last executing test programs: 2m51.735112043s ago: executing program 32 (id=109): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000000)={0x120041000, &(0x7f0000000080), 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000a00)='ext3\x00', &(0x7f0000000a80)='./file1\x00', 0x2402002, &(0x7f0000000640)={[{@dioread_nolock}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodioread_nolock}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@nouid32}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000000b80)="$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") syz_open_dev$loop(&(0x7f00000000c0), 0x1000000000, 0xc0682) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000001c40)="$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") pselect6(0x40, &(0x7f0000000600)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 2m51.522537675s ago: executing program 33 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000240)='27', 0x2) move_mount(r0, 0x0, r0, &(0x7f0000000080)='./proc\x00', 0x126) syz_ublk_setup_io_uring(0x7b6d, &(0x7f0000000280)={0x0, 0x30b8, 0x1, 0x2, 0x158, 0x0, r0}, 0x0, 0x0, 0x0) 2m50.057367754s ago: executing program 34 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0x0, 0xcde519d0e3084f7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), 0x2ca}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000a80)="b90103601833f0000000000081001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x106, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m45.058980943s ago: executing program 35 (id=192): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xfa, 0x7f}]}, 0x10) close(0x3) socket$packet(0x11, 0x3, 0x300) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2m42.071010817s ago: executing program 36 (id=244): r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000002780)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x5, 0x5, &(0x7f00000028c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000002900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002940)={0x1, &(0x7f0000002980)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendto(r0, &(0x7f0000000b40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) 2m41.089929487s ago: executing program 37 (id=248): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x12804, 0x0, 0xffffffff, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet(0x2, 0x2, 0x11) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r0, &(0x7f00000006c0), 0x1) 2m38.582013052s ago: executing program 38 (id=272): r0 = fsopen(&(0x7f0000000940)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@generic={&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) 2m26.239879449s ago: executing program 9 (id=513): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/console\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f00000016c0)={&(0x7f0000001b40)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002400)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000002440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 2m26.110719462s ago: executing program 9 (id=514): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x610400, &(0x7f0000001400)={[{@norecovery}, {@acl}, {@i_version}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@mb_optimize_scan}, {@init_itable_val={'init_itable', 0x3d, 0xb11}}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x80342, 0x168) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x143042, 0xf2) pwritev2(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) pwrite64(r0, &(0x7f00000012c0)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000001340)='a', 0x1d7efb9a, 0x9000) 2m26.076638705s ago: executing program 39 (id=514): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x610400, &(0x7f0000001400)={[{@norecovery}, {@acl}, {@i_version}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@mb_optimize_scan}, {@init_itable_val={'init_itable', 0x3d, 0xb11}}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x80342, 0x168) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x143042, 0xf2) pwritev2(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) pwrite64(r0, &(0x7f00000012c0)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000001340)='a', 0x1d7efb9a, 0x9000) 2m17.543069074s ago: executing program 40 (id=656): mkdir(&(0x7f00000004c0)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x1, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000100)='27', 0x2) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 2m14.374585307s ago: executing program 6 (id=698): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000009c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000004c0)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x20, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x7a11c, 0x60, {0xd34c, 0x114}, 0x80, 0x3}) 2m14.317970273s ago: executing program 6 (id=700): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev, [@crypt={0x0, 0x2480, 0x0, 0x78, 'crypt\x00', {'capi:xts(aes)-plain64', 0x20, @keyring=':32:trusted:syz', 0x20, '1', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) r0 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100), &(0x7f0000000140), 0xfe00, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/112, 0x1001) syz_open_dev$usbfs(&(0x7f0000000180), 0x75, 0x109301) 2m14.090636236s ago: executing program 6 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x850) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000540)=""/21, 0x15}], 0x1, 0x15, 0x46b5) 2m14.023397453s ago: executing program 6 (id=708): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3004000, &(0x7f0000000240), 0x2, 0x7ba, &(0x7f00000014c0)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn+QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUqQIrdLDykwm6TbdTXeb3Uzjfj4w6Zt5s/PebPqdNz9e5gXQt8bSH6WI/RFxPokYyZcnEVHJUuWI6ZX1bt9cnv0nidkk6vV3/0qydW7dXJ6Nhs+kduUfG46Iq1eSeGzg/nIXzi2dnKnVqvP5/KHFU2cPLZxbevHEqZnj1ePV01NTU69OHZ58eWKqa/v6yTO/fnfn4tuffr732qU/r/6wN4np2J3nNe7HRsodlDcWY2vfyfptvNnBdh5lA/n+lBqWJeu/pOEtrhRtKzX8Dp+MkRho+B8+Ele+L7RyAEBP1NMJAOgzifYfAPrM6n2AWzeXZ1enYu9IAFvlxpGV57Np3N/Op5Wcckxn/w5n/QB2/p3c8+w7We07sEnpNr79oPJlOkUHz+GBzTt/IXvw36T9T7L4H807b6yP/4GI/PiwOeuPIeIfts5m4v+dLpQv/gEAAAAAAKB7Lh+JiFeaPf8rrfX/iSbP/4YiYqIL5T/4+V/peheKAZq4cSTi9fzdPvf2/1t7o8voQD63JyKeiEpy7EStOhF3st7DB6OSHiaqk803nx0y3r84+VOr8hv7/6VTWv5qX8C8HtfLQ/d+Zm5mcWaz+w1E3LgQ8VS5Wfwna+1/0qL/79E2y/hx+ZtnW+U9OP6BXql/FXGgaft/9811ycbv5zuUnQ+s/GxaxtLRNz5uVX5b8X/3z5SALkrb/50bx/9o0vi+zoXOy/js1sQXrfIe9vx/MHkve6voYL7so5nFxfnJiMHkrfuXN32FaH2o8z2B7W01HlbjJY3/g883v/7f6Py/EhFn2yzz658rv7fKG8si1fk/FCGN/7mO2v/OE//+9nTLQ0V77f/hrE0/mC9x/w821m6AFl1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoplJE7I6kNL6WLpXGxyN2RcTjsbNUO7Ow+MKxMx+enkvzIkajUjp2oladiIiRlfkknZ/M0nfnp9bNvxQR+yLi0tCObH589kxtruidBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDcrhbj/6f+GGpYcbqoGgIAPTFcdAUAgC2n/QeA/qP9B4D+03H7/8ue3lQEANgyrv8BoP9o/wEAAAAAAAAAAAAAAAAAAAAAAACgp/Y9d/laEhHnX9uRTanBPK9SaM2AXisVXQGgMANFVwAoTLmdlZJk7ZoA+P9wjQ8kD8hvPUSIOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSPA/vbHf+/rZFCgW3E6H3Qv4z/D/3LWT30L+P/A70a/3/HQ9YHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeRQvnlk7O1GrVeYmuJeorifKjUp/q/EK9Xmg1hiKit0UMRzE7mMZQ0b/cPJF+yTHRtQ0WfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7+C8AAP//2P4O5Q==") open(&(0x7f0000002400)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002440)=@loop={'/dev/loop', 0x0}, &(0x7f0000002480)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000024c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x2000, 0x48) getdents(r1, 0x0, 0x0) 2m13.795743996s ago: executing program 6 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./cfg\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1, 0x4162, 0x65a) 2m12.567202651s ago: executing program 6 (id=732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000100)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x10000401}], 0x1, 0x40002121, 0x0) 2m12.567049281s ago: executing program 41 (id=732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000100)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x10000401}], 0x1, 0x40002121, 0x0) 1m37.956097716s ago: executing program 5 (id=1286): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d80)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000fc0)={0x1d, r1, 0x102030405060706, {0x0, 0x1, 0x4}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000001000)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) 1m37.837792418s ago: executing program 5 (id=1291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) pread64(r2, &(0x7f00000005c0)=""/203, 0xcb, 0x9) 1m36.975417725s ago: executing program 5 (id=1315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0xf8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="010530000a0028000600000060"], 0x64) 1m36.806959293s ago: executing program 5 (id=1327): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x200008, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3af, &(0x7f0000000380)="$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") open(&(0x7f0000000740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000780)=@loop={'/dev/loop', 0x0}, &(0x7f00000007c0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000800)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0xd, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) 1m36.601965723s ago: executing program 5 (id=1320): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000580)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 1m36.401213974s ago: executing program 5 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) 1m36.371158427s ago: executing program 42 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) 40.871329878s ago: executing program 1 (id=2180): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) close(r2) 40.009097696s ago: executing program 1 (id=2196): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x6, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 39.849485742s ago: executing program 1 (id=2200): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000015c0)='syzkaller\x00'}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001cc0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f80400"], &(0x7f0000001d00)=0x520) 39.702403997s ago: executing program 1 (id=2203): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000001a80)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28d891, 0x0) mount$bind(&(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)='./file0/file0\x00', 0x0, 0x13850ce, 0x0) umount2(&(0x7f0000001e00)='./file0\x00', 0xb) 39.666862161s ago: executing program 1 (id=2205): syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000400), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000640)={0x1d, r1}, 0x10, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 39.360310832s ago: executing program 1 (id=2210): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x6, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 39.297110778s ago: executing program 43 (id=2210): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x6, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 14.894720993s ago: executing program 2 (id=2451): mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc\x00', 0x161) mount(0x0, &(0x7f0000001400)='./proc\x00', &(0x7f0000001440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000014c0)='100', 0x3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.72444016s ago: executing program 2 (id=2454): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 14.646037228s ago: executing program 2 (id=2455): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='|', 0x1}], 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2, 0x6) write$cgroup_pid(r4, &(0x7f0000000140), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80000000, 0x3) write(r2, 0x0, 0x0) 14.122965462s ago: executing program 3 (id=2464): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000000300)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001bc0)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) lstat(&(0x7f0000000040)='./file1\x00', 0x0) munlockall() 13.731407021s ago: executing program 2 (id=2467): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000280), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0), 0x10) sendmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) 13.665450308s ago: executing program 3 (id=2468): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 13.590429186s ago: executing program 2 (id=2469): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x4c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x38, 0x1, [@m_connmark={0x34, 0x10, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x4c}}, 0x40000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.393225896s ago: executing program 2 (id=2470): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x500) 13.113865255s ago: executing program 3 (id=2473): ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000600)={{&(0x7f00000000c0)=[{0x8, 0x0, 0x7, {0x8, 0x6}, 0x1, 0x4a4e, 0x7}, {0xf54, 0x85, 0x5, {0x8001, 0x8000}, 0x5, 0x8000000000000001, 0x4}], 0x2, 0x40, 0xfff}, {0x0, 0x0, 0x10, 0x81, 0x5}, {&(0x7f0000000400)=[0x1, 0x7, 0x100, 0x9d], 0x4, 0x8, 0x56f, 0xffff}, {0x0, 0x0, 0x28, 0x1, 0x6}, {&(0x7f00000005c0), 0x0, 0x8, 0x4, 0x32a4}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_open_procfs(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000140)=""/26) 12.86541996s ago: executing program 3 (id=2475): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000224c0)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000022500)=[{&(0x7f0000022540)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) creat(&(0x7f00000225c0)='./bus\x00', 0x0) mount(&(0x7f0000022600)=@loop={'/dev/loop', 0x0}, &(0x7f0000022640)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000022680)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000226c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]}) 12.623152454s ago: executing program 3 (id=2479): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x0, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x6, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x2000000000000006, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfb, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000001c0)=0x3, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.247080313s ago: executing program 3 (id=2482): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x2a}}) 12.245578113s ago: executing program 44 (id=2482): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x2a}}) 9.42155956s ago: executing program 9 (id=2483): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x18}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$phonet(0x23, 0x2, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000500)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) 8.376780987s ago: executing program 0 (id=2509): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) write(r2, 0x0, 0x0) 8.319319053s ago: executing program 9 (id=2510): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@grpjquota}, {@nolazytime}, {@norecovery}, {@grpjquota}, {@barrier}]}, 0xfe, 0x295, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000b00)='./bus\x00', 0xf2) syz_mount_image$ext4(0x0, &(0x7f0000000b40)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount(&(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000bc0)='./bus\x00', 0x0, 0x5000, 0x0) sendmsg$kcm(r0, 0x0, 0x40000) r1 = open(&(0x7f0000000c00)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x100000001, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2e807b01d7b3731f226e7d18945c1317fff3cac58818d78c660e677df8dc905b90242b7c528a076d2f6a00c00", "036c5bc678eb2c05dbf70c2d07cdcf255263bd9b0abdc2542ded71038259ca061ce1a311ef545032d71e14ef3dc177e9b48b001d000000000000000000000004", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffff9]}) rmdir(&(0x7f0000000d40)='./file0\x00') 8.024329943s ago: executing program 9 (id=2513): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) syz_usb_connect$midi(0x0, 0xbd, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xce, 0x1, 0x8e, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x81, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 6.902320047s ago: executing program 9 (id=2520): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008a000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x1912, 0x71, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.902130927s ago: executing program 0 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x100}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x800) write(r0, &(0x7f0000000300)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 6.858609761s ago: executing program 45 (id=2520): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008a000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x1912, 0x71, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.081971324s ago: executing program 0 (id=2537): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000200)=0x23a, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="a88c9f8845410749ab663a5f3000070c940ebcb8b84d3807157471d15fe93391af070a4d3685286d1f3a071ef7e7fb92f2df4cf578d137667c105e934a0885cbb19b12af9099836a4d0259f769b1137f360e958231b8b2abbcbe5e8a62e71b7e66a4e048c3e4ba812e064894acef449b6f2e23c112bb225e3d23bf6533dfd296323c9725256e768de4fd0c113449672ce53c", 0x92}], 0x1}}], 0x1, 0x1c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.972302285s ago: executing program 7 (id=2526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0x13}, {0x0, 0xfff1}, {0x793a69547a78c7f5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.803653082s ago: executing program 7 (id=2528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000ac0), &(0x7f0000000b00)=@tcp6=r0, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000d80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @local, @remote}}}}, 0x0) 3.720745171s ago: executing program 7 (id=2529): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x22000406, &(0x7f0000000280)={[{@orlov}, {@noblock_validity}, {@max_batch_time}, {@bsdgroups}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@init_itable}, {@resgid}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4c2, &(0x7f0000000340)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xee01, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.65365516s ago: executing program 0 (id=2534): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x18}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$phonet(0x23, 0x2, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) 2.64524803s ago: executing program 7 (id=2538): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000240)={0x0, 0x9160, 0x10000, 0x0, 0x2000001}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 2.561175479s ago: executing program 7 (id=2542): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000700)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000740)=0x1, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)='@', 0x1}, {&(0x7f0000000980)='y', 0x1}, {&(0x7f00000009c0)="b9", 0x1}, {&(0x7f0000000a00)="99", 0x1}, {&(0x7f0000000a40)='z', 0x1}, {&(0x7f0000000a80)='~', 0x1}, {&(0x7f0000000ac0)='x', 0x1}, {&(0x7f0000000b00)="06", 0x1}, {&(0x7f0000000b40)='k', 0x1}, {&(0x7f0000000b80)="1d", 0x1}, {&(0x7f0000000bc0)='a', 0x1}, {&(0x7f0000000c00)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000000f00)='-', 0x1}, {&(0x7f0000000f40)='R', 0x1}, {&(0x7f0000000f80)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000fc0)=0x7fffffff, 0x4) 2.16196058s ago: executing program 8 (id=2546): unshare(0x22020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.005139956s ago: executing program 8 (id=2547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) socket(0x10, 0x803, 0x0) setuid(0xee01) 1.895991267s ago: executing program 8 (id=2548): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeea}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xde43, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.687400878s ago: executing program 8 (id=2550): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x22000406, &(0x7f0000000280)={[{@orlov}, {@noblock_validity}, {@max_batch_time}, {@bsdgroups}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@init_itable}, {@resgid}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4c2, &(0x7f0000000340)="$eJzs3E1oHGUfAPD/TD763aR9+76v/dBGqxisJk1atQcPKgq9CIIeKniJaSy1aStNBFuKjSL1KJ48qkdB8OTFk4KIelK86l2EIr20epCV2Z1JdpPd7WaT7dru7we7+zzzsc/8Z54n88w8mQ2gZ41kb0nE1oj4JSKGKtnaBUYqHzeuXZr+89ql6SRKpRf+SMrLXb92abpYtFhvS54ZTSPSd5PYW6fcuQsXT0/Nzs6cz/Pj82deH5+7cPGRU2emTs6cnDk7efTokcMTjz82+ei6xJnFdX3PW+f27T720gfPTZfile8/y7Z3az6/Oo6K4TWXORIjUcotTR0svz+w5m//d9lWlU76u7ghrEpfRGSHa6Dc/oeiL5YO3lA8+85i5psubSDQMdm5aceKqX35Z7p4/gLuRIk2Dj2qOONn17/F61b2P7rt6lPZ+0w5/hv5qzKnP9LsWna4csXe12D9/7VYTmlZfjD/3BoRxxf++ih7Rd37EAAA6+urrP/zcL3+X1rTt9mej6EMR8TBiNgZEf+JiF0R8d+8H/T/iLhrleWPLMuv7P/8tKmtwFqU9f+eyMe2avt/ab5EspjbVo5/IHn11OzMoXyfjMbAhiw/0aSMr5/5+f1G80aq+n/ZKyu/6Avm2/F7/4badU5MzU+tIeQaV9+O2NNfL/5kcSQg2wO7I2JPG9+f7bNTD326L0tv37Jy/k3ib37s12GcqfRJxIOV478Qy+IvJJWSGo1Pjm+M2ZlD40WtWOmHH688X50fqErXxL+xtZg2thtsHdnx31y3/ufxF82gGK+dW30ZV359r+E1zcrjn8Txheol8vpfVROy+j+YvFhOF9dRb07Nz5+fiBjMJ9RMn1xat8gXy2fxjx6o3/53Rvz9cb7e3ojIKvHdEXFPROzPt/3eiLgvIg40if+7p+9/rfkeatb+OyuL/0Sz4x8xnFSP17eR6Dv97ZeNym/t79+Rcmo0n9LK37+88OJ01HAD291vAAAAcDtJy2PQSTpWpKtuTu2Kzensubn5gyPxxtkTlbHq4RhIiztdQ1X3Qyfye8NFfnJZ/nBE7Cj/p9Gmcn5s+tzstm4GDpSf1alp/5GmY2OVeb81+qcX4M6xqnG06qcDP/9i/TcGuKU8rwm9S/uH3qX9Q+/S/qF31Wv/lyNudGFTgFvM+R96VtLtDQC6x/kfepf2Dz1p5SPxxQ8ttPOk/1Ji57E1rd7xRGmoI9+8sPq1+joUaVT/aEfDRNLsxxGaJiJtvsxgC6U3SLz8YaUKdq4CpDdd5skOlp4n9ueJDRHR6lqX29+rbdQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA298/AQAA///4ttf7") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xee01, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.635719984s ago: executing program 0 (id=2551): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/51, 0x33}], 0x2, &(0x7f0000000740)=""/185, 0xb9}, 0x8001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/230, 0xe6}}], 0x2, 0x2000, &(0x7f0000004840)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000940)=0x40049, 0x4) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.494867528s ago: executing program 7 (id=2552): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x800000000000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 807.200368ms ago: executing program 4 (id=2553): close(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000003840)='espintcp', 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003900)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000006900)={0x1, &(0x7f0000006940)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 805.702878ms ago: executing program 8 (id=2554): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x7ffffffc, 0x6, 0xcd0b, 0xf, 0x3, 0x5, 0xfc, 0x3, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x80}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'gretap0\x00', 0x0}) 747.255074ms ago: executing program 4 (id=2555): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 746.892444ms ago: executing program 0 (id=2556): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000500)={0x2080, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 530.523946ms ago: executing program 4 (id=2557): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 186.826031ms ago: executing program 4 (id=2558): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0xbc8ddc50c9d0a44d, 0xff, 0x2, 0x4, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000900)='ramfs\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 98.72694ms ago: executing program 4 (id=2559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) socket(0x10, 0x803, 0x0) setuid(0xee01) 97.6456ms ago: executing program 8 (id=2569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xe0c0, 0x8, 0x43a1bd76, 0x8, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 4 (id=2560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) write$binfmt_format(r0, &(0x7f0000000040)='1\x00', 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) kernel console output (not intermixed with test programs): sadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 170.694551][ T30] audit: type=1400 audit(1794443775.533:2252): avc: denied { open } for pid=12368 comm="syz.8.2198" path="/157/trace/set_event" dev="tracefs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 170.722895][T12370] FAULT_INJECTION: forcing a failure. [ 170.722895][T12370] name failslab, interval 1, probability 0, space 0, times 0 [ 170.722995][T12370] CPU: 1 UID: 0 PID: 12370 Comm: syz.8.2198 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.723022][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.723074][T12370] Call Trace: [ 170.723147][T12370] [ 170.723158][T12370] __dump_stack+0x1d/0x30 [ 170.723187][T12370] dump_stack_lvl+0x95/0xd0 [ 170.723212][T12370] dump_stack+0x15/0x1b [ 170.723235][T12370] should_fail_ex+0x259/0x270 [ 170.723329][T12370] ? __rb_allocate_pages+0x399/0xd20 [ 170.723355][T12370] should_failslab+0x8c/0xb0 [ 170.723431][T12370] __kmalloc_node_noprof+0xb8/0x4d0 [ 170.723467][T12370] ? __rb_allocate_pages+0x399/0xd20 [ 170.723492][T12370] ? si_mem_available+0x102/0x150 [ 170.723602][T12370] __rb_allocate_pages+0x399/0xd20 [ 170.723632][T12370] ring_buffer_resize+0x30f/0xd80 [ 170.723658][T12370] __tracing_resize_ring_buffer+0x74/0x200 [ 170.723692][T12370] tracing_update_buffers+0x74/0x90 [ 170.723816][T12370] ftrace_event_write+0x6e/0x1d0 [ 170.723852][T12370] ? __pfx_ftrace_event_write+0x10/0x10 [ 170.723888][T12370] vfs_write+0x24f/0x990 [ 170.724002][T12370] ? __fget_files+0x184/0x1c0 [ 170.724029][T12370] ? mutex_lock+0x52/0x90 [ 170.724142][T12370] ksys_write+0xdc/0x1a0 [ 170.724177][T12370] __x64_sys_write+0x40/0x50 [ 170.724240][T12370] x64_sys_call+0x154e/0x2550 [ 170.724337][T12370] do_syscall_64+0x116/0x380 [ 170.724363][T12370] ? clear_bhb_loop+0x70/0xc0 [ 170.724395][T12370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.724419][T12370] RIP: 0033:0x7f983b618fd9 [ 170.724436][T12370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.724467][T12370] RSP: 002b:00007f983a05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.724489][T12370] RAX: ffffffffffffffda RBX: 00007f983b895fa0 RCX: 00007f983b618fd9 [ 170.724562][T12370] RDX: 0000000000000048 RSI: 0000200000000680 RDI: 0000000000000003 [ 170.724576][T12370] RBP: 00007f983b6a7fed R08: 0000000000000000 R09: 0000000000000000 [ 170.724591][T12370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.724604][T12370] R13: 00007f983b896038 R14: 00007f983b895fa0 R15: 00007ffebf65fde8 [ 170.724635][T12370] [ 170.831845][T12367] bond0: (slave bond_slave_0): Releasing backup interface [ 170.875559][T12367] bond0: (slave bond_slave_1): Releasing backup interface [ 170.955517][T12367] team0: Port device team_slave_0 removed [ 171.005510][T12367] team0: Port device team_slave_1 removed [ 171.031010][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.031031][T12367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.051590][T12367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.051611][T12367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.074330][T12367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.081063][T12372] team0: No ports can be present during mode change [ 171.093495][ T5823] bridge0: port 3(syz_tun) entered disabled state [ 171.120426][ T5823] syz_tun (unregistering): left allmulticast mode [ 171.120610][ T5823] syz_tun (unregistering): left promiscuous mode [ 171.120655][ T5823] bridge0: port 3(syz_tun) entered disabled state [ 171.122173][T12386] ip_tables: iptables: counters copy to user failed while replacing table [ 171.533985][T12400] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.813083][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.813114][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.813212][T12400] bridge_slave_0: entered allmulticast mode [ 171.813864][T12400] bridge_slave_0: entered promiscuous mode [ 171.841877][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.841908][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.842137][T12400] bridge_slave_1: entered allmulticast mode [ 171.842552][T12400] bridge_slave_1: entered promiscuous mode [ 171.902551][T12400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.907022][T12400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.934622][T12400] team0: Port device team_slave_0 added [ 171.939443][T12400] team0: Port device team_slave_1 added [ 171.966393][T12400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.966406][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.966434][T12400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.966888][T12400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.966898][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.966942][T12400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.020869][T12400] hsr_slave_0: entered promiscuous mode [ 172.021339][T12400] hsr_slave_1: entered promiscuous mode [ 172.021588][T12400] debugfs: 'hsr0' already exists in 'hsr' [ 172.021600][T12400] Cannot create hsr debugfs directory [ 172.217921][T12400] netdevsim netdevsim2 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.274658][T12400] netdevsim netdevsim2 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.321768][T12400] netdevsim netdevsim2 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.364509][T12400] netdevsim netdevsim2 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.447794][T12400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.451386][T12400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.451873][T12400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.460977][T12400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.461360][T12400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.471094][T12400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.471543][T12400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.476675][T12400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.596900][T12400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.623284][T12400] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.627870][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.627934][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.636718][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.636752][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.912335][T12400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.040903][T12400] veth0_vlan: entered promiscuous mode [ 173.047336][T12400] veth1_vlan: entered promiscuous mode [ 173.088280][T12400] veth0_macvtap: entered promiscuous mode [ 173.092146][T12400] veth1_macvtap: entered promiscuous mode [ 173.106411][T12400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.112671][T12400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.150583][ T6375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.151631][ T6375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.152034][ T6375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.152065][ T6375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.250003][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.250138][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.276252][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.276369][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.312249][T12506] ip6gretap1: entered allmulticast mode [ 173.318105][T12506] batman_adv: batadv0: Adding interface: ip6gretap1 [ 173.318122][T12506] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.318155][T12506] batman_adv: batadv0: Interface activated: ip6gretap1 [ 173.456106][T12507] loop0: detected capacity change from 0 to 32896 [ 173.485889][T12507] EXT4-fs: Ignoring removed i_version option [ 173.551119][T12501] loop8: detected capacity change from 0 to 33280 [ 173.551833][T12507] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.554049][T12507] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.584099][T12501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.652081][T12501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.652401][T12501] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.732848][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.783517][T12507] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 34: comm syz.0.2228: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 173.786055][T12507] EXT4-fs (loop0): Remounting filesystem read-only [ 173.809895][ T4590] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.902197][T12541] loop8: detected capacity change from 0 to 33280 [ 173.926037][T12541] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.2230: missing EA_INODE flag [ 173.926069][T12541] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 173.926247][T12541] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.2230: error while reading EA inode 12 err=-117 [ 173.926309][T12541] loop8: lost filesystem error report for type 5 error -117 [ 173.926402][T12541] EXT4-fs (loop8): 1 orphan inode deleted [ 173.926773][T12541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.941189][T12548] bridge_slave_0: entered allmulticast mode [ 173.947431][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2216'. [ 174.022349][T12548] bridge_slave_0 (unregistering): left allmulticast mode [ 174.098705][T12564] loop2: detected capacity change from 0 to 33280 [ 174.114577][T12564] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.114600][T12564] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 174.254595][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.430385][T12564] loop2: detected capacity change from 0 to 33280 [ 174.485578][T12564] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 174.485657][T12564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.525129][T12564] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.2219: bad orphan inode 131083 [ 174.525209][T12564] loop2: lost filesystem error report for type 5 error -117 [ 174.545274][T12564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.960345][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.081454][T12624] bridge_slave_0: left allmulticast mode [ 175.081480][T12624] bridge_slave_0: left promiscuous mode [ 175.081702][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.103631][T12624] bridge_slave_1: left allmulticast mode [ 175.103654][T12624] bridge_slave_1: left promiscuous mode [ 175.103831][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.145245][T12624] bond0: (slave bond_slave_0): Releasing backup interface [ 175.168922][T12624] bond0: (slave bond_slave_1): Releasing backup interface [ 175.224589][T12624] team0: Port device team_slave_0 removed [ 175.244273][T12624] team0: Port device team_slave_1 removed [ 175.245058][T12624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.245123][T12624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.250290][T12624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.250309][T12624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.257380][T12624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.281690][T12634] team0: Mode changed to "loadbalance" [ 175.336740][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 175.336757][ T30] audit: type=1400 audit(1794443780.173:2318): avc: denied { getopt } for pid=12654 comm="syz.8.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.496299][ T30] audit: type=1400 audit(1794443780.333:2319): avc: denied { connect } for pid=12667 comm="syz.0.2238" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.496710][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 175.517421][ T30] audit: type=1400 audit(1794443780.353:2320): avc: denied { create } for pid=12672 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.535638][ T30] audit: type=1400 audit(1794443780.373:2321): avc: denied { setopt } for pid=12672 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.545149][ T30] audit: type=1400 audit(1794443780.383:2322): avc: denied { bind } for pid=12672 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.566648][ T30] audit: type=1400 audit(1794443780.403:2323): avc: denied { write } for pid=12653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.654116][ T30] audit: type=1400 audit(1794443780.493:2324): avc: denied { write } for pid=12682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.809224][T12689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.930765][T12683] loop2: detected capacity change from 0 to 33280 [ 176.000745][T12683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.038751][T12683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.048739][T12683] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.128499][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.147982][T12698] loop8: detected capacity change from 0 to 33280 [ 176.170591][T12695] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 176.170610][T12695] audit: out of memory in audit_log_start [ 176.173034][T12698] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.173054][T12698] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 176.250968][T12700] ip_tables: iptables: counters copy to user failed while replacing table [ 176.332889][T12702] loop3: detected capacity change from 0 to 164 [ 176.345858][ T30] audit: type=1400 audit(1794443781.183:2325): avc: denied { mount } for pid=12701 comm="syz.3.2247" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 176.503677][T12698] loop8: detected capacity change from 0 to 33280 [ 176.558167][T12698] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.558217][T12698] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 176.579542][T12698] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.2254: bad orphan inode 131083 [ 176.579591][T12698] loop8: lost filesystem error report for type 5 error -117 [ 176.592837][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 176.592876][ C1] EXT4-fs (loop8): initial error at time 1794443781: ext4_orphan_get:1430 [ 176.592904][ C1] EXT4-fs (loop8): last error at time 1794443781: ext4_orphan_get:1430 [ 176.627148][T12698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.797813][T12704] loop0: detected capacity change from 0 to 33280 [ 176.846074][T12704] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.846275][T12704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.877924][T12704] EXT4-fs (loop0): 1 truncate cleaned up [ 176.905656][T12704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.957138][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 177.014894][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.044308][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.133651][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2256'. [ 177.246704][T12731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.246806][T12731] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.260392][T12725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.323129][T12741] FAULT_INJECTION: forcing a failure. [ 177.323129][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 177.323163][T12741] CPU: 0 UID: 0 PID: 12741 Comm: syz.7.2264 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.323188][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 177.323203][T12741] Call Trace: [ 177.323210][T12741] [ 177.323243][T12741] __dump_stack+0x1d/0x30 [ 177.323272][T12741] dump_stack_lvl+0x95/0xd0 [ 177.323379][T12741] dump_stack+0x15/0x1b [ 177.323401][T12741] should_fail_ex+0x259/0x270 [ 177.323436][T12741] ? can_rx_register+0x28a/0x4f0 [ 177.323471][T12741] should_failslab+0x8c/0xb0 [ 177.323578][T12741] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 177.323614][T12741] ? can_rx_register+0x28a/0x4f0 [ 177.323653][T12741] can_rx_register+0x28a/0x4f0 [ 177.323730][T12741] ? __pfx_raw_rcv+0x10/0x10 [ 177.323754][T12741] raw_enable_allfilters+0xb4/0x290 [ 177.323781][T12741] raw_bind+0x20e/0x530 [ 177.323858][T12741] __sys_bind+0x1d0/0x290 [ 177.323891][T12741] __x64_sys_bind+0x3f/0x50 [ 177.323929][T12741] x64_sys_call+0x1ac7/0x2550 [ 177.324055][T12741] do_syscall_64+0x116/0x380 [ 177.324151][T12741] ? clear_bhb_loop+0x70/0xc0 [ 177.324217][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.324245][T12741] RIP: 0033:0x7f3e35528fd9 [ 177.324263][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.324284][T12741] RSP: 002b:00007f3e33f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 177.324307][T12741] RAX: ffffffffffffffda RBX: 00007f3e357a5fa0 RCX: 00007f3e35528fd9 [ 177.324420][T12741] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 177.324436][T12741] RBP: 00007f3e355b7fed R08: 0000000000000000 R09: 0000000000000000 [ 177.324451][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.324465][T12741] R13: 00007f3e357a6038 R14: 00007f3e357a5fa0 R15: 00007ffd05f04c68 [ 177.324487][T12741] [ 177.327071][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.468441][T12746] FAULT_INJECTION: forcing a failure. [ 177.468441][T12746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.468489][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.8.2266 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.468517][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 177.468559][T12746] Call Trace: [ 177.468567][T12746] [ 177.468576][T12746] __dump_stack+0x1d/0x30 [ 177.468631][T12746] dump_stack_lvl+0x95/0xd0 [ 177.468721][T12746] dump_stack+0x15/0x1b [ 177.468743][T12746] should_fail_ex+0x259/0x270 [ 177.468776][T12746] should_fail_alloc_page+0xf2/0x100 [ 177.468885][T12746] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 177.468922][T12746] alloc_pages_mpol+0xaf/0x1d0 [ 177.469044][T12746] ? __pfx_shmem_fault+0x10/0x10 [ 177.469130][T12746] alloc_pages_noprof+0x94/0x140 [ 177.469158][T12746] pte_alloc_one+0x1c/0xc0 [ 177.469181][T12746] handle_mm_fault+0x2a9e/0x3bd0 [ 177.469226][T12746] ? mt_find+0x8c1/0xa10 [ 177.469258][T12746] ? vma_is_secretmem+0x16/0x30 [ 177.469287][T12746] __get_user_pages+0xeaf/0x1930 [ 177.469314][T12746] ? should_fail_ex+0xdb/0x270 [ 177.469349][T12746] __gup_longterm_locked+0x963/0xed0 [ 177.469373][T12746] ? uprobe_mmap+0xe3/0xed0 [ 177.469431][T12746] ? __rb_insert_augmented+0x2ae/0x2c0 [ 177.469458][T12746] ? inode_to_bdi+0x47/0xa0 [ 177.469483][T12746] gup_fast_fallback+0x1b3f/0x1cf0 [ 177.469584][T12746] get_user_pages_fast+0x5f/0x90 [ 177.469609][T12746] get_futex_key+0x5ea/0xc40 [ 177.469694][T12746] futex_wait_requeue_pi+0x162/0x730 [ 177.469727][T12746] ? __pfx_futex_wake_mark+0x10/0x10 [ 177.469765][T12746] do_futex+0x146/0x460 [ 177.469863][T12746] __se_sys_futex+0x2f6/0x370 [ 177.469887][T12746] ? xfd_validate_state+0x45/0xf0 [ 177.469920][T12746] __x64_sys_futex+0x78/0x90 [ 177.469988][T12746] x64_sys_call+0x22e2/0x2550 [ 177.470018][T12746] do_syscall_64+0x116/0x380 [ 177.470040][T12746] ? clear_bhb_loop+0x70/0xc0 [ 177.470065][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.470165][T12746] RIP: 0033:0x7f983b618fd9 [ 177.470183][T12746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.470244][T12746] RSP: 002b:00007f983a05f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.470266][T12746] RAX: ffffffffffffffda RBX: 00007f983b895fa0 RCX: 00007f983b618fd9 [ 177.470282][T12746] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000001940 [ 177.470296][T12746] RBP: 00007f983b6a7fed R08: 0000000000000000 R09: 0000000000000403 [ 177.470353][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.470367][T12746] R13: 00007f983b896038 R14: 00007f983b895fa0 R15: 00007ffebf65fde8 [ 177.470388][T12746] [ 177.537986][T12748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.538067][T12748] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 177.848429][T12759] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.941901][T12757] xt_esp: unknown flags DD [ 177.973897][T12748] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.973998][T12748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.016124][T12748] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2267: bad orphan inode 131083 [ 178.016185][T12748] loop0: lost filesystem error report for type 5 error -117 [ 178.019047][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 178.019068][ C1] EXT4-fs (loop0): initial error at time 1794443782: ext4_orphan_get:1430 [ 178.019088][ C1] EXT4-fs (loop0): last error at time 1794443782: ext4_orphan_get:1430 [ 178.066551][T12748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.319942][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 178.398235][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.436091][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 178.601645][T12776] TCP: tcp_parse_options: Illegal window scaling value 93 > 14 received [ 178.977725][T12788] FAULT_INJECTION: forcing a failure. [ 178.977725][T12788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.977766][T12788] CPU: 1 UID: 0 PID: 12788 Comm: syz.8.2281 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.977789][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.977855][T12788] Call Trace: [ 178.977863][T12788] [ 178.977872][T12788] __dump_stack+0x1d/0x30 [ 178.977909][T12788] dump_stack_lvl+0x95/0xd0 [ 178.977941][T12788] dump_stack+0x15/0x1b [ 178.977966][T12788] should_fail_ex+0x259/0x270 [ 178.978000][T12788] should_fail+0xb/0x20 [ 178.978066][T12788] should_fail_usercopy+0x1a/0x20 [ 178.978095][T12788] _copy_from_user+0x1c/0xb0 [ 178.978122][T12788] __sys_connect+0xd0/0x2a0 [ 178.978214][T12788] __x64_sys_connect+0x3f/0x50 [ 178.978237][T12788] x64_sys_call+0x1c0b/0x2550 [ 178.978267][T12788] do_syscall_64+0x116/0x380 [ 178.978290][T12788] ? clear_bhb_loop+0x70/0xc0 [ 178.978408][T12788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.978459][T12788] RIP: 0033:0x7f983b618fd9 [ 178.978481][T12788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.978498][T12788] RSP: 002b:00007f983a05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 178.978517][T12788] RAX: ffffffffffffffda RBX: 00007f983b895fa0 RCX: 00007f983b618fd9 [ 178.978536][T12788] RDX: 000000000000002e RSI: 00002000000000c0 RDI: 0000000000000004 [ 178.978550][T12788] RBP: 00007f983b6a7fed R08: 0000000000000000 R09: 0000000000000000 [ 178.978565][T12788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.978578][T12788] R13: 00007f983b896038 R14: 00007f983b895fa0 R15: 00007ffebf65fde8 [ 178.978595][T12788] [ 179.234942][T12795] set_capacity_and_notify: 3 callbacks suppressed [ 179.234959][T12795] loop8: detected capacity change from 0 to 33280 [ 179.262905][T12795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.330334][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.370517][T12802] loop0: detected capacity change from 0 to 33280 [ 179.403543][T12802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.403606][T12802] ext4 filesystem being mounted at /426/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.446895][T12802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2285'. [ 179.468396][T12363] syz.7.2194 (12363) used greatest stack depth: 8464 bytes left [ 179.582640][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.652367][T12806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 179.737686][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2289'. [ 179.926273][T12820] loop2: detected capacity change from 0 to 128 [ 179.991623][T12820] bio_check_eod: 32 callbacks suppressed [ 179.991640][T12820] syz.2.2292: attempt to access beyond end of device [ 179.991640][T12820] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 179.994075][T12820] syz.2.2292: attempt to access beyond end of device [ 179.994075][T12820] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 179.994144][T12820] buffer_io_error: 18 callbacks suppressed [ 179.994285][T12820] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 179.994525][T12820] syz.2.2292: attempt to access beyond end of device [ 179.994525][T12820] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 179.994638][T12820] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 179.998592][T12820] syz.2.2292: attempt to access beyond end of device [ 179.998592][T12820] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 180.005994][T12820] syz.2.2292: attempt to access beyond end of device [ 180.005994][T12820] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 180.007102][T12820] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 180.007271][T12820] syz.2.2292: attempt to access beyond end of device [ 180.007271][T12820] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 180.007388][T12820] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 180.014550][T12820] syz.2.2292: attempt to access beyond end of device [ 180.014550][T12820] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 180.022331][T12820] syz.2.2292: attempt to access beyond end of device [ 180.022331][T12820] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 180.022587][T12820] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 180.022963][T12820] syz.2.2292: attempt to access beyond end of device [ 180.022963][T12820] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 180.023074][T12820] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 180.027046][T12820] syz.2.2292: attempt to access beyond end of device [ 180.027046][T12820] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 180.034829][T12820] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 180.035077][T12820] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 180.039010][T12820] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 180.039034][T12820] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 180.284769][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2297'. [ 180.498785][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 180.498801][ T30] audit: type=1400 audit(1794443785.333:2369): avc: denied { write } for pid=12846 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.541415][T12849] FAULT_INJECTION: forcing a failure. [ 180.541415][T12849] name failslab, interval 1, probability 0, space 0, times 0 [ 180.541497][T12849] CPU: 1 UID: 0 PID: 12849 Comm: syz.2.2304 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.541524][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 180.541537][T12849] Call Trace: [ 180.541544][T12849] [ 180.541553][T12849] __dump_stack+0x1d/0x30 [ 180.541582][T12849] dump_stack_lvl+0x95/0xd0 [ 180.541681][T12849] dump_stack+0x15/0x1b [ 180.541704][T12849] should_fail_ex+0x259/0x270 [ 180.541736][T12849] ? __rdma_create_id+0x48/0x3e0 [ 180.541763][T12849] should_failslab+0x8c/0xb0 [ 180.541836][T12849] __kmalloc_cache_noprof+0x5d/0x3e0 [ 180.541875][T12849] ? __rdma_create_id+0x48/0x3e0 [ 180.541901][T12849] ? __xa_alloc+0x291/0x300 [ 180.541934][T12849] ? __pfx_ucma_event_handler+0x10/0x10 [ 180.541960][T12849] ? __pfx_ucma_event_handler+0x10/0x10 [ 180.541986][T12849] __rdma_create_id+0x48/0x3e0 [ 180.542091][T12849] ? __pfx_ucma_event_handler+0x10/0x10 [ 180.542128][T12849] rdma_create_user_id+0x5a/0xa0 [ 180.542187][T12849] ucma_create_id+0x19c/0x280 [ 180.542213][T12849] ? __pfx_ucma_create_id+0x10/0x10 [ 180.542236][T12849] ucma_write+0x1c9/0x260 [ 180.542282][T12849] ? __pfx_ucma_write+0x10/0x10 [ 180.542309][T12849] vfs_write+0x24f/0x990 [ 180.542400][T12849] ? __fget_files+0x184/0x1c0 [ 180.542426][T12849] ksys_write+0xdc/0x1a0 [ 180.542496][T12849] __x64_sys_write+0x40/0x50 [ 180.542596][T12849] x64_sys_call+0x154e/0x2550 [ 180.542620][T12849] do_syscall_64+0x116/0x380 [ 180.542639][T12849] ? clear_bhb_loop+0x70/0xc0 [ 180.542726][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.542750][T12849] RIP: 0033:0x7f955cba8fd9 [ 180.542782][T12849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.542834][T12849] RSP: 002b:00007f955b5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.542853][T12849] RAX: ffffffffffffffda RBX: 00007f955ce25fa0 RCX: 00007f955cba8fd9 [ 180.542888][T12849] RDX: 0000000000000020 RSI: 0000200000000c40 RDI: 0000000000000003 [ 180.542901][T12849] RBP: 00007f955cc37fed R08: 0000000000000000 R09: 0000000000000000 [ 180.542927][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.542939][T12849] R13: 00007f955ce26038 R14: 00007f955ce25fa0 R15: 00007ffeaf2e3ec8 [ 180.542973][T12849] [ 180.629208][T12767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.695919][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2305'. [ 180.699908][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2305'. [ 180.706961][T12856] PM: suspend entry (s2idle) [ 180.706975][T12856] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 180.706986][T12856] PM: suspend exit [ 180.888606][ T30] audit: type=1400 audit(1794443785.713:2370): avc: denied { write } for pid=12859 comm="syz.0.2308" lport=40265 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 180.888711][ T30] audit: type=1400 audit(1794443785.713:2371): avc: denied { getopt } for pid=12859 comm="syz.0.2308" lport=40265 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 181.049966][T12866] loop8: detected capacity change from 0 to 128 [ 181.167714][ T30] audit: type=1400 audit(1794443786.003:2372): avc: denied { mount } for pid=12872 comm="syz.7.2314" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.772537][T12873] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 181.818177][ T30] audit: type=1400 audit(1794443786.653:2373): avc: denied { unmount } for pid=7145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.987447][ T30] audit: type=1400 audit(1794443788.823:2374): avc: denied { create } for pid=12878 comm="syz.7.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.011576][T12879] loop7: detected capacity change from 0 to 256 [ 184.031501][ T30] audit: type=1400 audit(1794443788.873:2375): avc: denied { bind } for pid=12878 comm="syz.7.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.042647][T12883] loop2: detected capacity change from 0 to 7 [ 184.043406][T12883] loop2: [ 184.127966][ T30] audit: type=1400 audit(1794443788.963:2376): avc: denied { ioctl } for pid=12890 comm="syz.2.2322" path="socket:[34661]" dev="sockfs" ino=34661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.128660][T12891] FAULT_INJECTION: forcing a failure. [ 184.128660][T12891] name failslab, interval 1, probability 0, space 0, times 0 [ 184.128686][T12891] CPU: 1 UID: 0 PID: 12891 Comm: syz.2.2322 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.128715][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.128771][T12891] Call Trace: [ 184.128779][T12891] [ 184.128787][T12891] __dump_stack+0x1d/0x30 [ 184.128813][T12891] dump_stack_lvl+0x95/0xd0 [ 184.128834][T12891] dump_stack+0x15/0x1b [ 184.128853][T12891] should_fail_ex+0x259/0x270 [ 184.128930][T12891] ? __kernfs_new_node+0x70/0x440 [ 184.128954][T12891] should_failslab+0x8c/0xb0 [ 184.128984][T12891] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 184.129090][T12891] ? __kernfs_new_node+0x70/0x440 [ 184.129116][T12891] __kernfs_new_node+0x70/0x440 [ 184.129154][T12891] ? rb_insert_color+0x6e/0x2a0 [ 184.129174][T12891] ? __rcu_read_unlock+0x4e/0x70 [ 184.129196][T12891] ? up_write+0x19/0x60 [ 184.129261][T12891] ? kernfs_link_sibling+0x2f5/0x320 [ 184.129284][T12891] ? __rcu_read_unlock+0x4e/0x70 [ 184.129319][T12891] kernfs_new_node+0xcf/0xf0 [ 184.129347][T12891] __kernfs_create_file+0x4b/0x180 [ 184.129427][T12891] ? __pfx_dev_attr_show+0x10/0x10 [ 184.129538][T12891] ? __pfx_dev_attr_store+0x10/0x10 [ 184.129645][T12891] sysfs_add_file_mode_ns+0x132/0x1b0 [ 184.129679][T12891] internal_create_group+0x43e/0x9e0 [ 184.129764][T12891] ? kernfs_add_one+0xf4/0x310 [ 184.129823][T12891] sysfs_create_groups+0x3f/0xf0 [ 184.129917][T12891] device_add_attrs+0xf2/0x3f0 [ 184.129941][T12891] ? kobject_put+0x108/0x180 [ 184.129972][T12891] device_add+0x37a/0x790 [ 184.129996][T12891] netdev_register_kobject+0x127/0x240 [ 184.130059][T12891] register_netdevice+0xc68/0x13f0 [ 184.130134][T12891] macvlan_common_newlink+0xa8a/0xc70 [ 184.130167][T12891] macvlan_newlink+0x25/0x30 [ 184.130195][T12891] ? __pfx_macvlan_newlink+0x10/0x10 [ 184.130334][T12891] rtnl_newlink_create+0x1e4/0x4a0 [ 184.130371][T12891] ? security_capable+0x7b/0x90 [ 184.130427][T12891] ? netlink_ns_capable+0x86/0xa0 [ 184.130450][T12891] rtnl_newlink+0x1255/0x1510 [ 184.130485][T12891] ? put_dec_trunc8+0x119/0x140 [ 184.130512][T12891] ? __memcg_slab_free_hook+0x154/0x340 [ 184.130665][T12891] ? __rcu_read_unlock+0x4e/0x70 [ 184.130765][T12891] ? avc_has_perm_noaudit+0xac/0x160 [ 184.130790][T12891] ? cred_has_capability+0x224/0x2a0 [ 184.130813][T12891] ? selinux_capable+0x31/0x40 [ 184.130899][T12891] ? security_capable+0x7b/0x90 [ 184.130920][T12891] ? ns_capable+0x80/0xb0 [ 184.130940][T12891] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.131011][T12891] rtnetlink_rcv_msg+0x64b/0x720 [ 184.131045][T12891] netlink_rcv_skb+0x11e/0x220 [ 184.131065][T12891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.131096][T12891] rtnetlink_rcv+0x1c/0x30 [ 184.131253][T12891] netlink_unicast+0x665/0x740 [ 184.131275][T12891] netlink_sendmsg+0x5ef/0x740 [ 184.131300][T12891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.131435][T12891] ____sys_sendmsg+0x54a/0x590 [ 184.131459][T12891] ___sys_sendmsg+0x196/0x1e0 [ 184.131494][T12891] __x64_sys_sendmsg+0xd4/0x160 [ 184.131524][T12891] x64_sys_call+0x22ab/0x2550 [ 184.131582][T12891] do_syscall_64+0x116/0x380 [ 184.131606][T12891] ? clear_bhb_loop+0x70/0xc0 [ 184.131703][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.131734][T12891] RIP: 0033:0x7f955cba8fd9 [ 184.131751][T12891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.131770][T12891] RSP: 002b:00007f955b5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.131789][T12891] RAX: ffffffffffffffda RBX: 00007f955ce25fa0 RCX: 00007f955cba8fd9 [ 184.131879][T12891] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000004 [ 184.131890][T12891] RBP: 00007f955cc37fed R08: 0000000000000000 R09: 0000000000000000 [ 184.131905][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.131983][T12891] R13: 00007f955ce26038 R14: 00007f955ce25fa0 R15: 00007ffeaf2e3ec8 [ 184.132001][T12891] [ 184.169022][ T30] audit: type=1400 audit(1794443789.003:2377): avc: denied { create } for pid=12880 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 184.190500][ T30] audit: type=1400 audit(1794443789.023:2378): avc: denied { write } for pid=12880 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 184.255749][ T367] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.261924][T12895] FAULT_INJECTION: forcing a failure. [ 184.261924][T12895] name failslab, interval 1, probability 0, space 0, times 0 [ 184.262019][T12895] CPU: 1 UID: 0 PID: 12895 Comm: syz.7.2324 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.262046][T12895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.262061][T12895] Call Trace: [ 184.262070][T12895] [ 184.262078][T12895] __dump_stack+0x1d/0x30 [ 184.262104][T12895] dump_stack_lvl+0x95/0xd0 [ 184.262138][T12895] dump_stack+0x15/0x1b [ 184.262159][T12895] should_fail_ex+0x259/0x270 [ 184.262189][T12895] ? find_css_set+0x6bd/0x1250 [ 184.262291][T12895] should_failslab+0x8c/0xb0 [ 184.262325][T12895] __kmalloc_cache_noprof+0x5d/0x3e0 [ 184.262386][T12895] ? _raw_spin_unlock+0x9/0x30 [ 184.262416][T12895] ? find_css_set+0x6bd/0x1250 [ 184.262531][T12895] find_css_set+0x6bd/0x1250 [ 184.262569][T12895] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 184.262597][T12895] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 184.262657][T12895] ? cgroup_attach_task+0x1c2/0x450 [ 184.262733][T12895] cgroup_attach_task+0x1f3/0x450 [ 184.262771][T12895] __cgroup1_procs_write+0x1dc/0x250 [ 184.262794][T12895] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 184.262898][T12895] cgroup1_procs_write+0x2a/0x40 [ 184.262932][T12895] cgroup_file_write+0x197/0x350 [ 184.262960][T12895] ? __pfx_cgroup_file_write+0x10/0x10 [ 184.262986][T12895] kernfs_fop_write_iter+0x1d2/0x2e0 [ 184.263029][T12895] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 184.263136][T12895] vfs_write+0x57a/0x990 [ 184.263255][T12895] ksys_write+0xdc/0x1a0 [ 184.263290][T12895] __x64_sys_write+0x40/0x50 [ 184.263378][T12895] x64_sys_call+0x154e/0x2550 [ 184.263406][T12895] do_syscall_64+0x116/0x380 [ 184.263428][T12895] ? clear_bhb_loop+0x70/0xc0 [ 184.263454][T12895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.263478][T12895] RIP: 0033:0x7f3e35528fd9 [ 184.263516][T12895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.263592][T12895] RSP: 002b:00007f3e33f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.263614][T12895] RAX: ffffffffffffffda RBX: 00007f3e357a5fa0 RCX: 00007f3e35528fd9 [ 184.263700][T12895] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 184.263715][T12895] RBP: 00007f3e355b7fed R08: 0000000000000000 R09: 0000000000000000 [ 184.263805][T12895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.263819][T12895] R13: 00007f3e357a6038 R14: 00007f3e357a5fa0 R15: 00007ffd05f04c68 [ 184.263894][T12895] [ 184.318928][T12901] loop7: detected capacity change from 0 to 33792 [ 184.329538][T12901] EXT4-fs: inline encryption not supported [ 184.329734][T12901] EXT4-fs: Ignoring removed bh option [ 184.350373][T12901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 184.624417][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 184.744012][T12923] loop0: detected capacity change from 0 to 128 [ 184.745171][T12923] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.750666][T12923] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.915396][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2338'. [ 184.957230][T12927] xt_esp: unknown flags DD [ 185.914541][T12910] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 185.919376][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 185.919390][ T30] audit: type=1400 audit(1794443790.753:2396): avc: denied { execute } for pid=12949 comm="syz.3.2345" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.962910][ T6373] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.962942][ T6373] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.050891][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2349'. [ 186.079478][ T6373] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.079547][ T6373] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.079652][ T6373] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.079685][ T6373] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.306754][ T6274] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.350954][ T30] audit: type=1400 audit(1794443791.183:2397): avc: denied { write } for pid=12967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.415687][ T30] audit: type=1400 audit(1794443791.253:2398): avc: denied { write } for pid=12981 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.456886][ T3017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.792760][T13006] loop2: detected capacity change from 0 to 33280 [ 187.812126][T13006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.812248][T13006] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.815129][ T30] audit: type=1400 audit(1794443792.653:2399): avc: denied { write } for pid=13005 comm="syz.2.2361" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.915119][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.959655][T12992] tipc: Resetting bearer [ 189.967948][ T30] audit: type=1400 audit(1794443794.803:2400): avc: denied { mounton } for pid=13014 comm="syz.8.2364" path="/proc/447/task" dev="proc" ino=35924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 189.987436][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2363'. [ 190.078603][ T30] audit: type=1400 audit(1794443794.913:2401): avc: denied { write } for pid=13026 comm="syz.3.2365" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.158801][T13028] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 190.179566][T13034] loop8: detected capacity change from 0 to 2048 [ 190.243450][T13034] loop8: p1 < > p3 [ 190.244388][T13034] loop8: p3 size 134217728 extends beyond EOD, truncated [ 190.305138][T12992] batman_adv: batadv0: Interface deactivated: gretap1 [ 190.380127][ T33] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.380165][ T33] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.380267][ T33] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.380376][ T33] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.380486][ T33] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.380529][ T33] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.475672][T13051] loop2: detected capacity change from 0 to 32896 [ 190.510188][T13058] futex_wake_op: syz.7.2373 tries to shift op by 144; fix this program [ 190.515721][T13058] futex_wake_op: syz.7.2373 tries to shift op by 144; fix this program [ 190.553934][T13060] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 190.586929][T13060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.596659][T13051] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.600218][T13051] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.622067][T13060] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 190.635855][ T30] audit: type=1400 audit(1794443795.463:2402): avc: denied { write } for pid=13050 comm="syz.2.2370" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.660259][ T30] audit: type=1400 audit(1794443795.493:2403): avc: denied { setattr } for pid=13050 comm="syz.2.2370" path="/33/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.710817][T13060] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 190.712931][ T30] audit: type=1400 audit(1794443795.553:2404): avc: denied { ioctl } for pid=13050 comm="syz.2.2370" path="/33/file1/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.715019][T13060] bond2 (unregistering): Released all slaves [ 190.737265][T13070] loop7: detected capacity change from 0 to 33280 [ 190.749073][ T30] audit: type=1400 audit(1794443795.583:2405): avc: denied { mounton } for pid=13071 comm="syz.8.2378" path="/187/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 190.793943][T13070] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 190.793963][T13070] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 190.795443][T13070] EXT4-fs (loop7): 1 truncate cleaned up [ 190.795823][T13070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.846816][T12400] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.914206][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.950215][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 190.950233][ T30] audit: type=1400 audit(1794443795.793:2411): avc: denied { bind } for pid=13081 comm="syz.7.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.950260][ T30] audit: type=1400 audit(1794443795.793:2412): avc: denied { write } for pid=13081 comm="syz.7.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.997002][ T30] audit: type=1400 audit(1794443795.833:2413): avc: denied { setopt } for pid=13081 comm="syz.7.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.081092][T13094] FAULT_INJECTION: forcing a failure. [ 191.081092][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 191.081120][T13094] CPU: 0 UID: 0 PID: 13094 Comm: syz.8.2388 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.081203][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.081259][T13094] Call Trace: [ 191.081265][T13094] [ 191.081273][T13094] __dump_stack+0x1d/0x30 [ 191.081340][T13094] dump_stack_lvl+0x95/0xd0 [ 191.081361][T13094] dump_stack+0x15/0x1b [ 191.081383][T13094] should_fail_ex+0x259/0x270 [ 191.081417][T13094] ? alloc_workqueue_va+0xfa/0x15d0 [ 191.081512][T13094] should_failslab+0x8c/0xb0 [ 191.081588][T13094] __kmalloc_noprof+0xb6/0x4b0 [ 191.081662][T13094] ? alloc_workqueue_va+0xfa/0x15d0 [ 191.081691][T13094] alloc_workqueue_va+0xfa/0x15d0 [ 191.081718][T13094] ? inet_addr_type+0x166/0x230 [ 191.081826][T13094] alloc_workqueue_noprof+0x84/0xb0 [ 191.081864][T13094] ? rds_tcp_laddr_check+0xa8/0x140 [ 191.081912][T13094] ? timer_init_key+0x75/0x130 [ 191.081954][T13094] __rds_conn_create+0xaa8/0x11d0 [ 191.081990][T13094] rds_conn_create_outgoing+0x43/0x60 [ 191.082070][T13094] rds_sendmsg+0xc68/0x15f0 [ 191.082171][T13094] ? __pfx_rds_sendmsg+0x10/0x10 [ 191.082205][T13094] ____sys_sendmsg+0x54a/0x590 [ 191.082235][T13094] ___sys_sendmsg+0x196/0x1e0 [ 191.082324][T13094] __x64_sys_sendmsg+0xd4/0x160 [ 191.082353][T13094] x64_sys_call+0x22ab/0x2550 [ 191.082383][T13094] do_syscall_64+0x116/0x380 [ 191.082406][T13094] ? clear_bhb_loop+0x70/0xc0 [ 191.082442][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.082465][T13094] RIP: 0033:0x7f983b618fd9 [ 191.082483][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.082504][T13094] RSP: 002b:00007f983a05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.082527][T13094] RAX: ffffffffffffffda RBX: 00007f983b895fa0 RCX: 00007f983b618fd9 [ 191.082543][T13094] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 191.082604][T13094] RBP: 00007f983b6a7fed R08: 0000000000000000 R09: 0000000000000000 [ 191.082618][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.082633][T13094] R13: 00007f983b896038 R14: 00007f983b895fa0 R15: 00007ffebf65fde8 [ 191.082653][T13094] [ 191.402434][T13111] loop8: detected capacity change from 0 to 33280 [ 191.403810][T13111] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 191.423652][T13111] EXT4-fs (loop8): 1 truncate cleaned up [ 191.424227][T13111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.439472][ T30] audit: type=1400 audit(1794443796.283:2414): avc: denied { write } for pid=13110 comm="syz.8.2395" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.443416][T13108] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 191.557869][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.693198][T13126] loop8: detected capacity change from 0 to 33792 [ 191.697094][T13126] EXT4-fs: inline encryption not supported [ 191.697202][T13126] EXT4-fs: Ignoring removed bh option [ 191.730647][T13126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 191.845619][T13132] loop3: detected capacity change from 0 to 33280 [ 191.867427][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 191.876735][T13132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.876872][T13132] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.890430][ T30] audit: type=1400 audit(1794443796.733:2415): avc: denied { write } for pid=13131 comm="syz.3.2402" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.043868][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.061189][ T30] audit: type=1400 audit(1794443796.903:2416): avc: denied { append } for pid=13123 comm="syz.0.2400" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.065976][ T30] audit: type=1400 audit(1794443796.903:2417): avc: denied { read } for pid=13123 comm="syz.0.2400" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.066017][ T30] audit: type=1400 audit(1794443796.903:2418): avc: denied { open } for pid=13123 comm="syz.0.2400" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.075915][ T30] audit: type=1400 audit(1794443796.913:2419): avc: denied { ioctl } for pid=13123 comm="syz.0.2400" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x4018920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.146987][T13142] loop8: detected capacity change from 0 to 33280 [ 192.171664][T13142] EXT4-fs: Ignoring removed bh option [ 192.187057][T13142] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.2406: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 192.187156][T13142] loop8: lost filesystem error report for type 5 error -117 [ 192.187933][T13142] EXT4-fs (loop8): 1 orphan inode deleted [ 192.193844][T13142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.233986][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.265262][ T33] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.272304][ T30] audit: type=1400 audit(1794443797.103:2420): avc: denied { accept } for pid=13148 comm="syz.7.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.273956][ T6274] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 192.385767][T13157] loop0: detected capacity change from 0 to 33280 [ 192.413627][T13157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.483452][T13157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.487358][T13157] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.488718][T13165] xt_hashlimit: max too large, truncated to 1048576 [ 192.564952][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.590975][T13171] ip_tables: iptables: counters copy to user failed while replacing table [ 192.591332][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2417'. [ 192.925451][T13186] loop2: detected capacity change from 0 to 33280 [ 192.965611][T13186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 192.965761][T13186] System zones: 1-12 [ 192.967388][T13186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.2423: missing EA_INODE flag [ 192.967486][T13186] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.969027][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 192.969047][ C1] EXT4-fs (loop2): initial error at time 1794443797: ext4_xattr_inode_iget:437: inode 12 [ 192.969073][ C1] EXT4-fs (loop2): last error at time 1794443797: ext4_xattr_inode_iget:437: inode 12 [ 192.970675][T13186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2423: error while reading EA inode 12 err=-117 [ 192.970727][T13186] loop2: lost filesystem error report for type 5 error -117 [ 192.973523][T13186] EXT4-fs (loop2): 1 orphan inode deleted [ 192.987448][T13186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.025048][T13149] loop7: detected capacity change from 0 to 36864 [ 193.118498][T13149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.134556][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.188576][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.214756][T13196] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 193.223765][T13196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.236094][T13196] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 193.378367][T13216] EXT4-fs: inline encryption not supported [ 193.378526][T13216] EXT4-fs: Ignoring removed bh option [ 193.390370][T13216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 193.455908][T12400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 193.529144][T13220] FAT-fs (loop8): invalid media value (0x00) [ 193.529175][T13220] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 193.529228][T13220] FAT-fs (loop8): Can't find a valid FAT filesystem [ 193.604287][T13227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.606792][T13224] FAULT_INJECTION: forcing a failure. [ 193.606792][T13224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.606820][T13224] CPU: 1 UID: 0 PID: 13224 Comm: syz.2.2436 Not tainted syzkaller #0 PREEMPT(lazy) [ 193.606847][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 193.606862][T13224] Call Trace: [ 193.606887][T13224] [ 193.606896][T13224] __dump_stack+0x1d/0x30 [ 193.606926][T13224] dump_stack_lvl+0x95/0xd0 [ 193.606952][T13224] dump_stack+0x15/0x1b [ 193.607015][T13224] should_fail_ex+0x259/0x270 [ 193.607148][T13224] should_fail+0xb/0x20 [ 193.607206][T13224] should_fail_usercopy+0x1a/0x20 [ 193.607236][T13224] copy_folio_from_iter_atomic+0x24b/0x10b0 [ 193.607327][T13224] ? shmem_write_begin+0xfc/0x1f0 [ 193.607356][T13224] ? shmem_write_begin+0x135/0x1f0 [ 193.607450][T13224] generic_perform_write+0x2c4/0x490 [ 193.607479][T13224] shmem_file_write_iter+0xc5/0xf0 [ 193.607532][T13224] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 193.607637][T13224] vfs_write+0x57a/0x990 [ 193.607679][T13224] __x64_sys_pwrite64+0x12d/0x180 [ 193.607782][T13224] x64_sys_call+0x23be/0x2550 [ 193.607809][T13224] do_syscall_64+0x116/0x380 [ 193.607830][T13224] ? clear_bhb_loop+0x70/0xc0 [ 193.607852][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.607952][T13224] RIP: 0033:0x7f955cba8fd9 [ 193.607979][T13224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.608044][T13224] RSP: 002b:00007f955b5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 193.608065][T13224] RAX: ffffffffffffffda RBX: 00007f955ce25fa0 RCX: 00007f955cba8fd9 [ 193.608082][T13224] RDX: 0000000000000e7d RSI: 0000200000003600 RDI: 0000000000000003 [ 193.608098][T13224] RBP: 00007f955cc37fed R08: 0000000000000000 R09: 0000000000000000 [ 193.608125][T13224] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 193.608138][T13224] R13: 00007f955ce26038 R14: 00007f955ce25fa0 R15: 00007ffeaf2e3ec8 [ 193.608158][T13224] [ 193.745111][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2441'. [ 193.755023][T13226] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 193.755084][T13226] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 193.755107][T13226] EXT4-fs (loop7): This should not happen!! Data will be lost [ 193.755107][T13226] [ 193.755189][T13226] EXT4-fs (loop7): Total free blocks count 0 [ 193.755200][T13226] EXT4-fs (loop7): Free/Dirty block details [ 193.755213][T13226] EXT4-fs (loop7): free_blocks=4096 [ 193.755245][T13226] EXT4-fs (loop7): dirty_blocks=512 [ 193.755256][T13226] EXT4-fs (loop7): Block reservation details [ 193.755266][T13226] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 193.988024][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.299098][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.299098][ T6274] Bluetooth: hci0: command 0x1003 tx timeout [ 195.590882][T13194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.726401][T13258] FAULT_INJECTION: forcing a failure. [ 195.726401][T13258] name failslab, interval 1, probability 0, space 0, times 0 [ 195.726470][T13258] CPU: 0 UID: 0 PID: 13258 Comm: syz.2.2451 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.726498][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.726512][T13258] Call Trace: [ 195.726520][T13258] [ 195.726585][T13258] __dump_stack+0x1d/0x30 [ 195.726613][T13258] dump_stack_lvl+0x95/0xd0 [ 195.726699][T13258] dump_stack+0x15/0x1b [ 195.726724][T13258] should_fail_ex+0x259/0x270 [ 195.726752][T13258] ? __kernfs_new_node+0x70/0x440 [ 195.726779][T13258] should_failslab+0x8c/0xb0 [ 195.726843][T13258] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 195.727057][T13258] ? __kernfs_new_node+0x70/0x440 [ 195.727081][T13258] __kernfs_new_node+0x70/0x440 [ 195.727102][T13258] ? rb_insert_color+0x25c/0x2a0 [ 195.727121][T13258] ? __rcu_read_unlock+0x4e/0x70 [ 195.727143][T13258] ? up_write+0x19/0x60 [ 195.727185][T13258] ? kernfs_link_sibling+0x2f5/0x320 [ 195.727207][T13258] ? __rcu_read_unlock+0x4e/0x70 [ 195.727231][T13258] kernfs_new_node+0xcf/0xf0 [ 195.727288][T13258] __kernfs_create_file+0x4b/0x180 [ 195.727323][T13258] ? __pfx_dev_attr_show+0x10/0x10 [ 195.727351][T13258] ? __pfx_dev_attr_store+0x10/0x10 [ 195.727526][T13258] sysfs_add_file_mode_ns+0x132/0x1b0 [ 195.727557][T13258] internal_create_group+0x43e/0x9e0 [ 195.727653][T13258] ? kernfs_add_one+0xf4/0x310 [ 195.727676][T13258] sysfs_create_groups+0x3f/0xf0 [ 195.727695][T13258] device_add_attrs+0xf2/0x3f0 [ 195.727791][T13258] ? kobject_put+0x108/0x180 [ 195.727824][T13258] device_add+0x37a/0x790 [ 195.727881][T13258] netdev_register_kobject+0x127/0x240 [ 195.727905][T13258] register_netdevice+0xc68/0x13f0 [ 195.727926][T13258] macvlan_common_newlink+0xa8a/0xc70 [ 195.727954][T13258] macvlan_newlink+0x25/0x30 [ 195.728063][T13258] ? __pfx_macvlan_newlink+0x10/0x10 [ 195.728091][T13258] rtnl_newlink_create+0x1e4/0x4a0 [ 195.728123][T13258] ? security_capable+0x7b/0x90 [ 195.728214][T13258] ? netlink_ns_capable+0x86/0xa0 [ 195.728231][T13258] rtnl_newlink+0x1255/0x1510 [ 195.728269][T13258] ? mas_update_gap+0x1bb/0x4a0 [ 195.728295][T13258] ? __css_rstat_updated+0xbb/0x280 [ 195.728324][T13258] ? __rcu_read_unlock+0x4e/0x70 [ 195.728381][T13258] ? avc_has_perm_noaudit+0xac/0x160 [ 195.728508][T13258] ? cred_has_capability+0x224/0x2a0 [ 195.728532][T13258] ? selinux_capable+0x31/0x40 [ 195.728560][T13258] ? security_capable+0x7b/0x90 [ 195.728581][T13258] ? ns_capable+0x80/0xb0 [ 195.728720][T13258] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.728748][T13258] rtnetlink_rcv_msg+0x64b/0x720 [ 195.728776][T13258] ? avc_has_perm_noaudit+0xac/0x160 [ 195.728840][T13258] netlink_rcv_skb+0x11e/0x220 [ 195.728861][T13258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.728898][T13258] rtnetlink_rcv+0x1c/0x30 [ 195.728931][T13258] netlink_unicast+0x665/0x740 [ 195.728966][T13258] netlink_sendmsg+0x5ef/0x740 [ 195.729027][T13258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.729055][T13258] ____sys_sendmsg+0x54a/0x590 [ 195.729084][T13258] ___sys_sendmsg+0x196/0x1e0 [ 195.729114][T13258] __x64_sys_sendmsg+0xd4/0x160 [ 195.729168][T13258] x64_sys_call+0x22ab/0x2550 [ 195.729198][T13258] do_syscall_64+0x116/0x380 [ 195.729219][T13258] ? clear_bhb_loop+0x70/0xc0 [ 195.729243][T13258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.729335][T13258] RIP: 0033:0x7f955cba8fd9 [ 195.729353][T13258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.729371][T13258] RSP: 002b:00007f955b5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.729395][T13258] RAX: ffffffffffffffda RBX: 00007f955ce25fa0 RCX: 00007f955cba8fd9 [ 195.729411][T13258] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000004 [ 195.729427][T13258] RBP: 00007f955cc37fed R08: 0000000000000000 R09: 0000000000000000 [ 195.729440][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.729503][T13258] R13: 00007f955ce26038 R14: 00007f955ce25fa0 R15: 00007ffeaf2e3ec8 [ 195.729524][T13258] [ 196.014252][T13263] set_capacity_and_notify: 3 callbacks suppressed [ 196.014283][T13263] loop3: detected capacity change from 0 to 33280 [ 196.038071][T13263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.056834][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 196.056850][ T30] audit: type=1400 audit(1794443800.893:2456): avc: denied { write } for pid=13264 comm="syz.7.2453" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 196.136406][T13263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.141158][T13263] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.208096][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.256934][T13279] loop8: detected capacity change from 0 to 33280 [ 196.280336][T13279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.280455][T13279] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.314373][ T30] audit: type=1400 audit(1794443801.153:2457): avc: denied { write } for pid=13278 comm="syz.8.2457" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.408966][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.454831][T13291] FAULT_INJECTION: forcing a failure. [ 196.454831][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 196.454879][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.3.2463 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.454894][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.454902][T13291] Call Trace: [ 196.454907][T13291] [ 196.454914][T13291] __dump_stack+0x1d/0x30 [ 196.454930][T13291] dump_stack_lvl+0x95/0xd0 [ 196.454943][T13291] dump_stack+0x15/0x1b [ 196.454991][T13291] should_fail_ex+0x259/0x270 [ 196.455009][T13291] ? __kernfs_new_node+0x70/0x440 [ 196.455029][T13291] should_failslab+0x8c/0xb0 [ 196.455047][T13291] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 196.455069][T13291] ? __kernfs_new_node+0x70/0x440 [ 196.455083][T13291] __kernfs_new_node+0x70/0x440 [ 196.455174][T13291] ? rb_insert_color+0x291/0x2a0 [ 196.455187][T13291] ? __rcu_read_unlock+0x4e/0x70 [ 196.455276][T13291] ? up_write+0x19/0x60 [ 196.455291][T13291] ? kernfs_link_sibling+0x2f5/0x320 [ 196.455305][T13291] ? __rcu_read_unlock+0x4e/0x70 [ 196.455319][T13291] kernfs_new_node+0xcf/0xf0 [ 196.455333][T13291] __kernfs_create_file+0x4b/0x180 [ 196.455378][T13291] ? __pfx_queue_attr_show+0x10/0x10 [ 196.455473][T13291] ? __pfx_queue_attr_store+0x10/0x10 [ 196.455494][T13291] sysfs_add_file_mode_ns+0x132/0x1b0 [ 196.455589][T13291] ? __pfx_queue_attr_visible+0x10/0x10 [ 196.455602][T13291] internal_create_group+0x43e/0x9e0 [ 196.455615][T13291] ? kernfs_create_dir_ns+0x158/0x170 [ 196.455702][T13291] sysfs_create_groups+0x3f/0xf0 [ 196.455790][T13291] kobject_add_internal+0x49d/0x770 [ 196.455815][T13291] kobject_add+0xdb/0x150 [ 196.455831][T13291] ? kobject_add+0xdb/0x150 [ 196.455880][T13291] ? blk_register_queue+0x37/0x2d0 [ 196.455893][T13291] blk_register_queue+0x4f/0x2d0 [ 196.455906][T13291] ? kobject_create_and_add+0xf3/0x160 [ 196.455957][T13291] __add_disk+0x49a/0x7b0 [ 196.456025][T13291] add_disk_fwnode+0xf0/0x220 [ 196.456037][T13291] device_add_disk+0x27/0x40 [ 196.456048][T13291] md_alloc+0x647/0xa20 [ 196.456061][T13291] md_alloc_and_put+0x18/0x170 [ 196.456115][T13291] add_named_array+0x1cd/0x2a0 [ 196.456132][T13291] param_attr_store+0x149/0x1d0 [ 196.456145][T13291] ? __pfx_param_attr_store+0x10/0x10 [ 196.456225][T13291] module_attr_store+0x4c/0x70 [ 196.456238][T13291] ? __pfx_module_attr_store+0x10/0x10 [ 196.456297][T13291] sysfs_kf_write+0xfe/0x120 [ 196.456314][T13291] ? __pfx_sysfs_kf_write+0x10/0x10 [ 196.456332][T13291] kernfs_fop_write_iter+0x1d2/0x2e0 [ 196.456422][T13291] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 196.456443][T13291] vfs_write+0x57a/0x990 [ 196.456463][T13291] ksys_write+0xdc/0x1a0 [ 196.456480][T13291] __x64_sys_write+0x40/0x50 [ 196.456628][T13291] x64_sys_call+0x154e/0x2550 [ 196.456644][T13291] do_syscall_64+0x116/0x380 [ 196.456656][T13291] ? clear_bhb_loop+0x70/0xc0 [ 196.456672][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.456773][T13291] RIP: 0033:0x7efdfba48fd9 [ 196.456802][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.456826][T13291] RSP: 002b:00007efdfa497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.456849][T13291] RAX: ffffffffffffffda RBX: 00007efdfbcc5fa0 RCX: 00007efdfba48fd9 [ 196.456942][T13291] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 196.456950][T13291] RBP: 00007efdfbad7fed R08: 0000000000000000 R09: 0000000000000000 [ 196.456992][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.457000][T13291] R13: 00007efdfbcc6038 R14: 00007efdfbcc5fa0 R15: 00007ffc0a73ae38 [ 196.457011][T13291] [ 196.457125][T13291] kobject: kobject_add_internal failed for queue (error: -12 parent: md_syzd2) [ 196.457536][T13291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.472895][ T30] audit: type=1400 audit(1794443801.313:2458): avc: denied { firmware_load } for pid=13287 comm="syz.7.2462" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 196.724038][T13294] loop3: detected capacity change from 0 to 33280 [ 196.784132][T13294] EXT4-fs: Ignoring removed bh option [ 196.792065][T13294] EXT4-fs: quotafile must be on filesystem root [ 196.903249][T13298] loop0: detected capacity change from 0 to 33280 [ 196.927281][T13298] EXT4-fs: Ignoring removed orlov option [ 197.004416][T13298] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 197.004483][T13298] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 197.004634][T13298] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2465: Corrupt directory, running e2fsck is recommended [ 197.046228][T13300] loop7: detected capacity change from 0 to 33280 [ 197.108488][T13300] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.154382][T13300] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.156641][T13300] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.2466: bg 0: block 248: padding at end of block bitmap is not set [ 197.156720][T13300] loop7: lost filesystem error report for type 5 error -117 [ 197.159475][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 197.159544][ C0] EXT4-fs (loop7): last error at time 1794443801: ext4_validate_block_bitmap:445 [ 197.222846][T13300] Quota error (device loop7): write_blk: dquota write failed [ 197.223205][T13300] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 197.223676][T13300] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.2466: Failed to acquire dquot type 1 [ 197.223796][T13300] loop7: lost filesystem error report for type 5 error -28 [ 197.261230][T13300] EXT4-fs (loop7): 1 truncate cleaned up [ 197.288183][T13300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 197.338347][ T30] audit: type=1400 audit(1794443802.173:2459): avc: denied { create } for pid=13311 comm="syz.8.2471" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.360707][ T30] audit: type=1400 audit(1794443802.193:2460): avc: denied { read write } for pid=13311 comm="syz.8.2471" name="md0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.360739][ T30] audit: type=1400 audit(1794443802.193:2461): avc: denied { open } for pid=13311 comm="syz.8.2471" path="/218/md0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.365451][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.366882][T13312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.366912][T13312] block device autoloading is deprecated and will be removed. [ 197.391875][ T30] audit: type=1400 audit(1794443802.223:2462): avc: denied { ioctl } for pid=13311 comm="syz.8.2471" path="/218/md0" dev="tmpfs" ino=1181 ioctlcmd=0x40140921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.406034][T13314] loop7: detected capacity change from 0 to 33280 [ 197.470838][T13314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.470905][T13314] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.509476][ T30] audit: type=1400 audit(1794443802.343:2463): avc: denied { write } for pid=13313 comm="syz.7.2472" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.553447][T13298] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 197.555573][T13298] EXT4-fs error (device loop0): ext4_iget_extra_inode:6003: inode #15: comm syz.0.2465: corrupted in-inode xattr: invalid ea_ino [ 197.555611][T13298] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.557641][T13298] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2465: couldn't read orphan inode 15 (err -117) [ 197.557705][T13298] loop0: lost filesystem error report for type 5 error -117 [ 197.580383][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 197.580408][ C0] EXT4-fs (loop0): initial error at time 1794443802: ext4_iget_extra_inode:6003: inode 15 [ 197.580435][ C0] EXT4-fs (loop0): last error at time 1794443802: ext4_orphan_get:1409 [ 197.596098][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.605290][T13298] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #2: comm syz.0.2465: corrupted xattr block 255: invalid header [ 197.607456][T13298] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 197.639308][T13298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.684764][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.735250][T13298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2465'. [ 197.735329][T13298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2465'. [ 197.735420][T13298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2465'. [ 197.809164][T13322] loop3: detected capacity change from 0 to 8192 [ 197.950894][T13329] loop3: detected capacity change from 8192 to 0 [ 197.952401][T13322] buffer_io_error: 46 callbacks suppressed [ 197.952426][T13322] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 197.952698][T13322] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 197.958206][T13322] FAT-fs (loop3): unable to read inode block for updating (i_pos 1044) [ 197.958939][T13322] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 197.960066][T13322] Buffer I/O error on dev loop3, logical block 97, lost async page write [ 197.960307][T13322] Buffer I/O error on dev loop3, logical block 98, lost async page write [ 197.960536][T13322] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 197.960847][T13322] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 197.961146][T13322] Buffer I/O error on dev loop3, logical block 101, lost async page write [ 197.966287][T13322] Buffer I/O error on dev loop3, logical block 102, lost async page write [ 197.966376][T13322] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 197.990170][ T5892] FAT-fs (loop3): Directory bread(block 65) failed [ 197.990198][ T5892] FAT-fs (loop3): Directory bread(block 66) failed [ 197.990217][ T5892] FAT-fs (loop3): Directory bread(block 67) failed [ 197.990236][ T5892] FAT-fs (loop3): Directory bread(block 68) failed [ 197.990255][ T5892] FAT-fs (loop3): Directory bread(block 69) failed [ 197.990326][ T5892] FAT-fs (loop3): Directory bread(block 70) failed [ 197.990345][ T5892] FAT-fs (loop3): Directory bread(block 71) failed [ 198.004985][ T5892] tipc: Resetting bearer [ 198.027158][ T5892] tipc: Disabling bearer [ 198.286717][ T5892] FAT-fs (loop3): unable to read inode block for updating (i_pos 1044) [ 198.725264][T13340] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.745545][T13350] loop0: detected capacity change from 0 to 33280 [ 198.764191][T13350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.764336][T13350] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.860966][T13352] loop7: detected capacity change from 0 to 33280 [ 198.892496][T13352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 198.892870][T13352] System zones: 1-12 [ 198.896570][T13352] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.2484: missing EA_INODE flag [ 198.896650][T13352] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 198.899005][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 198.899028][ C1] EXT4-fs (loop7): initial error at time 1794443803: ext4_xattr_inode_iget:437: inode 12 [ 198.899068][ C1] EXT4-fs (loop7): last error at time 1794443803: ext4_xattr_inode_iget:437: inode 12 [ 198.965663][T13352] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.2484: error while reading EA inode 12 err=-117 [ 198.965792][T13352] loop7: lost filesystem error report for type 5 error -117 [ 198.988470][T13352] EXT4-fs (loop7): 1 orphan inode deleted [ 199.015729][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.033646][T13352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.131374][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.131433][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.131548][T13340] bridge_slave_0: entered allmulticast mode [ 199.131991][T13340] bridge_slave_0: entered promiscuous mode [ 199.135771][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.135805][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.136004][T13340] bridge_slave_1: entered allmulticast mode [ 199.136754][T13340] bridge_slave_1: entered promiscuous mode [ 199.189683][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.195607][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.230755][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.273273][T13340] team0: Port device team_slave_0 added [ 199.277320][T13340] team0: Port device team_slave_1 added [ 199.295658][T13368] ip_tables: iptables: counters copy to user failed while replacing table [ 199.296065][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2488'. [ 199.311417][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.311432][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.311515][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.313758][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.313771][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.313801][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.357620][T13340] hsr_slave_0: entered promiscuous mode [ 199.361385][T13340] hsr_slave_1: entered promiscuous mode [ 199.361582][T13340] debugfs: 'hsr0' already exists in 'hsr' [ 199.361594][T13340] Cannot create hsr debugfs directory [ 199.428739][T13360] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.437497][T13360] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.556881][T13340] netdevsim netdevsim9 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.569734][T13365] loop8: p1 p3 < > [ 199.593472][ T4590] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.615357][T13340] netdevsim netdevsim9 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.704976][T13340] netdevsim netdevsim9 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.767148][T13386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.787833][T13340] netdevsim netdevsim9 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.881766][ T4113] udevd[4113]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 199.881910][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 199.915873][T13340] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 199.922390][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.925354][T13340] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 199.932339][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.934402][T13340] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 199.946254][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.948284][T13340] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 199.956704][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.958377][T13385] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 199.958440][T13385] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 199.958466][T13385] EXT4-fs (loop0): This should not happen!! Data will be lost [ 199.958466][T13385] [ 199.958480][T13385] EXT4-fs (loop0): Total free blocks count 0 [ 199.958493][T13385] EXT4-fs (loop0): Free/Dirty block details [ 199.958506][T13385] EXT4-fs (loop0): free_blocks=4096 [ 199.958519][T13385] EXT4-fs (loop0): dirty_blocks=512 [ 199.976742][T13385] EXT4-fs (loop0): Block reservation details [ 199.976758][T13385] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 200.070676][T13402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.127691][ T4590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.135125][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.152298][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.175530][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.175578][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.176840][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.176882][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.297321][ T7145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.367729][T13426] EXT4-fs: Ignoring removed bh option [ 200.368218][T13426] EXT4-fs: quotafile must be on filesystem root [ 200.519928][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.846585][T13340] veth0_vlan: entered promiscuous mode [ 200.859579][T13340] veth1_vlan: entered promiscuous mode [ 200.902011][T13491] EXT4-fs: Ignoring removed i_version option [ 200.915767][T13340] veth0_macvtap: entered promiscuous mode [ 200.925964][T13340] veth1_macvtap: entered promiscuous mode [ 200.955680][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.968525][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.983580][T13451] loop7: p1 p3 < > [ 200.999132][ T33] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.999202][ T33] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.999237][ T33] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.999275][ T33] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.092766][T13491] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.103363][T13491] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.158728][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 201.158758][ T30] audit: type=1400 audit(1794443805.993:2480): avc: denied { write } for pid=13489 comm="syz.8.2503" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.232813][T13506] set_capacity_and_notify: 7 callbacks suppressed [ 201.233029][T13506] loop9: detected capacity change from 0 to 128 [ 201.304854][ T30] audit: type=1400 audit(1794443806.123:2481): avc: denied { write } for pid=13489 comm="syz.8.2503" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.305819][ T30] audit: type=1400 audit(1794443806.143:2482): avc: denied { write } for pid=13499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.334768][ T30] audit: type=1400 audit(1794443806.153:2483): avc: denied { watch } for pid=13507 comm="syz.7.2514" path="/343" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.354892][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 201.356959][ T4113] udevd[4113]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 201.403244][T13506] bio_check_eod: 74 callbacks suppressed [ 201.404916][T13506] syz.9.2483: attempt to access beyond end of device [ 201.404916][T13506] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 201.415751][T13506] syz.9.2483: attempt to access beyond end of device [ 201.415751][T13506] loop9: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 201.415788][T13506] syz.9.2483: attempt to access beyond end of device [ 201.415788][T13506] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 201.435582][T13506] syz.9.2483: attempt to access beyond end of device [ 201.435582][T13506] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 201.459465][ T30] audit: type=1400 audit(1794443806.293:2484): avc: denied { write } for pid=13517 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.470387][T13506] syz.9.2483: attempt to access beyond end of device [ 201.470387][T13506] loop9: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 201.490084][T13506] syz.9.2483: attempt to access beyond end of device [ 201.490084][T13506] loop9: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 201.520791][T13506] syz.9.2483: attempt to access beyond end of device [ 201.520791][T13506] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 201.525881][T13506] syz.9.2483: attempt to access beyond end of device [ 201.525881][T13506] loop9: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 201.526512][T13506] syz.9.2483: attempt to access beyond end of device [ 201.526512][T13506] loop9: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 201.534292][ T30] audit: type=1400 audit(1794443806.373:2485): avc: denied { write } for pid=13489 comm="syz.8.2503" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.588683][ T30] audit: type=1400 audit(1794443806.423:2486): avc: denied { write } for pid=13489 comm="syz.8.2503" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.619167][T13506] syz.9.2483: attempt to access beyond end of device [ 201.619167][T13506] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 201.653439][T13491] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 34: comm syz.8.2503: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 201.669967][T13491] EXT4-fs (loop8): Remounting filesystem read-only [ 201.684124][ T30] audit: type=1400 audit(1794443806.523:2487): avc: denied { write } for pid=13519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.717508][ T30] audit: type=1400 audit(1794443806.553:2488): avc: denied { write } for pid=13530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.780356][ T9235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.921703][T13541] batman_adv: batadv0: Adding interface: syzkaller0 [ 201.921735][T13541] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.921807][T13541] batman_adv: batadv0: Interface activated: syzkaller0 [ 201.935480][ T30] audit: type=1400 audit(1794443806.773:2489): avc: denied { write } for pid=13532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.110860][T13540] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 202.131389][T13540] batman_adv: batadv0: Removing interface: syzkaller0 [ 202.225050][T13554] loop8: detected capacity change from 0 to 34816 [ 202.289691][T13554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.346552][T13573] loop9: detected capacity change from 0 to 32896 [ 202.378496][T13573] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.386864][T13573] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.447333][T13552] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 202.447505][T13552] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 202.447531][T13552] EXT4-fs (loop8): This should not happen!! Data will be lost [ 202.447531][T13552] [ 202.447545][T13552] EXT4-fs (loop8): Total free blocks count 0 [ 202.447557][T13552] EXT4-fs (loop8): Free/Dirty block details [ 202.447567][T13552] EXT4-fs (loop8): free_blocks=4096 [ 202.447584][T13552] EXT4-fs (loop8): dirty_blocks=512 [ 202.447673][T13552] EXT4-fs (loop8): Block reservation details [ 202.447685][T13552] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 202.470312][T13573] loop9: detected capacity change from 32896 to 0 [ 202.487743][T13583] EXT4-fs error (device loop9): __ext4_find_entry:1617: inode #2: comm syz.9.2510: reading directory lblock 0 [ 202.487792][T13583] EXT4-fs (loop9): I/O error while writing superblock [ 202.565738][T13340] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 202.565964][T13340] EXT4-fs error (device loop9): ext4_get_inode_loc:5847: inode #2: block 35: comm syz-executor: unable to read itable block [ 202.566010][T13340] EXT4-fs (loop9): I/O error while writing superblock [ 202.566036][T13340] EXT4-fs error (device loop9) in ext4_reserve_inode_write:7435: IO failure [ 202.566057][T13340] EXT4-fs (loop9): I/O error while writing superblock [ 202.566071][T13340] EXT4-fs error (device loop9): ext4_dirty_inode:7655: inode #2: comm syz-executor: mark_inode_dirty error [ 202.566159][T13340] EXT4-fs (loop9): I/O error while writing superblock [ 202.591536][T13587] FAULT_INJECTION: forcing a failure. [ 202.591536][T13587] name failslab, interval 1, probability 0, space 0, times 0 [ 202.591578][T13587] CPU: 1 UID: 0 PID: 13587 Comm: syz.7.2512 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.591682][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.591717][T13587] Call Trace: [ 202.591725][T13587] [ 202.591734][T13587] __dump_stack+0x1d/0x30 [ 202.591770][T13587] dump_stack_lvl+0x95/0xd0 [ 202.591794][T13587] dump_stack+0x15/0x1b [ 202.591816][T13587] should_fail_ex+0x259/0x270 [ 202.591871][T13587] ? reuseport_alloc+0x9c/0x200 [ 202.591904][T13587] should_failslab+0x8c/0xb0 [ 202.591996][T13587] __kmalloc_cache_noprof+0x5d/0x3e0 [ 202.592031][T13587] ? reuseport_alloc+0x9c/0x200 [ 202.592064][T13587] reuseport_alloc+0x9c/0x200 [ 202.592164][T13587] inet_hash+0x51c/0x7f0 [ 202.592199][T13587] inet_csk_listen_start+0x1ad/0x1f0 [ 202.592228][T13587] inet_listen+0x1ab/0x1f0 [ 202.592316][T13587] __x64_sys_listen+0x110/0x170 [ 202.592408][T13587] x64_sys_call+0x232f/0x2550 [ 202.592455][T13587] do_syscall_64+0x116/0x380 [ 202.592477][T13587] ? clear_bhb_loop+0x70/0xc0 [ 202.592502][T13587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.592539][T13587] RIP: 0033:0x7f3e35528fd9 [ 202.592556][T13587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.592640][T13587] RSP: 002b:00007f3e33f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 202.592661][T13587] RAX: ffffffffffffffda RBX: 00007f3e357a5fa0 RCX: 00007f3e35528fd9 [ 202.592677][T13587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.592690][T13587] RBP: 00007f3e355b7fed R08: 0000000000000000 R09: 0000000000000000 [ 202.592704][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.592770][T13587] R13: 00007f3e357a6038 R14: 00007f3e357a5fa0 R15: 00007ffd05f04c68 [ 202.592790][T13587] [ 202.622138][ T9235] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.692314][T13340] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.693134][T13340] buffer_io_error: 33 callbacks suppressed [ 203.693172][T13340] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 203.693270][T13340] EXT4-fs (loop9): I/O error while writing superblock [ 203.704218][ T33] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.759487][T13666] batman_adv: batadv0: Adding interface: syzkaller0 [ 203.759502][T13666] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.759599][T13666] batman_adv: batadv0: Interface activated: syzkaller0 [ 203.976322][ T33] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.018694][T13665] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 204.040524][T13665] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.121891][ T33] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.196744][T13670] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.277263][ T33] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.398906][ T6373] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.467423][ T33] bridge_slave_1: left allmulticast mode [ 204.467448][ T33] bridge_slave_1: left promiscuous mode [ 204.467690][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.493027][ T33] bridge_slave_0: left allmulticast mode [ 204.493074][ T33] bridge_slave_0: left promiscuous mode [ 204.493172][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.604238][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.605610][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.606352][ T33] bond0 (unregistering): Released all slaves [ 204.637645][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 204.639055][ T6375] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.640099][ T6373] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.640165][ T6373] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.731854][ T33] hsr_slave_0: left promiscuous mode [ 204.733729][ T33] hsr_slave_1: left promiscuous mode [ 204.734248][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.734265][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.734722][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.734737][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.747538][ T33] veth1_macvtap: left promiscuous mode [ 204.747567][ T33] veth0_macvtap: left promiscuous mode [ 204.747627][ T33] veth1_vlan: left promiscuous mode [ 204.747680][ T33] veth0_vlan: left promiscuous mode [ 204.905099][ T33] team0 (unregistering): Port device team_slave_1 removed [ 204.907508][ T33] team0 (unregistering): Port device team_slave_0 removed [ 204.954466][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.954496][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.954650][T13670] bridge_slave_0: entered allmulticast mode [ 204.955002][T13670] bridge_slave_0: entered promiscuous mode [ 204.956160][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.956727][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.956757][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.956839][T13670] bridge_slave_1: entered allmulticast mode [ 204.957339][T13670] bridge_slave_1: entered promiscuous mode [ 204.968732][T13670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.969984][T13670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.980432][T13670] team0: Port device team_slave_0 added [ 204.981173][T13670] team0: Port device team_slave_1 added [ 204.990885][T13670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.990907][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.990935][T13670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.991443][T13670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.991455][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.991485][T13670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.008490][T13670] hsr_slave_0: entered promiscuous mode [ 205.008853][T13670] hsr_slave_1: entered promiscuous mode [ 205.009317][T13670] debugfs: 'hsr0' already exists in 'hsr' [ 205.009330][T13670] Cannot create hsr debugfs directory [ 205.196863][T13670] netdevsim netdevsim4 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.237612][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.357444][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.704122][T13670] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.732460][T13670] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.781716][T13670] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.846342][T13670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.849812][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.850363][T13670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.876186][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.876657][T13670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.880908][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.882363][T13670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.911757][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.948858][T13670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.954612][T13670] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.963019][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.963058][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.966756][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.966794][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.164538][T13670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.182429][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 206.182447][ T30] audit: type=1400 audit(1794443811.023:2531): avc: denied { write } for pid=13845 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.355998][T13670] veth0_vlan: entered promiscuous mode [ 206.358196][T13670] veth1_vlan: entered promiscuous mode [ 206.372056][T13670] veth0_macvtap: entered promiscuous mode [ 206.373468][T13670] veth1_macvtap: entered promiscuous mode [ 206.384780][T13670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.391488][ T30] audit: type=1400 audit(1794443811.223:2532): avc: denied { write } for pid=13855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.396214][T13670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.423691][ T30] audit: type=1400 audit(1794443811.243:2533): avc: denied { write } for pid=13871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.459850][ T6371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.460743][ T6371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.460827][ T6371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.460958][ T6371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.564205][ T30] audit: type=1400 audit(1794443811.403:2534): avc: denied { write } for pid=13873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.608671][ T30] audit: type=1400 audit(1794443811.443:2535): avc: denied { write } for pid=13884 comm="syz.8.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.624946][T13898] loop4: detected capacity change from 0 to 33280 [ 206.645597][T13898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.645728][T13898] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.646801][ T30] audit: type=1400 audit(1794443811.483:2536): avc: denied { write } for pid=13894 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.672625][ T30] audit: type=1400 audit(1794443811.503:2537): avc: denied { write } for pid=13897 comm="syz.4.2525" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.812861][T13670] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.874404][ T30] audit: type=1400 audit(1794443811.713:2538): avc: denied { write } for pid=13906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.902544][T13920] loop4: detected capacity change from 0 to 34816 [ 206.926886][T13920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.942140][ T30] audit: type=1400 audit(1794443811.773:2539): avc: denied { write } for pid=13919 comm="syz.4.2527" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.964387][T13930] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 206.964387][T13930] The task syz.8.2541 (13930) triggered the difference, watch for misbehavior. [ 206.995865][ T30] audit: type=1400 audit(1794443811.833:2540): avc: denied { write } for pid=13929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.109353][T13919] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 207.109550][T13919] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 207.109576][T13919] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.109576][T13919] [ 207.109588][T13919] EXT4-fs (loop4): Total free blocks count 0 [ 207.109602][T13919] EXT4-fs (loop4): Free/Dirty block details [ 207.109618][T13919] EXT4-fs (loop4): free_blocks=4096 [ 207.113037][T13919] EXT4-fs (loop4): dirty_blocks=512 [ 207.113054][T13919] EXT4-fs (loop4): Block reservation details [ 207.113065][T13919] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 207.193677][T13926] loop7: detected capacity change from 0 to 33280 [ 207.206031][T13926] EXT4-fs: Ignoring removed orlov option [ 207.208585][T13670] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.238602][T13926] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 207.238643][T13926] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 207.238670][T13926] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2529: Corrupt directory, running e2fsck is recommended [ 207.508817][T13926] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 207.512975][T13926] EXT4-fs error (device loop7): ext4_iget_extra_inode:6003: inode #15: comm syz.7.2529: corrupted in-inode xattr: invalid ea_ino [ 207.513126][T13926] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.514281][T13926] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2529: couldn't read orphan inode 15 (err -117) [ 207.514342][T13926] loop7: lost filesystem error report for type 5 error -117 [ 207.525963][T13926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.526623][T13926] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #2: comm syz.7.2529: corrupted xattr block 255: invalid header [ 207.527503][T13926] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 207.532820][T13926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.730042][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2529'. [ 207.730232][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2529'. [ 207.730423][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2529'. [ 208.077577][T13982] loop0: detected capacity change from 0 to 128 [ 208.157720][T13982] bio_check_eod: 32 callbacks suppressed [ 208.157763][T13982] syz.0.2534: attempt to access beyond end of device [ 208.157763][T13982] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 208.177705][T13982] syz.0.2534: attempt to access beyond end of device [ 208.177705][T13982] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 208.177944][T13982] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 208.178075][T13982] syz.0.2534: attempt to access beyond end of device [ 208.178075][T13982] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 208.181775][T13982] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 208.185130][T13992] loop8: detected capacity change from 0 to 32896 [ 208.310716][T13982] syz.0.2534: attempt to access beyond end of device [ 208.310716][T13982] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 208.347343][T13992] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.350821][T13992] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.451625][ T9235] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.604249][T13982] syz.0.2534: attempt to access beyond end of device [ 208.604249][T13982] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 208.604438][T13982] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 208.637077][T13982] syz.0.2534: attempt to access beyond end of device [ 208.637077][T13982] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 208.637383][T13982] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 208.663488][T14004] FAULT_INJECTION: forcing a failure. [ 208.663488][T14004] name failslab, interval 1, probability 0, space 0, times 0 [ 208.663535][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.8.2547 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.663565][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 208.663642][T14004] Call Trace: [ 208.663651][T14004] [ 208.663660][T14004] __dump_stack+0x1d/0x30 [ 208.663688][T14004] dump_stack_lvl+0x95/0xd0 [ 208.663714][T14004] dump_stack+0x15/0x1b [ 208.663741][T14004] should_fail_ex+0x259/0x270 [ 208.663784][T14004] ? security_prepare_creds+0x52/0x120 [ 208.663812][T14004] should_failslab+0x8c/0xb0 [ 208.663855][T14004] __kmalloc_noprof+0xb6/0x4b0 [ 208.663892][T14004] ? security_prepare_creds+0x52/0x120 [ 208.663931][T14004] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 208.663968][T14004] security_prepare_creds+0x52/0x120 [ 208.663994][T14004] prepare_creds+0x385/0x550 [ 208.664035][T14004] __sys_setuid+0x65/0x300 [ 208.664059][T14004] __x64_sys_setuid+0x1e/0x30 [ 208.664087][T14004] x64_sys_call+0x1e96/0x2550 [ 208.664117][T14004] do_syscall_64+0x116/0x380 [ 208.664202][T14004] ? clear_bhb_loop+0x70/0xc0 [ 208.664306][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.664332][T14004] RIP: 0033:0x7f983b618fd9 [ 208.664351][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.664373][T14004] RSP: 002b:00007f983a05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 208.664396][T14004] RAX: ffffffffffffffda RBX: 00007f983b895fa0 RCX: 00007f983b618fd9 [ 208.664458][T14004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 208.664504][T14004] RBP: 00007f983b6a7fed R08: 0000000000000000 R09: 0000000000000000 [ 208.664593][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.664685][T14004] R13: 00007f983b896038 R14: 00007f983b895fa0 R15: 00007ffebf65fde8 [ 208.664704][T14004] [ 208.746012][T13982] syz.0.2534: attempt to access beyond end of device [ 208.746012][T13982] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 208.845363][T13982] syz.0.2534: attempt to access beyond end of device [ 208.845363][T13982] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 208.845406][T13982] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 208.845483][T13982] syz.0.2534: attempt to access beyond end of device [ 208.845483][T13982] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 208.845535][T13982] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 209.067579][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.068359][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.084363][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.126649][T14014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.126682][T14014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.140522][T14014] veth1_vlan: left promiscuous mode [ 209.158763][T14014] veth0_vlan: left promiscuous mode [ 209.166390][T14014] veth0_vlan: entered promiscuous mode [ 209.170792][T14011] loop8: detected capacity change from 0 to 33280 [ 209.182966][T14014] veth1_vlan: entered promiscuous mode [ 209.195990][T14014] veth1_macvtap: left promiscuous mode [ 209.196594][T14014] veth0_macvtap: left promiscuous mode [ 209.196786][T14011] EXT4-fs: Ignoring removed orlov option [ 209.198825][T14014] veth0_macvtap: entered promiscuous mode [ 209.199441][T14014] veth1_macvtap: entered promiscuous mode [ 209.228949][T14011] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 209.230351][T14011] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 209.230396][T14011] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2550: Corrupt directory, running e2fsck is recommended [ 209.231349][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.232045][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.232692][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.306360][T14014] gretap0: entered promiscuous mode [ 209.317105][T14014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.326252][T14014] batman_adv: batadv0: Interface activated: gretap1 [ 209.328246][T14014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.344909][T14014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.356031][T14014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.357920][T14014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.434369][T14011] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 209.436189][T14011] EXT4-fs error (device loop8): ext4_iget_extra_inode:6003: inode #15: comm syz.8.2550: corrupted in-inode xattr: invalid ea_ino [ 209.436239][T14011] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.438479][T14011] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.2550: couldn't read orphan inode 15 (err -117) [ 209.438710][T14011] loop8: lost filesystem error report for type 5 error -117 [ 209.439079][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 209.439108][ C1] EXT4-fs (loop8): initial error at time 1794443814: ext4_iget_extra_inode:6003: inode 15 [ 209.439288][ C1] EXT4-fs (loop8): last error at time 1794443814: ext4_orphan_get:1409 [ 209.440801][ T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.440916][ T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.470493][ T33] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.470527][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.470586][ T33] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.470649][ T33] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.470679][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.470887][ T33] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 209.470911][ T33] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.489667][ T33] bond3: active interface up! [ 209.492492][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.527893][T14011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.535315][T14011] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #2: comm syz.8.2550: corrupted xattr block 255: invalid header [ 209.537320][T14011] SELinux: (dev loop8, type ext4) getxattr errno 117 [ 209.539132][ T367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.539164][ T367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.539555][ T367] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 209.557399][ T367] bond4: active interface up! [ 209.571116][T14011] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.719739][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.770860][T14011] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2550'. [ 209.773254][T14011] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2550'. [ 209.773509][T14011] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2550'. [ 210.140822][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.542771][T14038] FAULT_INJECTION: forcing a failure. [ 210.542771][T14038] name failslab, interval 1, probability 0, space 0, times 0 [ 210.542801][T14038] CPU: 1 UID: 0 PID: 14038 Comm: syz.4.2559 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.542830][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 210.542845][T14038] Call Trace: [ 210.542853][T14038] [ 210.542861][T14038] __dump_stack+0x1d/0x30 [ 210.542930][T14038] dump_stack_lvl+0x95/0xd0 [ 210.542957][T14038] dump_stack+0x15/0x1b [ 210.542981][T14038] should_fail_ex+0x259/0x270 [ 210.543043][T14038] ? security_prepare_creds+0x52/0x120 [ 210.543064][T14038] should_failslab+0x8c/0xb0 [ 210.543241][T14038] __kmalloc_noprof+0xb6/0x4b0 [ 210.543278][T14038] ? security_prepare_creds+0x52/0x120 [ 210.543304][T14038] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 210.543386][T14038] security_prepare_creds+0x52/0x120 [ 210.543489][T14038] prepare_creds+0x385/0x550 [ 210.543525][T14038] __sys_setuid+0x65/0x300 [ 210.543549][T14038] __x64_sys_setuid+0x1e/0x30 [ 210.543612][T14038] x64_sys_call+0x1e96/0x2550 [ 210.543636][T14038] do_syscall_64+0x116/0x380 [ 210.543658][T14038] ? clear_bhb_loop+0x70/0xc0 [ 210.543856][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.543892][T14038] RIP: 0033:0x7f53cc4e8fd9 [ 210.543910][T14038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.543931][T14038] RSP: 002b:00007f53caf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 210.543984][T14038] RAX: ffffffffffffffda RBX: 00007f53cc765fa0 RCX: 00007f53cc4e8fd9 [ 210.544001][T14038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 210.544015][T14038] RBP: 00007f53cc577fed R08: 0000000000000000 R09: 0000000000000000 [ 210.544030][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.544180][T14038] R13: 00007f53cc766038 R14: 00007f53cc765fa0 R15: 00007fff21f60838 [ 210.544213][T14038] [ 211.392366][T14028] ================================================================== [ 211.392394][T14028] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 211.392418][T14028] [ 211.392424][T14028] read-write to 0xffff888119d79064 of 4 bytes by task 14027 on cpu 1: [ 211.392439][T14028] fifo_open+0x89/0x5b0 [ 211.392456][T14028] do_dentry_open+0x496/0xa40 [ 211.392477][T14028] vfs_open_consume+0x46/0x1f0 [ 211.392498][T14028] path_openat+0xc16/0x11c0 [ 211.392537][T14028] do_file_open+0x16c/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.392564][T14028] do_sys_openat2+0xa1/0x140 [ 211.392587][T14028] __se_sys_openat2+0x193/0x1f0 [ 211.392610][T14028] __x64_sys_openat2+0x55/0x70 [ 211.392633][T14028] x64_sys_call+0x196c/0x2550 [ 211.392656][T14028] do_syscall_64+0x116/0x380 [ 211.392673][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.392692][T14028] [ 211.392697][T14028] read to 0xffff888119d79064 of 4 bytes by task 14028 on cpu 0: [ 211.392712][T14028] wait_for_partner+0xd9/0x210 [ 211.392730][T14028] fifo_open+0x443/0x5b0 [ 211.392747][T14028] do_dentry_open+0x496/0xa40 [ 211.392768][T14028] vfs_open_consume+0x46/0x1f0 [ 211.392789][T14028] path_openat+0xc16/0x11c0 [ 211.392815][T14028] do_file_open+0x16c/0x290 [ 211.392840][T14028] do_sys_openat2+0xa1/0x140 [ 211.392862][T14028] __x64_sys_openat+0xf2/0x120 [ 211.392884][T14028] x64_sys_call+0x1f72/0x2550 [ 211.392906][T14028] do_syscall_64+0x116/0x380 [ 211.392923][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.392941][T14028] [ 211.392945][T14028] value changed: 0x00000001 -> 0x00000002 [ 211.392954][T14028] [ 211.392958][T14028] Reported by Kernel Concurrency Sanitizer on: [ 211.392968][T14028] CPU: 0 UID: 0 PID: 14028 Comm: syz.0.2556 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.392991][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 211.393003][T14028] ================================================================== [ 211.460822][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 211.460836][ T30] audit: type=1400 audit(1794443816.293:2554): avc: denied { write } for pid=3282 comm="syz-executor" path="pipe:[2444]" dev="pipefs" ino=2444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 211.760180][ T9235] tipc: Resetting bearer [ 211.838496][ T9235] tipc: Disabling bearer [ 211.848635][T12400] bond1: (slave syz_tun): Removing an active aggregator [ 211.848782][T12400] bond1: (slave syz_tun): Releasing backup interface [ 211.867199][T14026] tipc: Resetting bearer [ 211.877144][T14026] tipc: Disabling bearer [ 212.058548][ T6371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.103941][ T6371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.153052][ T6371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.192268][ T6371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.269792][ T6377] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.271535][ T6371] bridge_slave_1: left allmulticast mode [ 212.271569][ T6371] bridge_slave_1: left promiscuous mode [ 212.271753][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.273014][ T6371] bridge_slave_0: left allmulticast mode [ 212.273027][ T6371] bridge_slave_0: left promiscuous mode [ 212.273100][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.327007][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.328281][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.328929][ T6371] bond0 (unregistering): Released all slaves [ 212.359140][ T6375] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.361036][ T33] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.361071][ T33] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.418019][ T6371] hsr_slave_0: left promiscuous mode [ 212.418470][ T6371] hsr_slave_1: left promiscuous mode [ 212.418891][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.419446][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.420728][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.420743][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.425451][ T30] audit: type=1400 audit(1794443817.263:2555): avc: denied { write } for pid=14050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.431809][ T6371] veth1_macvtap: left promiscuous mode [ 212.431834][ T6371] veth0_macvtap: left promiscuous mode [ 212.431920][ T6371] veth1_vlan: left promiscuous mode [ 212.431950][ T6371] veth0_vlan: left promiscuous mode [ 212.447003][ T30] audit: type=1400 audit(1794443817.283:2556): avc: denied { write } for pid=14061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.544684][ T6371] team0 (unregistering): Port device team_slave_1 removed [ 212.547044][ T6371] team0 (unregistering): Port device team_slave_0 removed [ 212.571019][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 212.635043][ T30] audit: type=1400 audit(1794443817.473:2557): avc: denied { write } for pid=14064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.667848][ T30] audit: type=1400 audit(1794443817.503:2558): avc: denied { write } for pid=14075 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.701729][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 212.778362][ T30] audit: type=1400 audit(1794443817.613:2559): avc: denied { write } for pid=14079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.802401][ T30] audit: type=1400 audit(1794443817.623:2560): avc: denied { write } for pid=14090 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.809997][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 212.878442][ T30] audit: type=1400 audit(1794443817.713:2561): avc: denied { write } for pid=14093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.904135][ T30] audit: type=1400 audit(1794443817.723:2562): avc: denied { write } for pid=14104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.906536][ T6371] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.909968][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 212.960375][ T6371] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.011478][ T6371] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.061537][ T6371] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.157522][ T6371] bond0 (unregistering): Released all slaves [ 213.169033][ T367] netdevsim netdevsim8 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.169083][ T367] netdevsim netdevsim8 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.169241][ T367] netdevsim netdevsim8 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.169370][ T367] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.170879][ T6371] tipc: Left network mode [ 213.217103][ T6371] hsr_slave_0: left promiscuous mode [ 213.217402][ T6371] hsr_slave_1: left promiscuous mode [ 213.225629][ T6371] veth1_macvtap: left promiscuous mode [ 213.225656][ T6371] veth0_macvtap: left promiscuous mode [ 213.225771][ T6371] veth1_vlan: left promiscuous mode [ 213.225876][ T6371] veth0_vlan: left promiscuous mode [ 213.287531][ T30] audit: type=1400 audit(1794443818.123:2563): avc: denied { write } for pid=14112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.353495][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.446448][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 213.532749][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 213.579223][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.632021][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 216.863311][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 216.863327][ T30] audit: type=1400 audit(1794443821.703:2571): avc: denied { write } for pid=14178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.882659][ T30] audit: type=1400 audit(1794443821.723:2572): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.118079][ T30] audit: type=1400 audit(1794443821.953:2573): avc: denied { write } for pid=14192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.148026][ T30] audit: type=1400 audit(1794443821.983:2574): avc: denied { write } for pid=14203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.320574][ T30] audit: type=1400 audit(1794443822.163:2575): avc: denied { write } for pid=14206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.335535][ T30] audit: type=1400 audit(1794443822.173:2576): avc: denied { write } for pid=14217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.427244][ T30] audit: type=1400 audit(1794443822.263:2577): avc: denied { write } for pid=14220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.457946][ T30] audit: type=1400 audit(1794443822.293:2578): avc: denied { write } for pid=14231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1