audit(1776000522.656:248): avc: denied { create } for pid=5140 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 83.697124][ T5142] bond1 (unregistering): Released all slaves [ 83.802039][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.929654][ T5154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 83.953901][ T5154] EXT4-fs (loop4): Remounting filesystem read-only [ 83.960724][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 83.960747][ C1] EXT4-fs (loop4): initial error at time 1776000522: ext4_mb_generate_buddy:1317 [ 83.960773][ C1] EXT4-fs (loop4): last error at time 1776000522: ext4_mb_generate_buddy:1317 [ 83.988517][ T5142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.997721][ T5154] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.4.504: cleanup dec ref error -28 [ 84.023903][ T5154] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 84.036003][ T5154] EXT4-fs (loop4): 1 orphan inode deleted [ 84.042319][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.075147][ T5142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.088270][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.099441][ T5142] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.134524][ T5161] loop6: unable to read partition table [ 84.149996][ T5161] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 84.226482][ T28] audit: type=1400 audit(1776000523.266:249): avc: denied { name_connect } for pid=5162 comm="syz.4.507" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.350061][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 84.381164][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.446360][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.020936][ T5181] SELinux: failed to load policy [ 85.090922][ T5186] set_capacity_and_notify: 3 callbacks suppressed [ 85.090936][ T5186] loop4: detected capacity change from 0 to 512 [ 85.112689][ T5186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.126336][ T5186] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.207105][ T5192] syzkaller0: entered promiscuous mode [ 85.215277][ T5192] syzkaller0: entered allmulticast mode [ 85.336881][ T5203] syzkaller0: entered promiscuous mode [ 85.349078][ T5203] syzkaller0: entered allmulticast mode [ 85.357511][ T5202] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 85.377664][ T5202] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 85.407630][ T5205] FAULT_INJECTION: forcing a failure. [ 85.407630][ T5205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.441207][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 85.450294][ T5205] CPU: 1 UID: 0 PID: 5205 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(full) [ 85.450386][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.450399][ T5205] Call Trace: [ 85.450407][ T5205] [ 85.450490][ T5205] __dump_stack+0x1d/0x30 [ 85.450521][ T5205] dump_stack_lvl+0x95/0xd0 [ 85.450620][ T5205] dump_stack+0x15/0x1b [ 85.450717][ T5205] should_fail_ex+0x263/0x280 [ 85.450750][ T5205] should_fail+0xb/0x20 [ 85.450798][ T5205] should_fail_usercopy+0x1a/0x20 [ 85.450849][ T5205] _copy_to_user+0x20/0xa0 [ 85.450883][ T5205] rng_dev_read+0x375/0x670 [ 85.450921][ T5205] ? __pfx_rng_dev_read+0x10/0x10 [ 85.451036][ T5205] vfs_readv+0x432/0x6e0 [ 85.451070][ T5205] __x64_sys_preadv+0xfd/0x1c0 [ 85.451096][ T5205] x64_sys_call+0x2915/0x3020 [ 85.451126][ T5205] do_syscall_64+0x12c/0x370 [ 85.451232][ T5205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.451278][ T5205] RIP: 0033:0x7fe9ce3ac819 [ 85.451298][ T5205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.451317][ T5205] RSP: 002b:00007fe9cce07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 85.451409][ T5205] RAX: ffffffffffffffda RBX: 00007fe9ce625fa0 RCX: 00007fe9ce3ac819 [ 85.451425][ T5205] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 85.451440][ T5205] RBP: 00007fe9cce07090 R08: 0000000000000000 R09: 0000000000000000 [ 85.451454][ T5205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.451468][ T5205] R13: 00007fe9ce626038 R14: 00007fe9ce625fa0 R15: 00007ffc19c18b08 [ 85.451491][ T5205] [ 85.660928][ T5205] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 85.682352][ T5210] loop3: detected capacity change from 0 to 8192 [ 85.689741][ T5205] bond1 (unregistering): Released all slaves [ 85.707380][ T5207] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 85.715457][ T5207] FAT-fs (loop3): Filesystem has been set read-only [ 85.732407][ T28] audit: type=1400 audit(128.158:250): avc: denied { setopt } for pid=5206 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.752286][ T5217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.523'. [ 85.764869][ T5217] syzkaller1: entered promiscuous mode [ 85.770465][ T5217] syzkaller1: entered allmulticast mode [ 85.777805][ T28] audit: type=1400 audit(128.208:251): avc: denied { bind } for pid=5206 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.808957][ T5210] 9p: Bad value for 'rfdno' [ 85.813713][ T5210] 9p: Bad value for 'rfdno' [ 85.816257][ T28] audit: type=1400 audit(128.238:252): avc: denied { bind } for pid=5219 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.839631][ T28] audit: type=1400 audit(128.238:253): avc: denied { node_bind } for pid=5219 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 85.926258][ T5224] syzkaller0: entered promiscuous mode [ 85.933029][ T5224] syzkaller0: entered allmulticast mode [ 85.955636][ T5205] loop1: detected capacity change from 0 to 512 [ 85.956412][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.981309][ T5205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.990621][ T1033] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 86.001908][ T1033] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.045059][ T5205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.074694][ T5238] loop0: detected capacity change from 0 to 1756 [ 86.167189][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.224157][ T5251] syzkaller0: entered promiscuous mode [ 86.229849][ T5251] syzkaller0: entered allmulticast mode [ 86.553261][ T5257] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.618390][ T5258] loop1: detected capacity change from 0 to 512 [ 86.662547][ T5260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.535'. [ 86.731709][ T5261] syzkaller1: entered promiscuous mode [ 86.776320][ T5261] syzkaller1: entered allmulticast mode [ 86.790644][ T5258] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.820924][ T5258] ------------[ cut here ]------------ [ 86.826568][ T5258] EA inode 11 i_nlink=2 [ 86.826585][ T5258] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.533/5258 [ 86.841497][ T5258] Modules linked in: [ 86.845443][ T5258] CPU: 1 UID: 0 PID: 5258 Comm: syz.1.533 Not tainted syzkaller #0 PREEMPT(full) [ 86.854953][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 86.865253][ T5258] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 86.872041][ T5258] Code: 84 2f 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f f4 dd 03 66 66 66 66 66 66 2e [ 86.891981][ T5258] RSP: 0018:ffffc90001e8f778 EFLAGS: 00010246 [ 86.898094][ T5258] RAX: ffff888104c1ef48 RBX: ffff88811a471be8 RCX: ffffffff81c02b58 [ 86.906131][ T5258] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd80 [ 86.914173][ T5258] RBP: 000000000000000b R08: 000188811a471b9b R09: 0000000000000000 [ 86.922220][ T5258] R10: ffffc90001e8f6a8 R11: 0001c90001e8f6a8 R12: ffff88811a471b98 [ 86.930233][ T5258] R13: ffffffff871dcd80 R14: ffff88811a471b50 R15: 0000000000000001 [ 86.938319][ T5258] FS: 00007fe9cc9a26c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 86.947424][ T5258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.954040][ T5258] CR2: 00007fef47cd7374 CR3: 0000000126ce2000 CR4: 00000000003506f0 [ 86.962160][ T5258] Call Trace: [ 86.965486][ T5258] [ 86.968459][ T5258] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 86.974389][ T5258] ? errseq_check+0x2c/0x50 [ 86.978992][ T5258] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 86.984574][ T5258] ? ext4_truncate+0x92b/0xb00 [ 86.989598][ T5258] ext4_evict_inode+0xac1/0xe40 [ 86.994645][ T5258] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.000088][ T5258] evict+0x2af/0x510 [ 87.004063][ T5258] ? __dquot_initialize+0x146/0x7c0 [ 87.009383][ T5258] iput+0x41a/0x580 [ 87.013290][ T5258] ext4_process_orphan+0x1a9/0x1c0 [ 87.018575][ T5258] ext4_orphan_cleanup+0x6a8/0xa00 [ 87.023810][ T5258] ext4_fill_super+0x3414/0x37c0 [ 87.028807][ T5258] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.034236][ T5258] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.039595][ T5258] get_tree_bdev_flags+0x291/0x300 [ 87.044857][ T5258] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.050269][ T5258] get_tree_bdev+0x1f/0x30 [ 87.054717][ T5258] ext4_get_tree+0x1c/0x30 [ 87.059269][ T5258] vfs_get_tree+0x57/0x1d0 [ 87.063759][ T5258] do_new_mount+0x288/0x8d0 [ 87.068371][ T5258] path_mount+0x4d0/0xbc0 [ 87.072793][ T5258] __se_sys_mount+0x28c/0x2e0 [ 87.077507][ T5258] ? restore_fpregs_from_fpstate+0x61/0x110 [ 87.083498][ T5258] __x64_sys_mount+0x67/0x80 [ 87.088188][ T5258] x64_sys_call+0x2d61/0x3020 [ 87.092984][ T5258] do_syscall_64+0x12c/0x370 [ 87.097735][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.103653][ T5258] RIP: 0033:0x7fe9ce3ada8a [ 87.108113][ T5258] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.127988][ T5258] RSP: 002b:00007fe9cc9a1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.136489][ T5258] RAX: ffffffffffffffda RBX: 00007fe9cc9a1ee0 RCX: 00007fe9ce3ada8a [ 87.144671][ T5258] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe9cc9a1ea0 [ 87.152812][ T5258] RBP: 00002000000009c0 R08: 00007fe9cc9a1ee0 R09: 0000000000800718 [ 87.160927][ T5258] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 87.169040][ T5258] R13: 00007fe9cc9a1ea0 R14: 000000000000048d R15: 0000200000000200 [ 87.177078][ T5258] [ 87.180122][ T5258] ---[ end trace 0000000000000000 ]--- [ 87.196027][ T5271] loop3: detected capacity change from 0 to 128 [ 87.211080][ T5271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 87.229605][ T5258] EXT4-fs (loop1): 1 orphan inode deleted [ 87.266660][ T5275] syzkaller0: entered promiscuous mode [ 87.272307][ T5275] syzkaller0: entered allmulticast mode [ 87.286063][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.300863][ T5271] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 87.469419][ T5277] loop4: detected capacity change from 0 to 512 [ 87.511217][ T5277] EXT4-fs (loop4): 1 truncate cleaned up [ 87.529786][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.613642][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.683994][ T5288] loop6: detected capacity change from 0 to 7 [ 87.694168][ T3300] buffer_io_error: 27 callbacks suppressed [ 87.694182][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.708809][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.732017][ T3300] loop6: unable to read partition table [ 87.807308][ T5288] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.818897][ T5288] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.837882][ T5288] loop6: unable to read partition table [ 87.854735][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.863032][ T5288] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 87.875863][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.895543][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.914879][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.968545][ T5295] syzkaller0: entered promiscuous mode [ 87.974458][ T5295] syzkaller0: entered allmulticast mode [ 88.029692][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.114052][ T5298] loop6: detected capacity change from 0 to 7 [ 88.125915][ T3300] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.134268][ T3300] loop6: unable to read partition table [ 88.167623][ T5299] loop2: detected capacity change from 0 to 512 [ 88.306856][ T5299] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.322023][ T5299] EXT4-fs (loop2): mount failed [ 89.085124][ T5298] loop6: unable to read partition table [ 89.091068][ T5298] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 89.328755][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 89.328772][ T28] audit: type=1400 audit(131.758:270): avc: denied { getopt } for pid=5307 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.310844][ T28] audit: type=1400 audit(132.728:271): avc: denied { append } for pid=5335 comm="syz.3.549" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.339664][ T5330] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 90.340196][ T5330] SELinux: failed to load policy [ 90.404435][ T5348] syzkaller0: entered promiscuous mode [ 90.404458][ T5348] syzkaller0: entered allmulticast mode [ 90.429554][ T5352] syzkaller0: entered promiscuous mode [ 90.451569][ T5352] syzkaller0: entered allmulticast mode [ 90.469489][ T5354] serio: Serial port ttyS3 [ 90.497366][ T5353] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 90.500341][ T5353] bond1 (unregistering): Released all slaves [ 90.610314][ T5363] bridge0: port 3(veth1_vlan) entered blocking state [ 90.620326][ T5363] bridge0: port 3(veth1_vlan) entered disabled state [ 90.631006][ T5363] veth1_vlan: entered allmulticast mode [ 90.637955][ T5363] veth1_vlan: left allmulticast mode [ 90.701470][ T5360] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 90.743475][ T28] audit: type=1400 audit(133.168:272): avc: denied { setopt } for pid=5356 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.791167][ T5357] syzkaller0: entered promiscuous mode [ 90.797085][ T5357] syzkaller0: entered allmulticast mode [ 90.824701][ T5366] loop3: detected capacity change from 0 to 1024 [ 90.912566][ T5366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.562: bg 0: block 112: padding at end of block bitmap is not set [ 91.066272][ T5373] loop1: detected capacity change from 0 to 512 [ 91.074870][ T5366] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: block 3: comm syz.3.562: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.109913][ T5364] netlink: 'syz.2.560': attribute type 3 has an invalid length. [ 91.119975][ T5374] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.562: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.137650][ T5366] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.562: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 91.185251][ T5364] loop2: detected capacity change from 0 to 8192 [ 91.229355][ T5364] loop2: p1 < > p2 < > p3 p4 < > [ 91.237863][ T5364] loop2: partition table partially beyond EOD, truncated [ 91.249556][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.250618][ T5364] loop2: p1 start 67108864 is beyond EOD, truncated [ 91.268415][ T5364] loop2: p3 start 100859904 is beyond EOD, truncated [ 91.291499][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.313243][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.333573][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.348326][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.388835][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.400026][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.409129][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.483520][ T3526] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 91.518286][ T5393] loop0: detected capacity change from 0 to 512 [ 91.526757][ T3526] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.627116][ T5393] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.642650][ T5393] EXT4-fs (loop0): mount failed [ 92.337584][ T5400] syzkaller0: entered promiscuous mode [ 92.343237][ T5400] syzkaller0: entered allmulticast mode [ 92.413074][ T5401] loop6: detected capacity change from 0 to 7 [ 92.424017][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 92.435585][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.474565][ T5401] loop6: unable to read partition table [ 92.527579][ T5401] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 92.611480][ T5407] loop3: detected capacity change from 0 to 128 [ 92.625438][ T5407] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 92.663165][ T28] audit: type=1400 audit(135.088:273): avc: denied { connect } for pid=5408 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.685379][ T3526] IPVS: starting estimator thread 0... [ 92.765449][ T5417] loop1: detected capacity change from 0 to 512 [ 92.834827][ T5413] IPVS: using max 2592 ests per chain, 129600 per kthread [ 92.960227][ T5423] syzkaller0: entered promiscuous mode [ 92.987906][ T5423] syzkaller0: entered allmulticast mode [ 93.236216][ T5425] openvswitch: netlink: Message has 8 unknown bytes. [ 93.299855][ T5427] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 93.341175][ T5427] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 93.690422][ T5435] loop0: detected capacity change from 0 to 512 [ 93.709337][ T5437] loop1: detected capacity change from 0 to 512 [ 93.748647][ T1033] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 93.776819][ T1033] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.989847][ T5452] syzkaller0: entered promiscuous mode [ 93.995476][ T5452] syzkaller0: entered allmulticast mode [ 94.027518][ T5456] loop6: detected capacity change from 0 to 7 [ 94.039596][ T5456] buffer_io_error: 15 callbacks suppressed [ 94.039724][ T5456] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.057523][ T5456] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.146352][ T5456] loop6: unable to read partition table [ 94.163462][ T5456] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 94.231144][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.313561][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.385386][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.475615][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.515011][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.568709][ T28] audit: type=1400 audit(136.978:274): avc: denied { ioctl } for pid=5466 comm="syz.3.590" path="socket:[10602]" dev="sockfs" ino=10602 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.593237][ T28] audit: type=1400 audit(136.978:275): avc: denied { read } for pid=5466 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.702719][ T28] audit: type=1400 audit(137.128:276): avc: denied { getopt } for pid=5471 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.803775][ T28] audit: type=1400 audit(137.228:277): avc: denied { setopt } for pid=5479 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.893642][ T28] audit: type=1400 audit(137.318:278): avc: denied { create } for pid=5471 comm="syz.1.592" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.909816][ T5488] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 94.919551][ T5488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.940854][ T5488] vhci_hcd vhci_hcd.0: Device attached [ 94.956434][ T28] audit: type=1400 audit(137.388:279): avc: denied { name_bind } for pid=5491 comm="syz.4.597" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 94.981432][ T28] audit: type=1400 audit(137.418:280): avc: denied { remove_name } for pid=5471 comm="syz.1.592" name="bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.004441][ T5489] vhci_hcd: cannot find the pending unlink 0 [ 95.004660][ T28] audit: type=1400 audit(137.418:281): avc: denied { rename } for pid=5471 comm="syz.1.592" name="bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.013911][ T5489] vhci_hcd: connection closed [ 95.032042][ T28] audit: type=1400 audit(137.418:282): avc: denied { add_name } for pid=5471 comm="syz.1.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.064826][ T28] audit: type=1400 audit(137.468:283): avc: denied { execute } for pid=5471 comm="syz.1.592" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 95.068918][ T3812] vhci_hcd vhci_hcd.2: stop threads [ 95.097545][ T3812] vhci_hcd vhci_hcd.2: release socket [ 95.103359][ T3812] vhci_hcd vhci_hcd.2: disconnect device [ 95.242469][ T5502] netlink: 'syz.1.600': attribute type 10 has an invalid length. [ 95.253652][ T5502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 95.313471][ T5483] SELinux: failed to load policy [ 95.418839][ T3526] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 95.442424][ T3526] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.628368][ T5519] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 95.720980][ T5527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 95.729201][ T5527] System zones: 1-12 [ 95.733448][ T5527] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.609: corrupted in-inode xattr: e_value size too large [ 95.747923][ T5527] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.752477][ T5527] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.609: couldn't read orphan inode 15 (err -117) [ 95.764960][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 95.780004][ C1] EXT4-fs (loop2): initial error at time 138: ext4_iget_extra_inode:5040: inode 15 [ 95.787554][ T5527] loop2: lost filesystem error report for type 5 error -117 [ 95.789360][ C1] EXT4-fs (loop2): last error at time 138: ext4_iget_extra_inode:5040 [ 96.009825][ T5531] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 96.021218][ T5531] bond1 (unregistering): Released all slaves [ 96.451015][ T5547] set_capacity_and_notify: 7 callbacks suppressed [ 96.451054][ T5547] loop2: detected capacity change from 0 to 512 [ 96.507536][ T5535] loop4: detected capacity change from 0 to 512 [ 96.536785][ T5535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.589149][ T5549] loop1: detected capacity change from 0 to 128 [ 96.895536][ T5555] loop0: detected capacity change from 0 to 512 [ 97.028548][ T3526] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 97.036590][ T3526] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.081047][ T5533] loop3: detected capacity change from 0 to 2048 [ 97.306947][ T3313] EXT4-fs unmount: 33 callbacks suppressed [ 97.306964][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.337181][ T5571] loop4: detected capacity change from 0 to 1024 [ 97.391832][ T5576] loop2: detected capacity change from 0 to 512 [ 97.397305][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.415296][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.470206][ T5579] loop1: detected capacity change from 0 to 512 [ 97.577045][ T5571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.622: bg 0: block 112: padding at end of block bitmap is not set [ 97.660090][ T5576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.713699][ T5579] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.728514][ T5579] EXT4-fs (loop1): mount failed [ 97.870875][ T5571] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 3: comm syz.4.622: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.963366][ T5585] loop0: detected capacity change from 0 to 256 [ 97.989137][ T5580] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.622: lblock 0 mapped to illegal pblock 0 (length 1) [ 98.120126][ T5571] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.622: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 98.214460][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.409272][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.452200][ T5594] syzkaller0: entered promiscuous mode [ 98.466698][ T5596] loop2: detected capacity change from 0 to 512 [ 98.474656][ T5594] syzkaller0: entered allmulticast mode [ 98.498897][ T5596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.569047][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.755337][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.364320][ T5611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.593694][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 99.593711][ T28] audit: type=1400 audit(142.018:290): avc: denied { shutdown } for pid=5619 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.688415][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.697417][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.706090][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.714876][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.752795][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.927720][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.084509][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 100.119499][ T28] audit: type=1400 audit(142.428:291): avc: denied { mount } for pid=5633 comm="syz.4.639" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.142821][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 100.151896][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 100.191433][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 100.387634][ T5640] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.402795][ T5640] EXT4-fs (loop4): mount failed [ 100.614503][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 100.684238][ T5644] EXT4-fs: Ignoring removed bh option [ 100.783431][ T5644] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.802278][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 101.086024][ T5644] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.641: corrupted in-inode xattr: e_value size too large [ 101.175919][ T5644] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.176077][ T5644] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.641: couldn't read orphan inode 15 (err -117) [ 101.185302][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 101.185324][ C0] EXT4-fs (loop0): initial error at time 143: ext4_iget_extra_inode:5040: inode 15 [ 101.185351][ C0] EXT4-fs (loop0): last error at time 143: ext4_iget_extra_inode:5040: inode 15 [ 101.225875][ T5644] loop0: lost filesystem error report for type 5 error -117 [ 101.235168][ T5644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.237128][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.326168][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 101.359833][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.375443][ T5644] team0: Port device team_slave_0 removed [ 101.384838][ T28] audit: type=1400 audit(143.738:292): avc: denied { create } for pid=5643 comm="syz.0.641" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.427716][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 101.437506][ T5655] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 12: comm syz.0.641: lblock 3 mapped to illegal pblock 12 (length 1) [ 101.471273][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 101.511820][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 101.548983][ T28] audit: type=1400 audit(143.738:293): avc: denied { rename } for pid=5643 comm="syz.0.641" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.591839][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.632071][ T28] audit: type=1400 audit(143.748:294): avc: denied { ioctl } for pid=5643 comm="syz.0.641" path="/118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=19 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.048289][ T5665] set_capacity_and_notify: 6 callbacks suppressed [ 102.048307][ T5665] loop4: detected capacity change from 0 to 1024 [ 102.081729][ T5665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.094169][ T5670] loop2: detected capacity change from 0 to 512 [ 102.119420][ T5668] loop6: detected capacity change from 0 to 7 [ 102.132219][ T5668] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.144134][ T5668] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.153975][ T5668] loop6: unable to read partition table [ 102.161294][ T5668] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 102.162301][ T5665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.648: bg 0: block 112: padding at end of block bitmap is not set [ 102.203284][ T5670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.264262][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.277046][ T28] audit: type=1400 audit(144.708:295): avc: denied { watch } for pid=5664 comm="syz.4.648" path="/156/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.307352][ T5678] loop0: detected capacity change from 0 to 512 [ 102.313065][ T5680] syzkaller0: entered promiscuous mode [ 102.319684][ T5680] syzkaller0: entered allmulticast mode [ 102.326574][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.359754][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.401225][ T5686] syzkaller0: entered promiscuous mode [ 102.406887][ T5686] syzkaller0: entered allmulticast mode [ 102.482813][ T5691] syzkaller0: entered promiscuous mode [ 102.515647][ T5691] syzkaller0: entered allmulticast mode [ 102.516564][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.584690][ T5698] loop6: detected capacity change from 0 to 7 [ 102.598205][ T5698] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.609712][ T5698] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.626157][ T5698] loop6: unable to read partition table [ 102.632720][ T5698] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 102.633829][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.662011][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.684477][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.703210][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.718820][ T3604] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.719269][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.750927][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.780465][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.792445][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.801361][ T5713] loop6: detected capacity change from 0 to 7 [ 102.816503][ T5713] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.823936][ T5715] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 102.826654][ T5713] loop6: unable to read partition table [ 102.841234][ T5713] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 102.980945][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.990439][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.991156][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.016434][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.047985][ T28] audit: type=1400 audit(145.478:296): avc: denied { create } for pid=5719 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.074064][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.185864][ T5721] loop4: detected capacity change from 0 to 512 [ 103.247924][ T5721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.987646][ T5727] syzkaller0: entered promiscuous mode [ 103.993380][ T5727] syzkaller0: entered allmulticast mode [ 104.033735][ T28] audit: type=1400 audit(145.478:297): avc: denied { write } for pid=5719 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.006676][ T28] audit: type=1400 audit(145.478:298): avc: denied { read } for pid=5719 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.276119][ T5731] loop3: detected capacity change from 0 to 512 [ 105.576395][ T5732] loop1: detected capacity change from 0 to 512 [ 105.593610][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.625245][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.639502][ T5732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.757186][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.782916][ T5740] capability: warning: `syz.2.671' uses 32-bit capabilities (legacy support in use) [ 105.853790][ T5748] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 106.028902][ T5766] tipc: Enabling of bearer rejected, failed to enable media [ 106.042327][ T5766] syzkaller0: entered promiscuous mode [ 106.047945][ T5766] syzkaller0: entered allmulticast mode [ 106.067540][ T5768] loop0: detected capacity change from 0 to 128 [ 106.091499][ T5768] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 106.112298][ T5768] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 106.125917][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.182066][ T28] audit: type=1400 audit(148.608:299): avc: denied { ioctl } for pid=5780 comm="syz.3.687" path="socket:[11484]" dev="sockfs" ino=11484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.205555][ T5779] syzkaller0: entered promiscuous mode [ 106.212618][ T5779] syzkaller0: entered allmulticast mode [ 106.213715][ T5770] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 106.234622][ T5770] bond1 (unregistering): Released all slaves [ 106.255208][ T5783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.344462][ T5786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.372233][ T5788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.892879][ T5797] serio: Serial port ttyS3 [ 107.035480][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.188068][ T5801] set_capacity_and_notify: 2 callbacks suppressed [ 107.188586][ T5801] loop0: detected capacity change from 0 to 512 [ 107.249511][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.264128][ T5801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.282251][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294342][ T5809] FAULT_INJECTION: forcing a failure. [ 107.294342][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.308705][ T28] audit: type=1400 audit(149.718:300): avc: denied { map } for pid=5808 comm="syz.3.695" path="socket:[11521]" dev="sockfs" ino=11521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.365229][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.3.695 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.365265][ T5809] Tainted: [W]=WARN [ 107.365352][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.365364][ T5809] Call Trace: [ 107.365371][ T5809] [ 107.365380][ T5809] __dump_stack+0x1d/0x30 [ 107.365412][ T5809] dump_stack_lvl+0x95/0xd0 [ 107.365515][ T5809] dump_stack+0x15/0x1b [ 107.365541][ T5809] should_fail_ex+0x263/0x280 [ 107.365612][ T5809] should_fail+0xb/0x20 [ 107.365635][ T5809] should_fail_usercopy+0x1a/0x20 [ 107.365662][ T5809] _copy_from_user+0x1c/0xb0 [ 107.365709][ T5809] memdup_user+0x5e/0xd0 [ 107.365784][ T5809] io_parse_restrictions+0x55/0x290 [ 107.365805][ T5809] ? __fget_files+0x184/0x1c0 [ 107.365837][ T5809] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.365909][ T5809] io_register_restrictions+0xad/0x190 [ 107.365930][ T5809] ? __se_sys_io_uring_register+0x111f/0x12d0 [ 107.365961][ T5809] __se_sys_io_uring_register+0x112d/0x12d0 [ 107.366065][ T5809] ? mutex_unlock+0x4e/0x90 [ 107.366148][ T5809] ? fput+0x8f/0xc0 [ 107.366178][ T5809] ? ksys_write+0x194/0x1a0 [ 107.366211][ T5809] __x64_sys_io_uring_register+0x55/0x70 [ 107.366181][ T28] audit: type=1400 audit(149.718:301): avc: denied { read } for pid=5808 comm="syz.3.695" path="socket:[11521]" dev="sockfs" ino=11521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.366237][ T5809] x64_sys_call+0x2be0/0x3020 [ 107.366363][ T5809] do_syscall_64+0x12c/0x370 [ 107.366388][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.366410][ T5809] RIP: 0033:0x7f670109c819 [ 107.366426][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.366444][ T5809] RSP: 002b:00007f66ffaf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 107.366474][ T5809] RAX: ffffffffffffffda RBX: 00007f6701315fa0 RCX: 00007f670109c819 [ 107.366495][ T5809] RDX: 0000200000000300 RSI: 000000000000000b RDI: 0000000000000003 [ 107.366508][ T5809] RBP: 00007f66ffaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.366521][ T5809] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 107.366555][ T5809] R13: 00007f6701316038 R14: 00007f6701315fa0 R15: 00007ffde3f30eb8 [ 107.366574][ T5809] [ 107.551270][ T5816] tipc: Enabling of bearer rejected, failed to enable media [ 107.642405][ T5819] syzkaller0: entered promiscuous mode [ 107.649413][ T5819] syzkaller0: entered allmulticast mode [ 107.671893][ T5813] syzkaller0: entered promiscuous mode [ 107.677766][ T5813] syzkaller0: entered allmulticast mode [ 107.806892][ T5824] syzkaller0: entered promiscuous mode [ 107.812541][ T5824] syzkaller0: entered allmulticast mode [ 107.844361][ T5825] loop6: detected capacity change from 0 to 7 [ 107.861943][ T5390] buffer_io_error: 1 callbacks suppressed [ 107.861960][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.876788][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.884658][ T5390] loop6: unable to read partition table [ 107.893645][ T5825] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.905355][ T5825] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.918687][ T5825] loop6: unable to read partition table [ 107.931285][ T5825] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 107.934634][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.971909][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.992315][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.994174][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.042524][ T28] audit: type=1400 audit(150.468:302): avc: denied { listen } for pid=5830 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.045079][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.065369][ T5833] __nla_validate_parse: 1 callbacks suppressed [ 108.065385][ T5833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.705'. [ 108.098297][ T5390] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.108460][ T5833] syzkaller0: entered promiscuous mode [ 108.138357][ T5833] syzkaller0: entered allmulticast mode [ 108.160655][ T5834] loop1: detected capacity change from 0 to 8192 [ 108.217790][ T5834] loop1: p1 < > p2 p4 < p5 > [ 108.218860][ T5838] loop3: detected capacity change from 0 to 512 [ 108.228843][ T5834] loop1: partition table partially beyond EOD, truncated [ 108.228991][ T5834] loop1: p1 start 134217728 is beyond EOD, truncated [ 108.253423][ T5834] loop1: p2 size 591360 extends beyond EOD, truncated [ 108.256844][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.262228][ T5834] loop1: p5 size 591360 extends beyond EOD, truncated [ 108.338399][ T5834] sctp: [Deprecated]: syz.1.706 (pid 5834) Use of int in max_burst socket option deprecated. [ 108.338399][ T5834] Use struct sctp_assoc_value instead [ 108.380608][ T28] audit: type=1400 audit(150.808:303): avc: denied { read append } for pid=5843 comm="syz.2.709" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.407287][ T28] audit: type=1400 audit(150.808:304): avc: denied { open } for pid=5843 comm="syz.2.709" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.438084][ T28] audit: type=1400 audit(150.868:305): avc: denied { ioctl } for pid=5830 comm="syz.1.706" path="socket:[12608]" dev="sockfs" ino=12608 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.456401][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.471693][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.482101][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.488943][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.506245][ T5851] syzkaller0: entered promiscuous mode [ 108.511967][ T5851] syzkaller0: entered allmulticast mode [ 108.520130][ T28] audit: type=1400 audit(150.958:306): avc: denied { ioctl } for pid=5843 comm="syz.2.709" path="socket:[11598]" dev="sockfs" ino=11598 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.546106][ T28] audit: type=1400 audit(150.958:307): avc: denied { map } for pid=5843 comm="syz.2.709" path="socket:[11599]" dev="sockfs" ino=11599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.649657][ T5853] loop4: detected capacity change from 0 to 8192 [ 108.693926][ T5855] syzkaller0: entered promiscuous mode [ 108.695842][ T5853] syz.4.712: attempt to access beyond end of device [ 108.695842][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.705698][ T5855] syzkaller0: entered allmulticast mode [ 108.726955][ T5853] Buffer I/O error on dev loop4, logical block 57847, async page read [ 108.736116][ T5853] syz.4.712: attempt to access beyond end of device [ 108.736116][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.750831][ T5853] syz.4.712: attempt to access beyond end of device [ 108.750831][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.765216][ T5853] syz.4.712: attempt to access beyond end of device [ 108.765216][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.780311][ T5853] syz.4.712: attempt to access beyond end of device [ 108.780311][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.794662][ T5853] syz.4.712: attempt to access beyond end of device [ 108.794662][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.808846][ T5853] syz.4.712: attempt to access beyond end of device [ 108.808846][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.823054][ T5853] syz.4.712: attempt to access beyond end of device [ 108.823054][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.837432][ T5853] syz.4.712: attempt to access beyond end of device [ 108.837432][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.851494][ T5853] syz.4.712: attempt to access beyond end of device [ 108.851494][ T5853] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 108.889515][ T5858] FAULT_INJECTION: forcing a failure. [ 108.889515][ T5858] name failslab, interval 1, probability 0, space 0, times 0 [ 108.903946][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.0.714 Tainted: G W syzkaller #0 PREEMPT(full) [ 108.904044][ T5858] Tainted: [W]=WARN [ 108.904052][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.904066][ T5858] Call Trace: [ 108.904073][ T5858] [ 108.904081][ T5858] __dump_stack+0x1d/0x30 [ 108.904107][ T5858] dump_stack_lvl+0x95/0xd0 [ 108.904132][ T5858] dump_stack+0x15/0x1b [ 108.904157][ T5858] should_fail_ex+0x263/0x280 [ 108.904200][ T5858] should_failslab+0x8c/0xb0 [ 108.904282][ T5858] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 108.904308][ T5858] ? __alloc_skb+0x2d6/0x690 [ 108.904344][ T5858] __alloc_skb+0x2d6/0x690 [ 108.904373][ T5858] ? __alloc_skb+0x200/0x690 [ 108.904469][ T5858] netlink_alloc_large_skb+0xbf/0xf0 [ 108.904507][ T5858] netlink_sendmsg+0x40c/0x6f0 [ 108.904534][ T5858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.904626][ T5858] ____sys_sendmsg+0x563/0x5b0 [ 108.904652][ T5858] ___sys_sendmsg+0x195/0x1e0 [ 108.904695][ T5858] __x64_sys_sendmsg+0xd4/0x160 [ 108.904722][ T5858] x64_sys_call+0x194c/0x3020 [ 108.904764][ T5858] do_syscall_64+0x12c/0x370 [ 108.904796][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.904836][ T5858] RIP: 0033:0x7f0bed53c819 [ 108.904856][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.904881][ T5858] RSP: 002b:00007f0bebf97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.904949][ T5858] RAX: ffffffffffffffda RBX: 00007f0bed7b5fa0 RCX: 00007f0bed53c819 [ 108.904966][ T5858] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 108.904983][ T5858] RBP: 00007f0bebf97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.905004][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.905016][ T5858] R13: 00007f0bed7b6038 R14: 00007f0bed7b5fa0 R15: 00007ffeb7329398 [ 108.905036][ T5858] [ 109.131972][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.138828][ T5861] loop6: detected capacity change from 0 to 7 [ 109.170795][ T3300] loop6: unable to read partition table [ 109.191259][ T5861] loop6: unable to read partition table [ 109.248585][ T5861] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 109.390417][ T5869] syzkaller0: entered promiscuous mode [ 109.396539][ T5869] syzkaller0: entered allmulticast mode [ 109.778425][ T5880] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 109.802734][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.824500][ T5880] bond1: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 109.865239][ T5883] loop4: detected capacity change from 0 to 512 [ 109.881639][ T5883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.192484][ T5892] loop0: detected capacity change from 0 to 512 [ 110.202905][ T5892] EXT4-fs: Ignoring removed oldalloc option [ 110.229332][ T5895] loop1: detected capacity change from 0 to 512 [ 110.230451][ T5892] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.726: invalid block [ 110.249859][ T5892] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.250054][ T5892] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.726: invalid indirect mapped block 4294967295 (level 1) [ 110.259361][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 110.259391][ C0] EXT4-fs (loop0): initial error at time 152: ext4_get_branch:178: inode 11: block 4294967295 [ 110.259427][ C0] EXT4-fs (loop0): last error at time 152: ext4_get_branch:178: inode 11: block 4294967295 [ 110.301717][ T5892] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.301897][ T5892] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.726: invalid indirect mapped block 4294967295 (level 1) [ 110.313803][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.329151][ T5892] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.338314][ T5892] EXT4-fs (loop0): 2 truncates cleaned up [ 110.365736][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.460236][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 110.460254][ T28] audit: type=1400 audit(152.878:310): avc: denied { ioctl } for pid=5891 comm="syz.0.726" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.512136][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.545211][ T28] audit: type=1400 audit(152.968:311): avc: denied { write } for pid=5898 comm="syz.0.728" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.595715][ T5901] loop6: detected capacity change from 0 to 7 [ 110.615298][ T5901] loop6: unable to read partition table [ 110.627402][ T5901] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 110.684287][ T5906] FAULT_INJECTION: forcing a failure. [ 110.684287][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.700695][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.0.732 Tainted: G W syzkaller #0 PREEMPT(full) [ 110.700732][ T5906] Tainted: [W]=WARN [ 110.700740][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.700753][ T5906] Call Trace: [ 110.700761][ T5906] [ 110.700770][ T5906] __dump_stack+0x1d/0x30 [ 110.700822][ T5906] dump_stack_lvl+0x95/0xd0 [ 110.700849][ T5906] dump_stack+0x15/0x1b [ 110.700924][ T5906] should_fail_ex+0x263/0x280 [ 110.700955][ T5906] should_fail+0xb/0x20 [ 110.700983][ T5906] should_fail_usercopy+0x1a/0x20 [ 110.701032][ T5906] _copy_from_user+0x1c/0xb0 [ 110.701147][ T5906] __copy_msghdr+0x244/0x300 [ 110.701185][ T5906] ___sys_sendmsg+0x10c/0x1e0 [ 110.701218][ T5906] __x64_sys_sendmsg+0xd4/0x160 [ 110.701319][ T5906] x64_sys_call+0x194c/0x3020 [ 110.701350][ T5906] do_syscall_64+0x12c/0x370 [ 110.701423][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.701549][ T5906] RIP: 0033:0x7f0bed53c819 [ 110.701567][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.701607][ T5906] RSP: 002b:00007f0bebf97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.701630][ T5906] RAX: ffffffffffffffda RBX: 00007f0bed7b5fa0 RCX: 00007f0bed53c819 [ 110.701645][ T5906] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 110.701710][ T5906] RBP: 00007f0bebf97090 R08: 0000000000000000 R09: 0000000000000000 [ 110.701725][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.701738][ T5906] R13: 00007f0bed7b6038 R14: 00007f0bed7b5fa0 R15: 00007ffeb7329398 [ 110.701756][ T5906] [ 110.903348][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.928371][ T5908] vlan2: entered promiscuous mode [ 110.933782][ T5908] dummy0: entered promiscuous mode [ 111.117118][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.297710][ T5912] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.312760][ T5912] EXT4-fs (loop0): mount failed [ 112.415596][ T28] audit: type=1400 audit(154.848:312): avc: denied { read write } for pid=5922 comm="syz.3.737" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.578500][ T5927] can0: slcan on ttyS3. [ 112.597634][ T28] audit: type=1400 audit(154.848:313): avc: denied { open } for pid=5922 comm="syz.3.737" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.662084][ T5933] netlink: 'syz.1.738': attribute type 4 has an invalid length. [ 112.708039][ T5927] can0 (unregistered): slcan off ttyS3. [ 112.714093][ T5935] syzkaller0: entered promiscuous mode [ 112.722809][ T5937] netlink: 'syz.1.738': attribute type 4 has an invalid length. [ 112.749111][ T5935] syzkaller0: entered allmulticast mode [ 112.789721][ T5927] can0: slcan on ttyS3. [ 112.818954][ T28] audit: type=1400 audit(155.248:314): avc: denied { read } for pid=3039 comm="dhcpcd" name="n26" dev="tmpfs" ino=6342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.043702][ T28] audit: type=1400 audit(155.248:315): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=6342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.464177][ T28] audit: type=1400 audit(155.248:316): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=6342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.525018][ T5922] can0 (unregistered): slcan off ttyS3. [ 113.567204][ T28] audit: type=1400 audit(128.058:317): avc: denied { allowed } for pid=5959 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.606946][ T28] audit: type=1400 audit(128.068:318): avc: denied { setopt } for pid=5959 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.652406][ T28] audit: type=1400 audit(128.148:319): avc: denied { create } for pid=5946 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.683466][ T5966] tipc: Enabling of bearer rejected, failed to enable media [ 113.713235][ T5966] syzkaller0: entered promiscuous mode [ 113.719331][ T5966] syzkaller0: entered allmulticast mode [ 113.909131][ T5975] set_capacity_and_notify: 1 callbacks suppressed [ 113.909148][ T5975] loop2: detected capacity change from 0 to 1024 [ 114.049034][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.303125][ T5975] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.746: bg 0: block 112: padding at end of block bitmap is not set [ 114.805735][ T6007] loop3: detected capacity change from 0 to 1024 [ 114.816153][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.903615][ T6013] loop4: detected capacity change from 0 to 512 [ 115.041599][ T6010] syzkaller0: entered promiscuous mode [ 115.047295][ T6010] syzkaller0: entered allmulticast mode [ 115.222879][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.254682][ T6013] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.270045][ T6013] EXT4-fs (loop4): mount failed [ 115.370330][ T6010] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 115.407556][ T6007] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.753: bg 0: block 112: padding at end of block bitmap is not set [ 115.620149][ T6029] loop1: detected capacity change from 0 to 128 [ 115.657085][ T6029] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 115.712568][ T6029] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 115.784993][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 115.785020][ T28] audit: type=1400 audit(130.268:326): avc: denied { ioctl } for pid=6026 comm="syz.1.758" path="socket:[11834]" dev="sockfs" ino=11834 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.099855][ T28] audit: type=1326 audit(130.598:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.141455][ T6034] loop0: detected capacity change from 0 to 512 [ 116.209647][ T6034] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 116.235057][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 116.241764][ C1] EXT4-fs (loop0): initial error at time 130: mb_free_blocks:2049: inode 11: block 64 [ 116.251484][ C1] EXT4-fs (loop0): last error at time 130: mb_free_blocks:2049: inode 11: block 64 [ 116.315123][ T28] audit: type=1326 audit(130.598:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.346386][ T6039] capability: warning: `syz.2.761' uses deprecated v2 capabilities in a way that may be insecure [ 116.366582][ T6034] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.759: corrupted inode contents [ 116.387589][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.387906][ T6034] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #11: comm syz.0.759: mark_inode_dirty error [ 116.411650][ T28] audit: type=1326 audit(130.598:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.443171][ T6040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6040 comm=syz.2.761 [ 116.456746][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.457080][ T6034] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.759: invalid indirect mapped block 1 (level 1) [ 116.491531][ T6040] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.508336][ T28] audit: type=1326 audit(130.598:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.531758][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.532227][ T6034] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.759: corrupted inode contents [ 116.556255][ T28] audit: type=1326 audit(130.598:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.587985][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.588428][ T6034] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 116.607946][ T28] audit: type=1326 audit(130.598:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.631680][ T6034] loop0: lost filesystem error report for type 5 error -117 [ 116.632175][ T6034] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.759: corrupted inode contents [ 116.654398][ T28] audit: type=1326 audit(130.598:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.677804][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.678249][ T6034] EXT4-fs error (device loop0): ext4_truncate:4602: inode #11: comm syz.0.759: mark_inode_dirty error [ 116.705046][ T6034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.705158][ T28] audit: type=1326 audit(130.628:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.708448][ T6034] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 116.714573][ T28] audit: type=1326 audit(130.628:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bed53c819 code=0x7ffc0000 [ 116.739048][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.747153][ T6034] loop0: lost filesystem error report for type 5 error -117 [ 116.793092][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 116.831542][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.918534][ T6045] syzkaller0: entered promiscuous mode [ 116.924172][ T6045] syzkaller0: entered allmulticast mode [ 116.924811][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.042868][ T6049] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 117.158353][ T6050] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 117.313996][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.463881][ T6054] syzkaller0: entered promiscuous mode [ 117.488432][ T6054] syzkaller0: entered allmulticast mode [ 117.526825][ T6060] loop4: detected capacity change from 0 to 1024 [ 117.550861][ T6060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.583764][ T6060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.769: bg 0: block 112: padding at end of block bitmap is not set [ 117.660735][ T6067] loop2: detected capacity change from 0 to 512 [ 117.699243][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.732300][ T6069] loop3: detected capacity change from 0 to 2048 [ 117.753793][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.798991][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.825588][ T6058] SELinux: failed to load policy [ 117.839832][ T6069] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.771: bg 0: block 345: padding at end of block bitmap is not set [ 117.854520][ T6069] EXT4-fs (loop3): Remounting filesystem read-only [ 117.874782][ T6069] FAULT_INJECTION: forcing a failure. [ 117.874782][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 117.887650][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.3.771 Tainted: G W syzkaller #0 PREEMPT(full) [ 117.887704][ T6069] Tainted: [W]=WARN [ 117.887711][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.887723][ T6069] Call Trace: [ 117.887731][ T6069] [ 117.887740][ T6069] __dump_stack+0x1d/0x30 [ 117.887864][ T6069] dump_stack_lvl+0x95/0xd0 [ 117.887892][ T6069] dump_stack+0x15/0x1b [ 117.887917][ T6069] should_fail_ex+0x263/0x280 [ 117.887948][ T6069] should_failslab+0x8c/0xb0 [ 117.888003][ T6069] kmem_cache_alloc_noprof+0x66/0x400 [ 117.888029][ T6069] ? do_getname+0x2e/0x1c0 [ 117.888057][ T6069] do_getname+0x2e/0x1c0 [ 117.888082][ T6069] __se_sys_symlink+0x2f/0x1b0 [ 117.888207][ T6069] __x64_sys_symlink+0x31/0x40 [ 117.888236][ T6069] x64_sys_call+0x2465/0x3020 [ 117.888262][ T6069] do_syscall_64+0x12c/0x370 [ 117.888289][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.888357][ T6069] RIP: 0033:0x7f670109c819 [ 117.888377][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.888397][ T6069] RSP: 002b:00007f66ffaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 117.888419][ T6069] RAX: ffffffffffffffda RBX: 00007f6701315fa0 RCX: 00007f670109c819 [ 117.888468][ T6069] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 117.888481][ T6069] RBP: 00007f66ffaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.888494][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.888533][ T6069] R13: 00007f6701316038 R14: 00007f6701315fa0 R15: 00007ffde3f30eb8 [ 117.888556][ T6069] [ 117.898146][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 118.080343][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.213900][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.288687][ T6101] loop4: detected capacity change from 0 to 512 [ 118.315648][ T6101] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 118.330759][ T6101] EXT4-fs (loop4): mount failed [ 118.753040][ T6109] netlink: 76 bytes leftover after parsing attributes in process `syz.1.779'. [ 118.765850][ T6109] syzkaller0: entered promiscuous mode [ 118.771524][ T6109] syzkaller0: entered allmulticast mode [ 118.909246][ T6111] syzkaller0: entered promiscuous mode [ 118.915048][ T6111] syzkaller0: entered allmulticast mode [ 119.121508][ T6115] syzkaller0: entered promiscuous mode [ 119.127405][ T6115] syzkaller0: entered allmulticast mode [ 119.417966][ T6121] loop3: detected capacity change from 0 to 256 [ 119.464231][ T6121] vfat: Unknown parameter '00000000000000000004' [ 119.699803][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 119.796092][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 119.837566][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 119.898179][ T6120] loop1: detected capacity change from 0 to 512 [ 119.989417][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 120.017353][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 120.026799][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 120.099077][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 120.134065][ T6149] syzkaller0: entered promiscuous mode [ 120.234169][ T6149] syzkaller0: entered allmulticast mode [ 120.311701][ T6159] loop2: detected capacity change from 0 to 2048 [ 120.838839][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.904262][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 120.904278][ T28] audit: type=1400 audit(135.398:365): avc: denied { setopt } for pid=6158 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.994032][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.007874][ T6162] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 121.033444][ T6170] loop3: detected capacity change from 0 to 512 [ 121.069072][ T6170] EXT4-fs: dax option not supported [ 121.109588][ T28] audit: type=1400 audit(135.588:366): avc: denied { lock } for pid=6174 comm="syz.1.799" path="socket:[11957]" dev="sockfs" ino=11957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.209722][ T6173] loop0: detected capacity change from 0 to 8192 [ 121.278752][ T6189] loop4: detected capacity change from 0 to 1024 [ 121.335628][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.388275][ T28] audit: type=1400 audit(135.888:367): avc: denied { bind } for pid=6174 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.407305][ T28] audit: type=1400 audit(135.888:368): avc: denied { listen } for pid=6174 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.432157][ T28] audit: type=1400 audit(135.888:369): avc: denied { connect } for pid=6174 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.433239][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.451271][ T28] audit: type=1400 audit(135.888:370): avc: denied { shutdown } for pid=6174 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.479445][ T28] audit: type=1400 audit(135.888:371): avc: denied { read } for pid=6174 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.502696][ T28] audit: type=1400 audit(135.928:372): avc: denied { getopt } for pid=6185 comm="syz.2.803" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.665413][ T6208] loop0: detected capacity change from 0 to 512 [ 121.676983][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.422196][ T6217] __nla_validate_parse: 6 callbacks suppressed [ 122.422213][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.452329][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.479512][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.609909][ T6225] loop4: detected capacity change from 0 to 512 [ 122.684275][ T6226] loop2: detected capacity change from 0 to 512 [ 122.684527][ T6225] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.815258][ T28] audit: type=1400 audit(137.198:373): avc: denied { accept } for pid=6222 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.888091][ T6225] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 122.911740][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.921313][ T6225] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 122.953448][ T6225] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 122.975625][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 122.993674][ T28] audit: type=1400 audit(137.488:374): avc: denied { write } for pid=6230 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.045559][ T6225] System zones: 0-2, 18-18, 34-35 [ 123.051620][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.171188][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.189927][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.199430][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.209127][ T6242] loop4: detected capacity change from 0 to 1024 [ 124.529060][ T6297] loop3: detected capacity change from 0 to 1024 [ 124.566717][ T6297] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.831: bg 0: block 112: padding at end of block bitmap is not set [ 124.584442][ T6293] syzkaller0: entered promiscuous mode [ 124.590448][ T6293] syzkaller0: entered allmulticast mode [ 124.668124][ T6304] loop1: detected capacity change from 0 to 256 [ 124.693087][ T6304] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 124.703720][ T6311] loop3: detected capacity change from 0 to 512 [ 124.709514][ T6304] FAT-fs (loop1): Filesystem has been set read-only [ 124.773826][ T5390] ================================================================== [ 124.782214][ T5390] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 124.789344][ T5390] [ 124.791679][ T5390] write to 0xffff888103e2382c of 4 bytes by task 3300 on cpu 0: [ 124.799573][ T5390] shmem_mknod+0x143/0x170 [ 124.804001][ T5390] shmem_create+0x34/0x50 [ 124.808378][ T5390] path_openat+0xd75/0x2050 [ 124.812992][ T5390] do_file_open+0x16c/0x290 [ 124.817628][ T5390] do_sys_openat2+0x94/0x130 [ 124.822254][ T5390] __x64_sys_openat+0xf2/0x120 [ 124.827677][ T5390] x64_sys_call+0x1e39/0x3020 [ 124.832385][ T5390] do_syscall_64+0x12c/0x370 [ 124.837172][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.843112][ T5390] [ 124.845577][ T5390] read to 0xffff888103e2382c of 4 bytes by task 5390 on cpu 1: [ 124.853322][ T5390] fill_mg_cmtime+0x5b/0x270 [ 124.857955][ T5390] generic_fillattr+0x24a/0x340 [ 124.863005][ T5390] shmem_getattr+0x181/0x200 [ 124.867780][ T5390] vfs_getattr_nosec+0x146/0x1e0 [ 124.872735][ T5390] vfs_getattr+0x48/0x60 [ 124.877259][ T5390] vfs_statx_path+0x28/0x140 [ 124.882039][ T5390] vfs_statx+0xc4/0x170 [ 124.886407][ T5390] vfs_fstatat+0x118/0x170 [ 124.890937][ T5390] __se_sys_newfstatat+0x55/0x3e0 [ 124.896062][ T5390] __x64_sys_newfstatat+0x55/0x70 [ 124.901205][ T5390] x64_sys_call+0x2c64/0x3020 [ 124.906262][ T5390] do_syscall_64+0x12c/0x370 [ 124.910957][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.916872][ T5390] [ 124.919387][ T5390] value changed: 0x109b0e07 -> 0x10a2a2db [ 124.925095][ T5390] [ 124.927644][ T5390] Reported by Kernel Concurrency Sanitizer on: [ 124.934056][ T5390] CPU: 1 UID: 0 PID: 5390 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 124.944569][ T5390] Tainted: [W]=WARN [ 124.948374][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.958865][ T5390] ================================================================== [ 124.975358][ T6314] loop1: detected capacity change from 0 to 512 [ 124.984173][ T6314] EXT4-fs: dax option not supported [ 124.994093][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 125.059244][ T6302] loop2: detected capacity change from 0 to 512