last executing test programs: 2m48.702094719s ago: executing program 0 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe88, 0x3}, 0x106200, 0x7, 0x20da, 0x0, 0x2, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x1000000e, 0x9, 0x10000189, 0xfffffffb, 0x7}) 2m47.48470013s ago: executing program 0 (id=568): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000000)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xffffffffffffffff}}, './file2\x00'}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x4) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) 2m47.349879515s ago: executing program 0 (id=570): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00800580", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3200000000"], 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m47.089060604s ago: executing program 0 (id=576): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$eJzs209oHFUYAPBvZpNUm9bEWv+1VbcNYkBNmkSFgJeKioLgQW8eJDRpKW6a0qzYFg8qgqfixZOePOnBoxcPgnj3JHiydykEKZ5lZXZnmm2yGzfprms7vx9M+97MW9578+bbvHkzG0BpVbN/kogDEfF7REy0srcWqLb+++vGh6ezLYlG460/k2a5LF8ULT43nmem04j00ySOdqh3/fKV95ZqtZWLeX62vnphdv3ylWfPrS6dXTm7cn5h8fmT8wuLLywu9KObY1nbrt449tvaV2/+/fmJa+MvXX335WzfgbxAez/6pRrVW89lmyf7XdmQHWxLJyNDbAi7UomIbLhGm/E/EZXYHLyJeOWToTYOGKhGo9HY1/3wRw3gLpbEsFsADEfxh764tx/EffD/2cap1g3Q9v6PRJqXGd1yf9tP1Yi49M5nP2ZbDGgdAgCg3U/Z/OeZTvOfNB5qK3df/mxoMiLuj4hDEfFARByOiAcjmmUfjohHdll/dUt++/wnvb6njvUom/+92HH+W8z+YrKS5w42+z+anDlXWzmZn5PpGN2X5ed2qOPX17/9ptux9vlftmX1F3PBvB3XR7Ys0C0v1Zdup8/tNj6OONJx/pvcfBKQRMSjEXFkj3X8cKrxZbdj/97/wWp8HfFUx/HffHKX7Px8crZ5PcwWV8V2xz64sNyt/mH3Pxv//Tv3fzJpf167vvs6vp88vtHt2F6v/7Hk7WZ6LN93aalevzgXMZa8sX3//OZni3xRPuv/9FTn+D8Um2fiaDaOEfFYRDweEU/kbT8eESciYmqH/r869dpK1/7fExFDHf/vxlupXsd/94nV+Z9/6VZ/b+P/XDM1ne/p5fuv1wbu+cQBAADAHSRtvgOfpDM302k6M9N6h/9w7E9ra+v1p8+svX9+ufWu/GSMpsVK10TbeuhcvjZc5Oe35BfydeMvKvc28zOn12pdF8WA/8R4l/jP/FEZduuAgfN7LSgv8Q/lJf6hvMQ/lJf4h/IS/1BS1yriH0pM/EN5iX8oL/EPpXQ7v+uXkJC4WxPD/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoj38CAAD//2Gy3iA=") timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x1}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) io_uring_enter(r1, 0xb0b, 0x65b5, 0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$phonet_pipe(r2, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000340)={0x60, 0x1, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1, &(0x7f0000000180)=[{0x200, 0x6d, 0x7}, {0x1, 0x1000, 0x17d}, {0x5, 0x6, 0x1}, {0x3, 0x2, 0x9}, {0x0, 0xfff, 0x7}, {0x3ff, 0xa68db32, 0x5}, {0xa1, 0x64b, 0x6}], 0x7, 0xd, 0x8, 0xb6, 0x10, 0x4}) timer_delete(r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './bus', [{0x20, 'devtmpfs\x00'}]}, 0x13) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) 2m46.223458613s ago: executing program 0 (id=591): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket(0x2b, 0x80801, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) open(0x0, 0x14927e, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x35}, 0x73) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000040)={0x95, 0x1}) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000580)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 2m45.055987893s ago: executing program 0 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@broadcast, 0xffffaa7e}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xf, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0x82, 0x4}, {0x2, 0x4, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x3, 0xa, 0x6}], 0x10, 0x7}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m45.055437953s ago: executing program 32 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@broadcast, 0xffffaa7e}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xf, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x0, 0x4, 0x3, 0x8}, {0x2, 0x5, 0x82, 0x4}, {0x2, 0x4, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x3, 0xa, 0x6}], 0x10, 0x7}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m36.513071526s ago: executing program 4 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0x7ff00000}]}) clock_adjtime(0x6, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async) rt_tgsigqueueinfo(0x0, 0x0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) (async) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) (async) listen(r3, 0x4) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7, 0x8}, 0x8) (async, rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r7, 0x2}, 0xfffffffffffffffe) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x178, 0xc, 0x0, 0x178, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {0xff}, 0x3b, 0x1, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa, 0x0, '\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0xf2, 0x4, 0x7, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, [0xff, 0xff000000, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff], 0x100, 0x80}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f77d0000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000173af008500000015000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.335849476s ago: executing program 4 (id=662): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6341}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1000, 0x7, 0xfffd, 0x89, 0x95a}) msgsnd(r0, &(0x7f0000000140)={0x2, "cb73dd598d51f8eb6cdb6a4c9929afa459b2ffab67cad61e24c911b76e52b41d9c2358c40c2b25c185b0c3ab0ae6f805385fc76a6cbab3f23727b053188b7eab756452f60adf2275880fc29f46c1c0498462c2f91b2bcfa89498d325998264e65d07a9b62339ea5e955652d45b821ba60f6f497a7f0b9b13723f4f275220d10c05047fa28732c63b0b66dc635149b177fb2b26912d8f64f34c76399805e8af07d3f25074bf47fdbbf5ef424d89fdde20ac901f557a1637"}, 0xbf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2m34.549757963s ago: executing program 4 (id=664): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x106200, 0x7, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0xec, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "a5a8", "227a87", 0x88a8, "f73c219f99b022c8e049333afa10d43c1d8f36b895fee9ceb32155239446d0ad0c56e6d03e80008137dd3d31b8034927c4058a53c068a35abfa83331aa4815ba69bff0132f293bab2886bb6aaf17612acd75497d52919a16b449ea25d4ab0fd1ce8724b006aa8c4d998b49f039759809829ef631d0284a662cfcb4326cbd93e2c2c4506c49042dd21c6c0892de1c031f5742add2bd8707f4406f342e48ff3d2d3a3052a32d5e09c7806c33ea3eddbed8495d893703dcadef17d7dd49655ccb82ab228bd9ef95f2bf29adcab4be1bf0f664d31371ce"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xe6) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x2c, 0x6, 0x0, @remote, @local, {[@dstopts={0x1d, 0x0, '\x00', [@pad1]}], {{0x51b, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@eol, @eol, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x1}]}}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 2m33.658465524s ago: executing program 4 (id=670): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) 2m32.642633098s ago: executing program 4 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13000a00212000003800128009000100766c616e000000002800028006000100030000001c0004800c00010002000000090000000c00fe0047c3007b01000000080005004280d66e7c77c199fe343d239144afbf9d6bff88d5b4c0aaceca18fd7d52bbe95e98825d0099d0a82338f2b64fcab753de9f501638a986191cc369ac3115f481f2fa1fe92fd372519862db31f1e4b3e05d98adc85d065f16f748d44db4fd43ba5e6b447aca9b2f3723f2bd4b", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x40, 0x700, 0x1, 0x1, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x24, 0xef, 0x3, 0x4, [{@empty, 0x6e9}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x9e, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x5}, {@multicast2, 0x4}, {@remote, 0x30000000}]}, @noop, @timestamp_addr={0x44, 0xc, 0xd3, 0x1, 0x8, [{@multicast2, 0x5}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x2}, {0xb, 0xa}, {0xe892967623717fe1, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x40000) 2m30.988054094s ago: executing program 4 (id=697): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102803, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 2m30.84114383s ago: executing program 33 (id=697): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102803, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 5.340282988s ago: executing program 5 (id=1820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) 4.759823757s ago: executing program 6 (id=1828): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000007c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@shortname_lower}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") 4.232260005s ago: executing program 6 (id=1834): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x24, 0x35b, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000580)='2', 0x1, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 4.001519114s ago: executing program 3 (id=1837): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCMGET(r1, 0x5415, 0x0) 3.916255296s ago: executing program 3 (id=1838): pipe(&(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) 3.52836747s ago: executing program 5 (id=1839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@dioread_nolock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) syz_open_dev$tty1(0xc, 0x4, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000011c0)={0x4000003, 0x80, 0x5, 0x9, 0x4001, 0x1}) 3.439711692s ago: executing program 6 (id=1840): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.344852396s ago: executing program 5 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 3.169667042s ago: executing program 2 (id=1848): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(0x0, 0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 3.151720493s ago: executing program 2 (id=1849): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x80000001, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.096378465s ago: executing program 2 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlockall(0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 3.033372066s ago: executing program 3 (id=1851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x4000) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xf84, 0x6, 0xfffffffffffffbfa, 0x1, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) 3.018088957s ago: executing program 3 (id=1852): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88402, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 2.707040557s ago: executing program 2 (id=1853): r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f00000003c0)={0x1003, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/69, 0x45}], &(0x7f0000000140)=[0x4], 0x1}, 0x20) 2.706505387s ago: executing program 2 (id=1854): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r0, 0x800) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0x2c) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x10000659, @mcast1, 0xff}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) write$cgroup_pid(r9, 0x0, 0x0) 2.497514545s ago: executing program 6 (id=1855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0xfffc, 0xd, 0x2}, {0x4, 0x1, 0xdef8, 0xee4a, 0x3c, 0x8}, 0x8, 0x3, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004000) 2.431926537s ago: executing program 5 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.426558577s ago: executing program 1 (id=1860): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 2.414614588s ago: executing program 6 (id=1861): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 2.35796817s ago: executing program 1 (id=1862): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 2.357505039s ago: executing program 5 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 2.272261102s ago: executing program 1 (id=1864): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000000, 0x13, 0xffffffffffffffff, 0x180000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = getpgid(r0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x2000010, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg(r6, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 1.425820172s ago: executing program 6 (id=1865): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000080)="16", 0xff8d, 0x8000c5d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) close(r1) 1.403650472s ago: executing program 3 (id=1866): r0 = creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 308.41075ms ago: executing program 2 (id=1867): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 166.036555ms ago: executing program 1 (id=1868): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x43) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 132.866055ms ago: executing program 1 (id=1869): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) 72.357357ms ago: executing program 1 (id=1870): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 72.056178ms ago: executing program 3 (id=1871): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbcf, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pread64(r1, &(0x7f00000001c0)=""/53, 0x35, 0x4b0bfbfd) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffe}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) 0s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r5, r4, 0x20, 0x0, @val=@tracing={0xffffffffffffffff, 0x5}}, 0x20) close(r3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r4, 0x20, 0x0, @val=@tcx}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) kernel console output (not intermixed with test programs): pid=6888 comm="syz.6.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.974583][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.001053][ T28] audit: type=1400 audit(1774714949.665:897): avc: denied { read } for pid=6888 comm="syz.6.1021" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.024478][ T28] audit: type=1400 audit(1774714949.665:898): avc: denied { open } for pid=6888 comm="syz.6.1021" path="/39/file1/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.115396][ T28] audit: type=1400 audit(1774714949.775:899): avc: denied { create } for pid=6908 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.135701][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1019'. [ 152.152941][ T6923] FAULT_INJECTION: forcing a failure. [ 152.152941][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 152.174993][ T28] audit: type=1400 audit(1774714949.775:900): avc: denied { ioctl } for pid=6908 comm="syz.1.1017" path="socket:[16673]" dev="sockfs" ino=16673 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.178076][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.5.1022 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.178135][ T6923] Tainted: [W]=WARN [ 152.178143][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.178156][ T6923] Call Trace: [ 152.178236][ T6923] [ 152.178244][ T6923] __dump_stack+0x1d/0x30 [ 152.178277][ T6923] dump_stack_lvl+0x95/0xd0 [ 152.178302][ T6923] dump_stack+0x15/0x1b [ 152.178326][ T6923] should_fail_ex+0x263/0x280 [ 152.178443][ T6923] should_failslab+0x8c/0xb0 [ 152.178485][ T6923] kmem_cache_alloc_noprof+0x66/0x400 [ 152.178510][ T6923] ? do_getname+0x2e/0x1c0 [ 152.178536][ T6923] do_getname+0x2e/0x1c0 [ 152.178613][ T6923] __se_sys_rename+0x2f/0x1c0 [ 152.178641][ T6923] __x64_sys_rename+0x31/0x40 [ 152.178670][ T6923] x64_sys_call+0x2b3/0x3020 [ 152.178771][ T6923] do_syscall_64+0x12c/0x370 [ 152.178801][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.178905][ T6923] RIP: 0033:0x7f46699dc819 [ 152.178923][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.178943][ T6923] RSP: 002b:00007f4668437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 152.178965][ T6923] RAX: ffffffffffffffda RBX: 00007f4669c55fa0 RCX: 00007f46699dc819 [ 152.178981][ T6923] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 152.179067][ T6923] RBP: 00007f4668437090 R08: 0000000000000000 R09: 0000000000000000 [ 152.179082][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.179095][ T6923] R13: 00007f4669c56038 R14: 00007f4669c55fa0 R15: 00007ffcd84d78d8 [ 152.179126][ T6923] [ 152.295741][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1027'. [ 152.382254][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1027'. [ 152.572822][ T6942] loop6: detected capacity change from 0 to 1024 [ 152.604713][ T6942] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 152.619677][ T6942] EXT4-fs (loop6): mount failed [ 152.735246][ T6955] loop5: detected capacity change from 0 to 512 [ 152.768182][ T6955] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 152.790524][ T6955] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.813698][ T6955] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.365008][ T6955] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 153.387618][ T6955] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1032: bg 0: block 15: invalid block bitmap [ 153.821894][ T6955] loop5: lost filesystem error report for type 5 error -117 [ 153.822067][ T6955] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 153.838534][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 153.838560][ C0] EXT4-fs (loop5): initial error at time 1774714951: ext4_validate_block_bitmap:432 [ 153.838583][ C0] EXT4-fs (loop5): last error at time 1774714951: ext4_validate_block_bitmap:432 [ 153.903988][ T6955] loop5: lost filesystem error report for type 5 error -117 [ 153.904478][ T6955] EXT4-fs (loop5): 1 truncate cleaned up [ 153.949806][ T6955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.021775][ T6955] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1032: corrupted xattr block 31: invalid header [ 154.061898][ T6955] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 154.091709][ T6955] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1032: corrupted xattr block 31: invalid header [ 154.127919][ T6955] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 154.155740][ T6955] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1032: bad symlink. [ 154.179973][ T6969] loop6: detected capacity change from 0 to 1764 [ 154.201860][ T6969] ISOFS: Unable to identify CD-ROM format. [ 154.257386][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.432336][ T6988] loop5: detected capacity change from 0 to 512 [ 154.452322][ T6978] loop3: detected capacity change from 0 to 8192 [ 154.461736][ T6988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.490494][ T6988] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.1045: orphan file block 0: bad magic [ 154.502155][ T6988] loop5: lost filesystem error report for type 5 error -117 [ 154.508498][ T6988] EXT4-fs (loop5): mount failed [ 154.515948][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 154.515975][ C1] EXT4-fs (loop5): initial error at time 1774714952: ext4_init_orphan_info:618 [ 154.515997][ C1] EXT4-fs (loop5): last error at time 1774714952: ext4_init_orphan_info:618 [ 154.590085][ T6996] xt_hashlimit: overflow, rate too high: 0 [ 154.730943][ T7009] syzkaller0: entered promiscuous mode [ 154.741331][ T7009] syzkaller0: entered allmulticast mode [ 154.818774][ T7022] lo speed is unknown, defaulting to 1000 [ 155.109420][ T7035] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1061'. [ 155.141278][ T7035] netlink: 3074 bytes leftover after parsing attributes in process `syz.5.1061'. [ 155.194494][ T7038] capability: warning: `syz.6.1063' uses 32-bit capabilities (legacy support in use) [ 155.489096][ T7056] syz_tun: entered allmulticast mode [ 155.606016][ T7059] loop5: detected capacity change from 0 to 164 [ 155.654974][ T7058] loop6: detected capacity change from 0 to 1764 [ 156.176043][ T7069] netlink: 'syz.1.1074': attribute type 4 has an invalid length. [ 156.513991][ T7059] rock: directory entry would overflow storage [ 156.520570][ T7059] rock: sig=0x66, size=4, remaining=3 [ 156.539758][ T7059] rock: directory entry would overflow storage [ 156.546936][ T7059] rock: sig=0x66, size=4, remaining=3 [ 156.554522][ T7059] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 156.563336][ T7059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.578915][ T7059] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1067'. [ 157.390780][ T7058] ISOFS: Unable to identify CD-ROM format. [ 157.900543][ T7111] loop3: detected capacity change from 0 to 1764 [ 157.915647][ T7111] ISOFS: Unable to identify CD-ROM format. [ 157.955267][ T7113] loop6: detected capacity change from 0 to 164 [ 157.980413][ T7113] rock: directory entry would overflow storage [ 157.986949][ T7113] rock: sig=0x66, size=4, remaining=3 [ 158.002002][ T7113] rock: directory entry would overflow storage [ 158.008743][ T7113] rock: sig=0x66, size=4, remaining=3 [ 158.017785][ T7113] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.027857][ T7113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.040421][ T7113] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1080'. [ 158.464310][ T7118] loop5: detected capacity change from 0 to 512 [ 158.530123][ T7118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.637017][ T7118] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.1082: orphan file block 0: bad magic [ 158.679036][ T7118] loop5: lost filesystem error report for type 5 error -117 [ 158.679288][ T7118] EXT4-fs (loop5): mount failed [ 158.686703][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 158.686721][ C1] EXT4-fs (loop5): initial error at time 1774714956: ext4_init_orphan_info:618 [ 158.686765][ C1] EXT4-fs (loop5): last error at time 1774714956: ext4_init_orphan_info:618 [ 158.897746][ T7128] loop3: detected capacity change from 0 to 512 [ 158.976196][ T7128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.063373][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.357218][ T7135] lo speed is unknown, defaulting to 1000 [ 159.496650][ T7138] loop6: detected capacity change from 0 to 1764 [ 159.528639][ T7138] ISOFS: Unable to identify CD-ROM format. [ 159.555857][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1091'. [ 159.679385][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 159.679403][ T28] audit: type=1400 audit(1774714957.475:962): avc: denied { accept } for pid=7145 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.819167][ T28] audit: type=1400 audit(1774714957.615:963): avc: denied { create } for pid=7148 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.867396][ T28] audit: type=1400 audit(1774714957.635:964): avc: denied { write } for pid=7148 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.892355][ T28] audit: type=1400 audit(1774714957.645:965): avc: denied { read } for pid=7148 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.396469][ T28] audit: type=1400 audit(1774714958.195:966): avc: denied { listen } for pid=7163 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.399056][ T7164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7164 comm=syz.2.1097 [ 160.842240][ T7175] loop5: detected capacity change from 0 to 164 [ 160.979900][ T7175] rock: directory entry would overflow storage [ 160.986894][ T7175] rock: sig=0x66, size=4, remaining=3 [ 161.002768][ T7175] rock: directory entry would overflow storage [ 161.009367][ T7175] rock: sig=0x66, size=4, remaining=3 [ 161.032906][ T7175] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.042853][ T7175] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.055128][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1099'. [ 161.138823][ T7177] loop3: detected capacity change from 0 to 1024 [ 161.215916][ T7177] EXT4-fs: inline encryption not supported [ 161.374648][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.504279][ T28] audit: type=1400 audit(1774714959.295:967): avc: denied { create } for pid=7181 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.612795][ T28] audit: type=1400 audit(1774714959.295:968): avc: denied { getopt } for pid=7181 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.728065][ T28] audit: type=1400 audit(1774714959.325:969): avc: denied { create } for pid=7176 comm="syz.3.1100" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.775202][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.806637][ T7186] lo speed is unknown, defaulting to 1000 [ 162.300914][ T28] audit: type=1400 audit(1774714959.335:970): avc: denied { write } for pid=7176 comm="syz.3.1100" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.323101][ T28] audit: type=1400 audit(1774714959.345:971): avc: denied { watch watch_reads } for pid=7176 comm="syz.3.1100" path="/230/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.437654][ T7190] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.473416][ T7190] bond5: (slave lo): Enslaving as an active interface with an up link [ 162.511612][ T7190] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 162.591590][ T35] lo speed is unknown, defaulting to 1000 [ 162.597455][ T23] lo speed is unknown, defaulting to 1000 [ 162.603241][ T23] syz0: Port: 1 Link ACTIVE [ 162.671256][ T7198] netlink: 'syz.1.1107': attribute type 21 has an invalid length. [ 162.730242][ T7202] xt_hashlimit: overflow, rate too high: 0 [ 163.016436][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1112'. [ 163.070235][ T7210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.077510][ T7210] IPv6: NLM_F_CREATE should be set when creating new route [ 163.135966][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1114'. [ 163.136542][ T7213] loop3: detected capacity change from 0 to 1764 [ 163.146733][ T7215] loop6: detected capacity change from 0 to 128 [ 163.161991][ T7213] ISOFS: Unable to identify CD-ROM format. [ 163.311190][ T7219] syz.6.1114: attempt to access beyond end of device [ 163.311190][ T7219] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 163.418700][ T7221] syz.6.1114: attempt to access beyond end of device [ 163.418700][ T7221] loop6: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 163.481656][ T7221] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 163.508519][ T7219] syz.6.1114: attempt to access beyond end of device [ 163.508519][ T7219] loop6: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 163.537274][ T7219] syz.6.1114: attempt to access beyond end of device [ 163.537274][ T7219] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 163.551242][ T7219] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 163.644376][ T7223] loop5: detected capacity change from 0 to 1764 [ 163.663160][ T7223] ISOFS: Unable to identify CD-ROM format. [ 163.816166][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'. [ 164.230747][ T7234] lo speed is unknown, defaulting to 1000 [ 164.758228][ T28] kauditd_printk_skb: 1275 callbacks suppressed [ 164.758325][ T28] audit: type=1326 audit(1774714962.005:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f061d32db99 code=0x7ffc0000 [ 164.881779][ T28] audit: type=1326 audit(1774714962.665:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f061d386597 code=0x7ffc0000 [ 164.941658][ T7238] loop3: detected capacity change from 0 to 1764 [ 164.969779][ T7238] ISOFS: Unable to identify CD-ROM format. [ 165.045809][ T28] audit: type=1326 audit(1774714962.665:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f061d32db99 code=0x7ffc0000 [ 165.167843][ T28] audit: type=1326 audit(1774714962.665:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f061d386597 code=0x7ffc0000 [ 165.250189][ T28] audit: type=1326 audit(1774714962.665:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f061d32db99 code=0x7ffc0000 [ 165.331569][ T28] audit: type=1326 audit(1774714962.665:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f061d386597 code=0x7ffc0000 [ 165.390819][ T7246] lo speed is unknown, defaulting to 1000 [ 165.427191][ T28] audit: type=1326 audit(1774714962.665:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f061d32db99 code=0x7ffc0000 [ 165.476898][ T28] audit: type=1326 audit(1774714962.665:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f061d386597 code=0x7ffc0000 [ 165.500461][ T28] audit: type=1326 audit(1774714962.665:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f061d32db99 code=0x7ffc0000 [ 165.551935][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 165.571096][ T28] audit: type=1326 audit(1774714962.665:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f061d386597 code=0x7ffc0000 [ 165.814322][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 165.879510][ T7273] siw: device registration error -23 [ 166.323370][ T7283] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 166.335496][ T7283] bond6 (unregistering): Released all slaves [ 166.521303][ T7290] loop6: detected capacity change from 0 to 164 [ 166.549668][ T7290] rock: directory entry would overflow storage [ 166.556360][ T7290] rock: sig=0x66, size=4, remaining=3 [ 166.571300][ T7290] rock: directory entry would overflow storage [ 166.577861][ T7290] rock: sig=0x66, size=4, remaining=3 [ 166.586261][ T7290] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.595594][ T7290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.608031][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1133'. [ 166.812007][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.824491][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.194944][ T7294] program syz.5.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.403780][ T7300] netlink: 'syz.1.1137': attribute type 21 has an invalid length. [ 167.437410][ T7300] netlink: 'syz.1.1137': attribute type 6 has an invalid length. [ 167.466841][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1137'. [ 167.555411][ T7307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.609369][ T7309] xt_hashlimit: overflow, rate too high: 0 [ 167.644823][ T7309] loop5: detected capacity change from 0 to 1024 [ 167.787036][ T7309] EXT4-fs: Ignoring removed nobh option [ 167.811303][ T7309] EXT4-fs: Ignoring removed bh option [ 168.049708][ T7309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.427729][ T7320] loop6: detected capacity change from 0 to 512 [ 168.452036][ T7309] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.673708][ T7320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.789584][ T7320] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.882950][ T7327] loop5: detected capacity change from 0 to 1024 [ 168.991410][ T7327] EXT4-fs: inline encryption not supported [ 169.070062][ T7327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.084006][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.265318][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.566584][ T7338] loop3: detected capacity change from 0 to 1764 [ 169.601688][ T7338] ISOFS: Unable to identify CD-ROM format. [ 169.686415][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 169.793511][ T7342] bond4: down delay (12424) is not a multiple of miimon (100), value rounded to 12400 ms [ 169.941277][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 170.572975][ T7362] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 170.776016][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 170.793370][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 170.793445][ T28] audit: type=1400 audit(1774714968.505:2325): avc: denied { name_bind } for pid=7373 comm="syz.3.1159" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 170.893211][ T28] audit: type=1400 audit(1774714968.575:2326): avc: denied { setopt } for pid=7373 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.975423][ T28] audit: type=1400 audit(1774714968.775:2327): avc: denied { read } for pid=7382 comm="syz.5.1161" path="socket:[18049]" dev="sockfs" ino=18049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.466925][ T28] audit: type=1400 audit(1774714969.265:2328): avc: denied { remount } for pid=7392 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.489663][ T7360] siw: device registration error -23 [ 171.665068][ T7403] loop3: detected capacity change from 0 to 512 [ 171.752538][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.766747][ T7403] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.219513][ T7436] No such timeout policy "syz0" [ 172.259978][ T7439] loop6: detected capacity change from 0 to 512 [ 172.352489][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'. [ 172.375482][ T7439] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1177: inode has both inline data and extents flags [ 172.440537][ T7442] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 172.466669][ T7442] bond4 (unregistering): Released all slaves [ 172.535057][ T7443] loop5: detected capacity change from 0 to 512 [ 172.544936][ T7443] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.558328][ T7439] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.559062][ T7439] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1177: couldn't read orphan inode 15 (err -117) [ 172.568247][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 172.568286][ C0] EXT4-fs (loop6): initial error at time 1774714970: ext4_orphan_get:1391: inode 15 [ 172.568323][ C0] EXT4-fs (loop6): last error at time 1774714970: ext4_orphan_get:1391: inode 15 [ 172.641435][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.672571][ T7443] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.1178: orphan file block 0: bad magic [ 172.686291][ T7439] loop6: lost filesystem error report for type 5 error -117 [ 172.687386][ T7443] loop5: lost filesystem error report for type 5 error -117 [ 172.696453][ T7439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.718519][ T7443] EXT4-fs (loop5): mount failed [ 172.723467][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 172.723489][ C0] EXT4-fs (loop5): initial error at time 1774714970: ext4_init_orphan_info:618 [ 172.723514][ C0] EXT4-fs (loop5): last error at time 1774714970: ext4_init_orphan_info:618 [ 172.769884][ T28] audit: type=1400 audit(1774714970.565:2329): avc: denied { setattr } for pid=7438 comm="syz.6.1177" path="/60/file0" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.847117][ T28] audit: type=1400 audit(1774714970.565:2330): avc: denied { ioctl } for pid=7438 comm="syz.6.1177" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.334972][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.383962][ T28] audit: type=1400 audit(1774714971.165:2331): avc: denied { connect } for pid=7460 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.468089][ T28] audit: type=1400 audit(1774714971.215:2332): avc: denied { read } for pid=7462 comm="syz.6.1183" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.776377][ T7461] loop5: detected capacity change from 0 to 2048 [ 173.980458][ T7461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.043010][ T28] audit: type=1400 audit(1774714971.215:2333): avc: denied { open } for pid=7462 comm="syz.6.1183" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.181878][ T7461] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.193685][ T28] audit: type=1400 audit(1774714971.215:2334): avc: denied { ioctl } for pid=7462 comm="syz.6.1183" path="socket:[18179]" dev="sockfs" ino=18179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.259876][ T7461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1184: bg 0: block 345: padding at end of block bitmap is not set [ 174.307411][ T7461] EXT4-fs (loop5): Remounting filesystem read-only [ 174.361672][ T7488] loop6: detected capacity change from 0 to 1764 [ 174.379013][ T7488] ISOFS: Unable to identify CD-ROM format. [ 174.822050][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.053433][ T7509] loop5: detected capacity change from 0 to 512 [ 175.087309][ T7509] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 175.095651][ T7509] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.103940][ T7509] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.171714][ T7509] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 175.207813][ T7512] loop3: detected capacity change from 0 to 164 [ 175.320458][ T7512] rock: directory entry would overflow storage [ 175.327108][ T7512] rock: sig=0x66, size=4, remaining=3 [ 175.343578][ T7512] rock: directory entry would overflow storage [ 175.350280][ T7512] rock: sig=0x66, size=4, remaining=3 [ 175.359911][ T7512] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 175.369264][ T7512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.382055][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'. [ 175.507222][ T7512] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 175.536559][ T7509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1196: bg 0: block 15: invalid block bitmap [ 175.576144][ T7512] bond6 (unregistering): Released all slaves [ 175.687277][ T7509] loop5: lost filesystem error report for type 5 error -117 [ 175.688697][ T7509] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 175.696136][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 175.696178][ C0] EXT4-fs (loop5): initial error at time 1774714973: ext4_validate_block_bitmap:432 [ 175.696224][ C0] EXT4-fs (loop5): last error at time 1774714973: ext4_validate_block_bitmap:432 [ 175.946274][ T7509] loop5: lost filesystem error report for type 5 error -117 [ 175.946565][ T7509] EXT4-fs (loop5): 1 truncate cleaned up [ 176.075534][ T7509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.246779][ T7509] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1196: corrupted xattr block 31: invalid header [ 176.302467][ T7509] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 176.314101][ T7531] loop6: detected capacity change from 0 to 1764 [ 176.345517][ T7531] ISOFS: Unable to identify CD-ROM format. [ 176.364404][ T7509] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1196: corrupted xattr block 31: invalid header [ 176.422042][ T7532] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1196: corrupted xattr block 31: invalid header [ 176.486551][ T7532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 176.519772][ T7509] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 176.561393][ T7532] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1196: bad symlink. [ 176.601447][ T7509] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1196: bad symlink. [ 176.682001][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.694462][ T7539] loop3: detected capacity change from 0 to 1764 [ 176.718755][ T7539] ISOFS: Unable to identify CD-ROM format. [ 176.786406][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 176.786439][ T28] audit: type=1400 audit(1774714974.585:2337): avc: denied { mounton } for pid=7544 comm="syz.3.1210" path="/246/file1" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.799837][ T7547] FAULT_INJECTION: forcing a failure. [ 176.799837][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 176.848783][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.5.1209 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.848823][ T7547] Tainted: [W]=WARN [ 176.848829][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.848843][ T7547] Call Trace: [ 176.848851][ T7547] [ 176.848859][ T7547] __dump_stack+0x1d/0x30 [ 176.848983][ T7547] dump_stack_lvl+0x95/0xd0 [ 176.849009][ T7547] dump_stack+0x15/0x1b [ 176.849072][ T7547] should_fail_ex+0x263/0x280 [ 176.849102][ T7547] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 176.849209][ T7547] should_failslab+0x8c/0xb0 [ 176.849230][ T7547] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 176.849252][ T7547] ? shmem_alloc_inode+0x34/0x50 [ 176.849337][ T7547] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 176.849402][ T7547] shmem_alloc_inode+0x34/0x50 [ 176.849483][ T7547] alloc_inode+0x40/0x170 [ 176.849505][ T7547] new_inode+0x1d/0xe0 [ 176.849527][ T7547] shmem_get_inode+0x246/0x750 [ 176.849577][ T7547] shmem_mknod+0x44/0x170 [ 176.849681][ T7547] vfs_mknod+0x34c/0x470 [ 176.849705][ T7547] filename_mknodat+0x279/0x450 [ 176.849730][ T7547] __se_sys_mknodat+0x38/0xf0 [ 176.849813][ T7547] __x64_sys_mknodat+0x55/0x70 [ 176.849833][ T7547] x64_sys_call+0x312/0x3020 [ 176.849859][ T7547] do_syscall_64+0x12c/0x370 [ 176.849909][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.849934][ T7547] RIP: 0033:0x7f46699dc819 [ 176.849949][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.849978][ T7547] RSP: 002b:00007f4668437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 176.850038][ T7547] RAX: ffffffffffffffda RBX: 00007f4669c55fa0 RCX: 00007f46699dc819 [ 176.850052][ T7547] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 176.850121][ T7547] RBP: 00007f4668437090 R08: 0000000000000000 R09: 0000000000000000 [ 176.850136][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.850151][ T7547] R13: 00007f4669c56038 R14: 00007f4669c55fa0 R15: 00007ffcd84d78d8 [ 176.850189][ T7547] [ 177.131637][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 177.352378][ T7562] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9 sclass=netlink_xfrm_socket pid=7562 comm=syz.3.1213 [ 177.367837][ T7564] loop5: detected capacity change from 0 to 512 [ 177.493701][ T28] audit: type=1326 audit(1774714975.295:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.499621][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1216'. [ 177.552172][ T7577] xt_hashlimit: size too large, truncated to 1048576 [ 177.581927][ T28] audit: type=1326 audit(1774714975.295:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.611678][ T28] audit: type=1326 audit(1774714975.295:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.653527][ T28] audit: type=1326 audit(1774714975.295:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.699815][ T28] audit: type=1326 audit(1774714975.295:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.749147][ T28] audit: type=1326 audit(1774714975.295:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 177.975563][ T7588] loop6: detected capacity change from 0 to 512 [ 178.126786][ T7588] EXT4-fs (loop6): 1 orphan inode deleted [ 178.138640][ T7588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.159718][ T7588] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.818647][ T1273] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.818800][ T28] audit: type=1326 audit(1774714975.295:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 178.851666][ T1273] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 178.851675][ T28] audit: type=1326 audit(1774714975.295:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.5.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 179.015191][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 179.041981][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 179.542352][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.681179][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 179.749836][ T7614] loop3: detected capacity change from 0 to 1764 [ 179.832903][ T7621] FAULT_INJECTION: forcing a failure. [ 179.832903][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.851592][ T7614] ISOFS: Unable to identify CD-ROM format. [ 179.921680][ T7621] CPU: 1 UID: 0 PID: 7621 Comm: syz.6.1233 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.921717][ T7621] Tainted: [W]=WARN [ 179.921789][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.921802][ T7621] Call Trace: [ 179.921808][ T7621] [ 179.921817][ T7621] __dump_stack+0x1d/0x30 [ 179.921851][ T7621] dump_stack_lvl+0x95/0xd0 [ 179.921876][ T7621] dump_stack+0x15/0x1b [ 179.921897][ T7621] should_fail_ex+0x263/0x280 [ 179.921957][ T7621] should_fail+0xb/0x20 [ 179.921982][ T7621] should_fail_usercopy+0x1a/0x20 [ 179.922057][ T7621] _copy_from_iter+0xcf/0xea0 [ 179.922091][ T7621] ? __alloc_skb+0x4f6/0x690 [ 179.922119][ T7621] ? __alloc_skb+0x200/0x690 [ 179.922189][ T7621] netlink_sendmsg+0x4ae/0x6f0 [ 179.922258][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.922288][ T7621] ____sys_sendmsg+0x563/0x5b0 [ 179.922361][ T7621] ___sys_sendmsg+0x195/0x1e0 [ 179.922421][ T7621] __x64_sys_sendmsg+0xd4/0x160 [ 179.922461][ T7621] x64_sys_call+0x194c/0x3020 [ 179.922492][ T7621] do_syscall_64+0x12c/0x370 [ 179.922522][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.922607][ T7621] RIP: 0033:0x7f061d38c819 [ 179.922624][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.922705][ T7621] RSP: 002b:00007f061bde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.922786][ T7621] RAX: ffffffffffffffda RBX: 00007f061d605fa0 RCX: 00007f061d38c819 [ 179.922802][ T7621] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 179.922818][ T7621] RBP: 00007f061bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.922832][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.922921][ T7621] R13: 00007f061d606038 R14: 00007f061d605fa0 R15: 00007ffc1373ae08 [ 179.922943][ T7621] [ 181.203703][ T7644] loop3: detected capacity change from 0 to 128 [ 182.117922][ T7665] loop5: detected capacity change from 0 to 1764 [ 182.134549][ T7665] ISOFS: Unable to identify CD-ROM format. [ 182.252277][ T7672] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 182.329212][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1247'. [ 182.406748][ T7681] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.446031][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.490231][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.514052][ T7684] loop5: detected capacity change from 0 to 512 [ 182.524848][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 182.524884][ T28] audit: type=1400 audit(1774714980.325:2352): avc: denied { create } for pid=7685 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.529662][ T7684] EXT4-fs: Ignoring removed bh option [ 182.541670][ T28] audit: type=1400 audit(1774714980.325:2353): avc: denied { listen } for pid=7685 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.671792][ T7684] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 182.683557][ T7684] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #4: comm syz.5.1251: iget: special inode unallocated [ 182.718407][ T7684] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 182.718644][ T7684] EXT4-fs (loop5): no journal found [ 182.727762][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 182.727790][ C0] EXT4-fs (loop5): initial error at time 1774714980: ext4_get_journal_inode:5863: inode 4 [ 182.727835][ C0] EXT4-fs (loop5): last error at time 1774714980: ext4_get_journal_inode:5863: inode 4 [ 182.795353][ T7684] EXT4-fs (loop5): can't get journal size [ 182.806595][ T7684] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 182.841853][ T7684] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #4: comm syz.5.1251: iget: special inode unallocated [ 182.854888][ T7684] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 182.866443][ T7684] EXT4-fs (loop5): failed to initialize system zone (-117) [ 182.886020][ T7684] EXT4-fs (loop5): mount failed [ 183.265915][ T7711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.363978][ T28] audit: type=1400 audit(1774714981.165:2354): avc: denied { bind } for pid=7710 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.778848][ T28] audit: type=1400 audit(1774714981.195:2355): avc: denied { name_bind } for pid=7710 comm="syz.2.1260" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 183.782728][ T7717] loop5: detected capacity change from 0 to 1764 [ 183.800134][ T28] audit: type=1400 audit(1774714981.195:2356): avc: denied { node_bind } for pid=7710 comm="syz.2.1260" saddr=172.20.20.55 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 183.890928][ T7717] ISOFS: Unable to identify CD-ROM format. [ 183.942702][ T28] audit: type=1400 audit(1774714981.205:2357): avc: denied { setopt } for pid=7710 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.375446][ T7728] No such timeout policy "syz0" [ 184.677084][ T7736] xt_hashlimit: overflow, rate too high: 0 [ 185.779459][ T28] audit: type=1400 audit(1774714983.575:2358): avc: denied { mount } for pid=7756 comm="syz.5.1274" name="/" dev="ramfs" ino=19781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 185.928359][ T227] IPVS: starting estimator thread 0... [ 186.096164][ T7760] IPVS: using max 2304 ests per chain, 115200 per kthread [ 187.210131][ T7774] siw: device registration error -23 [ 187.230213][ T7774] lo speed is unknown, defaulting to 1000 [ 187.315266][ T28] audit: type=1400 audit(1774714985.105:2359): avc: denied { watch_reads } for pid=7779 comm="syz.2.1280" path="/256/file0" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.381817][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 187.760357][ T28] audit: type=1400 audit(1774714985.555:2360): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.871568][ T28] audit: type=1400 audit(1774714985.665:2361): avc: denied { ioctl } for pid=7803 comm="syz.3.1288" path="socket:[19015]" dev="sockfs" ino=19015 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.908930][ T7807] loop3: detected capacity change from 0 to 1024 [ 187.937787][ T7807] EXT4-fs: inline encryption not supported [ 187.994099][ T7807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.351140][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.802876][ T7838] loop5: detected capacity change from 0 to 256 [ 188.884977][ T28] audit: type=1400 audit(1774714986.685:2362): avc: denied { accept } for pid=7837 comm="syz.3.1300" lport=48047 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.942004][ T28] audit: type=1400 audit(1774714986.685:2363): avc: denied { setopt } for pid=7837 comm="syz.3.1300" lport=48047 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 188.966424][ T28] audit: type=1400 audit(1774714986.685:2364): avc: denied { associate } for pid=7837 comm="syz.3.1300" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.003555][ T7838] FAT-fs (loop5): Directory bread(block 64) failed [ 189.010471][ T7838] FAT-fs (loop5): Directory bread(block 65) failed [ 189.017276][ T7838] FAT-fs (loop5): Directory bread(block 66) failed [ 189.023953][ T7838] FAT-fs (loop5): Directory bread(block 67) failed [ 189.030674][ T7838] FAT-fs (loop5): Directory bread(block 68) failed [ 189.037389][ T7838] FAT-fs (loop5): Directory bread(block 69) failed [ 189.070629][ T7850] loop6: detected capacity change from 0 to 164 [ 189.109131][ T7850] rock: directory entry would overflow storage [ 189.115867][ T7850] rock: sig=0x66, size=4, remaining=3 [ 189.135469][ T7850] rock: directory entry would overflow storage [ 189.142403][ T7850] rock: sig=0x66, size=4, remaining=3 [ 189.152024][ T7850] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 189.161290][ T7850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.176270][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1301'. [ 189.261298][ T7850] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 189.301003][ T7850] bond2 (unregistering): Released all slaves [ 189.377801][ T7838] FAT-fs (loop5): Directory bread(block 70) failed [ 189.485561][ T7838] FAT-fs (loop5): Directory bread(block 71) failed [ 189.525848][ T7838] FAT-fs (loop5): Directory bread(block 72) failed [ 189.568090][ T7838] FAT-fs (loop5): Directory bread(block 73) failed [ 189.913363][ T28] audit: type=1400 audit(1774714987.715:2365): avc: denied { ioctl } for pid=7836 comm="syz.5.1299" path="socket:[19966]" dev="sockfs" ino=19966 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.995885][ T1273] kworker/u8:7: attempt to access beyond end of device [ 189.995885][ T1273] loop5: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 190.018020][ T7867] loop3: detected capacity change from 0 to 512 [ 190.034965][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.034965][ T1273] loop5: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 190.059567][ T7867] ext2: Unknown parameter 'dont_measure' [ 190.123234][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.123234][ T1273] loop5: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 190.177687][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.177687][ T1273] loop5: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 190.238803][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.238803][ T1273] loop5: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 190.296218][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.296218][ T1273] loop5: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 190.353245][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.353245][ T1273] loop5: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 190.404987][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.404987][ T1273] loop5: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 190.465510][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.465510][ T1273] loop5: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 190.526439][ T1273] kworker/u8:7: attempt to access beyond end of device [ 190.526439][ T1273] loop5: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 190.607481][ T7894] xt_hashlimit: overflow, rate too high: 0 [ 190.626329][ T7890] loop3: detected capacity change from 0 to 1764 [ 190.693338][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.702010][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.722506][ T7890] ISOFS: Unable to identify CD-ROM format. [ 190.800790][ T7899] xt_hashlimit: overflow, rate too high: 0 [ 190.829455][ T7899] loop3: detected capacity change from 0 to 1024 [ 190.844922][ T7899] EXT4-fs: Ignoring removed nobh option [ 190.865100][ T7899] EXT4-fs: Ignoring removed bh option [ 190.886377][ T7899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.487442][ T7927] loop6: detected capacity change from 0 to 128 [ 191.507708][ T7927] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.538190][ T7927] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.658084][ T28] audit: type=1400 audit(1774714989.455:2366): avc: denied { read write open } for pid=7924 comm="syz.6.1326" path="/82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.756318][ T5808] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.767163][ T7936] loop5: detected capacity change from 0 to 128 [ 191.774984][ T28] audit: type=1400 audit(1774714989.515:2367): avc: denied { name_connect } for pid=7933 comm="syz.5.1330" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 191.793076][ T7899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.801975][ T28] audit: type=1400 audit(1774714989.525:2368): avc: denied { append } for pid=7924 comm="syz.6.1326" name="file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.844344][ T28] audit: type=1400 audit(1774714989.565:2369): avc: denied { map } for pid=7933 comm="syz.5.1330" path="socket:[20138]" dev="sockfs" ino=20138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 191.883402][ T7938] loop6: detected capacity change from 0 to 1764 [ 191.894245][ T7938] ISOFS: Unable to identify CD-ROM format. [ 192.765757][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 192.765773][ T28] audit: type=1400 audit(1774714990.565:2371): avc: denied { setopt } for pid=7953 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.832448][ T7947] lo speed is unknown, defaulting to 1000 [ 193.038385][ T7974] loop3: detected capacity change from 0 to 1764 [ 193.060400][ T7977] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 193.071104][ T7974] ISOFS: Unable to identify CD-ROM format. [ 193.078318][ T7977] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1343'. [ 193.083484][ T28] audit: type=1400 audit(1774714990.875:2372): avc: denied { firmware_load } for pid=7972 comm="syz.6.1341" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 193.199700][ T7977] bond0: entered promiscuous mode [ 193.204989][ T7977] bond_slave_0: entered promiscuous mode [ 193.230991][ T7977] bond_slave_1: entered promiscuous mode [ 193.325599][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 193.331672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.382498][ T7975] syz.6.1341 (7975) used greatest stack depth: 8456 bytes left [ 193.439645][ T7987] loop6: detected capacity change from 0 to 2048 [ 193.492228][ T7987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.525941][ T7987] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 193.546220][ T28] audit: type=1400 audit(1774714991.345:2373): avc: denied { write } for pid=7986 comm="syz.6.1345" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.581144][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.689916][ T28] audit: type=1400 audit(1774714991.475:2374): avc: denied { setopt } for pid=7995 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.845943][ T28] audit: type=1400 audit(1774714991.485:2375): avc: denied { connect } for pid=7995 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.104003][ T28] audit: type=1400 audit(1774714991.545:2376): avc: denied { getopt } for pid=7995 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.238855][ T28] audit: type=1400 audit(1774714992.035:2377): avc: denied { create } for pid=8021 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.265546][ T8020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.283120][ T8020] bond0: (slave bond4): Enslaving as a backup interface with a down link [ 194.327892][ T8020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1356'. [ 194.342678][ T8034] FAULT_INJECTION: forcing a failure. [ 194.342678][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.379715][ T8036] program syz.3.1361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.396313][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.5.1359 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.396352][ T8034] Tainted: [W]=WARN [ 194.396360][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.396375][ T8034] Call Trace: [ 194.396383][ T8034] [ 194.396392][ T8034] __dump_stack+0x1d/0x30 [ 194.396438][ T8034] dump_stack_lvl+0x95/0xd0 [ 194.396460][ T8034] dump_stack+0x15/0x1b [ 194.396530][ T8034] should_fail_ex+0x263/0x280 [ 194.396557][ T8034] should_fail+0xb/0x20 [ 194.396581][ T8034] should_fail_usercopy+0x1a/0x20 [ 194.396612][ T8034] _copy_from_iter+0xcf/0xea0 [ 194.396704][ T8034] ? __alloc_skb+0x4f6/0x690 [ 194.396791][ T8034] ? __alloc_skb+0x200/0x690 [ 194.396817][ T8034] netlink_sendmsg+0x4ae/0x6f0 [ 194.396850][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.396909][ T8034] ____sys_sendmsg+0x563/0x5b0 [ 194.396945][ T8034] ___sys_sendmsg+0x195/0x1e0 [ 194.396986][ T8034] __x64_sys_sendmsg+0xd4/0x160 [ 194.397096][ T8034] x64_sys_call+0x194c/0x3020 [ 194.397121][ T8034] do_syscall_64+0x12c/0x370 [ 194.397146][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.397256][ T8034] RIP: 0033:0x7f46699dc819 [ 194.397271][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.397295][ T8034] RSP: 002b:00007f4668437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.397318][ T8034] RAX: ffffffffffffffda RBX: 00007f4669c55fa0 RCX: 00007f46699dc819 [ 194.397382][ T8034] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 194.397398][ T8034] RBP: 00007f4668437090 R08: 0000000000000000 R09: 0000000000000000 [ 194.397412][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.397502][ T8034] R13: 00007f4669c56038 R14: 00007f4669c55fa0 R15: 00007ffcd84d78d8 [ 194.397522][ T8034] [ 194.619254][ T8038] No such timeout policy "syz0" [ 194.800716][ T8064] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 194.832304][ T28] audit: type=1400 audit(1774714992.625:2378): avc: denied { setopt } for pid=8062 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.312508][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 197.323097][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 198.011834][ T8079] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.036030][ T8080] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.355300][ T8092] loop3: detected capacity change from 0 to 1764 [ 198.390223][ T8094] No such timeout policy "syz0" [ 198.443963][ T8092] ISOFS: Unable to identify CD-ROM format. [ 198.455188][ T8094] syz_tun: entered promiscuous mode [ 198.505102][ T8094] syz_tun: left promiscuous mode [ 198.690500][ T8109] loop3: detected capacity change from 0 to 1024 [ 198.711064][ T8109] EXT4-fs: test_dummy_encryption option not supported [ 200.057159][ T8114] loop5: detected capacity change from 0 to 164 [ 201.932908][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'. [ 202.615306][ T8121] loop3: detected capacity change from 0 to 512 [ 202.660068][ T8113] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 202.671335][ T8114] rock: directory entry would overflow storage [ 202.677826][ T8114] rock: sig=0x66, size=4, remaining=3 [ 203.705428][ T8113] bond5 (unregistering): Released all slaves [ 203.783093][ T8121] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 204.708473][ T28] audit: type=1400 audit(1774715002.505:2379): avc: denied { write } for pid=8140 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 204.737717][ T8146] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1392'. [ 204.766509][ T8145] loop3: detected capacity change from 0 to 2048 [ 204.785925][ T8146] hub 8-0:1.0: USB hub found [ 204.790613][ T8146] hub 8-0:1.0: 8 ports detected [ 204.805527][ T8146] netlink: 'syz.5.1392': attribute type 36 has an invalid length. [ 204.817125][ T8146] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 204.827098][ T8146] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 204.907527][ T28] audit: type=1400 audit(1774715002.705:2380): avc: denied { append } for pid=8156 comm="syz.6.1402" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.936850][ T3301] Alternate GPT is invalid, using primary GPT. [ 204.948457][ T3301] loop3: p2 p3 p7 [ 204.953361][ T28] audit: type=1400 audit(1774715002.745:2381): avc: denied { ioctl } for pid=8156 comm="syz.6.1402" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.987392][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1402'. [ 204.997736][ T8157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8157 comm=syz.6.1402 [ 205.014675][ T28] audit: type=1326 audit(1774715002.815:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.089292][ T28] audit: type=1326 audit(1774715002.815:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.154907][ T28] audit: type=1326 audit(1774715002.815:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.189937][ T28] audit: type=1326 audit(1774715002.815:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.241271][ T28] audit: type=1326 audit(1774715002.815:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.283368][ T28] audit: type=1326 audit(1774715002.815:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.355028][ T28] audit: type=1326 audit(1774715002.815:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9895c819 code=0x7ffc0000 [ 205.625000][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 205.636211][ T4877] udevd[4877]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 205.650349][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 205.703459][ T8177] program syz.3.1408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.836252][ T8187] loop5: detected capacity change from 0 to 1764 [ 205.887204][ T8187] ISOFS: Unable to identify CD-ROM format. [ 206.120471][ T8206] loop6: detected capacity change from 0 to 164 [ 206.208567][ T8206] rock: directory entry would overflow storage [ 206.215248][ T8206] rock: sig=0x66, size=4, remaining=3 [ 206.235910][ T8206] rock: directory entry would overflow storage [ 206.242914][ T8206] rock: sig=0x66, size=4, remaining=3 [ 206.251881][ T8206] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 206.261031][ T8206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.275879][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1415'. [ 206.338606][ T8206] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 206.429751][ T8206] bond2 (unregistering): Released all slaves [ 207.005375][ T8222] loop3: detected capacity change from 0 to 256 [ 207.889643][ T8238] FAULT_INJECTION: forcing a failure. [ 207.889643][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 207.965372][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.6.1429 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.965410][ T8238] Tainted: [W]=WARN [ 207.965417][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.965433][ T8238] Call Trace: [ 207.965441][ T8238] [ 207.965449][ T8238] __dump_stack+0x1d/0x30 [ 207.965477][ T8238] dump_stack_lvl+0x95/0xd0 [ 207.965565][ T8238] dump_stack+0x15/0x1b [ 207.965586][ T8238] should_fail_ex+0x263/0x280 [ 207.965617][ T8238] should_failslab+0x8c/0xb0 [ 207.965640][ T8238] kmem_cache_alloc_noprof+0x66/0x400 [ 207.965748][ T8238] ? skb_clone+0x151/0x1f0 [ 207.965781][ T8238] skb_clone+0x151/0x1f0 [ 207.965816][ T8238] __netlink_deliver_tap+0x2c9/0x500 [ 207.965915][ T8238] netlink_unicast+0x66b/0x690 [ 207.966039][ T8238] netlink_sendmsg+0x5c8/0x6f0 [ 207.966079][ T8238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.966117][ T8238] ____sys_sendmsg+0x563/0x5b0 [ 207.966158][ T8238] ___sys_sendmsg+0x195/0x1e0 [ 207.966282][ T8238] __x64_sys_sendmsg+0xd4/0x160 [ 207.966323][ T8238] x64_sys_call+0x194c/0x3020 [ 207.966349][ T8238] do_syscall_64+0x12c/0x370 [ 207.966439][ T8238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.966537][ T8238] RIP: 0033:0x7f061d38c819 [ 207.966552][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.966568][ T8238] RSP: 002b:00007f061bde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.966589][ T8238] RAX: ffffffffffffffda RBX: 00007f061d605fa0 RCX: 00007f061d38c819 [ 207.966603][ T8238] RDX: 0000000004004880 RSI: 0000200000000000 RDI: 000000000000000a [ 207.966670][ T8238] RBP: 00007f061bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.966682][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.966694][ T8238] R13: 00007f061d606038 R14: 00007f061d605fa0 R15: 00007ffc1373ae08 [ 207.966714][ T8238] [ 207.967005][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1429'. [ 208.294709][ T8254] xt_hashlimit: overflow, rate too high: 0 [ 208.422282][ T8259] loop5: detected capacity change from 0 to 512 [ 208.429516][ T8259] EXT4-fs: Ignoring removed nobh option [ 208.435926][ T8259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.447483][ T8259] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.460907][ T8259] EXT4-fs (loop5): 1 truncate cleaned up [ 208.467252][ T8259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.519827][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 208.901920][ T8270] sg_write: data in/out 327652/45 bytes for SCSI command 0x0-- guessing data in; [ 208.901920][ T8270] program syz.6.1433 not setting count and/or reply_len properly [ 209.521299][ T8273] loop3: detected capacity change from 0 to 2048 [ 209.652350][ T8275] veth1: Caught tx_queue_len zero misconfig [ 209.673507][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.803684][ T8284] loop5: detected capacity change from 0 to 1764 [ 209.813015][ T8284] ISOFS: Unable to identify CD-ROM format. [ 209.838052][ T8273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.851280][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 209.851295][ T28] audit: type=1400 audit(1774715007.655:2457): avc: denied { ioctl } for pid=8272 comm="syz.3.1440" path="/289/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.977656][ T8292] program syz.5.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.087872][ T28] audit: type=1400 audit(1774715007.885:2458): avc: denied { setopt } for pid=8293 comm="syz.5.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.472529][ T8305] syz_tun: entered promiscuous mode [ 210.489919][ T8300] No such timeout policy "syz0" [ 210.508329][ T8305] syz_tun: left promiscuous mode [ 210.527802][ T8299] No such timeout policy "syz0" [ 210.695062][ T8313] cgroup: subsys name conflicts with all [ 210.756501][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.948287][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 210.957636][ T8323] tipc: Enabling of bearer <ˆdp:s> rejected, media not registered [ 211.011131][ T8324] bridge0: entered promiscuous mode [ 211.017026][ T8324] macsec1: entered promiscuous mode [ 211.029300][ T8324] lo speed is unknown, defaulting to 1000 [ 211.036316][ T8324] lo speed is unknown, defaulting to 1000 [ 211.042539][ T8324] lo speed is unknown, defaulting to 1000 [ 211.949344][ T8333] loop3: detected capacity change from 0 to 164 [ 211.969349][ T8324] infiniband syU×: set active [ 211.974170][ T3374] lo speed is unknown, defaulting to 1000 [ 211.980203][ T8324] infiniband syU×: added lo [ 212.008437][ T8333] rock: directory entry would overflow storage [ 212.015083][ T8333] rock: sig=0x66, size=4, remaining=3 [ 212.023674][ T8329] rock: directory entry would overflow storage [ 212.041773][ T8329] rock: sig=0x66, size=4, remaining=3 [ 212.060492][ T8324] RDS/IB: syU×: added [ 212.068605][ T8324] smc: adding ib device syU× with port count 1 [ 212.075335][ T8324] smc: ib device syU× port 1 has no pnetid [ 212.081619][ T227] lo speed is unknown, defaulting to 1000 [ 212.098124][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 212.109180][ T8324] lo speed is unknown, defaulting to 1000 [ 212.161586][ T8329] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 212.318520][ T8329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.341181][ T8324] lo speed is unknown, defaulting to 1000 [ 212.721195][ T8340] loop5: detected capacity change from 0 to 164 [ 212.744093][ T8340] rock: directory entry would overflow storage [ 212.750670][ T8340] rock: sig=0x66, size=4, remaining=3 [ 212.768446][ T8340] rock: directory entry would overflow storage [ 212.777225][ T8340] rock: sig=0x66, size=4, remaining=3 [ 212.786057][ T8340] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 212.822896][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 212.855152][ T8341] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 212.883212][ T8340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.968838][ T8341] bond1 (unregistering): Released all slaves [ 213.347087][ T8324] lo speed is unknown, defaulting to 1000 [ 213.426765][ T8324] lo speed is unknown, defaulting to 1000 [ 213.557951][ T8324] lo speed is unknown, defaulting to 1000 [ 213.772872][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1469'. [ 214.277573][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 215.243625][ T8383] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 215.410569][ T8388] loop5: detected capacity change from 0 to 164 [ 216.072405][ T8383] bond5 (unregistering): Released all slaves [ 216.750542][ T8388] rock: directory entry would overflow storage [ 216.757072][ T8388] rock: sig=0x66, size=4, remaining=3 [ 216.770487][ T8386] rock: directory entry would overflow storage [ 216.776778][ T8386] rock: sig=0x66, size=4, remaining=3 [ 216.783050][ T8386] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 216.790601][ T8386] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.800528][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 216.939041][ T8395] xt_hashlimit: overflow, rate too high: 0 [ 217.029324][ T8397] FAULT_INJECTION: forcing a failure. [ 217.029324][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.057237][ T8395] loop6: detected capacity change from 0 to 1024 [ 217.073187][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 217.085808][ T8395] EXT4-fs: Ignoring removed nobh option [ 217.092364][ T8395] EXT4-fs: Ignoring removed bh option [ 217.133062][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.3.1478 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.133162][ T8397] Tainted: [W]=WARN [ 217.133170][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.133184][ T8397] Call Trace: [ 217.133191][ T8397] [ 217.133199][ T8397] __dump_stack+0x1d/0x30 [ 217.133230][ T8397] dump_stack_lvl+0x95/0xd0 [ 217.133289][ T8397] dump_stack+0x15/0x1b [ 217.133314][ T8397] should_fail_ex+0x263/0x280 [ 217.133410][ T8397] should_fail+0xb/0x20 [ 217.133470][ T8397] should_fail_usercopy+0x1a/0x20 [ 217.133502][ T8397] _copy_to_user+0x20/0xa0 [ 217.133553][ T8397] simple_read_from_buffer+0xb5/0x130 [ 217.133581][ T8397] proc_fail_nth_read+0x10e/0x150 [ 217.133623][ T8397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.133656][ T8397] vfs_read+0x1ab/0x7f0 [ 217.133692][ T8397] ? __rcu_read_unlock+0x4e/0x70 [ 217.133796][ T8397] ? __fget_files+0x184/0x1c0 [ 217.133824][ T8397] ? mutex_lock+0x57/0x90 [ 217.133858][ T8397] ksys_read+0xdc/0x1a0 [ 217.133880][ T8397] __x64_sys_read+0x40/0x50 [ 217.133919][ T8397] x64_sys_call+0x2886/0x3020 [ 217.133950][ T8397] do_syscall_64+0x12c/0x370 [ 217.133980][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.134047][ T8397] RIP: 0033:0x7f9f9f55d04e [ 217.134065][ T8397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.134165][ T8397] RSP: 002b:00007f9f9dfeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.134188][ T8397] RAX: ffffffffffffffda RBX: 00007f9f9dfef6c0 RCX: 00007f9f9f55d04e [ 217.134204][ T8397] RDX: 000000000000000f RSI: 00007f9f9dfef0a0 RDI: 0000000000000001 [ 217.134220][ T8397] RBP: 00007f9f9dfef090 R08: 0000000000000000 R09: 0000000000000000 [ 217.134235][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.134271][ T8397] R13: 00007f9f9f816038 R14: 00007f9f9f815fa0 R15: 00007ffce0b8eed8 [ 217.134293][ T8397] [ 218.155452][ T8395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.573528][ T8421] loop3: detected capacity change from 0 to 1764 [ 218.620610][ T8421] ISOFS: Unable to identify CD-ROM format. [ 218.704021][ T8395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.989850][ T8437] loop6: detected capacity change from 0 to 164 [ 219.016683][ T8437] rock: directory entry would overflow storage [ 219.026955][ T8437] rock: sig=0x66, size=4, remaining=3 [ 219.047403][ T8437] rock: directory entry would overflow storage [ 219.053936][ T8437] rock: sig=0x66, size=4, remaining=3 [ 219.101361][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1490'. [ 219.125397][ T8437] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 219.135197][ T8437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.982345][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1492'. [ 221.200556][ T8453] No such timeout policy "syz0" [ 221.514190][ T8467] lo speed is unknown, defaulting to 1000 [ 221.521630][ T8467] lo speed is unknown, defaulting to 1000 [ 221.863638][ T8466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1497'. [ 222.281526][ T8477] loop3: detected capacity change from 0 to 1764 [ 222.332571][ T8477] ISOFS: Unable to identify CD-ROM format. [ 222.402451][ T28] audit: type=1400 audit(1774715020.205:2459): avc: denied { accept } for pid=8478 comm="syz.5.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.501608][ T28] audit: type=1400 audit(1774715020.265:2460): avc: denied { write } for pid=8478 comm="syz.5.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.702834][ T8488] loop3: detected capacity change from 0 to 164 [ 222.768961][ T8488] rock: directory entry would overflow storage [ 222.775782][ T8488] rock: sig=0x66, size=4, remaining=3 [ 222.933828][ T8489] No such timeout policy "syz0" [ 223.572509][ T8475] syz_tun: entered promiscuous mode [ 223.609310][ T8475] syz_tun: left promiscuous mode [ 223.885003][ T8491] netlink: 'syz.6.1506': attribute type 1 has an invalid length. [ 224.057298][ T8495] bond2: (slave geneve2): making interface the new active one [ 224.123687][ T8495] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 224.203753][ T1273] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.245232][ T1273] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.293669][ T1273] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.321807][ T1273] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.721221][ T8506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.197193][ T8513] loop3: detected capacity change from 0 to 512 [ 226.289042][ T8513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.341648][ T8513] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.532843][ T8522] rdma_rxe: rxe_newlink: failed to add lo [ 227.082061][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.168686][ T8533] loop3: detected capacity change from 0 to 256 [ 227.189925][ T8533] vfat: Unknown parameter '' [ 227.328438][ T28] audit: type=1326 audit(1774715025.125:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.371587][ T28] audit: type=1326 audit(1774715025.125:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.420189][ T8537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8537 comm=syz.5.1520 [ 227.421580][ T28] audit: type=1326 audit(1774715025.125:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.457138][ T28] audit: type=1326 audit(1774715025.125:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.482198][ T28] audit: type=1326 audit(1774715025.125:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f466999d04e code=0x7ffc0000 [ 227.506034][ T28] audit: type=1326 audit(1774715025.125:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.601750][ T28] audit: type=1326 audit(1774715025.165:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.633462][ T28] audit: type=1326 audit(1774715025.255:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.671701][ T28] audit: type=1326 audit(1774715025.305:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466997db99 code=0x7ffc0000 [ 227.721580][ T28] audit: type=1326 audit(1774715025.305:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 227.771594][ T28] audit: type=1326 audit(1774715025.305:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x7ffc0000 [ 228.096004][ T8550] siw: device registration error -23 [ 228.236611][ T8553] lo speed is unknown, defaulting to 1000 [ 228.243561][ T8553] lo speed is unknown, defaulting to 1000 [ 228.529315][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1523'. [ 229.059316][ T8561] syU×: rxe_newlink: already configured on lo [ 229.310048][ T8564] loop6: detected capacity change from 0 to 1024 [ 229.357664][ T8564] EXT4-fs: Ignoring removed nobh option [ 229.426905][ T8564] EXT4-fs: Ignoring removed bh option [ 229.513095][ T8564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.016359][ T8588] siw: device registration error -23 [ 230.053421][ T8588] lo speed is unknown, defaulting to 1000 [ 230.060440][ T8588] lo speed is unknown, defaulting to 1000 [ 230.277492][ T8564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.397429][ T8590] loop3: detected capacity change from 0 to 1764 [ 230.404476][ T8590] ISOFS: Unable to identify CD-ROM format. [ 230.614048][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 230.972157][ T8603] sg_write: data in/out 327652/45 bytes for SCSI command 0x0-- guessing data in; [ 230.972157][ T8603] program syz.6.1536 not setting count and/or reply_len properly [ 232.360513][ T8617] netlink: 'syz.6.1543': attribute type 58 has an invalid length. [ 232.397960][ T8619] loop6: detected capacity change from 0 to 1024 [ 232.422059][ T8619] EXT4-fs: Ignoring removed nobh option [ 232.427700][ T8619] EXT4-fs: Ignoring removed bh option [ 232.434413][ T8621] loop3: detected capacity change from 0 to 1024 [ 232.454293][ T8621] EXT4-fs: Ignoring removed nobh option [ 232.463887][ T8621] EXT4-fs: Ignoring removed bh option [ 232.464319][ T8619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.493394][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.772977][ T28] audit: type=1400 audit(1774715030.575:2472): avc: denied { ioctl } for pid=8636 comm="syz.2.1550" path="socket:[22140]" dev="sockfs" ino=22140 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.918397][ T8647] macsec2: entered promiscuous mode [ 232.923884][ T8647] bridge0: entered promiscuous mode [ 233.046227][ T8657] siw: device registration error -23 [ 233.081759][ T8657] lo speed is unknown, defaulting to 1000 [ 233.088482][ T8657] lo speed is unknown, defaulting to 1000 [ 233.334987][ T8621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.386122][ T8619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.466530][ T8661] loop6: detected capacity change from 0 to 1764 [ 233.479489][ T8661] ISOFS: Unable to identify CD-ROM format. [ 233.547971][ T8667] loop3: detected capacity change from 0 to 1764 [ 233.565880][ T8667] ISOFS: Unable to identify CD-ROM format. [ 233.831972][ T8675] team_slave_1: Caught tx_queue_len zero misconfig [ 233.843060][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 233.879619][ T8681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.933864][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.955375][ T3390] lo speed is unknown, defaulting to 1000 [ 234.041033][ T8691] loop6: detected capacity change from 0 to 512 [ 234.055398][ T8691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.085388][ T8691] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.112088][ T8691] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 234.120194][ T8691] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 234.178028][ T8704] syz_tun: entered allmulticast mode [ 234.198960][ T8691] EXT4-fs (loop6): 1 truncate cleaned up [ 234.205231][ T8691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.218838][ T8691] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 4: comm syz.6.1568: lblock 0 mapped to illegal pblock 4 (length 1) [ 234.241932][ T8691] EXT4-fs (loop6): Remounting filesystem read-only [ 234.283104][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.493118][ T8714] siw: device registration error -23 [ 234.542707][ T8714] lo speed is unknown, defaulting to 1000 [ 234.550035][ T8714] lo speed is unknown, defaulting to 1000 [ 235.033288][ T8717] loop6: detected capacity change from 0 to 1024 [ 235.072106][ T8717] EXT4-fs: Ignoring removed nobh option [ 235.077762][ T8717] EXT4-fs: Ignoring removed bh option [ 235.123276][ T8717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.234911][ T8717] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.304886][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=8726 comm=syz.2.1580 [ 236.327546][ T8733] loop6: detected capacity change from 0 to 1764 [ 236.339387][ T8733] ISOFS: Unable to identify CD-ROM format. [ 236.395649][ T8744] loop5: detected capacity change from 0 to 1024 [ 236.546100][ T8744] EXT4-fs: inline encryption not supported [ 236.595672][ T8744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.971003][ T8756] siw: device registration error -23 [ 237.011242][ T8756] lo speed is unknown, defaulting to 1000 [ 237.018983][ T8756] lo speed is unknown, defaulting to 1000 [ 237.330637][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.491453][ T8763] syU×: rxe_newlink: already configured on lo [ 237.643369][ T28] audit: type=1400 audit(1774715035.445:2473): avc: denied { bind } for pid=8766 comm="syz.6.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.789048][ T8774] loop6: detected capacity change from 0 to 1024 [ 237.896257][ T8774] EXT4-fs: Ignoring removed nobh option [ 237.907943][ T8774] EXT4-fs: Ignoring removed bh option [ 237.993505][ T8774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.094618][ T28] audit: type=1400 audit(1774715035.895:2474): avc: denied { ioctl } for pid=8775 comm="syz.1.1594" path="socket:[22369]" dev="sockfs" ino=22369 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.132184][ T8774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.135701][ T8771] siw: device registration error -23 [ 238.159810][ T8771] lo speed is unknown, defaulting to 1000 [ 238.166144][ T8771] lo speed is unknown, defaulting to 1000 [ 238.242255][ T8784] loop6: detected capacity change from 0 to 1764 [ 238.255810][ T8784] ISOFS: Unable to identify CD-ROM format. [ 238.297960][ T8785] loop5: detected capacity change from 0 to 128 [ 238.309516][ T8785] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.829017][ T8792] No such timeout policy "syz0" [ 238.990444][ T8802] macsec1: entered promiscuous mode [ 239.006811][ T8802] bridge0: entered promiscuous mode [ 239.025933][ T8802] rdma_rxe: rxe_newlink: failed to add lo [ 239.166174][ T8810] loop3: detected capacity change from 0 to 1024 [ 239.192058][ T8810] EXT4-fs: inline encryption not supported [ 239.265433][ T8810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.327809][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.410440][ T8820] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1607'. [ 239.496396][ T8824] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1610'. [ 239.545280][ T8818] loop5: detected capacity change from 0 to 128 [ 239.584491][ T8818] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 52) [ 239.593097][ T8818] FAT-fs (loop5): Filesystem has been set read-only [ 239.638110][ T28] audit: type=1400 audit(1774715037.435:2475): avc: denied { create } for pid=8829 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 239.685336][ T8818] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 52) [ 239.704811][ T28] audit: type=1400 audit(1774715037.435:2476): avc: denied { setopt } for pid=8829 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 239.726351][ T28] audit: type=1400 audit(1774715037.435:2477): avc: denied { write } for pid=8829 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 239.748061][ T28] audit: type=1400 audit(1774715037.435:2478): avc: denied { nlmsg_read } for pid=8829 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 239.771023][ T28] audit: type=1400 audit(1774715037.435:2479): avc: denied { bind } for pid=8817 comm="syz.5.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.792541][ T8837] siw: device registration error -23 [ 239.832340][ T8837] lo speed is unknown, defaulting to 1000 [ 239.839450][ T8837] lo speed is unknown, defaulting to 1000 [ 240.071354][ T28] audit: type=1400 audit(1774715037.465:2480): avc: denied { unmount } for pid=8817 comm="syz.5.1608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.134952][ T8840] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1612'. [ 240.188388][ T8840] loop3: detected capacity change from 0 to 128 [ 240.204068][ T28] audit: type=1400 audit(1774715037.465:2481): avc: denied { create } for pid=8829 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 240.229881][ T8846] loop6: detected capacity change from 0 to 764 [ 240.259770][ T8846] rock: directory entry would overflow storage [ 240.266578][ T8846] rock: sig=0x4654, size=5, remaining=4 [ 240.276257][ T28] audit: type=1400 audit(1774715038.055:2482): avc: denied { mount } for pid=8842 comm="syz.6.1614" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 240.352327][ T8856] lo speed is unknown, defaulting to 1000 [ 240.358605][ T8856] lo speed is unknown, defaulting to 1000 [ 240.441987][ T8864] FAULT_INJECTION: forcing a failure. [ 240.441987][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 240.467479][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.6.1620 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.467569][ T8864] Tainted: [W]=WARN [ 240.467577][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.467590][ T8864] Call Trace: [ 240.467645][ T8864] [ 240.467658][ T8864] __dump_stack+0x1d/0x30 [ 240.467697][ T8864] dump_stack_lvl+0x95/0xd0 [ 240.467785][ T8864] dump_stack+0x15/0x1b [ 240.467878][ T8864] should_fail_ex+0x263/0x280 [ 240.467903][ T8864] should_failslab+0x8c/0xb0 [ 240.467926][ T8864] kmem_cache_alloc_noprof+0x66/0x400 [ 240.467950][ T8864] ? skb_clone+0x151/0x1f0 [ 240.468005][ T8864] skb_clone+0x151/0x1f0 [ 240.468036][ T8864] __netlink_deliver_tap+0x2c9/0x500 [ 240.468071][ T8864] netlink_unicast+0x66b/0x690 [ 240.468143][ T8864] netlink_sendmsg+0x5c8/0x6f0 [ 240.468174][ T8864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.468263][ T8864] ____sys_sendmsg+0x563/0x5b0 [ 240.468330][ T8864] ___sys_sendmsg+0x195/0x1e0 [ 240.468399][ T8864] __x64_sys_sendmsg+0xd4/0x160 [ 240.468432][ T8864] x64_sys_call+0x194c/0x3020 [ 240.468501][ T8864] do_syscall_64+0x12c/0x370 [ 240.468571][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.468594][ T8864] RIP: 0033:0x7f061d38c819 [ 240.468611][ T8864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.468697][ T8864] RSP: 002b:00007f061bde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.468718][ T8864] RAX: ffffffffffffffda RBX: 00007f061d605fa0 RCX: 00007f061d38c819 [ 240.468731][ T8864] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 240.468743][ T8864] RBP: 00007f061bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.468761][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.468774][ T8864] R13: 00007f061d606038 R14: 00007f061d605fa0 R15: 00007ffc1373ae08 [ 240.468794][ T8864] [ 240.544500][ T8864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.721913][ T8874] loop6: detected capacity change from 0 to 1764 [ 240.829386][ T8874] ISOFS: Unable to identify CD-ROM format. [ 240.930910][ T28] audit: type=1400 audit(1774715038.725:2483): avc: denied { create } for pid=8881 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.051144][ T8885] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1627'. [ 241.159690][ T8889] loop3: detected capacity change from 0 to 1024 [ 241.204160][ T8885] netlink: zone id is out of range [ 241.265872][ T8889] EXT4-fs: Ignoring removed nobh option [ 241.311859][ T8885] netlink: zone id is out of range [ 241.331403][ T8889] EXT4-fs: Ignoring removed bh option [ 241.459402][ T8885] netlink: zone id is out of range [ 241.503740][ T8885] netlink: zone id is out of range [ 241.524343][ T8889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.554201][ T8885] netlink: zone id is out of range [ 241.588404][ T8885] netlink: zone id is out of range [ 241.775624][ T8885] netlink: zone id is out of range [ 241.787372][ T8889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.800695][ T8885] netlink: zone id is out of range [ 241.807388][ T8895] netlink: 'syz.5.1630': attribute type 39 has an invalid length. [ 241.821273][ T8885] netlink: zone id is out of range [ 241.840571][ T8885] netlink: zone id is out of range [ 243.591662][ T8924] siw: device registration error -23 [ 244.098234][ T8924] lo speed is unknown, defaulting to 1000 [ 244.105742][ T8924] lo speed is unknown, defaulting to 1000 [ 244.455483][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1647'. [ 244.618016][ T8934] lo speed is unknown, defaulting to 1000 [ 244.637509][ T8934] lo speed is unknown, defaulting to 1000 [ 244.750796][ T8963] loop3: detected capacity change from 0 to 1024 [ 244.758915][ T8963] EXT4-fs: inline encryption not supported [ 244.899708][ T8963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.924158][ T8963] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1647: Allocating blocks 449-513 which overlap fs metadata [ 244.944020][ T8963] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1647: Allocating blocks 497-513 which overlap fs metadata [ 244.962394][ T8963] EXT4-fs (loop3): pa ffff888107afc230: logic 288, phys. 401, len 7 [ 244.970497][ T8963] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 245.375846][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.395857][ T8977] loop6: detected capacity change from 0 to 512 [ 245.450187][ T8977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.474776][ T8977] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.486029][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 245.486041][ T28] audit: type=1326 audit(1774715043.265:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.528804][ T8985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1653'. [ 245.641660][ T28] audit: type=1326 audit(1774715043.265:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.665716][ T28] audit: type=1326 audit(1774715043.265:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.690542][ T28] audit: type=1326 audit(1774715043.265:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.714412][ T28] audit: type=1326 audit(1774715043.265:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.758605][ T28] audit: type=1326 audit(1774715043.265:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.798079][ T8977] netlink: 'syz.6.1652': attribute type 1 has an invalid length. [ 245.815455][ T28] audit: type=1326 audit(1774715043.265:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.842504][ T8977] netlink: 'syz.6.1652': attribute type 2 has an invalid length. [ 245.881629][ T28] audit: type=1326 audit(1774715043.265:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.891017][ T8993] loop3: detected capacity change from 0 to 512 [ 245.915482][ T28] audit: type=1326 audit(1774715043.265:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 245.961678][ T28] audit: type=1326 audit(1774715043.265:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 246.006304][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.054723][ T8999] netlink: 'syz.6.1658': attribute type 21 has an invalid length. [ 246.065835][ T8999] netlink: 'syz.6.1658': attribute type 6 has an invalid length. [ 246.081642][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1658'. [ 246.688557][ T8975] siw: device registration error -23 [ 246.688708][ T8978] lo speed is unknown, defaulting to 1000 [ 246.700100][ T8978] lo speed is unknown, defaulting to 1000 [ 247.187123][ T9023] netlink: 'syz.1.1667': attribute type 24 has an invalid length. [ 247.267908][ T9030] xt_bpf: check failed: parse error [ 248.203401][ T9055] macsec3: entered allmulticast mode [ 248.208763][ T9055] macsec0: entered allmulticast mode [ 248.547933][ T9064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1677'. [ 249.663005][ T9070] FAULT_INJECTION: forcing a failure. [ 249.663005][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 249.740018][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.3.1681 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.740139][ T9070] Tainted: [W]=WARN [ 249.740147][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.740162][ T9070] Call Trace: [ 249.740170][ T9070] [ 249.740179][ T9070] __dump_stack+0x1d/0x30 [ 249.740208][ T9070] dump_stack_lvl+0x95/0xd0 [ 249.740232][ T9070] dump_stack+0x15/0x1b [ 249.740276][ T9070] should_fail_ex+0x263/0x280 [ 249.740320][ T9070] ? allocate_file_region_entries+0xdd/0x310 [ 249.740343][ T9070] should_failslab+0x8c/0xb0 [ 249.740364][ T9070] __kmalloc_cache_noprof+0x5f/0x410 [ 249.740393][ T9070] ? workingset_update_node+0x11c/0x150 [ 249.740505][ T9070] allocate_file_region_entries+0xdd/0x310 [ 249.740528][ T9070] __vma_reservation_common+0x40c/0x4e0 [ 249.740555][ T9070] alloc_hugetlb_folio+0x24d/0xef0 [ 249.740593][ T9070] hugetlbfs_fallocate+0x50a/0x940 [ 249.740698][ T9070] vfs_fallocate+0x3b6/0x450 [ 249.740795][ T9070] __x64_sys_fallocate+0x7a/0xd0 [ 249.740822][ T9070] x64_sys_call+0x298e/0x3020 [ 249.740848][ T9070] do_syscall_64+0x12c/0x370 [ 249.740873][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.741001][ T9070] RIP: 0033:0x7f9f9f59c819 [ 249.741033][ T9070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.741053][ T9070] RSP: 002b:00007f9f9dfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 249.741076][ T9070] RAX: ffffffffffffffda RBX: 00007f9f9f815fa0 RCX: 00007f9f9f59c819 [ 249.741090][ T9070] RDX: 0000000000800657 RSI: 0000000000000001 RDI: 0000000000000003 [ 249.741105][ T9070] RBP: 00007f9f9dfef090 R08: 0000000000000000 R09: 0000000000000000 [ 249.741124][ T9070] R10: 00000000040000b7 R11: 0000000000000246 R12: 0000000000000001 [ 249.741137][ T9070] R13: 00007f9f9f816038 R14: 00007f9f9f815fa0 R15: 00007ffce0b8eed8 [ 249.741159][ T9070] [ 250.240424][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1687'. [ 250.242459][ T9073] rdma_rxe: rxe_newlink: failed to add lo [ 250.501205][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 250.501228][ T28] audit: type=1326 audit(1774715048.295:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 250.635491][ T9096] loop3: detected capacity change from 0 to 1764 [ 250.693556][ T9096] ISOFS: Unable to identify CD-ROM format. [ 250.834158][ T28] audit: type=1326 audit(1774715048.415:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 251.147322][ T28] audit: type=1326 audit(1774715048.415:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 251.268298][ T28] audit: type=1326 audit(1774715048.415:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 251.342215][ T28] audit: type=1326 audit(1774715048.415:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 251.531603][ T28] audit: type=1326 audit(1774715048.415:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 251.889838][ T9118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1694'. [ 252.084976][ T28] audit: type=1326 audit(1774715048.415:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 252.303491][ T28] audit: type=1326 audit(1774715048.415:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 252.443293][ T28] audit: type=1326 audit(1774715048.425:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 252.514188][ T28] audit: type=1326 audit(1774715048.415:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061d38c819 code=0x7ffc0000 [ 253.080773][ T9139] team0: Device gtp0 is of different type [ 253.128989][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 253.328978][ T9151] lo speed is unknown, defaulting to 1000 [ 253.335259][ T9151] lo speed is unknown, defaulting to 1000 [ 253.375028][ T9154] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1705'. [ 253.384515][ T9147] rdma_rxe: rxe_newlink: failed to add lo [ 253.401632][ T9131] loop6: detected capacity change from 0 to 512 [ 253.407078][ T9154] lo speed is unknown, defaulting to 1000 [ 253.415346][ T9131] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 253.446591][ T9154] lo speed is unknown, defaulting to 1000 [ 253.486789][ T9131] EXT4-fs (loop6): 1 truncate cleaned up [ 253.502453][ T9131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.644482][ T9131] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1699: bg 0: block 465: padding at end of block bitmap is not set [ 254.940783][ T9168] loop3: detected capacity change from 0 to 164 [ 256.201034][ T9151] netlink: 'syz.1.1705': attribute type 11 has an invalid length. [ 256.219558][ T9151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1705'. [ 256.236555][ T9151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1705'. [ 256.246501][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1705'. [ 256.263231][ T9168] rock: directory entry would overflow storage [ 256.269902][ T9168] rock: sig=0x66, size=4, remaining=3 [ 256.308146][ T9166] rock: directory entry would overflow storage [ 256.314401][ T9166] rock: sig=0x66, size=4, remaining=3 [ 256.323015][ T9166] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.330710][ T9166] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.350608][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.438380][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 256.438397][ T28] audit: type=1326 audit(1774715054.235:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 256.596951][ T28] audit: type=1326 audit(1774715054.295:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 256.623699][ T9185] loop6: detected capacity change from 0 to 1764 [ 256.659692][ T9185] ISOFS: Unable to identify CD-ROM format. [ 256.714024][ T9187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1714'. [ 256.762038][ T28] audit: type=1326 audit(1774715054.345:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 256.805767][ T28] audit: type=1326 audit(1774715054.345:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 256.962060][ T28] audit: type=1326 audit(1774715054.345:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 257.000955][ T28] audit: type=1326 audit(1774715054.345:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84bef9c582 code=0x7ffc0000 [ 257.091869][ T28] audit: type=1326 audit(1774715054.345:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84bef5d04e code=0x7ffc0000 [ 257.116877][ T28] audit: type=1326 audit(1774715054.345:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f84bef9c647 code=0x7ffc0000 [ 257.141247][ T28] audit: type=1326 audit(1774715054.355:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bef9c819 code=0x7ffc0000 [ 257.169328][ T28] audit: type=1326 audit(1774715054.355:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84bef5d04e code=0x7ffc0000 [ 257.428100][ T9197] loop3: detected capacity change from 0 to 512 [ 257.476800][ T9197] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 258.185545][ T9197] EXT4-fs (loop3): orphan cleanup on readonly fs [ 258.231642][ T9197] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 258.256538][ T9197] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 258.264137][ T9197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1718: bg 0: block 15: invalid block bitmap [ 258.278210][ T9192] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1710'. [ 258.417406][ T9197] loop3: lost filesystem error report for type 5 error -117 [ 258.421581][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.435374][ C0] EXT4-fs (loop3): initial error at time 1774715056: ext4_validate_block_bitmap:432 [ 258.444780][ C0] EXT4-fs (loop3): last error at time 1774715056: ext4_validate_block_bitmap:432 [ 258.461769][ T9197] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 258.480984][ T9197] loop3: lost filesystem error report for type 5 error -117 [ 258.490143][ T9197] EXT4-fs (loop3): 1 truncate cleaned up [ 258.512161][ T9197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.542913][ T9197] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.1718: corrupted xattr block 31: invalid header [ 258.561901][ T9197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 258.583058][ T9197] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.1718: corrupted xattr block 31: invalid header [ 258.617097][ T9209] FAULT_INJECTION: forcing a failure. [ 258.617097][ T9209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.653075][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.1718 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.653155][ T9209] Tainted: [W]=WARN [ 258.653162][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.653177][ T9209] Call Trace: [ 258.653186][ T9209] [ 258.653246][ T9209] __dump_stack+0x1d/0x30 [ 258.653277][ T9209] dump_stack_lvl+0x95/0xd0 [ 258.653299][ T9209] dump_stack+0x15/0x1b [ 258.653331][ T9209] should_fail_ex+0x263/0x280 [ 258.653363][ T9209] should_fail+0xb/0x20 [ 258.653388][ T9209] should_fail_usercopy+0x1a/0x20 [ 258.653465][ T9209] strncpy_from_user+0x27/0x250 [ 258.653487][ T9209] path_setxattrat+0xeb/0x310 [ 258.653525][ T9209] __x64_sys_setxattr+0x6e/0x90 [ 258.653549][ T9209] x64_sys_call+0x2ee2/0x3020 [ 258.653624][ T9209] do_syscall_64+0x12c/0x370 [ 258.653733][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.653756][ T9209] RIP: 0033:0x7f9f9f59c819 [ 258.653775][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.653809][ T9209] RSP: 002b:00007f9f9dfce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 258.653883][ T9209] RAX: ffffffffffffffda RBX: 00007f9f9f816090 RCX: 00007f9f9f59c819 [ 258.653897][ T9209] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 258.653910][ T9209] RBP: 00007f9f9dfce090 R08: 0000000000000000 R09: 0000000000000000 [ 258.653967][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.653980][ T9209] R13: 00007f9f9f816128 R14: 00007f9f9f816090 R15: 00007ffce0b8eed8 [ 258.653999][ T9209] [ 258.654103][ T9197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 258.861631][ T9197] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1718: bad symlink. [ 258.890808][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.010287][ T9221] loop3: detected capacity change from 0 to 1764 [ 259.030509][ T9221] ISOFS: Unable to identify CD-ROM format. [ 259.216561][ T9233] lo speed is unknown, defaulting to 1000 [ 259.223069][ T9233] lo speed is unknown, defaulting to 1000 [ 259.710448][ T9240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1730'. [ 261.586440][ T9275] bond5: option mode: unable to set because the bond device has slaves [ 261.613356][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 261.613374][ T28] audit: type=1400 audit(1774715059.415:2794): avc: denied { map } for pid=9276 comm="syz.6.1741" path="socket:[24193]" dev="sockfs" ino=24193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 261.735257][ T28] audit: type=1400 audit(1774715059.415:2795): avc: denied { read accept } for pid=9276 comm="syz.6.1741" path="socket:[24193]" dev="sockfs" ino=24193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 261.778277][ T28] audit: type=1400 audit(1774715059.445:2796): avc: denied { getopt } for pid=9276 comm="syz.6.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 261.798937][ T28] audit: type=1326 audit(1774715059.505:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 261.909674][ T28] audit: type=1326 audit(1774715059.505:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 262.009026][ T9300] loop3: detected capacity change from 0 to 164 [ 262.106603][ T9300] rock: directory entry would overflow storage [ 262.113444][ T9300] rock: sig=0x66, size=4, remaining=3 [ 262.127939][ T9300] rock: directory entry would overflow storage [ 262.134600][ T9300] rock: sig=0x66, size=4, remaining=3 [ 262.142511][ T9300] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 262.151789][ T9300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 262.163797][ T9300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1745'. [ 262.883604][ T28] audit: type=1326 audit(1774715059.505:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 262.907054][ T28] audit: type=1326 audit(1774715059.505:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 262.930743][ T28] audit: type=1326 audit(1774715059.505:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 263.518991][ T28] audit: type=1326 audit(1774715059.505:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 263.542622][ T28] audit: type=1326 audit(1774715059.505:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9f9f59c819 code=0x7ffc0000 [ 263.589373][ T9312] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 263.916106][ T9339] SELinux: Context : is not valid (left unmapped). [ 263.925179][ T9339] 9p: Bad value for 'wfdno' [ 264.004259][ T9334] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.014557][ T9334] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1756'. [ 264.328227][ T9314] lo speed is unknown, defaulting to 1000 [ 264.347153][ T9314] lo speed is unknown, defaulting to 1000 [ 265.011675][ C0] net_ratelimit: 103 callbacks suppressed [ 265.011706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.739560][ T9392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.256210][ T9408] loop3: detected capacity change from 0 to 512 [ 266.303985][ T9408] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 266.369977][ T9422] erspan0: left promiscuous mode [ 266.389243][ T9422] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 266.483611][ T9422] bridge0: left promiscuous mode [ 266.488863][ T9422] macsec1: left promiscuous mode [ 266.577023][ T9441] loop3: detected capacity change from 0 to 1024 [ 266.585990][ T9441] EXT4-fs: Ignoring removed bh option [ 266.606868][ T9441] EXT4-fs: Ignoring removed oldalloc option [ 266.613326][ T9441] EXT4-fs: Ignoring removed nobh option [ 266.752559][ T9441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.017304][ T9461] loop6: detected capacity change from 0 to 1024 [ 267.025794][ T9461] EXT4-fs: Ignoring removed bh option [ 267.031279][ T9461] EXT4-fs: Ignoring removed oldalloc option [ 267.049629][ T9461] EXT4-fs: Ignoring removed nobh option [ 267.062475][ T9441] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1794: Allocating blocks 497-513 which overlap fs metadata [ 267.067511][ T9463] lo speed is unknown, defaulting to 1000 [ 267.082416][ T9441] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1794: Allocating blocks 497-513 which overlap fs metadata [ 267.082931][ T9463] lo speed is unknown, defaulting to 1000 [ 267.099370][ T9461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.120708][ T9440] EXT4-fs (loop3): pa ffff888107afc1c0: logic 48, phys. 177, len 21 [ 267.128762][ T9440] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 267.148507][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.161218][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.251727][ T9469] loop6: detected capacity change from 0 to 1024 [ 267.263241][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 267.263256][ T28] audit: type=1400 audit(1774715065.065:2853): avc: denied { nlmsg_read } for pid=9472 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.263522][ T9469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.269495][ T9473] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1805'. [ 267.315189][ T9469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 267.332201][ T28] audit: type=1400 audit(1774715065.135:2854): avc: denied { execute } for pid=9475 comm="syz.3.1806" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.332288][ T9476] process 'syz.3.1806' launched '/dev/fd/4' with NULL argv: empty string added [ 267.353497][ T9469] System zones: 0-1, 3-36 [ 267.369365][ T9469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.385778][ T28] audit: type=1400 audit(1774715065.185:2855): avc: denied { execute_no_trans } for pid=9475 comm="syz.3.1806" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 268.109630][ T5808] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.181262][ T9507] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 268.184265][ T28] audit: type=1400 audit(1774715065.975:2856): avc: denied { load_policy } for pid=9505 comm="syz.6.1818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 268.188959][ T9507] SELinux: failed to load policy [ 268.843731][ T9527] loop6: detected capacity change from 0 to 256 [ 269.147256][ T9527] FAT-fs (loop6): codepage cp852 not found [ 269.254086][ T9542] loop6: detected capacity change from 0 to 256 [ 269.322758][ T9542] FAT-fs (loop6): Directory bread(block 64) failed [ 269.339533][ T9542] FAT-fs (loop6): Directory bread(block 65) failed [ 269.353830][ T9542] FAT-fs (loop6): Directory bread(block 66) failed [ 269.370759][ T9542] FAT-fs (loop6): Directory bread(block 67) failed [ 269.384437][ T9542] FAT-fs (loop6): Directory bread(block 68) failed [ 269.401140][ T9542] FAT-fs (loop6): Directory bread(block 69) failed [ 269.424655][ T9542] FAT-fs (loop6): Directory bread(block 70) failed [ 269.451651][ T9542] FAT-fs (loop6): Directory bread(block 71) failed [ 269.468408][ T9542] FAT-fs (loop6): Directory bread(block 72) failed [ 269.508928][ T9542] FAT-fs (loop6): Directory bread(block 73) failed [ 269.625959][ T9551] bio_check_eod: 3 callbacks suppressed [ 269.625997][ T9551] syz.6.1834: attempt to access beyond end of device [ 269.625997][ T9551] loop6: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 270.265710][ T9567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1845'. [ 270.696310][ T9587] loop3: detected capacity change from 0 to 128 [ 270.703153][ T9587] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.724464][ T9587] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.019201][ T9594] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1855'. [ 272.091511][ T9623] loop6: detected capacity change from 0 to 512 [ 272.099417][ T119] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.341184][ T9626] loop3: detected capacity change from 0 to 128 [ 273.362899][ T9623] EXT4-fs (loop6): 1 truncate cleaned up [ 273.376098][ T9623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.401182][ T28] audit: type=1326 audit(1774715071.195:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.1870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bef9c819 code=0x0 [ 273.437230][ T9623] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1865: bg 0: block 465: padding at end of block bitmap is not set [ 273.512159][ T9623] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 117 [ 273.512520][ T9640] loop3: detected capacity change from 0 to 4096 [ 273.532855][ T9633] ================================================================== [ 273.540980][ T9633] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 273.549614][ T9633] [ 273.551936][ T9633] write to 0xffff888124bc3ee8 of 8 bytes by task 9638 on cpu 0: [ 273.559570][ T9633] shmem_file_splice_read+0x470/0x600 [ 273.564961][ T9633] splice_direct_to_actor+0x26e/0x670 [ 273.570358][ T9633] do_splice_direct+0x119/0x1a0 [ 273.575221][ T9633] do_sendfile+0x382/0x650 [ 273.579673][ T9633] __x64_sys_sendfile64+0x105/0x150 [ 273.584910][ T9633] x64_sys_call+0x2dc4/0x3020 [ 273.589615][ T9633] do_syscall_64+0x12c/0x370 [ 273.594216][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.600214][ T9633] [ 273.602542][ T9633] write to 0xffff888124bc3ee8 of 8 bytes by task 9633 on cpu 1: [ 273.610170][ T9633] shmem_file_splice_read+0x470/0x600 [ 273.615608][ T9633] splice_direct_to_actor+0x26e/0x670 [ 273.621012][ T9633] do_splice_direct+0x119/0x1a0 [ 273.625904][ T9633] do_sendfile+0x382/0x650 [ 273.630347][ T9633] __x64_sys_sendfile64+0x105/0x150 [ 273.635580][ T9633] x64_sys_call+0x2dc4/0x3020 [ 273.640272][ T9633] do_syscall_64+0x12c/0x370 [ 273.644871][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.650767][ T9633] [ 273.653179][ T9633] value changed: 0x0000000000001b1e -> 0x0000000000001b20 [ 273.660296][ T9633] [ 273.662627][ T9633] Reported by Kernel Concurrency Sanitizer on: [ 273.668790][ T9633] CPU: 1 UID: 0 PID: 9633 Comm: syz.2.1867 Tainted: G W syzkaller #0 PREEMPT(full) [ 273.679656][ T9633] Tainted: [W]=WARN [ 273.683457][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.693512][ T9633] ================================================================== [ 273.702903][ T9640] EXT4-fs: test_dummy_encryption option not supported [ 273.714928][ T9643] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.832740][ T28] audit: type=1326 audit(1774715071.625:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.5.1872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46699dc819 code=0x0 [ 273.858042][ T9623] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.858042][ T9623] [ 274.427922][ T9643] EXT4-fs (loop6): This should not happen!! Data will be lost [ 274.427922][ T9643] [ 274.477969][ T9643] EXT4-fs (loop6): Total free blocks count 0 [ 274.499108][ T9643] EXT4-fs (loop6): Free/Dirty block details [ 274.521259][ T9643] EXT4-fs (loop6): free_blocks=0 [ 274.570580][ T9643] EXT4-fs (loop6): dirty_blocks=1 [ 274.579890][ T9643] EXT4-fs (loop6): Block reservation details