last executing test programs: 1m48.221470763s ago: executing program 1 (id=14): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, 0x0) 1m48.130756905s ago: executing program 1 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000041401002abd7800fcdbdf25080058"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 1m48.045824007s ago: executing program 1 (id=21): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0xbd03, 0x18882) write$eventfd(r0, &(0x7f0000000040)=0x779, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f00000008c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r2}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x15f3, 0x4000, 0x1, 0x39d}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000018c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40041) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m47.003980291s ago: executing program 1 (id=31): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {}, {@user_xattr}, {@bh}, {@barrier}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x575, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r5, 0x0, 0x0) close(r5) close(r4) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) 1m46.054772723s ago: executing program 1 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m45.638864383s ago: executing program 1 (id=39): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x8]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) unshare(0x40400) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 1m45.626999873s ago: executing program 32 (id=39): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x8]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) unshare(0x40400) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 5.500659501s ago: executing program 4 (id=1707): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) 5.421810263s ago: executing program 4 (id=1709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.285183527s ago: executing program 4 (id=1714): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd9, 0x3, 0x7, 0x2, 0x3fb}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) r8 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '!&', 0x3a, '%-@++#%^*,', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x50, 0x46, 0x50, 0x4f]}, 0x12c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x5, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.653456391s ago: executing program 4 (id=1731): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x8000000010000, 0x6e0c0) setresuid(0xee00, 0xee01, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x89100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg(0xffffffffffffffff, 0x0, 0x40040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11b}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) io_setup(0x7, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x50002, 0x184) io_submit(r2, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000004000000000005d820b8c48d6765c714e4064c3cfa9cc482012d3227dc68eccf89496c43d2e0bcd573a2137cec4b775768550c4b50f94af5aff5b43aff4208d67c03c55b4053f402f82794c7fec83c14c03a774206c04309f6d3834b55737e0b2a60bd2c68a4727a54e39c709d4dd929b9d30d34ad8a79a220f49855a8deb245c5efbc35442c50bb3e9bf4971b3a19cc9bea7639fc91b335b1244600f8fc9ba422f4c0d494fce4fff1ae6bb6520667ff6e2c1485596c1651cd1f584483bcb4ad28fd9c555f5bd7d6f73c8133928463f3635171", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) 2.774979495s ago: executing program 4 (id=1754): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x8000000010000, 0x6e0c0) setresuid(0xee00, 0xee01, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x89100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) r0 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg(0xffffffffffffffff, 0x0, 0x40040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x11b}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) io_setup(0x7, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x50002, 0x184) io_submit(r3, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) 2.578080959s ago: executing program 0 (id=1761): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fgetxattr(0xffffffffffffffff, &(0x7f0000000780)=@known='security.selinux\x00', 0x0, 0x0) 2.491216682s ago: executing program 0 (id=1764): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x8000000010000, 0x6e0c0) setresuid(0xee00, 0xee01, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x89100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg(0xffffffffffffffff, 0x0, 0x40040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11b}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) io_setup(0x7, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x50002, 0x184) io_submit(r2, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000004000000000005d820b8c48d6765c714e4064c3cfa9cc482012d3227dc68eccf89496c43d2e0bcd573a2137cec4b775768550c4b50f94af5aff5b43aff4208d67c03c55b4053f402f82794c7fec83c14c03a774206c04309f6d3834b55737e0b2a60bd2c68a4727a54e39c709d4dd929b9d30d34ad8a79a220f49855a8deb245c5efbc35442c50bb3e9bf4971b3a19cc9bea7639fc91b335b1244600f8fc9ba422f4c0d494fce4fff1ae6bb6520667ff6e2c1485596c1651cd1f584483bcb4ad28fd9c555f5bd7d6f73c8133928463f3635171", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) 1.582478863s ago: executing program 2 (id=1779): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5c42}, 0x48db, 0x0, 0x8, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) 1.458588266s ago: executing program 2 (id=1783): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x40080) 1.334903219s ago: executing program 2 (id=1786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) 1.334342919s ago: executing program 2 (id=1789): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd9, 0x3, 0x7, 0x2, 0x3fb}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) r8 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '!&', 0x3a, '%-@++#%^*,', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x50, 0x46, 0x50, 0x4f]}, 0x12c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x5, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 894.133809ms ago: executing program 2 (id=1799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 882.368859ms ago: executing program 5 (id=1800): capset(&(0x7f0000000080)={0x20071026}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x1, 0x101, 0x2, 0x0, 0xffffffff, 0xfffffff8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.u'}, 0x15) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x38b5, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0xae, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff39, 0xffffffffffffffff}}, 0xa0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb0}]}, &(0x7f0000000140)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x204, 0x4, 0x18000, r8}, 0x10) 811.892911ms ago: executing program 0 (id=1802): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd9, 0x3, 0x7, 0x2, 0x3fb}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) r8 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '!&', 0x3a, '%-@++#%^*,', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x50, 0x46, 0x50, 0x4f]}, 0x12c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x5, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 767.545912ms ago: executing program 3 (id=1803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 711.000783ms ago: executing program 2 (id=1804): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0x8000000010000, 0x6e0c0) setresuid(0xee00, 0xee01, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) r0 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg(0xffffffffffffffff, 0x0, 0x40040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x11b}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x50002, 0x184) io_submit(0x0, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) 710.681043ms ago: executing program 3 (id=1805): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x4, 0x4, 0x560, 0xffffffff, 0x128, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xffffffff], 'veth0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@mcast2, [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv6=@mcast2, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x8, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ipv6header={{0x28}, {0x77, 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x201c01, 0x1, 0x0, 0x1d, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf250900020073797a30000000000800410073697700140033007663616e3000000000f351f1f5"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x20002c27, 0x80, 0x1000000, 0x18a}) pipe(&(0x7f00000045c0)) sendmsg$netlink(r1, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01001cbd7400fe04df00f6"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) setxattr(0x0, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r6, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x1c0, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x8c,-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x26, 0x2, '/proc/thread-self/attr/sockcreate\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x25, 0x2, 'system_u:object_r:hugetlbfs_t:s0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x25, 0x2, 'system_u:object_r:hugetlbfs_t:s0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "9961122917738b65787098696ad80904863fe993b9c97d2764649db2fc650ec9a44fc3e9995f6b1da6e662a779523db13cccc348541153dc53886c2db58a6fc82f26b0636b80909618363f37b1cafd3041f0369d28604eab6d504b664529826e7a6c45860c0e4c682e5ff1c602bfbfe6c902781bac8c47b4a617e72fe1b53d81213af60dfcb59f2083c4ebd5788140f6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x29}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 656.062985ms ago: executing program 5 (id=1806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) 596.730766ms ago: executing program 5 (id=1807): capset(&(0x7f0000000080)={0x20071026}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x1, 0x101, 0x2, 0x0, 0xffffffff, 0xfffffff8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = dup(0xffffffffffffffff) fsetxattr$security_selinux(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x38b5, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0xae, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff39, 0xffffffffffffffff}}, 0xa0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb0}]}, &(0x7f0000000140)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000240)={r8, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x204, 0x4, 0x18000, r9}, 0x10) 294.773893ms ago: executing program 5 (id=1808): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) 242.069214ms ago: executing program 5 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 240.961425ms ago: executing program 4 (id=1810): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd9, 0x3, 0x7, 0x2, 0x3fb}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) r8 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '!&', 0x3a, '%-@++#%^*,', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x50, 0x46, 0x50, 0x4f]}, 0x12c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x5, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 209.742505ms ago: executing program 0 (id=1811): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 157.091136ms ago: executing program 3 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x24, 0x38, 0x107, 0x70bd27, 0x259fdbfe, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='!{:\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 116.592227ms ago: executing program 5 (id=1813): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xd9, 0x3, 0x7, 0x2, 0x3fb}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0xb8b3, 0x4, 0x0, 0x3c100, 0x3}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) r8 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '!&', 0x3a, '%-@++#%^*,', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x50, 0x46, 0x50, 0x4f]}, 0x12c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x5, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 115.905817ms ago: executing program 3 (id=1814): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)}, &(0x7f0000000300)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 113.101347ms ago: executing program 0 (id=1815): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x278, 0x320, 0xffffffff, 0x320, 0x278, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xa1d, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728bba18da576f11985de44110b8612025e12691a6d48c5087ab16f67b18ca90ac63568181e068f727f7d23fa5fad26a59a5da2652eaea5c0d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfef2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@pkttype={{0x28}, {0x400, 0x8}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x13, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x64, @icmp_id=0x68}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x6}, 0x0, 0xffffffff, 'batadv_slave_1\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x2}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x20, 0xe, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x9, @local, @remote, @gre_key=0x180, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4=@empty, @gre_key=0x3, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 63.446478ms ago: executing program 3 (id=1816): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 133.82µs ago: executing program 0 (id=1817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20004884) 0s ago: executing program 3 (id=1818): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x2, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): rom 0 to 8192 [ 108.943965][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.072343][ T6470] loop2: detected capacity change from 0 to 8192 [ 109.239781][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.271775][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 109.339081][ T6513] netlink: 1064 bytes leftover after parsing attributes in process `syz.4.1121'. [ 109.605932][ T6511] loop3: detected capacity change from 0 to 128 [ 109.778117][ T6511] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 109.785424][ T6511] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.032322][ T6529] loop4: detected capacity change from 0 to 128 [ 110.108236][ T6529] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 110.155451][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.166093][ T6529] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.255001][ T6534] mmap: syz.3.1130 (6534): VmData 33263616 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 110.519035][ T6544] loop3: detected capacity change from 0 to 256 [ 110.533292][ T6544] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 110.533327][ T6544] FAT-fs (loop3): Filesystem has been set read-only [ 110.549939][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 110.549957][ T29] audit: type=1400 audit(1788356624.439:1708): avc: denied { write } for pid=6528 comm="syz.4.1129" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.579181][ T29] audit: type=1400 audit(1788356624.469:1709): avc: denied { write } for pid=6528 comm="syz.4.1129" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.661341][ T6478] loop5: detected capacity change from 0 to 8192 [ 110.772461][ T29] audit: type=1400 audit(1788356624.679:1710): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.794689][ T29] audit: type=1400 audit(1788356624.679:1711): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.794755][ T29] audit: type=1400 audit(1788356624.679:1712): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.794826][ T29] audit: type=1400 audit(1788356624.679:1713): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.794863][ T29] audit: type=1400 audit(1788356624.679:1714): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.794900][ T29] audit: type=1400 audit(1788356624.679:1715): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.798699][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.870342][ T6553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1138'. [ 110.978104][ T6555] usb usb7: usbfs: process 6555 (syz.4.1141) did not claim interface 0 before use [ 111.226348][ T6558] loop5: detected capacity change from 0 to 128 [ 111.311295][ T6551] loop3: detected capacity change from 0 to 128 [ 111.330742][ T6558] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 111.350862][ T6558] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.399994][ T29] audit: type=1400 audit(1788356625.309:1716): avc: denied { write } for pid=6557 comm="syz.5.1140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.414365][ T6551] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.423518][ T6551] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.482570][ T29] audit: type=1400 audit(1788356625.389:1717): avc: denied { write } for pid=6557 comm="syz.5.1140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.532698][ T6556] FAULT_INJECTION: forcing a failure. [ 111.532698][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 111.532741][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.532771][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.532786][ T6556] Call Trace: [ 111.532796][ T6556] [ 111.532806][ T6556] __dump_stack+0x1d/0x30 [ 111.532841][ T6556] dump_stack_lvl+0x95/0xd0 [ 111.532864][ T6556] dump_stack+0x15/0x1b [ 111.532884][ T6556] should_fail_ex+0x262/0x280 [ 111.532907][ T6556] ? sk_prot_alloc+0xa8/0x180 [ 111.532968][ T6556] should_failslab+0x8c/0xb0 [ 111.533002][ T6556] __kmalloc_noprof+0xd0/0x4d0 [ 111.533101][ T6556] ? sk_prot_alloc+0xa8/0x180 [ 111.533137][ T6556] sk_prot_alloc+0xa8/0x180 [ 111.533171][ T6556] sk_alloc+0x34/0x3e0 [ 111.533249][ T6556] netlink_create+0x331/0x460 [ 111.533278][ T6556] __sock_create+0x2e5/0x580 [ 111.533302][ T6556] __sys_socket+0xaf/0x180 [ 111.533344][ T6556] __x64_sys_socket+0x3f/0x50 [ 111.533373][ T6556] x64_sys_call+0x246e/0x2550 [ 111.533404][ T6556] do_syscall_64+0x112/0x360 [ 111.533496][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.533587][ T6556] RIP: 0033:0x7f20ddfbe159 [ 111.533606][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.533631][ T6556] RSP: 002b:00007f20dc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.533709][ T6556] RAX: ffffffffffffffda RBX: 00007f20de246090 RCX: 00007f20ddfbe159 [ 111.533727][ T6556] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000010 [ 111.533818][ T6556] RBP: 00007f20de055024 R08: 0000000000000000 R09: 0000000000000000 [ 111.533867][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.533882][ T6556] R13: 00007f20de246128 R14: 00007f20de246090 R15: 00007ffe11c130d8 [ 111.533909][ T6556] [ 111.733309][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.778051][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 111.802872][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.051562][ T6578] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.062248][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'. [ 112.077446][ T6578] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.129657][ T6572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.145701][ T6572] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.379721][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.417006][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1155'. [ 112.446418][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.473032][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1158'. [ 112.916134][ T6620] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.918788][ T6620] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.122216][ T6625] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.369847][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.416687][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1168'. [ 113.468541][ T6628] set_capacity_and_notify: 6 callbacks suppressed [ 113.468577][ T6628] loop4: detected capacity change from 0 to 128 [ 113.544434][ T6599] loop2: detected capacity change from 0 to 8192 [ 113.640205][ T6628] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 113.671598][ T6628] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.714260][ T6647] loop5: detected capacity change from 0 to 128 [ 113.747010][ T6647] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 113.760599][ T6647] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.875131][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 113.924073][ T6661] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 114.001896][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.140764][ T6677] random: crng reseeded on system resumption [ 114.192746][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.238033][ T6686] loop5: detected capacity change from 0 to 512 [ 114.246261][ T6686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 114.246319][ T6686] System zones: 1-12 [ 114.246820][ T6686] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1190: corrupted in-inode xattr: e_value size too large [ 114.246851][ T6686] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.247031][ T6686] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1190: couldn't read orphan inode 15 (err -117) [ 114.247059][ T6686] loop5: lost filesystem error report for type 5 error -117 [ 114.247550][ T6686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.297414][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.444271][ T6691] loop3: detected capacity change from 0 to 8192 [ 114.504609][ T6607] loop0: detected capacity change from 0 to 8192 [ 114.515588][ T6685] loop4: detected capacity change from 0 to 128 [ 114.556387][ T6685] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.719822][ T6709] loop5: detected capacity change from 0 to 128 [ 114.775211][ T6709] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.780045][ T6721] loop0: detected capacity change from 0 to 164 [ 114.826591][ T6721] Unable to read rock-ridge attributes [ 114.828034][ T6721] Unable to read rock-ridge attributes [ 114.828144][ T6721] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 114.829949][ T6723] loop4: detected capacity change from 0 to 128 [ 114.992050][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1214'. [ 115.149981][ T6761] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 115.220710][ T6751] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.407535][ T6790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1236'. [ 115.549227][ T6802] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.594650][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 115.594683][ T29] audit: type=1400 audit(1788356629.499:1844): avc: denied { write } for pid=6801 comm="syz.0.1243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.639961][ T29] audit: type=1400 audit(1788356629.549:1845): avc: denied { write } for pid=6801 comm="syz.0.1243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.666784][ T29] audit: type=1400 audit(1788356629.579:1846): avc: denied { write } for pid=6801 comm="syz.0.1243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.709160][ T29] audit: type=1400 audit(1788356629.619:1847): avc: denied { write } for pid=6801 comm="syz.0.1243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.710603][ T29] audit: type=1400 audit(1788356629.619:1848): avc: denied { write } for pid=6801 comm="syz.0.1243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.712239][ T6808] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.721139][ T29] audit: type=1400 audit(1788356629.619:1849): avc: denied { write } for pid=6807 comm="syz.2.1245" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.737631][ T29] audit: type=1400 audit(1788356629.649:1850): avc: denied { write } for pid=6807 comm="syz.2.1245" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.742233][ T29] audit: type=1400 audit(1788356629.649:1851): avc: denied { write } for pid=6807 comm="syz.2.1245" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.750472][ T29] audit: type=1400 audit(1788356629.649:1852): avc: denied { write } for pid=6807 comm="syz.2.1245" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.750503][ T29] audit: type=1400 audit(1788356629.649:1853): avc: denied { write } for pid=6807 comm="syz.2.1245" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.108457][ T6834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1255'. [ 116.252983][ T6838] FAULT_INJECTION: forcing a failure. [ 116.252983][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 116.253152][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.253183][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.253255][ T6838] Call Trace: [ 116.253265][ T6838] [ 116.253274][ T6838] __dump_stack+0x1d/0x30 [ 116.253301][ T6838] dump_stack_lvl+0x95/0xd0 [ 116.253328][ T6838] dump_stack+0x15/0x1b [ 116.253353][ T6838] should_fail_ex+0x262/0x280 [ 116.253379][ T6838] ? __se_sys_memfd_create+0x1df/0x3b0 [ 116.253413][ T6838] should_failslab+0x8c/0xb0 [ 116.253447][ T6838] __kmalloc_cache_noprof+0x7a/0x400 [ 116.253481][ T6838] ? task_active_pid_ns+0x35/0x70 [ 116.253526][ T6838] ? __se_sys_memfd_create+0x1df/0x3b0 [ 116.253565][ T6838] ? task_active_pid_ns+0x39/0x70 [ 116.253590][ T6838] __se_sys_memfd_create+0x1df/0x3b0 [ 116.253623][ T6838] __x64_sys_memfd_create+0x31/0x40 [ 116.253654][ T6838] x64_sys_call+0x1955/0x2550 [ 116.253685][ T6838] do_syscall_64+0x112/0x360 [ 116.253768][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.253796][ T6838] RIP: 0033:0x7f8d5140e159 [ 116.253815][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.253883][ T6838] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 116.253985][ T6838] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 116.254001][ T6838] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 116.254017][ T6838] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 116.254033][ T6838] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 116.254123][ T6838] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 116.254145][ T6838] [ 116.368919][ T6836] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.169278][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1260'. [ 117.169312][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1260'. [ 117.169409][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1260'. [ 117.260397][ T6854] EXT4-fs: Ignoring removed nobh option [ 117.271014][ T6854] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 117.280970][ T6854] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.1262: inode has both inline data and extents flags [ 117.281010][ T6854] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 117.294210][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 117.294234][ C0] EXT4-fs (loop0): initial error at time 1788356631: ext4_orphan_get:1403: inode 13 [ 117.294287][ C0] EXT4-fs (loop0): last error at time 1788356631: ext4_orphan_get:1403: inode 13 [ 117.330559][ T6854] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1262: couldn't read orphan inode 13 (err -117) [ 117.330630][ T6854] loop0: lost filesystem error report for type 5 error -117 [ 117.541934][ T6871] FAULT_INJECTION: forcing a failure. [ 117.541934][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 117.542153][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz.0.1270 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.542205][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.542219][ T6871] Call Trace: [ 117.542252][ T6871] [ 117.542261][ T6871] __dump_stack+0x1d/0x30 [ 117.542289][ T6871] dump_stack_lvl+0x95/0xd0 [ 117.542310][ T6871] dump_stack+0x15/0x1b [ 117.542386][ T6871] should_fail_ex+0x262/0x280 [ 117.542413][ T6871] ? __se_sys_memfd_create+0x1df/0x3b0 [ 117.542475][ T6871] should_failslab+0x8c/0xb0 [ 117.542506][ T6871] __kmalloc_cache_noprof+0x7a/0x400 [ 117.542539][ T6871] ? __se_sys_memfd_create+0x1df/0x3b0 [ 117.542650][ T6871] __se_sys_memfd_create+0x1df/0x3b0 [ 117.542723][ T6871] __x64_sys_memfd_create+0x31/0x40 [ 117.542748][ T6871] x64_sys_call+0x1955/0x2550 [ 117.542776][ T6871] do_syscall_64+0x112/0x360 [ 117.542852][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.542877][ T6871] RIP: 0033:0x7f940eefe159 [ 117.542903][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.542923][ T6871] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 117.542990][ T6871] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 117.543006][ T6871] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 117.543021][ T6871] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 117.543108][ T6871] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 117.543123][ T6871] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 117.543144][ T6871] [ 118.190074][ T6882] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.527135][ T6896] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 118.618319][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 118.829548][ T6856] set_capacity_and_notify: 10 callbacks suppressed [ 118.829590][ T6856] loop5: detected capacity change from 0 to 8192 [ 119.079734][ T6906] FAULT_INJECTION: forcing a failure. [ 119.079734][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 119.079993][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.5.1285 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.080065][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.080081][ T6906] Call Trace: [ 119.080089][ T6906] [ 119.080098][ T6906] __dump_stack+0x1d/0x30 [ 119.080128][ T6906] dump_stack_lvl+0x95/0xd0 [ 119.080155][ T6906] dump_stack+0x15/0x1b [ 119.080251][ T6906] should_fail_ex+0x262/0x280 [ 119.080276][ T6906] ? __se_sys_memfd_create+0x1df/0x3b0 [ 119.080419][ T6906] should_failslab+0x8c/0xb0 [ 119.080452][ T6906] __kmalloc_cache_noprof+0x7a/0x400 [ 119.080486][ T6906] ? __se_sys_memfd_create+0x1df/0x3b0 [ 119.080552][ T6906] __se_sys_memfd_create+0x1df/0x3b0 [ 119.080584][ T6906] __x64_sys_memfd_create+0x31/0x40 [ 119.080615][ T6906] x64_sys_call+0x1955/0x2550 [ 119.080667][ T6906] do_syscall_64+0x112/0x360 [ 119.080699][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.080733][ T6906] RIP: 0033:0x7f1f1142e159 [ 119.080782][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.080805][ T6906] RSP: 002b:00007f1f0fe86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 119.080827][ T6906] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 119.080878][ T6906] RDX: 00007f1f0fe86ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 119.080895][ T6906] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 119.080912][ T6906] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 119.080928][ T6906] R13: 00007f1f0fe86ee0 R14: 00007f1f0fe86ea0 R15: 0000200000000000 [ 119.080951][ T6906] [ 119.121111][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 119.402315][ T6924] loop0: detected capacity change from 0 to 128 [ 119.423782][ T6924] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.936418][ T6931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1296'. [ 119.936449][ T6931] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1296'. [ 119.936470][ T6931] netlink: 'syz.3.1296': attribute type 5 has an invalid length. [ 119.936485][ T6931] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1296'. [ 120.030641][ T6880] loop4: detected capacity change from 0 to 8192 [ 120.064162][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 120.143008][ T6877] loop2: detected capacity change from 0 to 8192 [ 120.270549][ T6955] FAULT_INJECTION: forcing a failure. [ 120.270549][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.270647][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.3.1306 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.270673][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.270686][ T6955] Call Trace: [ 120.270693][ T6955] [ 120.270774][ T6955] __dump_stack+0x1d/0x30 [ 120.270804][ T6955] dump_stack_lvl+0x95/0xd0 [ 120.270831][ T6955] dump_stack+0x15/0x1b [ 120.270853][ T6955] should_fail_ex+0x262/0x280 [ 120.270920][ T6955] should_fail+0xb/0x20 [ 120.270940][ T6955] should_fail_usercopy+0x1a/0x20 [ 120.271032][ T6955] strncpy_from_user+0x27/0x250 [ 120.271067][ T6955] __se_sys_memfd_create+0x20f/0x3b0 [ 120.271094][ T6955] __x64_sys_memfd_create+0x31/0x40 [ 120.271119][ T6955] x64_sys_call+0x1955/0x2550 [ 120.271221][ T6955] do_syscall_64+0x112/0x360 [ 120.271297][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.271392][ T6955] RIP: 0033:0x7f20ddfbe159 [ 120.271407][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.271425][ T6955] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.271445][ T6955] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 120.271462][ T6955] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 120.271478][ T6955] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 120.271570][ T6955] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 120.271663][ T6955] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 120.271683][ T6955] [ 120.365425][ T6959] FAULT_INJECTION: forcing a failure. [ 120.365425][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.365470][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.2.1307 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.365519][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.365552][ T6959] Call Trace: [ 120.365579][ T6959] [ 120.365587][ T6959] __dump_stack+0x1d/0x30 [ 120.365695][ T6959] dump_stack_lvl+0x95/0xd0 [ 120.365720][ T6959] dump_stack+0x15/0x1b [ 120.365743][ T6959] should_fail_ex+0x262/0x280 [ 120.365768][ T6959] should_fail+0xb/0x20 [ 120.365802][ T6959] should_fail_usercopy+0x1a/0x20 [ 120.365828][ T6959] strncpy_from_user+0x27/0x250 [ 120.365863][ T6959] __se_sys_memfd_create+0x20f/0x3b0 [ 120.365938][ T6959] __x64_sys_memfd_create+0x31/0x40 [ 120.366043][ T6959] x64_sys_call+0x1955/0x2550 [ 120.366152][ T6959] do_syscall_64+0x112/0x360 [ 120.366185][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.366210][ T6959] RIP: 0033:0x7f8d5140e159 [ 120.366281][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.366303][ T6959] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.366325][ T6959] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 120.366376][ T6959] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 120.366391][ T6959] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 120.366407][ T6959] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 120.366422][ T6959] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 120.366475][ T6959] [ 120.622000][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 120.938280][ T6989] FAULT_INJECTION: forcing a failure. [ 120.938280][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.952419][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.3.1320 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.952452][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.952468][ T6989] Call Trace: [ 120.952480][ T6989] [ 120.952489][ T6989] __dump_stack+0x1d/0x30 [ 120.952519][ T6989] dump_stack_lvl+0x95/0xd0 [ 120.952547][ T6989] dump_stack+0x15/0x1b [ 120.952572][ T6989] should_fail_ex+0x262/0x280 [ 120.952648][ T6989] should_fail+0xb/0x20 [ 120.952669][ T6989] should_fail_usercopy+0x1a/0x20 [ 120.952697][ T6989] strncpy_from_user+0x27/0x250 [ 120.952734][ T6989] __se_sys_memfd_create+0x20f/0x3b0 [ 120.952815][ T6989] __x64_sys_memfd_create+0x31/0x40 [ 120.952845][ T6989] x64_sys_call+0x1955/0x2550 [ 120.952875][ T6989] do_syscall_64+0x112/0x360 [ 120.952987][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.953014][ T6989] RIP: 0033:0x7f20ddfbe159 [ 120.953069][ T6989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.953091][ T6989] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.953117][ T6989] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 120.953134][ T6989] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 120.953151][ T6989] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 120.953226][ T6989] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 120.953242][ T6989] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 120.953289][ T6989] [ 120.992511][ T6994] FAULT_INJECTION: forcing a failure. [ 120.992511][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 120.992559][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.5.1322 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.992587][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.992603][ T6994] Call Trace: [ 120.992675][ T6994] [ 120.992762][ T6994] __dump_stack+0x1d/0x30 [ 120.992790][ T6994] dump_stack_lvl+0x95/0xd0 [ 120.992859][ T6994] dump_stack+0x15/0x1b [ 120.992948][ T6994] should_fail_ex+0x262/0x280 [ 120.992972][ T6994] ? __se_sys_memfd_create+0x1df/0x3b0 [ 120.993001][ T6994] should_failslab+0x8c/0xb0 [ 120.993104][ T6994] __kmalloc_cache_noprof+0x7a/0x400 [ 120.993192][ T6994] ? __se_sys_memfd_create+0x1df/0x3b0 [ 120.993276][ T6994] __se_sys_memfd_create+0x1df/0x3b0 [ 120.993305][ T6994] __x64_sys_memfd_create+0x31/0x40 [ 120.993333][ T6994] x64_sys_call+0x1955/0x2550 [ 120.993361][ T6994] do_syscall_64+0x112/0x360 [ 120.993395][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.993420][ T6994] RIP: 0033:0x7f1f1142e159 [ 120.993438][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.993539][ T6994] RSP: 002b:00007f1f0fe86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.993561][ T6994] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 120.993577][ T6994] RDX: 00007f1f0fe86ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 120.993655][ T6994] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 120.993671][ T6994] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 120.993685][ T6994] R13: 00007f1f0fe86ee0 R14: 00007f1f0fe86ea0 R15: 0000200000000000 [ 120.993706][ T6994] [ 121.453318][ T7005] loop3: detected capacity change from 0 to 512 [ 121.465753][ T7005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.481106][ T7005] EXT4-fs (loop3): 1 truncate cleaned up [ 121.490400][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 121.490427][ T29] audit: type=1400 audit(1788356635.399:1910): avc: denied { write } for pid=7004 comm="syz.3.1327" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.014153][ T29] audit: type=1400 audit(1788356635.919:1911): avc: denied { connect } for pid=7029 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.223783][ T7034] FAULT_INJECTION: forcing a failure. [ 122.223783][ T7034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.223939][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.5.1337 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.223964][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.223977][ T7034] Call Trace: [ 122.223986][ T7034] [ 122.223995][ T7034] __dump_stack+0x1d/0x30 [ 122.224022][ T7034] dump_stack_lvl+0x95/0xd0 [ 122.224090][ T7034] dump_stack+0x15/0x1b [ 122.224117][ T7034] should_fail_ex+0x262/0x280 [ 122.224141][ T7034] should_fail+0xb/0x20 [ 122.224163][ T7034] should_fail_usercopy+0x1a/0x20 [ 122.224215][ T7034] strncpy_from_user+0x27/0x250 [ 122.224253][ T7034] __se_sys_memfd_create+0x20f/0x3b0 [ 122.224289][ T7034] __x64_sys_memfd_create+0x31/0x40 [ 122.224356][ T7034] x64_sys_call+0x1955/0x2550 [ 122.224422][ T7034] do_syscall_64+0x112/0x360 [ 122.224453][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.224480][ T7034] RIP: 0033:0x7f1f1142e159 [ 122.224500][ T7034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.224603][ T7034] RSP: 002b:00007f1f0fe86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 122.224628][ T7034] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 122.224645][ T7034] RDX: 00007f1f0fe86ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 122.224663][ T7034] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 122.224725][ T7034] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 122.224739][ T7034] R13: 00007f1f0fe86ee0 R14: 00007f1f0fe86ea0 R15: 0000200000000000 [ 122.224761][ T7034] [ 122.403122][ T29] audit: type=1400 audit(1788356636.309:1912): avc: denied { audit_write } for pid=7044 comm="syz.4.1342" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.589570][ T6969] loop2: detected capacity change from 0 to 8192 [ 122.623533][ T6983] loop0: detected capacity change from 0 to 8192 [ 122.651700][ T7056] loop5: detected capacity change from 0 to 1024 [ 122.659314][ T7056] EXT4-fs: inline encryption not supported [ 122.667805][ T7056] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.681346][ T7056] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.1346: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.681440][ T7056] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 122.681624][ T7056] EXT4-fs (loop5): Remounting filesystem read-only [ 122.681641][ T7056] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 122.681678][ T7056] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 122.681712][ T7056] EXT4-fs (loop5): 1 orphan inode deleted [ 122.842723][ T29] audit: type=1400 audit(1788356636.749:1913): avc: denied { bind } for pid=7071 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.882153][ T29] audit: type=1400 audit(1788356636.789:1914): avc: denied { sqpoll } for pid=7075 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.087375][ T7079] FAULT_INJECTION: forcing a failure. [ 123.087375][ T7079] name failslab, interval 1, probability 0, space 0, times 0 [ 123.087462][ T7079] CPU: 1 UID: 0 PID: 7079 Comm: syz.4.1356 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.087495][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.087509][ T7079] Call Trace: [ 123.087517][ T7079] [ 123.087525][ T7079] __dump_stack+0x1d/0x30 [ 123.087552][ T7079] dump_stack_lvl+0x95/0xd0 [ 123.087643][ T7079] dump_stack+0x15/0x1b [ 123.087727][ T7079] should_fail_ex+0x262/0x280 [ 123.087748][ T7079] ? __se_sys_memfd_create+0x1df/0x3b0 [ 123.087797][ T7079] should_failslab+0x8c/0xb0 [ 123.087828][ T7079] __kmalloc_cache_noprof+0x7a/0x400 [ 123.087861][ T7079] ? __se_sys_memfd_create+0x1df/0x3b0 [ 123.087889][ T7079] ? __sanitizer_cov_trace_pc+0x10/0x80 [ 123.087928][ T7079] __se_sys_memfd_create+0x1df/0x3b0 [ 123.087957][ T7079] __x64_sys_memfd_create+0x31/0x40 [ 123.087985][ T7079] x64_sys_call+0x1955/0x2550 [ 123.088077][ T7079] do_syscall_64+0x112/0x360 [ 123.088109][ T7079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.088134][ T7079] RIP: 0033:0x7feddce8e159 [ 123.088151][ T7079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.088242][ T7079] RSP: 002b:00007feddb8e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 123.088265][ T7079] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007feddce8e159 [ 123.088291][ T7079] RDX: 00007feddb8e6ee0 RSI: 0000000000000000 RDI: 00007feddcf25204 [ 123.088306][ T7079] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 123.088321][ T7079] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 123.088336][ T7079] R13: 00007feddb8e6ee0 R14: 00007feddb8e6ea0 R15: 0000200000000000 [ 123.088356][ T7079] [ 123.547163][ T29] audit: type=1400 audit(1788356637.459:1915): avc: denied { write } for pid=7106 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.646416][ T7100] loop3: detected capacity change from 0 to 128 [ 123.654637][ T29] audit: type=1400 audit(1788356637.559:1916): avc: denied { write } for pid=7110 comm="syz.4.1370" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.754889][ T7100] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.784260][ T29] audit: type=1400 audit(1788356637.669:1917): avc: denied { write } for pid=7099 comm="syz.3.1365" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.164331][ T7123] FAULT_INJECTION: forcing a failure. [ 124.164331][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 124.164393][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.5.1375 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.164445][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.164459][ T7123] Call Trace: [ 124.164467][ T7123] [ 124.164474][ T7123] __dump_stack+0x1d/0x30 [ 124.164518][ T7123] dump_stack_lvl+0x95/0xd0 [ 124.164573][ T7123] dump_stack+0x15/0x1b [ 124.164626][ T7123] should_fail_ex+0x262/0x280 [ 124.164646][ T7123] ? __se_sys_memfd_create+0x1df/0x3b0 [ 124.164673][ T7123] should_failslab+0x8c/0xb0 [ 124.164704][ T7123] __kmalloc_cache_noprof+0x7a/0x400 [ 124.164737][ T7123] ? __se_sys_futex+0x2f6/0x370 [ 124.164779][ T7123] ? __se_sys_memfd_create+0x1df/0x3b0 [ 124.164881][ T7123] __se_sys_memfd_create+0x1df/0x3b0 [ 124.164911][ T7123] __x64_sys_memfd_create+0x31/0x40 [ 124.164939][ T7123] x64_sys_call+0x1955/0x2550 [ 124.165022][ T7123] do_syscall_64+0x112/0x360 [ 124.165054][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.165079][ T7123] RIP: 0033:0x7f1f1142e159 [ 124.165097][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.165117][ T7123] RSP: 002b:00007f1f0fe65e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 124.165159][ T7123] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 124.165174][ T7123] RDX: 00007f1f0fe65ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 124.165189][ T7123] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 124.165205][ T7123] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 124.165219][ T7123] R13: 00007f1f0fe65ee0 R14: 00007f1f0fe65ea0 R15: 0000200000000000 [ 124.165277][ T7123] [ 124.437387][ T7137] autofs4:pid:7137:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 124.437502][ T7137] autofs4:pid:7137:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 124.634785][ T7143] loop4: detected capacity change from 0 to 1024 [ 124.647133][ T7143] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 124.649167][ T7143] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.1384: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.649205][ T7143] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.649358][ T7143] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.1384: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.649393][ T7143] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.649457][ T7143] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1384: Failed to acquire dquot type 0 [ 124.649480][ T7143] loop4: lost filesystem error report for type 5 error -117 [ 124.649586][ T7143] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 124.649606][ T7143] loop4: lost filesystem error report for type 5 error -117 [ 124.649740][ T7143] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.1384: mark_inode_dirty error [ 124.649795][ T7143] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.649856][ T7143] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 124.649997][ T7143] EXT4-fs (loop4): 1 orphan inode deleted [ 124.779962][ T313] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.780030][ T313] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.780212][ T313] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 124.780298][ T313] loop4: lost filesystem error report for type 5 error -117 [ 124.780632][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.780677][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 124.780819][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 124.780837][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 124.780891][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 124.780915][ T3296] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.781098][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.781125][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 125.022228][ T7150] loop4: detected capacity change from 0 to 128 [ 125.121098][ T7160] __nla_validate_parse: 2 callbacks suppressed [ 125.121133][ T7160] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1391'. [ 125.177081][ T7150] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.227627][ T7164] loop5: detected capacity change from 0 to 128 [ 125.255254][ T7164] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.441771][ T7170] FAULT_INJECTION: forcing a failure. [ 125.441771][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.442249][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.3.1394 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.442281][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.442296][ T7170] Call Trace: [ 125.442304][ T7170] [ 125.442312][ T7170] __dump_stack+0x1d/0x30 [ 125.442337][ T7170] dump_stack_lvl+0x95/0xd0 [ 125.442369][ T7170] dump_stack+0x15/0x1b [ 125.442394][ T7170] should_fail_ex+0x262/0x280 [ 125.442421][ T7170] should_fail+0xb/0x20 [ 125.442494][ T7170] should_fail_usercopy+0x1a/0x20 [ 125.442631][ T7170] strncpy_from_user+0x27/0x250 [ 125.442670][ T7170] __se_sys_memfd_create+0x20f/0x3b0 [ 125.442780][ T7170] __x64_sys_memfd_create+0x31/0x40 [ 125.442817][ T7170] x64_sys_call+0x1955/0x2550 [ 125.442846][ T7170] do_syscall_64+0x112/0x360 [ 125.442906][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.442933][ T7170] RIP: 0033:0x7f20ddfbe159 [ 125.442949][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.442976][ T7170] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 125.442996][ T7170] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 125.443012][ T7170] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 125.443028][ T7170] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 125.443050][ T7170] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 125.443066][ T7170] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 125.443089][ T7170] [ 125.510115][ T7091] loop0: detected capacity change from 0 to 8192 [ 125.673119][ T7084] loop2: detected capacity change from 0 to 8192 [ 125.836764][ T7186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1401'. [ 125.920680][ T7181] loop0: detected capacity change from 0 to 128 [ 125.926490][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1405'. [ 125.968474][ T7197] FAULT_INJECTION: forcing a failure. [ 125.968474][ T7197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.968591][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.5.1406 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.968619][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.968679][ T7197] Call Trace: [ 125.968686][ T7197] [ 125.968696][ T7197] __dump_stack+0x1d/0x30 [ 125.968725][ T7197] dump_stack_lvl+0x95/0xd0 [ 125.968790][ T7197] dump_stack+0x15/0x1b [ 125.968816][ T7197] should_fail_ex+0x262/0x280 [ 125.968838][ T7197] should_fail+0xb/0x20 [ 125.968860][ T7197] should_fail_usercopy+0x1a/0x20 [ 125.968963][ T7197] strncpy_from_user+0x27/0x250 [ 125.969001][ T7197] __se_sys_memfd_create+0x20f/0x3b0 [ 125.969032][ T7197] __x64_sys_memfd_create+0x31/0x40 [ 125.969184][ T7197] x64_sys_call+0x1955/0x2550 [ 125.969215][ T7197] do_syscall_64+0x112/0x360 [ 125.969312][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.969339][ T7197] RIP: 0033:0x7f1f1142e159 [ 125.969359][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.969400][ T7197] RSP: 002b:00007f1f0fe86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 125.969425][ T7197] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 125.969441][ T7197] RDX: 00007f1f0fe86ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 125.969458][ T7197] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 125.969474][ T7197] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 125.969489][ T7197] R13: 00007f1f0fe86ee0 R14: 00007f1f0fe86ea0 R15: 0000200000000000 [ 125.969511][ T7197] [ 125.998755][ T7181] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.197842][ T7207] loop3: detected capacity change from 0 to 8192 [ 126.285397][ T7216] netlink: 'syz.2.1414': attribute type 3 has an invalid length. [ 126.451920][ T7224] FAULT_INJECTION: forcing a failure. [ 126.451920][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.452087][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.0.1417 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.452112][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.452198][ T7224] Call Trace: [ 126.452204][ T7224] [ 126.452211][ T7224] __dump_stack+0x1d/0x30 [ 126.452235][ T7224] dump_stack_lvl+0x95/0xd0 [ 126.452319][ T7224] dump_stack+0x15/0x1b [ 126.452343][ T7224] should_fail_ex+0x262/0x280 [ 126.452366][ T7224] should_fail+0xb/0x20 [ 126.452383][ T7224] should_fail_usercopy+0x1a/0x20 [ 126.452441][ T7224] strncpy_from_user+0x27/0x250 [ 126.452489][ T7224] __se_sys_memfd_create+0x20f/0x3b0 [ 126.452521][ T7224] __x64_sys_memfd_create+0x31/0x40 [ 126.452591][ T7224] x64_sys_call+0x1955/0x2550 [ 126.452619][ T7224] do_syscall_64+0x112/0x360 [ 126.452684][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.452710][ T7224] RIP: 0033:0x7f940eefe159 [ 126.452728][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.452749][ T7224] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 126.452773][ T7224] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 126.452842][ T7224] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 126.452858][ T7224] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 126.452885][ T7224] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 126.452900][ T7224] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 126.452921][ T7224] [ 126.561770][ T7239] loop2: detected capacity change from 0 to 128 [ 126.630855][ T7239] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.644197][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 126.644213][ T29] audit: type=1400 audit(1788356640.549:1973): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.674494][ T7245] FAULT_INJECTION: forcing a failure. [ 126.674494][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 126.674694][ T7245] CPU: 1 UID: 0 PID: 7245 Comm: syz.5.1426 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.674776][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.674790][ T7245] Call Trace: [ 126.674799][ T7245] [ 126.674807][ T7245] __dump_stack+0x1d/0x30 [ 126.674834][ T7245] dump_stack_lvl+0x95/0xd0 [ 126.674861][ T7245] dump_stack+0x15/0x1b [ 126.674926][ T7245] should_fail_ex+0x262/0x280 [ 126.674949][ T7245] ? __se_sys_memfd_create+0x1df/0x3b0 [ 126.675057][ T7245] should_failslab+0x8c/0xb0 [ 126.675088][ T7245] __kmalloc_cache_noprof+0x7a/0x400 [ 126.675121][ T7245] ? __se_sys_memfd_create+0x1df/0x3b0 [ 126.675202][ T7245] __se_sys_memfd_create+0x1df/0x3b0 [ 126.675248][ T7245] __x64_sys_memfd_create+0x31/0x40 [ 126.675287][ T7245] x64_sys_call+0x1955/0x2550 [ 126.675316][ T7245] do_syscall_64+0x112/0x360 [ 126.675490][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.675516][ T7245] RIP: 0033:0x7f1f1142e159 [ 126.675534][ T7245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.675554][ T7245] RSP: 002b:00007f1f0fe86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 126.675606][ T7245] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f1f1142e159 [ 126.675708][ T7245] RDX: 00007f1f0fe86ee0 RSI: 0000000000000000 RDI: 00007f1f114c5204 [ 126.675725][ T7245] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 126.675739][ T7245] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 126.675755][ T7245] R13: 00007f1f0fe86ee0 R14: 00007f1f0fe86ea0 R15: 0000200000000000 [ 126.675778][ T7245] [ 126.690585][ T29] audit: type=1400 audit(1788356640.589:1974): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.700182][ T29] audit: type=1400 audit(1788356640.589:1975): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.710124][ T29] audit: type=1400 audit(1788356640.609:1976): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.711871][ T29] audit: type=1400 audit(1788356640.609:1977): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.721616][ T29] audit: type=1400 audit(1788356640.629:1978): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.729455][ T29] audit: type=1400 audit(1788356640.639:1979): avc: denied { write } for pid=7238 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.977150][ T7253] loop4: detected capacity change from 0 to 256 [ 126.990106][ T7253] msdos: Unknown parameter 'ÿ' [ 126.992458][ T7253] tmpfs: Bad value for 'nr_inodes' [ 127.077797][ T7263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 127.112977][ T7261] loop0: detected capacity change from 0 to 128 [ 127.156580][ T29] audit: type=1400 audit(1788356641.069:1980): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.156619][ T29] audit: type=1400 audit(1788356641.069:1981): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.204576][ T29] audit: type=1400 audit(1788356641.109:1982): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.227900][ T7261] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.298463][ T7267] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.586255][ T7289] FAULT_INJECTION: forcing a failure. [ 127.586255][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.586331][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.0.1445 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.586359][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.586390][ T7289] Call Trace: [ 127.586399][ T7289] [ 127.586408][ T7289] __dump_stack+0x1d/0x30 [ 127.586439][ T7289] dump_stack_lvl+0x95/0xd0 [ 127.586464][ T7289] dump_stack+0x15/0x1b [ 127.586517][ T7289] should_fail_ex+0x262/0x280 [ 127.586538][ T7289] should_fail+0xb/0x20 [ 127.586559][ T7289] should_fail_usercopy+0x1a/0x20 [ 127.586585][ T7289] strncpy_from_user+0x27/0x250 [ 127.586651][ T7289] __se_sys_memfd_create+0x20f/0x3b0 [ 127.586742][ T7289] __x64_sys_memfd_create+0x31/0x40 [ 127.586773][ T7289] x64_sys_call+0x1955/0x2550 [ 127.586804][ T7289] do_syscall_64+0x112/0x360 [ 127.586864][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.586891][ T7289] RIP: 0033:0x7f940eefe159 [ 127.586966][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.587041][ T7289] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 127.587067][ T7289] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 127.587084][ T7289] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 127.587102][ T7289] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 127.587153][ T7289] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 127.587201][ T7289] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 127.587224][ T7289] [ 127.950901][ T7302] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.089264][ T7309] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.113991][ T7309] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.161049][ T7311] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.488923][ T7327] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.1458'. [ 128.488962][ T7327] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1458'. [ 128.526969][ T7318] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.781943][ T7344] FAULT_INJECTION: forcing a failure. [ 128.781943][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.782093][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.3.1464 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.782121][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.782136][ T7344] Call Trace: [ 128.782151][ T7344] [ 128.782161][ T7344] __dump_stack+0x1d/0x30 [ 128.782240][ T7344] dump_stack_lvl+0x95/0xd0 [ 128.782268][ T7344] dump_stack+0x15/0x1b [ 128.782342][ T7344] should_fail_ex+0x262/0x280 [ 128.782368][ T7344] should_fail+0xb/0x20 [ 128.782453][ T7344] should_fail_usercopy+0x1a/0x20 [ 128.782478][ T7344] strncpy_from_user+0x27/0x250 [ 128.782515][ T7344] __se_sys_memfd_create+0x20f/0x3b0 [ 128.782577][ T7344] __x64_sys_memfd_create+0x31/0x40 [ 128.782650][ T7344] x64_sys_call+0x1955/0x2550 [ 128.782688][ T7344] do_syscall_64+0x112/0x360 [ 128.782716][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.782750][ T7344] RIP: 0033:0x7f20ddfbe159 [ 128.782769][ T7344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.782788][ T7344] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 128.782812][ T7344] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 128.782868][ T7344] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 128.782885][ T7344] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 128.782901][ T7344] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 128.782914][ T7344] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 128.782937][ T7344] [ 129.055519][ T7353] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.165062][ T7362] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.207616][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 129.286704][ T7378] FAULT_INJECTION: forcing a failure. [ 129.286704][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.286812][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.286861][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.286874][ T7378] Call Trace: [ 129.286881][ T7378] [ 129.286890][ T7378] __dump_stack+0x1d/0x30 [ 129.286924][ T7378] dump_stack_lvl+0x95/0xd0 [ 129.286946][ T7378] dump_stack+0x15/0x1b [ 129.286971][ T7378] should_fail_ex+0x262/0x280 [ 129.286992][ T7378] should_fail+0xb/0x20 [ 129.287063][ T7378] should_fail_usercopy+0x1a/0x20 [ 129.287088][ T7378] strncpy_from_user+0x27/0x250 [ 129.287126][ T7378] __se_sys_memfd_create+0x20f/0x3b0 [ 129.287171][ T7378] __x64_sys_memfd_create+0x31/0x40 [ 129.287202][ T7378] x64_sys_call+0x1955/0x2550 [ 129.287234][ T7378] do_syscall_64+0x112/0x360 [ 129.287267][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.287358][ T7378] RIP: 0033:0x7f940eefe159 [ 129.287376][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.287394][ T7378] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 129.287413][ T7378] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 129.287428][ T7378] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 129.287443][ T7378] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 129.287536][ T7378] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 129.287553][ T7378] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 129.287587][ T7378] [ 130.072659][ T7382] set_capacity_and_notify: 8 callbacks suppressed [ 130.072765][ T7382] loop4: detected capacity change from 0 to 8192 [ 130.139935][ T3668] EXT4-fs unmount: 46 callbacks suppressed [ 130.139962][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.170938][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.203021][ T7390] loop3: detected capacity change from 0 to 512 [ 130.239191][ T7390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.239259][ T7390] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.245155][ T7390] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1485: Failed to acquire dquot type 0 [ 130.277855][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.389575][ T7417] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 130.389605][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'. [ 130.427653][ T7393] loop0: detected capacity change from 0 to 128 [ 130.466601][ T7393] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.491611][ T7393] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.591692][ T7425] FAULT_INJECTION: forcing a failure. [ 130.591692][ T7425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.591758][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.4.1498 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.591863][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.591877][ T7425] Call Trace: [ 130.591887][ T7425] [ 130.591895][ T7425] __dump_stack+0x1d/0x30 [ 130.591922][ T7425] dump_stack_lvl+0x95/0xd0 [ 130.592084][ T7425] dump_stack+0x15/0x1b [ 130.592108][ T7425] should_fail_ex+0x262/0x280 [ 130.592134][ T7425] should_fail+0xb/0x20 [ 130.592154][ T7425] should_fail_usercopy+0x1a/0x20 [ 130.592180][ T7425] strncpy_from_user+0x27/0x250 [ 130.592224][ T7425] __se_sys_memfd_create+0x20f/0x3b0 [ 130.592255][ T7425] __x64_sys_memfd_create+0x31/0x40 [ 130.592283][ T7425] x64_sys_call+0x1955/0x2550 [ 130.592350][ T7425] do_syscall_64+0x112/0x360 [ 130.592439][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.592465][ T7425] RIP: 0033:0x7feddce8e159 [ 130.592502][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.592570][ T7425] RSP: 002b:00007feddb8e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 130.592594][ T7425] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007feddce8e159 [ 130.592688][ T7425] RDX: 00007feddb8e6ee0 RSI: 0000000000000000 RDI: 00007feddcf25204 [ 130.592704][ T7425] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 130.592721][ T7425] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 130.592735][ T7425] R13: 00007feddb8e6ee0 R14: 00007feddb8e6ea0 R15: 0000200000000000 [ 130.592757][ T7425] [ 130.856982][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.997683][ T7463] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1514'. [ 130.997815][ T7463] openvswitch: netlink: Message has 6 unknown bytes. [ 131.130326][ T7476] FAULT_INJECTION: forcing a failure. [ 131.130326][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 131.130365][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.0.1515 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.130390][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.130404][ T7476] Call Trace: [ 131.130411][ T7476] [ 131.130419][ T7476] __dump_stack+0x1d/0x30 [ 131.130520][ T7476] dump_stack_lvl+0x95/0xd0 [ 131.130547][ T7476] dump_stack+0x15/0x1b [ 131.130569][ T7476] should_fail_ex+0x262/0x280 [ 131.130601][ T7476] ? __se_sys_memfd_create+0x1df/0x3b0 [ 131.130697][ T7476] should_failslab+0x8c/0xb0 [ 131.130731][ T7476] __kmalloc_cache_noprof+0x7a/0x400 [ 131.130799][ T7476] ? __se_sys_futex+0x2f6/0x370 [ 131.130831][ T7476] ? __se_sys_memfd_create+0x1df/0x3b0 [ 131.130863][ T7476] __se_sys_memfd_create+0x1df/0x3b0 [ 131.130959][ T7476] __x64_sys_memfd_create+0x31/0x40 [ 131.130989][ T7476] x64_sys_call+0x1955/0x2550 [ 131.131082][ T7476] do_syscall_64+0x112/0x360 [ 131.131161][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.131301][ T7476] RIP: 0033:0x7f940eefe159 [ 131.131320][ T7476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.131479][ T7476] RSP: 002b:00007f940d935e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 131.131500][ T7476] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 131.131514][ T7476] RDX: 00007f940d935ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 131.131529][ T7476] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 131.131546][ T7476] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 131.131561][ T7476] R13: 00007f940d935ee0 R14: 00007f940d935ea0 R15: 0000200000000000 [ 131.131596][ T7476] [ 131.213682][ T7466] loop5: detected capacity change from 0 to 128 [ 131.293474][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1522'. [ 131.293523][ T7481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.293554][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 131.293566][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 131.320697][ T7466] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.331773][ T7466] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.453823][ T7488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1525'. [ 131.453861][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1525'. [ 131.688210][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 131.688237][ T29] audit: type=1400 audit(1788356645.599:2109): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.688959][ T29] audit: type=1400 audit(1788356645.599:2110): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.691051][ T29] audit: type=1400 audit(1788356645.599:2111): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.691150][ T29] audit: type=1400 audit(1788356645.599:2112): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.691176][ T29] audit: type=1400 audit(1788356645.599:2113): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.691620][ T29] audit: type=1400 audit(1788356645.599:2114): avc: denied { write } for pid=3668 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.717391][ T7499] FAULT_INJECTION: forcing a failure. [ 131.717391][ T7499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.717439][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.2.1530 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.717467][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.717599][ T7499] Call Trace: [ 131.717607][ T7499] [ 131.717616][ T7499] __dump_stack+0x1d/0x30 [ 131.717643][ T7499] dump_stack_lvl+0x95/0xd0 [ 131.717692][ T7499] dump_stack+0x15/0x1b [ 131.717714][ T7499] should_fail_ex+0x262/0x280 [ 131.717761][ T7499] should_fail+0xb/0x20 [ 131.717781][ T7499] should_fail_usercopy+0x1a/0x20 [ 131.717844][ T7499] strncpy_from_user+0x27/0x250 [ 131.717879][ T7499] __se_sys_memfd_create+0x20f/0x3b0 [ 131.717975][ T7499] __x64_sys_memfd_create+0x31/0x40 [ 131.718003][ T7499] x64_sys_call+0x1955/0x2550 [ 131.718032][ T7499] do_syscall_64+0x112/0x360 [ 131.718064][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.718201][ T7499] RIP: 0033:0x7f8d5140e159 [ 131.718219][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.718240][ T7499] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 131.718307][ T7499] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 131.718324][ T7499] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 131.718383][ T7499] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 131.718398][ T7499] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 131.718413][ T7499] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 131.718435][ T7499] [ 132.029292][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.201872][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1541'. [ 132.390931][ T7475] loop4: detected capacity change from 0 to 8192 [ 132.425926][ T7526] loop2: detected capacity change from 0 to 128 [ 132.466863][ T7526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.484417][ T7530] FAULT_INJECTION: forcing a failure. [ 132.484417][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 132.484484][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.0.1544 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.484530][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.484546][ T7530] Call Trace: [ 132.484555][ T7530] [ 132.484565][ T7530] __dump_stack+0x1d/0x30 [ 132.484594][ T7530] dump_stack_lvl+0x95/0xd0 [ 132.484620][ T7530] dump_stack+0x15/0x1b [ 132.484689][ T7530] should_fail_ex+0x262/0x280 [ 132.484715][ T7530] ? __se_sys_memfd_create+0x1df/0x3b0 [ 132.484757][ T7530] should_failslab+0x8c/0xb0 [ 132.484790][ T7530] __kmalloc_cache_noprof+0x7a/0x400 [ 132.484876][ T7530] ? __se_sys_memfd_create+0x1df/0x3b0 [ 132.484909][ T7530] __se_sys_memfd_create+0x1df/0x3b0 [ 132.485013][ T7530] __x64_sys_memfd_create+0x31/0x40 [ 132.485044][ T7530] x64_sys_call+0x1955/0x2550 [ 132.485171][ T7530] do_syscall_64+0x112/0x360 [ 132.485205][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.485239][ T7530] RIP: 0033:0x7f940eefe159 [ 132.485258][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.485338][ T7530] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 132.485360][ T7530] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 132.485377][ T7530] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 132.485394][ T7530] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 132.485474][ T7530] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 132.485490][ T7530] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 132.485548][ T7530] [ 132.513673][ T7528] loop5: detected capacity change from 0 to 128 [ 132.592324][ T7528] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.593621][ T7528] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.600394][ T7526] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.617218][ T29] audit: type=1400 audit(1788356646.529:2115): avc: denied { write } for pid=7527 comm="syz.5.1543" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.618922][ T29] audit: type=1400 audit(1788356646.529:2116): avc: denied { write } for pid=7525 comm="syz.2.1542" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.683202][ T29] audit: type=1400 audit(1788356646.569:2117): avc: denied { write } for pid=7525 comm="syz.2.1542" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.705570][ T29] audit: type=1400 audit(1788356646.609:2119): avc: denied { write } for pid=7527 comm="syz.5.1543" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.873449][ T7545] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.972328][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.994151][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.112912][ T7575] FAULT_INJECTION: forcing a failure. [ 133.112912][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.113008][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.2.1563 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.113098][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.113110][ T7575] Call Trace: [ 133.113119][ T7575] [ 133.113129][ T7575] __dump_stack+0x1d/0x30 [ 133.113169][ T7575] dump_stack_lvl+0x95/0xd0 [ 133.113196][ T7575] dump_stack+0x15/0x1b [ 133.113230][ T7575] should_fail_ex+0x262/0x280 [ 133.113251][ T7575] should_fail+0xb/0x20 [ 133.113272][ T7575] should_fail_usercopy+0x1a/0x20 [ 133.113299][ T7575] strncpy_from_user+0x27/0x250 [ 133.113390][ T7575] __se_sys_memfd_create+0x20f/0x3b0 [ 133.113468][ T7575] __x64_sys_memfd_create+0x31/0x40 [ 133.113498][ T7575] x64_sys_call+0x1955/0x2550 [ 133.113529][ T7575] do_syscall_64+0x112/0x360 [ 133.113562][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.113621][ T7575] RIP: 0033:0x7f8d5140e159 [ 133.113676][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.113696][ T7575] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 133.113786][ T7575] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 133.113804][ T7575] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 133.113835][ T7575] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 133.113863][ T7575] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 133.113876][ T7575] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 133.113972][ T7575] [ 133.317824][ T7584] loop0: detected capacity change from 0 to 128 [ 133.362521][ T7582] loop5: detected capacity change from 0 to 128 [ 133.382363][ T7584] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 133.391509][ T7584] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.447912][ T7582] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 133.462928][ T7582] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.586163][ T7602] FAULT_INJECTION: forcing a failure. [ 133.586163][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.586229][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.3.1575 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.586275][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.586312][ T7602] Call Trace: [ 133.586321][ T7602] [ 133.586331][ T7602] __dump_stack+0x1d/0x30 [ 133.586360][ T7602] dump_stack_lvl+0x95/0xd0 [ 133.586387][ T7602] dump_stack+0x15/0x1b [ 133.586412][ T7602] should_fail_ex+0x262/0x280 [ 133.586498][ T7602] should_fail+0xb/0x20 [ 133.586519][ T7602] should_fail_usercopy+0x1a/0x20 [ 133.586547][ T7602] strncpy_from_user+0x27/0x250 [ 133.586584][ T7602] __se_sys_memfd_create+0x20f/0x3b0 [ 133.586627][ T7602] __x64_sys_memfd_create+0x31/0x40 [ 133.586655][ T7602] x64_sys_call+0x1955/0x2550 [ 133.586683][ T7602] do_syscall_64+0x112/0x360 [ 133.586727][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.586769][ T7602] RIP: 0033:0x7f20ddfbe159 [ 133.586786][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.586809][ T7602] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 133.586839][ T7602] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 133.586857][ T7602] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 133.586873][ T7602] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 133.586964][ T7602] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 133.586978][ T7602] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 133.587015][ T7602] [ 133.758521][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.817906][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.819569][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1578'. [ 134.055708][ T7631] loop0: detected capacity change from 0 to 128 [ 134.237598][ T7631] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.239957][ T7631] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.487135][ T7635] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.490719][ T7635] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.690851][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.778259][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.048025][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 135.331460][ T7666] FAULT_INJECTION: forcing a failure. [ 135.331460][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.331719][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.3.1599 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.331747][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.331762][ T7666] Call Trace: [ 135.331770][ T7666] [ 135.331778][ T7666] __dump_stack+0x1d/0x30 [ 135.331806][ T7666] dump_stack_lvl+0x95/0xd0 [ 135.331832][ T7666] dump_stack+0x15/0x1b [ 135.331857][ T7666] should_fail_ex+0x262/0x280 [ 135.331894][ T7666] should_fail+0xb/0x20 [ 135.331915][ T7666] should_fail_usercopy+0x1a/0x20 [ 135.331940][ T7666] strncpy_from_user+0x27/0x250 [ 135.331973][ T7666] ? __tsan_memcpy+0x2b7/0x3c0 [ 135.332056][ T7666] __se_sys_memfd_create+0x20f/0x3b0 [ 135.332090][ T7666] __x64_sys_memfd_create+0x31/0x40 [ 135.332120][ T7666] x64_sys_call+0x1955/0x2550 [ 135.332232][ T7666] do_syscall_64+0x112/0x360 [ 135.332266][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.332294][ T7666] RIP: 0033:0x7f20ddfbe159 [ 135.332313][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.332368][ T7666] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 135.332389][ T7666] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 135.332404][ T7666] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 135.332420][ T7666] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 135.332436][ T7666] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 135.332513][ T7666] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 135.332612][ T7666] [ 135.570266][ T7625] set_capacity_and_notify: 1 callbacks suppressed [ 135.570341][ T7625] loop4: detected capacity change from 0 to 8192 [ 135.627626][ T7675] loop0: detected capacity change from 0 to 128 [ 135.805932][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 135.805986][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 135.830709][ T7675] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.842112][ T7675] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.243932][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 136.378894][ T7644] loop2: detected capacity change from 0 to 8192 [ 136.458734][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.525911][ T7709] loop4: detected capacity change from 0 to 512 [ 136.541434][ T7709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.541511][ T7709] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.574242][ T7712] FAULT_INJECTION: forcing a failure. [ 136.574242][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 136.574342][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.0.1615 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.574368][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.574381][ T7712] Call Trace: [ 136.574389][ T7712] [ 136.574405][ T7712] __dump_stack+0x1d/0x30 [ 136.574431][ T7712] dump_stack_lvl+0x95/0xd0 [ 136.574507][ T7712] dump_stack+0x15/0x1b [ 136.574533][ T7712] should_fail_ex+0x262/0x280 [ 136.574558][ T7712] ? __se_sys_memfd_create+0x1df/0x3b0 [ 136.574589][ T7712] should_failslab+0x8c/0xb0 [ 136.574745][ T7712] __kmalloc_cache_noprof+0x7a/0x400 [ 136.574780][ T7712] ? __se_sys_futex+0x2f6/0x370 [ 136.574812][ T7712] ? __se_sys_memfd_create+0x1df/0x3b0 [ 136.574896][ T7712] __se_sys_memfd_create+0x1df/0x3b0 [ 136.574924][ T7712] __x64_sys_memfd_create+0x31/0x40 [ 136.574950][ T7712] x64_sys_call+0x1955/0x2550 [ 136.575038][ T7712] do_syscall_64+0x112/0x360 [ 136.575072][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.575130][ T7712] RIP: 0033:0x7f940eefe159 [ 136.575146][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.575175][ T7712] RSP: 002b:00007f940d935e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 136.575210][ T7712] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 136.575224][ T7712] RDX: 00007f940d935ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 136.575239][ T7712] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 136.575254][ T7712] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 136.575269][ T7712] R13: 00007f940d935ee0 R14: 00007f940d935ea0 R15: 0000200000000000 [ 136.575288][ T7712] [ 136.585580][ T7709] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1616: Failed to acquire dquot type 0 [ 136.676401][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.785014][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 136.785045][ T29] audit: type=1400 audit(1788356650.689:2209): avc: denied { lock } for pid=7719 comm="syz.4.1619" path="socket:[19350]" dev="sockfs" ino=19350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.854799][ T7728] FAULT_INJECTION: forcing a failure. [ 136.854799][ T7728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.871343][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.4.1624 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.871373][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.871394][ T7728] Call Trace: [ 136.871402][ T7728] [ 136.871410][ T7728] __dump_stack+0x1d/0x30 [ 136.871441][ T7728] dump_stack_lvl+0x95/0xd0 [ 136.871549][ T7728] dump_stack+0x15/0x1b [ 136.871574][ T7728] should_fail_ex+0x262/0x280 [ 136.871600][ T7728] should_fail+0xb/0x20 [ 136.871684][ T7728] should_fail_usercopy+0x1a/0x20 [ 136.871712][ T7728] strncpy_from_user+0x27/0x250 [ 136.871750][ T7728] __se_sys_memfd_create+0x20f/0x3b0 [ 136.871784][ T7728] __x64_sys_memfd_create+0x31/0x40 [ 136.871827][ T7728] x64_sys_call+0x1955/0x2550 [ 136.871858][ T7728] do_syscall_64+0x112/0x360 [ 136.871950][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.871977][ T7728] RIP: 0033:0x7feddce8e159 [ 136.872027][ T7728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.872050][ T7728] RSP: 002b:00007feddb8e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 136.872076][ T7728] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007feddce8e159 [ 136.872097][ T7728] RDX: 00007feddb8e6ee0 RSI: 0000000000000000 RDI: 00007feddcf25204 [ 136.872114][ T7728] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 136.872131][ T7728] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 136.872150][ T7728] R13: 00007feddb8e6ee0 R14: 00007feddb8e6ea0 R15: 0000200000000000 [ 136.872172][ T7728] [ 137.060061][ T7730] loop3: detected capacity change from 0 to 128 [ 137.120314][ T7730] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.124740][ T7730] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.144834][ T29] audit: type=1400 audit(1788356651.049:2210): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.178683][ T7734] loop2: detected capacity change from 0 to 128 [ 137.197834][ T7739] loop0: detected capacity change from 0 to 1024 [ 137.203707][ T7739] EXT4-fs: Ignoring removed bh option [ 137.221191][ T7739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 137.230359][ T29] audit: type=1400 audit(1788356651.139:2211): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.237787][ T29] audit: type=1400 audit(1788356651.149:2212): avc: denied { write } for pid=7738 comm="syz.0.1630" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.237889][ T29] audit: type=1400 audit(1788356651.149:2213): avc: denied { unlink } for pid=7738 comm="syz.0.1630" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.265510][ T7734] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.271393][ T29] audit: type=1400 audit(1788356651.179:2214): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.276013][ T7734] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.293951][ T29] audit: type=1400 audit(1788356651.199:2215): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.293984][ T29] audit: type=1400 audit(1788356651.199:2216): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.297134][ T29] audit: type=1400 audit(1788356651.199:2217): avc: denied { write } for pid=7733 comm="syz.2.1628" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.300769][ T29] audit: type=1400 audit(1788356651.209:2218): avc: denied { write } for pid=7729 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.303215][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 137.461359][ T7751] loop4: detected capacity change from 0 to 512 [ 137.461993][ T7751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.474415][ T7751] EXT4-fs (loop4): 1 truncate cleaned up [ 137.474847][ T7751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.524669][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.541095][ T7758] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1636'. [ 137.541126][ T7758] netlink: zone id is out of range [ 137.552197][ T7758] netlink: del zone limit has 4 unknown bytes [ 137.615599][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.691590][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.711345][ T7781] loop4: detected capacity change from 0 to 512 [ 137.724874][ T7781] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 137.725094][ T7781] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.741788][ T7781] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1647: Failed to acquire dquot type 1 [ 137.741892][ T7781] loop4: lost filesystem error report for type 5 error -5 [ 137.753263][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 137.753285][ C1] EXT4-fs (loop4): initial error at time 1788356651: ext4_acquire_dquot:7069 [ 137.753311][ C1] EXT4-fs (loop4): last error at time 1788356651: ext4_acquire_dquot:7069 [ 137.767885][ T7781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1647: bg 0: block 40: padding at end of block bitmap is not set [ 137.767993][ T7781] loop4: lost filesystem error report for type 5 error -117 [ 137.777654][ T7781] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 137.777679][ T7781] loop4: lost filesystem error report for type 5 error -117 [ 137.806418][ T7781] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #16: comm syz.4.1647: data will be lost [ 137.806515][ T7781] EXT4-fs (loop4): 1 truncate cleaned up [ 137.806964][ T7781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.894830][ T7791] loop0: detected capacity change from 0 to 128 [ 137.908687][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.004736][ T7791] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.012397][ T7791] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.024141][ T7783] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.034250][ T7783] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.203002][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.256298][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.314588][ T7825] xt_cgroup: path and classid specified [ 138.392009][ T7813] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.396310][ T7834] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1667'. [ 138.414937][ T7813] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.561254][ T7830] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.575941][ T7830] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.600804][ T7838] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.602000][ T7838] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.731256][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.817821][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.881878][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.909130][ T7859] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.909254][ T7859] ext4 filesystem being mounted at /372/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.964544][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.117265][ T7876] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.123043][ T7876] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.299738][ T7886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.299987][ T7886] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.357301][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.594551][ T7884] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.594805][ T7884] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.643645][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.880785][ T7912] FAULT_INJECTION: forcing a failure. [ 139.880785][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 139.881041][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.2.1699 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.881069][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.881085][ T7912] Call Trace: [ 139.881094][ T7912] [ 139.881104][ T7912] __dump_stack+0x1d/0x30 [ 139.881179][ T7912] dump_stack_lvl+0x95/0xd0 [ 139.881203][ T7912] dump_stack+0x15/0x1b [ 139.881225][ T7912] should_fail_ex+0x262/0x280 [ 139.881250][ T7912] ? __se_sys_memfd_create+0x1df/0x3b0 [ 139.881282][ T7912] should_failslab+0x8c/0xb0 [ 139.881381][ T7912] __kmalloc_cache_noprof+0x7a/0x400 [ 139.881417][ T7912] ? __se_sys_memfd_create+0x1df/0x3b0 [ 139.881445][ T7912] __se_sys_memfd_create+0x1df/0x3b0 [ 139.881550][ T7912] __x64_sys_memfd_create+0x31/0x40 [ 139.881615][ T7912] x64_sys_call+0x1955/0x2550 [ 139.881701][ T7912] do_syscall_64+0x112/0x360 [ 139.881740][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.881767][ T7912] RIP: 0033:0x7f8d5140e159 [ 139.881787][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.881877][ T7912] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 139.881904][ T7912] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 139.881922][ T7912] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 139.881938][ T7912] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 139.881953][ T7912] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 139.881971][ T7912] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 139.882019][ T7912] [ 140.015758][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.150013][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 140.350067][ T7946] FAULT_INJECTION: forcing a failure. [ 140.350067][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.350144][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.1715 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.350176][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.350206][ T7946] Call Trace: [ 140.350215][ T7946] [ 140.350224][ T7946] __dump_stack+0x1d/0x30 [ 140.350255][ T7946] dump_stack_lvl+0x95/0xd0 [ 140.350281][ T7946] dump_stack+0x15/0x1b [ 140.350367][ T7946] should_fail_ex+0x262/0x280 [ 140.350391][ T7946] should_fail+0xb/0x20 [ 140.350412][ T7946] should_fail_usercopy+0x1a/0x20 [ 140.350515][ T7946] strncpy_from_user+0x27/0x250 [ 140.350549][ T7946] __se_sys_memfd_create+0x20f/0x3b0 [ 140.350605][ T7946] __x64_sys_memfd_create+0x31/0x40 [ 140.350642][ T7946] x64_sys_call+0x1955/0x2550 [ 140.350672][ T7946] do_syscall_64+0x112/0x360 [ 140.350706][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.350772][ T7946] RIP: 0033:0x7f20ddfbe159 [ 140.350790][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.350812][ T7946] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 140.350836][ T7946] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 140.350852][ T7946] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 140.350904][ T7946] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 140.350920][ T7946] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 140.350936][ T7946] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 140.350958][ T7946] [ 140.575984][ T7960] set_capacity_and_notify: 11 callbacks suppressed [ 140.576011][ T7960] loop5: detected capacity change from 0 to 1024 [ 140.577003][ T7944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.583592][ T7944] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.633324][ T7960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.646876][ T7960] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1720: missing EA_INODE flag [ 140.648452][ T7960] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1720: error while reading EA inode 11 err=-117 [ 140.648596][ T7960] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.661098][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 140.699468][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.858140][ T7978] loop5: detected capacity change from 0 to 128 [ 140.891641][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.892180][ T7984] loop0: detected capacity change from 0 to 512 [ 140.892519][ T7984] EXT4-fs: Ignoring removed i_version option [ 140.892539][ T7984] EXT4-fs: Ignoring removed nobh option [ 140.892830][ T7984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.913466][ T7978] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.915171][ T7978] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.933493][ T7984] EXT4-fs (loop0): 1 truncate cleaned up [ 140.933898][ T7984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.993667][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.023618][ T7992] hsr_slave_0: left promiscuous mode [ 141.033377][ T7992] hsr_slave_1: left promiscuous mode [ 141.169345][ T3668] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.278325][ T8002] FAULT_INJECTION: forcing a failure. [ 141.278325][ T8002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.278461][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.278491][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.278550][ T8002] Call Trace: [ 141.278559][ T8002] [ 141.278569][ T8002] __dump_stack+0x1d/0x30 [ 141.278594][ T8002] dump_stack_lvl+0x95/0xd0 [ 141.278617][ T8002] dump_stack+0x15/0x1b [ 141.278637][ T8002] should_fail_ex+0x262/0x280 [ 141.278658][ T8002] should_fail+0xb/0x20 [ 141.278676][ T8002] should_fail_usercopy+0x1a/0x20 [ 141.278769][ T8002] strncpy_from_user+0x27/0x250 [ 141.278801][ T8002] __se_sys_memfd_create+0x20f/0x3b0 [ 141.278832][ T8002] __x64_sys_memfd_create+0x31/0x40 [ 141.278939][ T8002] x64_sys_call+0x1955/0x2550 [ 141.278969][ T8002] do_syscall_64+0x112/0x360 [ 141.279000][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.279022][ T8002] RIP: 0033:0x7f940eefe159 [ 141.279041][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.279060][ T8002] RSP: 002b:00007f940d956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 141.279125][ T8002] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f940eefe159 [ 141.279143][ T8002] RDX: 00007f940d956ee0 RSI: 0000000000000000 RDI: 00007f940ef95204 [ 141.279158][ T8002] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 141.279172][ T8002] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 141.279185][ T8002] R13: 00007f940d956ee0 R14: 00007f940d956ea0 R15: 0000200000000000 [ 141.279223][ T8002] [ 141.666676][ T8007] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 141.666799][ T8007] netlink: 'syz.0.1739': attribute type 2 has an invalid length. [ 141.896961][ T8011] loop2: detected capacity change from 0 to 128 [ 141.958440][ T8011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.976304][ T8011] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.035090][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 142.035123][ T29] audit: type=1400 audit(1788356655.939:2362): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.091221][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'. [ 142.144490][ T29] audit: type=1400 audit(1788356656.049:2363): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.145177][ T29] audit: type=1400 audit(1788356656.049:2364): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.146577][ T29] audit: type=1400 audit(1788356656.059:2365): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.146611][ T29] audit: type=1400 audit(1788356656.059:2366): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.156995][ T29] audit: type=1400 audit(1788356656.059:2367): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.213082][ T29] audit: type=1400 audit(1788356656.119:2368): avc: denied { write } for pid=8010 comm="syz.2.1741" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.468386][ T7990] loop4: detected capacity change from 0 to 8192 [ 142.551238][ T29] audit: type=1400 audit(1788356656.459:2369): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.551284][ T29] audit: type=1400 audit(1788356656.459:2370): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.553202][ T29] audit: type=1400 audit(1788356656.459:2371): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.572263][ T8031] FAULT_INJECTION: forcing a failure. [ 142.572263][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.572308][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.3.1749 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.572336][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.572386][ T8031] Call Trace: [ 142.572394][ T8031] [ 142.572405][ T8031] __dump_stack+0x1d/0x30 [ 142.572449][ T8031] dump_stack_lvl+0x95/0xd0 [ 142.572473][ T8031] dump_stack+0x15/0x1b [ 142.572496][ T8031] should_fail_ex+0x262/0x280 [ 142.572534][ T8031] should_fail+0xb/0x20 [ 142.572599][ T8031] should_fail_usercopy+0x1a/0x20 [ 142.572624][ T8031] strncpy_from_user+0x27/0x250 [ 142.572658][ T8031] __se_sys_memfd_create+0x20f/0x3b0 [ 142.572689][ T8031] __x64_sys_memfd_create+0x31/0x40 [ 142.572807][ T8031] x64_sys_call+0x1955/0x2550 [ 142.572835][ T8031] do_syscall_64+0x112/0x360 [ 142.572922][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.572947][ T8031] RIP: 0033:0x7f20ddfbe159 [ 142.572964][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.573037][ T8031] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 142.573059][ T8031] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 142.573075][ T8031] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 142.573090][ T8031] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 142.573106][ T8031] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 142.573127][ T8031] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 142.573229][ T8031] [ 142.574513][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.721313][ T8044] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.847289][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1756'. [ 142.925920][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 143.068070][ T8004] loop5: detected capacity change from 0 to 8192 [ 143.363505][ T8080] loop3: detected capacity change from 0 to 8192 [ 143.581492][ T8088] FAULT_INJECTION: forcing a failure. [ 143.581492][ T8088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.581746][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.2.1773 Not tainted syzkaller #0 PREEMPT(lazy) [ 143.581768][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.581781][ T8088] Call Trace: [ 143.581789][ T8088] [ 143.581798][ T8088] __dump_stack+0x1d/0x30 [ 143.581827][ T8088] dump_stack_lvl+0x95/0xd0 [ 143.581895][ T8088] dump_stack+0x15/0x1b [ 143.581917][ T8088] should_fail_ex+0x262/0x280 [ 143.581941][ T8088] should_fail+0xb/0x20 [ 143.581960][ T8088] should_fail_usercopy+0x1a/0x20 [ 143.581986][ T8088] strncpy_from_user+0x27/0x250 [ 143.582073][ T8088] __se_sys_memfd_create+0x20f/0x3b0 [ 143.582103][ T8088] __x64_sys_memfd_create+0x31/0x40 [ 143.582131][ T8088] x64_sys_call+0x1955/0x2550 [ 143.582171][ T8088] do_syscall_64+0x112/0x360 [ 143.582203][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.582286][ T8088] RIP: 0033:0x7f8d5140e159 [ 143.582304][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.582396][ T8088] RSP: 002b:00007f8d4fe66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 143.582419][ T8088] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f8d5140e159 [ 143.582434][ T8088] RDX: 00007f8d4fe66ee0 RSI: 0000000000000000 RDI: 00007f8d514a5204 [ 143.582449][ T8088] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 143.582464][ T8088] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 143.582479][ T8088] R13: 00007f8d4fe66ee0 R14: 00007f8d4fe66ea0 R15: 0000200000000000 [ 143.582500][ T8088] [ 144.030101][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1781'. [ 144.271580][ T8120] loop2: detected capacity change from 0 to 128 [ 144.425797][ T8120] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.426012][ T8120] ext4 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.496823][ T8068] loop0: detected capacity change from 0 to 8192 [ 144.651219][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.959276][ T8155] loop0: detected capacity change from 0 to 128 [ 144.988069][ T8157] FAULT_INJECTION: forcing a failure. [ 144.988069][ T8157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.988104][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.988129][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.988142][ T8157] Call Trace: [ 144.988151][ T8157] [ 144.988160][ T8157] __dump_stack+0x1d/0x30 [ 144.988191][ T8157] dump_stack_lvl+0x95/0xd0 [ 144.988256][ T8157] dump_stack+0x15/0x1b [ 144.988278][ T8157] should_fail_ex+0x262/0x280 [ 144.988303][ T8157] should_fail+0xb/0x20 [ 144.988322][ T8157] should_fail_usercopy+0x1a/0x20 [ 144.988410][ T8157] strncpy_from_user+0x27/0x250 [ 144.988469][ T8157] __se_sys_memfd_create+0x20f/0x3b0 [ 144.988529][ T8157] __x64_sys_memfd_create+0x31/0x40 [ 144.988554][ T8157] x64_sys_call+0x1955/0x2550 [ 144.988580][ T8157] do_syscall_64+0x112/0x360 [ 144.988652][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.988676][ T8157] RIP: 0033:0x7f20ddfbe159 [ 144.988691][ T8157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.988709][ T8157] RSP: 002b:00007f20dca16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 144.988779][ T8157] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007f20ddfbe159 [ 144.988796][ T8157] RDX: 00007f20dca16ee0 RSI: 0000000000000000 RDI: 00007f20de055204 [ 144.988813][ T8157] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 144.988894][ T8157] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 144.988910][ T8157] R13: 00007f20dca16ee0 R14: 00007f20dca16ea0 R15: 0000200000000000 [ 144.988932][ T8157] [ 145.061154][ T8155] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.480158][ T8185] xt_MASQUERADE: bad MAP_IPS. [ 145.567979][ T2981] ================================================================== [ 145.568012][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 145.568049][ T2981] [ 145.568055][ T2981] write to 0xffff88811a4ae4b0 of 8 bytes by task 3595 on cpu 0: [ 145.568075][ T2981] dentry_unlink_inode+0x65/0x260 [ 145.568103][ T2981] d_delete+0x164/0x180 [ 145.568127][ T2981] d_delete_notify+0x32/0x100 [ 145.568154][ T2981] vfs_unlink+0x287/0x490 [ 145.568181][ T2981] filename_unlinkat+0x1dc/0x410 [ 145.568211][ T2981] __se_sys_unlink+0x2b/0xe0 [ 145.568243][ T2981] __x64_sys_unlink+0x1f/0x30 [ 145.568273][ T2981] x64_sys_call+0x18ee/0x2550 [ 145.568299][ T2981] do_syscall_64+0x112/0x360 [ 145.568324][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.568344][ T2981] [ 145.568350][ T2981] read to 0xffff88811a4ae4b0 of 8 bytes by task 2981 on cpu 1: [ 145.568369][ T2981] step_into_slowpath+0x12c/0x4c0 [ 145.568390][ T2981] path_lookupat+0x2eb/0x4c0 [ 145.568408][ T2981] filename_lookup+0x18f/0x390 [ 145.568425][ T2981] do_readlinkat+0x74/0x2f0 [ 145.568445][ T2981] __x64_sys_readlink+0x47/0x60 [ 145.568466][ T2981] x64_sys_call+0x1d41/0x2550 [ 145.568493][ T2981] do_syscall_64+0x112/0x360 [ 145.568520][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.568543][ T2981] [ 145.568547][ T2981] value changed: 0xffff888107191640 -> 0x0000000000000000 [ 145.568560][ T2981] [ 145.568564][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 145.568577][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 145.568605][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.568618][ T2981] ================================================================== [ 145.643089][ T8181] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.685043][ T8175] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.061190][ T8154] set_capacity_and_notify: 3 callbacks suppressed [ 146.061244][ T8154] loop2: detected capacity change from 0 to 8192