last executing test programs: 35.428728078s ago: executing program 4 (id=93): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x5, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40004) recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x122) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@remote, @private=0xa010102, @multicast1}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r6 = socket$packet(0x11, 0x2, 0x300) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, r9, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 35.247877002s ago: executing program 4 (id=97): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000f80)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000000)={'veth1\x00', 0xa4b, 0x3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a30"], 0xc8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 35.132559596s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@data_err_ignore}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0xf0b, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x38, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2ca43948}]}}]}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0xf) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 34.840350194s ago: executing program 4 (id=104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fallocate(r3, 0x10, 0x7, 0x10001) write$binfmt_misc(r4, &(0x7f0000001600)="cdc7afea6bae72b642dbcbbb125562252df92ab1f93a8659f50b0bf5d24aba2ca0cb7ecc67888551b20ea50f5e17cea4d9a38fe6dad7ace21d1ffcbce15e0b9af9a45ffec1aca4876bc5db0b7b6996da4ee39ac339a7127a496bb1f07c560aa610c73329cf940765afcd0b9275d4b0b10ea075103cb73342de6c12e298f7d6116e7830e9e5800c62ae10c79419a6cf13c1fce728d70c3f58c3f72c1e70282c61b00f54e82b0dec7f86b6cb0df3d31b87e1524efb1315cc796102c878354c0acd2ae7347f434ad277d034ccd07875d908ef49e563aa963f48392e95ba84d55b5d1c24d38c80e19ff88da73d340a14c9a08486830aea0586219e1910e3cee2ed979dd77275b33bd69ad1b20281722f7e52dc3176452bacae24086b09c34a499b2a8e4f5e6a4315805c4179252364fee3acaac425fb6ab8744626edb62f443c768ec1c3e470771a4f32c0aee174bb94cf240257a3bba002dc6fab014c6b96716fd3ba3753a00fefb44967b8c9b6d78059519789929eee6de4b4afd687d6e74f3a0115a23364bdf6c1211e39cd319575431ff2f02a9963a72dc5d97db5fa87a44272444e37c0a5a96bee33beae38fe67b73db1bde62783028cb5740d490e8d196056ca1d002c06387d26d380fe6b61be6356eeaa8c8f4fd3f088efc3fe558eea9c802a1fb42e2db0244c79e4b219919bddb5cd4ee7ee879ed17788c91e87e5acab827f6c77ca65d69ce1a23c293b4f25d8cea8392b8194a0184b9c373e1c2fc47bc9e2c8f7039aa4dce5f69059a529ab7bc20a9d13237557c92bdd9d5fb6defff2756d2854582271ce94d61652fed2528fff59ba8c70d406aaa17e69627dd9ab4a9cebb2420e6a12b81f4a76bd5ec0f8969dcde4e94cda9649a95473ad9b0192adf91c1655f92773bf97c255e5e5edb6f314a4a5880e3b69d8de411af5ae90a1103cc351eeeb46072e998bb48931641d7f9056df117168b723b559e4ae2b8f080ec704e4e6b6bc8b683c82809fbfe33eca6ef6402d3ce33a7a5c93e662966237d0d1cf1f9471105b369f98b65818fb5dfe5d7c12478b3a6c09e844a6022341bdfc8dc4213613fc741d582e54d7115a00338dd5cd678ae03150fde46ab55e875af302b5ddb86fcb6617e8806807b79209cc6a12c72ba19ad9ed15148b4bdd7b840998e6de299305155056d31ad269caa7a076fcf1333e5da9926daee7fa21e1bfe92dd7cb2f40abaaa17c5381ead4ac58fd27ce62f86dba1937c18a533907a75b2325ec2b4e2c615bf28a227a97129ae53e57be4111c0b19bb9e68479842a226344b5d7891500298b9c998d238fb1435fc61394660d8fed2276da9bd71f1fa2d3f139c8a97f21601c008b6d239b86ace85aa6519683d524a14017120a56860f1d3fe0102aa4ea32a55c99956117f80ca656c2c1f9b8f7183e21101c4eb1dfbd3dd043ac", 0x401) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3ff, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r7, 0x0}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x75ea, 0x800004, 0x1}) 34.564316559s ago: executing program 4 (id=107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="bb846b71eda6b2d3c3bff753ae94"], 0x20) 34.304561093s ago: executing program 4 (id=112): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r4) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000100)="8b0404316b773afcac9d3a786c1e1244f22592654811ff130d0fb40e9241c207965dff54cd38b95348", 0x29, 0x0, 0x0, 0x1, r1}, &(0x7f0000000200)) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 34.244031921s ago: executing program 32 (id=112): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r4) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000100)="8b0404316b773afcac9d3a786c1e1244f22592654811ff130d0fb40e9241c207965dff54cd38b95348", 0x29, 0x0, 0x0, 0x1, r1}, &(0x7f0000000200)) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 5.804575242s ago: executing program 0 (id=522): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000440)={0x21000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 5.607212117s ago: executing program 0 (id=528): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40040) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0xfffffffffffffff7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x2, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.651848001s ago: executing program 0 (id=538): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (fail_nth: 3) 4.363790658s ago: executing program 0 (id=540): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x102802, 0x0, 0x2, 0x3, 0xfff, 0x8001, 0x7fff}, r0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x2, 0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)='\x00\x00\x00', 0x0, 0x0, 0x0, 0x3, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001700)={@cgroup=r5, 0x26, 0x1, 0x7, &(0x7f0000001600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x8fc, 0x319000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x1010004, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c637275667400739e2c6b288d9be9de392bb4d662736563746f723d3078303030303030303030303030303030392c6d6f64653d3078303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303033622c6e6f636f6d70726573734173686f776173736f632c636865636b3d7374726963742c00"], 0x0, 0x65c, &(0x7f0000000a00)="$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") mprotect(&(0x7f000054b000/0x3000)=nil, 0x3000, 0x200000a) r10 = eventfd2(0x8, 0x400) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r1, {0x1a}}, './file0\x00'}) io_submit(r2, 0x5, &(0x7f00000015c0)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x7, r9, &(0x7f0000000400)="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", 0x1000, 0x3, 0x0, 0x1, r10}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000001840)="bb2112ac41be48cf687039e95ab9b7ee67a557270826ff5a6d185ed81876edd65f9800f24b01b39b134368d6ddbf6b4070793e9d45d713e900000000f1c5c4c37bb724db569715c6dad710d4adcfcbaf6a3d7d31feae9af1180000000099866c5e82bab80578ce3f0567097ac424df80ffab0794153c16cb618268d311250e39dffef7f7f7802a260b7afe2151cd063cbd7385ff56193daa40dd4e384df45aa8380d43038dd7ab006504b5b984c252d903c63f49802668a4909335c25ad88f5b656bb65e781451882d24852a729f91", 0xcf, 0x400, 0x0, 0x3, r5}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x5, r7, &(0x7f0000001940)="468ba5f38ef16b1793bee0599df703f87a2c7fab07469e01a2f46ab8b126a1205d3f6a81d3d62c448c501c83eee801edb0f0c946bceb955090ae255d8270d7cfd88a2af5ce87200c187e8fed3e54cf9df7228e7e36a0895755e8ab93eafdf2d64b04a2a7ba35f6794e4300000000000d000000000008000000000000007393713eefb7b71c459f24b839f18ee1c870d6835737c5054db22f8ce802b60fc8c88484e14f61029c3f5e5250ce9d3d7573d1bd8774a9202c30a0a65c8ef30a4c02884703b9d1e3e4054ca3ce235bb40ad6ef7ab8", 0xd2, 0x10, 0x0, 0x0, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x100f, r1, &(0x7f0000001440)="fd894d5a24562027e9ee2dd171dc09d591eb3bf4ed3e90b676ed11aba7428e0f4e43d222179a4644cc2befdfd8e63362c11529acc3240fe48d1a205f25a4e2cc73fc498447352022886e0dca72fa1b6b2073f45d94463163fba2fb8bd2e149734bfa4f4de53bc8169e293723b37702820d2451ebca8201371c778ab5941f3ec4decbe6fee83269f87a5a72f1f4a8fab6eeb36ea7adf402f1d719f2b7a080850ffebf2177309ac358cc148ff8388542fe091aedf40bd7ede213e5d7e19622abb2d73bd671ede78ee4f81592b0baf2d639c835cf96435e2f1231cfcf92", 0xdc, 0x8, 0x0, 0x3, r11}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000280)="b605679324ad96561cb6229fedde446fadbe156694cd0c7e77a306cf6dba20bb9ee0b48598272ceb0a44e0509b81eba852bcc73869ed639b592ec324fa5ccb0dc71dc11dc361ddf7e2b2f9001d9ea5dcf43954fcbb5a3afeab013ef7b728845c72088766c9ea1818b0cec0310e2e408284d7e925622feacda040b865b6ffe40fef8d3a066049fb3a5e89cad04bc57da1ab7f740ca00974b71e917b39e3222ceff9dd3edd31bc883dae6a0e801de9061655d2eb69a2cd840d6f58547762ad5b411f3426df1846b5c6bb7ce215cbd56a544318e264d3240a83fd959d6a5b12be18d677187a108c4b55cdf2babab30350f70c97d377442487", 0xf7, 0xc9}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 3.020472221s ago: executing program 5 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x0, 0x0, 0x4, 0x6, 0x200000}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.495982148s ago: executing program 5 (id=557): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000033000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff20010000000000000000000000000002000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4040080) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0xd800, 0x5, 0x9, 0x8, 0x72b1, 0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040840}, 0x40) 2.152014452s ago: executing program 3 (id=561): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 2.067062183s ago: executing program 2 (id=562): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) write$binfmt_script(r1, &(0x7f0000000ec0)={'#! ', './file0', [], 0xa, "46c8847283b5e5769cdcf7452212e2172ed8c6d555a510ce748b8508863d39bbfc96941dff09ed574edaccdd4670468f9f99726e7d6d30db0f5ec56483ec70ccb74e6308bccca044b31b2b560b6133a4a9ff0be2b2de0e0e65e8df63a491c26d037a0bc88ba7785838800004f96182f1e9f4608aeaefe0c674fb11161dab5ef657aa69da56cd3a8ac23a4a42f85cbb6cc71da74335a4907d20276c2ab3a8b803b175790d7f8222f07e7b0fbff438454224e41d6fcb68e07e22f5f193838d7154fbb87d3fe4833d41c06815700caab7e29318b817e9b999897fc1be237af1be3b5e29269c6c2675d26ff40e41142348b01859e4c38c3f48cce31f0115378f16649d2ce104d2a3f033d9e5975fc83e2e5d81f1cbc6fdf924274710cda22b5bf69cf5198e81b65dd9973cb24e922e8c4a76cff3c3c8214c37f3e3662cb16486fc77e3e153560df853984d5403d921ec840db6b8bd67b8b03c8f480c8c74d10689e9d08453edc9a1ddd1a9bd9e22612639e802c365872b7c77885e58541100e3446c056331736f632516f9d04d448f479fd109b6cf1d5780ef0a346a1a38fc3ae219bf19e5e1216d5300ef68ed07b79acafbd833c39041daf8dbddc18f485c13bb4c973814d5ad0127ed349339c2a3452b3c773ce3000a8ea291758f36eba08c8e9252305b0508ca4fda2576c81e49e3156596a0de465ce4b07e62fb6cf25c58803f8848b575743f19bcb8a656e84a4591fabf678973181750be4b85d3f2c830437bfd70c64cbb4da64113fe1d59c6f8cc406e2c00acb48657b2b1df7c4737f99992254bc43844cb9a6faeea04bec3634609be0c3dd850e5bd159e3ed5c7af5166cbd53b2b411c9e27d86c3f52af86b31eb7c19659a992d96f525c2ec625609be2357e96e1649119d4c6632a369b824673e30678d2aee1a03e3474be34d0300014571f6cbf8be9f8c4a22560c026992fdf8b18cbfb97c0307bb9e9cecc92987a07ce76e3fc4f37b932315bddc589aadf04a540f7c2fec58ec89ce846aa566d023b82e7e0163ace451965cbbfd22f485bf956b0fa7490aa9947700292a17cc601e7c7da0fad5dc97ed42ef971bb602aa29aa524a6b781de54bd3bb2a939da76bb998cb23ca66df75558102661f6e09d8012d694b587af0555d62603d222984a85332b6a95c96dd32958c6a7c020916a7fa9b1eb090f50788c977e8fafff3c4edac8e336a0110f7c401997fa369d9d06deaee7bca101283b40c66ee93ae27d0b7d4f13d14f1810066b70ac04aac1f4b1ab11b229425e02b0c80cb72c8fdc9a217fbe56c559cedfa634398c89789756bdb50dca0fddd3783c26870dafb2d5912c2319af106cb8c5389e01257687f12db8d1620992db6a27cbae429089b0efc66cef4c0a08716a3261eaa4c16c368a3a9d0dd34539b6fd6ebabd504ecfe6f7ce692a74b97096dc95fdfe9a37d8f099581791fdbffb9e9fee37c159b2ef89ba1874e6ee31dd387b65820642f2cfec6cdd1fa2f810c8963db1fb99e7cea05d4c966c2b126507efbb907a5530fb9dcbf06b7b5febc9cb48db255184a8bac213b27de9ebbf32faa17f839091494f25e5984981dfd4884abf132927ccff641ccd2866cd495aac5782edbd75e182d96d0793a875d7bdbe40d1fccc965e1e228c80f2f8ee4a3d36fded7ba2cd4b38baa1314ea0fe68887c6302321fc56449d7ca5e4047a82480e2063a1ff01763fff44d01615c454adbda466a154b9ea8f05d543dad51c89a07e1a07440fc409f74a5bbbf4c720de0d35282da204bd2a01f1980a107bb3ab265f2b1f942e7667f6076ae8f0c91fe49b68d856b2d9cc679b88305a48232d31e6073a2f7edd7a86af2b590b51264f7788b2e289f3741f44ba22a387a42dadf5b25dff1dfd00bf615feb28d728c94f16682c35f7b80652ac2c5328e3e48b76c6327c5d979a6a5a426b2a22c7e74dd208390e3d8b1225dd84ecdfbf95fbf0f051b6c86c5f12c0a7f80dd26c613aec5e6e020ef61df32f3134b0885ac8f9fde2ea8022753093fd0f6ef25c5e2ad125c7897fc29400d3ef32f65cac769a16e9c7ac74cbe1c7412ae60defb440d67fc4626570c3d8408635a30ddd2e82e2f7e6cd9945eac2a5e7a1cb70f55f50815325efcd94c3024fe76f0c44c57a135985a6ef1cb3698ac51bac67f0b2ca89118f7c471487c75d085717e0dee8d0f28842139b417f9c6fa3d31663bc79f2f0bf7d23a043528f34f0d1eb985eafa7c657f7b7f54448394a093d1992b980d0e61c3b4e0e8b3a05e95ee4d8bc94663ce998540f6bf6620f2593c117e64c4f99e2227975f486a2222647967dd66fdd8a12ce696e8c30fb56e1c5417a5641a409de7663cdfb1fd2c341c02a228a3664e7d8312a91af1f94628de1c70ad484347a6519dfb1b3e1972ce702e2f90549eaae8d9952bfb4837caf6cabf90ce8478b5efac02ebef7c4e4f977e309e397b5f43181236cdca8f800364bf72c5d83cb2b73fefc2d8f44497529e7e272b117bd532e176fa0e20a93a104a1e9fa1443cfd07f9d3843858d67a489a9bdf70802bc9e2f707d160a0e9f12b83b0ef7589e20de2da108ae0668490f23f301089cf0f2c25f36cb8489ad50b17c8678f095f58fa90b63cb2f2885f2796066fc0dea4394bb18db0687fee924da65157d8d6b40b29bc125da6163f4075f4a55e87d9d8f71d48ff42a45a6a7da9ddc4195250104859b268573e4b8e614e3ede0d53950bf0064579172a401c3ad6dc1d14ed0e983ea219dbef10a79b8173bca6a45f829b6f0e75d5e49954677e65df4c4716d3d3b70641d6664e724b7fd91ba2a8ec1d691c5274af4e6c11f10be9d51488ab3a1db95885092bc0fbb4aab06f6444f265d924443864ce8fa0069c47bfa6a8bdf72201a09b158f885787b8a56350575c92d0aa06c4719b4121b21f2239650ead8ed05e260ef05e031786f7f52eaf8b1349a667b4f6110a8ff7bafbe33c1d9eab2c40df65212e099e174574213c3cc7de80ceabb09cc54e9620e35496c043572a875eaf66f343a6a72df0370fc276d7c957e4a29838e5967ee0cb56393beee38fee14a0964c54f614df5ea0a69c2cd2370bd6fb43d518e8d3bd9fd2e5e3de71dfedc1a4fd14a63ccb0b28cfdb35720c6279d7dfa170b36130066701a16516e2b5dde65f68ac98fd7bf89dd2a18744c5aff43ad18fa86dbdfd37365b344737f6c09281845def5c158b4cc3ee371ef2172ad3de8407d6091cd5dbedadf1d94e80b49fae1c6cea8a01caabde200f152fd4d84d4bc1ab8875aaba839fbe829c2d10e82b174960f6717387319d016fb9b795ace6092fa23f20262ccda707fa59ee2151ec85591ff3e5d3e2833b524e81ba44cabda7161147972917bec080846c5adb6823bdcbb2a96f4986eff65d9c305b22c7aab228925dfb15064816e2629273664d5339f18573496f77e5655b49786cfe6c5efd40c589b80d3fafb46ab76f03bcdb9764d08bf912cada5c1dc769eb529e5083270c568bc50ebcba9d76752d8d4be21684019cb4ce5a787047dcf646c39dbb8ed403a867ef3d57e57646af65a09615bf3c9383f800ac088b99859913558b8ccc8288c9d6078655a88799cb5532e026c312819ee3c519c4705c6069977dad024f0ebd9241cf2455322944ff5b5d46a8ac05520282efc31d050378d924441a2e514869bd0f45dd85783c86d6844162cfca9f62b5ab6ae122e07858775e9de1872a11ca9183c27574e9208311f42a783becbe48b126d61f809e7665e3d4c3b76e39cdc38f2444b06a380f1897013f09b09709d83683bcfe2c8d3f0b11111d86aff3baede7977dd86632e048986617182bac3e6362f49257248423d6a6f437e23ca942146d5047a8eabeb0b387ad427c26ae338d0099316d3badf1ad39ec0457a2c6b91d39824a4c3a43c68018e529528cd02e6b50fd5d041cb6861de3dc37d8a1ecba7f699ce1d369a85e7e68778434784d70809d6f13d2927e7762ce3e619459fea3b3f15244f6202b72fec68079338ae9af77692a3f4a1df304cacb44200c3ae27d94fa703fecfa536038c0111b05acb0d5a6591a24d12a486774a5c99c6c36ae4fa638bec83fbc0f8d6931c5df528135467db51c858d2053092f9941c902c686ad69d126d190a3205df80211e4ace286822eba0097cbe1083a7fd14e96ebf0bac7ab1757aae9ccd494396500336e73354cd9e1cd6b605ba2842ec953aae1d5d3c24faaf91daa15e405a74300cf9f05f975f5bddc9ace98e01c4ce4e3cf0a27d8d6c6ebfbae38b5518f5340ac5251aadbb83f9082f1c2319f9f10f985e496b18910f4f5080a9cb3d1203d8de798136f06bc46787b66bc2f876fc769bb16d5b89f5ac70c627ecf8d30f5ed8f5c8944abddff4067bfacbc66670768458a1e35c15fed58de59679630943ab3306cda36cb7676018dfa1c487894d8fa4b159ca8d12f389f7d60a17a79b1e132c9d7a9c22f482fee8afed78cb01970f701af73e1a290f2d8be8540dbbf4a97098bf68771aecbd9b0ebc0eaee96a699371d462b13fd2bef403d00de1c431e8f100313b166b68f1c7d578238ccc9452d0c9802e2ba988400de5da442e0497c269523f4cbe6ce941b747680199e498c4ae87c06b73ed9d3bd0419028d0507a8f9b34d23ed80a130b00d4aa8fadbc5f45da1655e33014564c99fd70e5b58f512e83776109d0f43efec73e8885f2e21d7a8c731c4c9d5bdb21a2a97c024517adf3bf774ac373c83ec2d5a613ecfba7d7edd2ed994b32b0b65fa38c2b20ce7002de8204e6fddaa05efcb3d553c5d844db6b11d9068457c2286f6e09d6fce86f0d6124071d04915f542b0d50f903333f9f113b0712b6c02c0d3fc2140cef5f8b7221837787be2feca51075c03fdcf5dcec314634dab03c1542b60d3202bace542f7de5948394cd8c3d3d2495a62d10864ab9234da9f7fe8140636543b1fc2f4dc57af5fd2775563f0df02b6fae232633353acbfd7ecf6916c7bfded9b4711bdbfa6854cfa61b39ac45b017805b1cd6e0d4127cb02e30fdd3a69dcc864f491c6b05a2dc2a199cca637913eab6d426eb6fb7941b28a21f273e3053f976d06337513267febc70164cfcf32a8d806318ebd32972b1fdb44b65f155ab318561077840c0cd21dda2be65d07c3a48bbbb4753e86a03ee1a532058e3416e3c04560d911556ef43f04287bb482dfcc6f5b042bfd0d609e7cfb88a502b4500abc378d60c063eedea30dfa6f17e0bf1364e1ed8b5b5fbf8b5dc196b0a35eb7aae6b56a9400f1087745cf28e2ce38cb2cedce3c7324791af12a6fe5e11d07fb734faafbdc4bb946de5c0b8361af3144f5c05313ac720e4d4fb00e4558f7f3e3b8c03b3abdf1adcb5c37b65e5da45c462ce9ad8636a86458dda3932574b1c6b49c3e78e3ce118d9d522bdeb44ac66c57e6334b9cc05b0bdd66c6c58353652b376f9c50b022b733210f64a65607c007ff7ab51886a47c025d0ffbf27f3f3da28c36c2da933695652c4a7942c8c5588fc668fdc050ec3d7869ae387c0e2d2bc2d0637c99160c6a506ed8b5f24342487e2089cc49a58efbe8fd352603cefd39679d09632f7f56a5dc4858122833c529eee1aa6bfb0747dd3f401db737c0267a7cdaf8d516edd48c8948dfd9cc9e40b5932af4ff2213eee2b7a32607ad14a505552eabca5c9cc264fb8c5b63fab8fad760b8d182dfdd2ed63ccdf74f87788622822d65358f480c63952684c72bf0442349fa3fbbbe0b988bb4c22eaae3b920b2d0bc194c145a6b78a043b226dcdffe"}, 0x100b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x4a, "2d720787b641423f000000a6aa0825471829a0bc32e5cde91eaf6df1497941f89ca551d1e7dea188ffc5bb39ec84b91f5751669d70ba271e33ba8ec0195cf2d59bdf8a77eba592d380ed"}}) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.887573387s ago: executing program 3 (id=563): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x18, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x4, 0xb8}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvfrom(r3, 0x0, 0x0, 0x102, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0xacc6, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)="8d68", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) 1.566604128s ago: executing program 5 (id=565): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), 0x201000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@mmap}], [{@euid_lt}, {@fsname={'fsname', 0x3d, ']/)/'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, 'iso9660\x00'}}]}}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1800414, &(0x7f0000000280)=ANY=[], 0x6, 0x801, &(0x7f0000001540)="$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") r3 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, 0x0, 0x0, 0x7000, 0x0, 0x3) setsockopt$sock_attach_bpf(r3, 0x29, 0x2e, 0x0, 0x108) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000440)={0x0, 0x2, 0x6, 0xfffffffffffffffe}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 1.538008262s ago: executing program 1 (id=566): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.476755759s ago: executing program 1 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.331841868s ago: executing program 5 (id=568): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = io_uring_setup(0x2625, &(0x7f0000000240)={0x0, 0xfffffffd, 0x800, 0x1, 0x4000159}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40903, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r3}) ioctl$TCSBRKP(r1, 0x5425, 0x5) ppoll(&(0x7f0000000040)=[{r1, 0x3127}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) fallocate(r4, 0x8, 0x0, 0x10000) 1.264701917s ago: executing program 1 (id=569): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000300)) r2 = socket$kcm(0xa, 0x1, 0x106) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000120) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ftruncate(0xffffffffffffffff, 0xc17a) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709a70000000000000101000000080009003f00000014fb1e00000000000000000000000000000000011400200000000000000000000000ffffffffffff0500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x81ff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000006040)="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", 0x3e0}], 0x1}}], 0x1, 0x2090) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0x4}, {0x6, 0x9}}, ["", "", "", "", ""]}, 0x24}}, 0x4000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100001042cbd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="1000000014310000280012800b000100697036746e6c00001800028014000200fc020000000000007cfd5207e96a557f0caa850000000000000001"], 0x48}}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe800000"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x200040d0) 1.044446045s ago: executing program 0 (id=570): unshare(0x26000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x3, 0x1, 0x5) ftruncate(r0, 0x38c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000001300), 0xf}, 0x200, 0x0, 0x1, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r4}, &(0x7f0000001100), &(0x7f0000001200)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)={0x60, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4a, 0x1, 0x0, 0x1, [@generic="d4519bae77ccbdd9b2ab92cb6a7c79e3d59617e56c6718783fdf8525de6706a40d4514f520a7c9d3fd8b0b863ddb4dd860200d41e2015dc1c65ef21ce978d5087b91f67fa55b"]}]}, 0x60}}, 0x8000) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r8 = fcntl$dupfd(r7, 0x0, r7) socket$packet(0x11, 0x3, 0x300) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@dst={{0x48}, {0x1, 0x0, 0x0, [0xce00, 0xf98a, 0x0, 0x1000, 0x6, 0x80, 0x5, 0x2, 0x4, 0xb5, 0xd3, 0x2, 0x4, 0x4, 0x1, 0x3], 0xd}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd60000000003084"], 0x0) write$sndseq(r8, 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r10 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r10, &(0x7f0000000100)=""/165, 0xa5, 0x2102, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.00490205s ago: executing program 3 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) (fail_nth: 20) 963.472736ms ago: executing program 2 (id=572): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000540)="8553555b1acde4803de3559a61ff933b978be40ece2157224cf238cf6f3c0db27128428f153d4639f0731304cb12ea3537c149c6cfac0f51046c411c356c656fdf9a38cfc137834a27678b25c0a1d8539d95638f0adb7ad91cd0a13425075e1bf259ca6dd34bbccd3057027a53cae7bdcddbdc2f8c41d106e7997df302fdd7efe7456d0c4f1b14cf8a1a81f2dc2010", 0xfffffffffffffcc0}], 0x1000000000000109, 0x7c00, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) unshare(0x40480) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0x107, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000101, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f00000002c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8040000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) readv(r1, 0x0, 0x0) 860.643109ms ago: executing program 1 (id=573): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x33}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x7, 0x69, 0x4, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000", @ANYRES32=0x0, @ANYRES32], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00', @ANYRESHEX], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) getsockopt(r5, 0x1, 0x5, &(0x7f0000000140)=""/165, &(0x7f0000000000)=0xa5) unshare(0x6a040000) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") 735.599735ms ago: executing program 2 (id=574): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xd8, 0xd, 0x0, 0x5f, @private1, @mcast2, 0x8000, 0x2f00, 0xfffffffe, 0xc6}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000000)=@phonet={0x23, 0x1, 0x2, 0x7}, 0x80, 0x0}, 0x4008000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x80}}], 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x62ea, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0402f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 716.594407ms ago: executing program 3 (id=575): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 649.586756ms ago: executing program 5 (id=576): socket(0x1a, 0x6, 0xf) 468.726609ms ago: executing program 5 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x57) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000080)=0xd0, 0x4) recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x2203, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x0, 0x0, 0x1, 0xd, 0xfffc}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x6, 0x2, 0x3, 0x1, 0x0, 0x101}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="8d0000b6ff0280080005000000e7ff0000000000000067", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 387.19189ms ago: executing program 3 (id=578): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e23000005"], 0x190) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000002480)="95", 0x1}, {&(0x7f0000000300)='\a\x00', 0x2}], 0x2, 0xed47, 0x8000) 361.566343ms ago: executing program 2 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0xa000000, 0x0, 0x840}, 0x0) 214.877982ms ago: executing program 1 (id=580): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, 0x0) 214.045392ms ago: executing program 0 (id=581): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x18, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x4, 0xb8}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvfrom(r3, 0x0, 0x0, 0x102, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0xacc6, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)="8d68", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) 150.56965ms ago: executing program 3 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) fchdir(0xffffffffffffffff) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) syz_io_uring_setup(0x6f19, &(0x7f0000000340)={0x0, 0xe326, 0x4, 0x2, 0xa9}, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r6 = syz_io_uring_setup(0x1ea1, &(0x7f00000003c0)={0x0, 0xc13, 0x8, 0x3, 0x78}, &(0x7f0000000240), &(0x7f00000002c0)) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0xffffffff, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r10}}) syz_io_uring_submit(0x0, r5, &(0x7f0000000500)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r6, 0x0, &(0x7f0000000440)="cdccb5becce853c5b5b2155ff2f2c500e1aaaae68327bb1e1b273fda51631d89098cd58953d681b51fe65283ffbed4b3f3505fe40fd28859fcaeddcd7da91c2d61421882abd63fa7ec028a1237403cc2a37017ddbbee91e3acffdcfc3436e729043f13e06cd12c4bdee64f82311a2ace2f2d0f9af8c2af2ae62b7af4c7cb0e4eb9cf31d1f8200c405310dcc745cbd0c7bb6966055d89536ef8297fc2f5523149688e5264464b98b4b7f81b3d0822ebde43c4e3e52f14cd4e8472f61f7e4397", 0xbf, 0x3, 0x0, {0x0, r10}}) r11 = pidfd_getfd(r4, r4, 0x0) setns(r11, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000814d80"], 0x1c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e60095008000"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r12}, 0x4) 92.556908ms ago: executing program 1 (id=583): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 90.453188ms ago: executing program 2 (id=584): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 0s ago: executing program 2 (id=585): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): pabilities in a way that may be insecure [ 43.831290][ T3693] program syz.3.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.890857][ T966] IPVS: starting estimator thread 0... [ 43.897146][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 43.897162][ T29] audit: type=1400 audit(1768711611.554:434): avc: denied { getopt } for pid=3700 comm="syz.0.67" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.983965][ T3702] IPVS: using max 2256 ests per chain, 112800 per kthread [ 44.079619][ T29] audit: type=1400 audit(1768711611.734:435): avc: denied { setopt } for pid=3710 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.140205][ T29] audit: type=1400 audit(1768711611.794:436): avc: denied { getopt } for pid=3714 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.166445][ T3716] set_capacity_and_notify: 2 callbacks suppressed [ 44.166463][ T3716] loop0: detected capacity change from 0 to 764 [ 44.179663][ T29] audit: type=1400 audit(1768711611.834:437): avc: denied { create } for pid=3717 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.184890][ T3716] iso9660: Unknown parameter '' [ 44.277892][ T3723] loop0: detected capacity change from 0 to 512 [ 44.293355][ T3723] EXT4-fs: test_dummy_encryption option not supported [ 44.425809][ T3729] loop4: detected capacity change from 0 to 128 [ 44.434806][ T3729] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 44.464107][ T3733] __nla_validate_parse: 4 callbacks suppressed [ 44.464126][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 44.467489][ T3729] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.470990][ T3733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 44.488037][ T29] audit: type=1400 audit(1768711612.144:438): avc: denied { bind } for pid=3724 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.514753][ T3733] bridge0: port 3(vlan2) entered blocking state [ 44.526050][ T3733] bridge0: port 3(vlan2) entered disabled state [ 44.532642][ T3733] vlan2: entered allmulticast mode [ 44.537906][ T3733] bridge0: entered allmulticast mode [ 44.544238][ T3733] vlan2: left allmulticast mode [ 44.549133][ T3733] bridge0: left allmulticast mode [ 44.558185][ T3734] loop3: detected capacity change from 0 to 512 [ 44.565867][ T3729] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.581059][ T29] audit: type=1400 audit(1768711612.234:439): avc: denied { ioctl } for pid=3735 comm="syz.2.78" path="uts:[4026532388]" dev="nsfs" ino=4026532388 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.616211][ T29] audit: type=1400 audit(1768711612.274:440): avc: denied { remove_name } for pid=3728 comm="syz.4.76" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.616645][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.638808][ T29] audit: type=1400 audit(1768711612.274:441): avc: denied { unlink } for pid=3728 comm="syz.4.76" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.684633][ T29] audit: type=1400 audit(1768711612.344:442): avc: denied { append } for pid=3732 comm="syz.3.77" path="/12/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.792194][ T29] audit: type=1400 audit(1768711612.404:443): avc: denied { ioctl } for pid=3732 comm="syz.3.77" path=2F31322F66696C65302F5C505C32A5B43E85B676698B297DB9AE259C73DFE7DC39FC9EC0FF5A3CFCD46C3663218466E2EF9FFEEE343F5EEC991C9D9A0E2116E64208F9AFBEFCB5128B3A7EBBF53C5A97A2753191A9EDDF8CBD9CB6DFF6DE575387F1A87E110FE18710C2E2E351F2DFBE8DCFDF59EE2AB9BEB15CD85CCD2D3C14D69E86E6FBF3DD5BF9A59DE1836C79A62B3B1B7D5817F1D6CC4FD5468EEF9AA5E7DDB6814FD55A23731DF5A5631F339FFFD69FF3DFEBACD42B8D89BE9395C17447FDB2BC1DE5FE2A7F dev="loop3" ino=19 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.852296][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.914980][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.994244][ T3747] syz.1.81 (3747) used greatest stack depth: 10176 bytes left [ 45.088373][ T3750] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 45.115333][ T3752] loop4: detected capacity change from 0 to 128 [ 45.147545][ T3754] pim6reg: entered allmulticast mode [ 45.153741][ T3752] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 45.174579][ T3754] netlink: 156 bytes leftover after parsing attributes in process `syz.3.83'. [ 45.205419][ T3752] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.224834][ T3752] ext2 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.278332][ T3752] FAULT_INJECTION: forcing a failure. [ 45.278332][ T3752] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.291643][ T3752] CPU: 1 UID: 0 PID: 3752 Comm: syz.4.82 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.291675][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.291694][ T3752] Call Trace: [ 45.291702][ T3752] [ 45.291710][ T3752] __dump_stack+0x1d/0x30 [ 45.291811][ T3752] dump_stack_lvl+0x95/0xd0 [ 45.291917][ T3752] dump_stack+0x15/0x1b [ 45.291944][ T3752] should_fail_ex+0x263/0x280 [ 45.291976][ T3752] should_fail+0xb/0x20 [ 45.292032][ T3752] should_fail_usercopy+0x1a/0x20 [ 45.292065][ T3752] _copy_from_user+0x1c/0xb0 [ 45.292102][ T3752] kstrtouint_from_user+0x69/0xf0 [ 45.292132][ T3752] ? 0xffffffff81000000 [ 45.292150][ T3752] ? selinux_file_permission+0x1e1/0x320 [ 45.292327][ T3752] proc_fail_nth_write+0x50/0x160 [ 45.292363][ T3752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.292431][ T3752] vfs_write+0x269/0x9f0 [ 45.292456][ T3752] ? selinux_file_ioctl+0x323/0x3b0 [ 45.292495][ T3752] ? putname+0x90/0x100 [ 45.292523][ T3752] ksys_write+0xdc/0x1a0 [ 45.292620][ T3752] __x64_sys_write+0x40/0x50 [ 45.292643][ T3752] x64_sys_call+0x2847/0x3000 [ 45.292708][ T3752] do_syscall_64+0xc0/0x2a0 [ 45.292765][ T3752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.292793][ T3752] RIP: 0033:0x7f3df74db58e [ 45.292813][ T3752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.292896][ T3752] RSP: 002b:00007f3df5f76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.292921][ T3752] RAX: ffffffffffffffda RBX: 00007f3df5f776c0 RCX: 00007f3df74db58e [ 45.292940][ T3752] RDX: 0000000000000001 RSI: 00007f3df5f770a0 RDI: 0000000000000005 [ 45.292957][ T3752] RBP: 00007f3df5f77090 R08: 0000000000000000 R09: 0000000000000000 [ 45.292973][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.292989][ T3752] R13: 00007f3df7796038 R14: 00007f3df7795fa0 R15: 00007fff54ebc0c8 [ 45.293079][ T3752] [ 45.554726][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.573634][ T3764] FAULT_INJECTION: forcing a failure. [ 45.573634][ T3764] name failslab, interval 1, probability 0, space 0, times 0 [ 45.586636][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.4.89 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.586667][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.586766][ T3764] Call Trace: [ 45.586818][ T3764] [ 45.586828][ T3764] __dump_stack+0x1d/0x30 [ 45.586859][ T3764] dump_stack_lvl+0x95/0xd0 [ 45.586883][ T3764] dump_stack+0x15/0x1b [ 45.586909][ T3764] should_fail_ex+0x263/0x280 [ 45.586939][ T3764] should_failslab+0x8c/0xb0 [ 45.587062][ T3764] kmem_cache_alloc_noprof+0x68/0x490 [ 45.587092][ T3764] ? copy_fs_struct+0x31/0x110 [ 45.587127][ T3764] copy_fs_struct+0x31/0x110 [ 45.587162][ T3764] copy_fs+0x57/0xf0 [ 45.587186][ T3764] copy_process+0xc40/0x1f10 [ 45.587221][ T3764] kernel_clone+0x16b/0x5b0 [ 45.587248][ T3764] __se_sys_clone3+0x1f5/0x230 [ 45.587290][ T3764] __x64_sys_clone3+0x31/0x40 [ 45.587380][ T3764] x64_sys_call+0x2c0f/0x3000 [ 45.587431][ T3764] do_syscall_64+0xc0/0x2a0 [ 45.587471][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.587539][ T3764] RIP: 0033:0x7f3df751acb9 [ 45.587559][ T3764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.587643][ T3764] RSP: 002b:00007f3df5f76ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 45.587669][ T3764] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f3df751acb9 [ 45.587738][ T3764] RDX: 00007f3df5f76f10 RSI: 0000000000000043 RDI: 00007f3df5f76f10 [ 45.587756][ T3764] RBP: 00007f3df5f77090 R08: 0000000000000000 R09: 0000000000000043 [ 45.587772][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.587786][ T3764] R13: 00007f3df7796038 R14: 00007f3df7795fa0 R15: 00007fff54ebc0c8 [ 45.587805][ T3764] [ 46.055480][ T3779] netlink: 'syz.4.93': attribute type 34 has an invalid length. [ 46.332006][ T3796] loop4: detected capacity change from 0 to 1024 [ 46.349072][ T3796] EXT4-fs: Ignoring removed nobh option [ 46.374963][ T3796] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.401946][ T3796] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.98: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 46.434102][ T3766] loop0: detected capacity change from 0 to 512 [ 46.461718][ T3796] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.98: couldn't read orphan inode 11 (err -117) [ 46.499870][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.519084][ T3796] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.98: Invalid block bitmap block 0 in block_group 0 [ 46.537725][ T3802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3802 comm=syz.1.100 [ 46.550470][ T3796] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.98: Failed to acquire dquot type 0 [ 46.564693][ T3796] syz.4.98 (3796) used greatest stack depth: 10080 bytes left [ 46.570428][ T3766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.615879][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.637134][ T3814] loop4: detected capacity change from 0 to 512 [ 46.654972][ T3766] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.668524][ T3814] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.104: inode has both inline data and extents flags [ 46.684557][ T3814] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.104: couldn't read orphan inode 15 (err -117) [ 46.698135][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.732060][ T3766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.005288][ T3829] loop0: detected capacity change from 0 to 512 [ 47.013676][ T3829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.110: bg 0: block 393: padding at end of block bitmap is not set [ 47.029014][ T3829] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 47.038485][ T3829] EXT4-fs (loop0): 2 truncates cleaned up [ 47.045496][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.064802][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 47.087555][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.097779][ T3818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.134081][ T3833] loop0: detected capacity change from 0 to 128 [ 47.148463][ T923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.199780][ T923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.217016][ T3833] bio_check_eod: 111 callbacks suppressed [ 47.217036][ T3833] syz.0.111: attempt to access beyond end of device [ 47.217036][ T3833] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 47.238649][ T3833] syz.0.111: attempt to access beyond end of device [ 47.238649][ T3833] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 47.265404][ T3833] syz.0.111: attempt to access beyond end of device [ 47.265404][ T3833] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 47.279099][ T3833] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 47.297955][ T923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.309438][ T3839] syz.0.111: attempt to access beyond end of device [ 47.309438][ T3839] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 47.328515][ T3832] syz.0.111: attempt to access beyond end of device [ 47.328515][ T3832] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 47.342286][ T3832] Buffer I/O error on dev loop0, logical block 69, async page read [ 47.356415][ T3832] syz.0.111: attempt to access beyond end of device [ 47.356415][ T3832] loop0: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 47.370263][ T3832] Buffer I/O error on dev loop0, logical block 70, async page read [ 47.379644][ T3832] syz.0.111: attempt to access beyond end of device [ 47.379644][ T3832] loop0: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 47.393349][ T3832] Buffer I/O error on dev loop0, logical block 71, async page read [ 47.415288][ T923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.416434][ T3832] syz.0.111: attempt to access beyond end of device [ 47.416434][ T3832] loop0: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 47.439319][ T3832] Buffer I/O error on dev loop0, logical block 72, async page read [ 47.448306][ T3832] syz.0.111: attempt to access beyond end of device [ 47.448306][ T3832] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 47.462095][ T3832] Buffer I/O error on dev loop0, logical block 69, async page read [ 47.472405][ T3832] syz.0.111: attempt to access beyond end of device [ 47.472405][ T3832] loop0: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 47.486861][ T3832] Buffer I/O error on dev loop0, logical block 70, async page read [ 47.495856][ T3832] Buffer I/O error on dev loop0, logical block 71, async page read [ 47.505059][ T3832] Buffer I/O error on dev loop0, logical block 72, async page read [ 47.513204][ T3832] Buffer I/O error on dev loop0, logical block 69, async page read [ 47.580801][ T923] bridge_slave_1: left allmulticast mode [ 47.586681][ T923] bridge_slave_1: left promiscuous mode [ 47.592415][ T923] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.648496][ T923] bridge_slave_0: left allmulticast mode [ 47.654242][ T923] bridge_slave_0: left promiscuous mode [ 47.660038][ T923] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.809221][ T923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.848557][ T923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.058519][ T923] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 48.076414][ T923] bond0 (unregistering): Released all slaves [ 48.141156][ T923] hsr_slave_0: left promiscuous mode [ 48.148912][ T923] hsr_slave_1: left promiscuous mode [ 48.156514][ T923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.164067][ T923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.205523][ T923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.213040][ T923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.291259][ T923] veth1_macvtap: left promiscuous mode [ 48.297481][ T923] veth0_macvtap: left promiscuous mode [ 48.318636][ T923] veth1_vlan: left promiscuous mode [ 48.668907][ T3876] FAULT_INJECTION: forcing a failure. [ 48.668907][ T3876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.682217][ T3876] CPU: 1 UID: 0 PID: 3876 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.682250][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.682266][ T3876] Call Trace: [ 48.682273][ T3876] [ 48.682283][ T3876] __dump_stack+0x1d/0x30 [ 48.682313][ T3876] dump_stack_lvl+0x95/0xd0 [ 48.682376][ T3876] dump_stack+0x15/0x1b [ 48.682448][ T3876] should_fail_ex+0x263/0x280 [ 48.682479][ T3876] should_fail+0xb/0x20 [ 48.682504][ T3876] should_fail_usercopy+0x1a/0x20 [ 48.682567][ T3876] _copy_to_user+0x20/0xa0 [ 48.682603][ T3876] simple_read_from_buffer+0xb5/0x130 [ 48.682647][ T3876] proc_fail_nth_read+0x10e/0x150 [ 48.682682][ T3876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.682714][ T3876] vfs_read+0x1ab/0x7f0 [ 48.682749][ T3876] ? j1939_sk_getname+0x135/0x150 [ 48.682781][ T3876] ? __rcu_read_unlock+0x4e/0x70 [ 48.682801][ T3876] ? __fget_files+0x184/0x1c0 [ 48.682824][ T3876] ? mutex_lock+0x57/0x90 [ 48.682853][ T3876] ksys_read+0xdc/0x1a0 [ 48.682873][ T3876] __x64_sys_read+0x40/0x50 [ 48.682940][ T3876] x64_sys_call+0x2889/0x3000 [ 48.682966][ T3876] do_syscall_64+0xc0/0x2a0 [ 48.683027][ T3876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.683050][ T3876] RIP: 0033:0x7fc8e390b58e [ 48.683065][ T3876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.683084][ T3876] RSP: 002b:00007fc8e23a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.683149][ T3876] RAX: ffffffffffffffda RBX: 00007fc8e23a76c0 RCX: 00007fc8e390b58e [ 48.683163][ T3876] RDX: 000000000000000f RSI: 00007fc8e23a70a0 RDI: 0000000000000004 [ 48.683178][ T3876] RBP: 00007fc8e23a7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.683191][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.683239][ T3876] R13: 00007fc8e3bc6038 R14: 00007fc8e3bc5fa0 R15: 00007ffccfc87ae8 [ 48.683258][ T3876] [ 48.880135][ T923] team0 (unregistering): Port device team_slave_1 removed [ 48.912138][ T923] team0 (unregistering): Port device team_slave_0 removed [ 48.931995][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 48.932012][ T29] audit: type=1400 audit(1768711616.584:521): avc: denied { create } for pid=3885 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.989873][ T29] audit: type=1400 audit(1768711616.624:522): avc: denied { write } for pid=3885 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.010285][ T29] audit: type=1400 audit(1768711616.624:523): avc: denied { nlmsg_write } for pid=3885 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.062184][ T29] audit: type=1400 audit(1768711616.714:524): avc: denied { add_name } for pid=3865 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.097884][ T29] audit: type=1400 audit(1768711616.714:525): avc: denied { create } for pid=3865 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.120301][ T29] audit: type=1400 audit(1768711616.714:526): avc: denied { write } for pid=3865 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.146494][ T29] audit: type=1400 audit(1768711616.714:527): avc: denied { append } for pid=3865 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.174041][ T29] audit: type=1400 audit(1768711616.834:528): avc: denied { remove_name } for pid=3895 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.197517][ T29] audit: type=1400 audit(1768711616.834:529): avc: denied { unlink } for pid=3895 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=1360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.292235][ T29] audit: type=1400 audit(1768711616.914:530): avc: denied { map } for pid=3899 comm="syz.3.124" path="socket:[6065]" dev="sockfs" ino=6065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 49.292865][ T3902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 49.328915][ T3902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 49.476027][ T3838] chnl_net:caif_netlink_parms(): no params data found [ 49.530429][ T3927] netlink: 92 bytes leftover after parsing attributes in process `syz.2.130'. [ 49.541315][ T3930] netlink: 'syz.3.131': attribute type 8 has an invalid length. [ 49.549099][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 49.560444][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 49.569663][ T3927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.130'. [ 49.618609][ T3930] bond0: entered promiscuous mode [ 49.623745][ T3930] bond_slave_0: entered promiscuous mode [ 49.629651][ T3930] bond_slave_1: entered promiscuous mode [ 49.639400][ T3930] gretap0: entered promiscuous mode [ 49.647941][ T3930] bond0: left promiscuous mode [ 49.652827][ T3930] bond_slave_0: left promiscuous mode [ 49.658394][ T3930] bond_slave_1: left promiscuous mode [ 49.665670][ T3930] gretap0: left promiscuous mode [ 49.703292][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.710449][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.719879][ T3838] bridge_slave_0: entered allmulticast mode [ 49.727459][ T3838] bridge_slave_0: entered promiscuous mode [ 49.738005][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.745204][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.762439][ T3838] bridge_slave_1: entered allmulticast mode [ 49.822875][ T3838] bridge_slave_1: entered promiscuous mode [ 49.829959][ T3951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.136'. [ 49.839475][ T3951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.136'. [ 49.882387][ T3838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.897969][ T3957] loop0: detected capacity change from 0 to 256 [ 49.909091][ T3838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.921221][ T3959] loop2: detected capacity change from 0 to 2048 [ 49.976275][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.003524][ T3838] team0: Port device team_slave_0 added [ 50.010094][ T3959] xt_hashlimit: max too large, truncated to 1048576 [ 50.017998][ T3838] team0: Port device team_slave_1 added [ 50.039020][ T3959] EXT4-fs error (device loop2): ext4_find_extent:903: inode #2: comm syz.2.141: inode has invalid extent depth: 9 [ 50.041717][ T3838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.058148][ T3838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.084267][ T3838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.095679][ T3838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.102667][ T3838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.128736][ T3838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.169388][ T3969] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 50.177372][ T3969] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 50.214284][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.221294][ T3838] hsr_slave_0: entered promiscuous mode [ 50.242638][ T3838] hsr_slave_1: entered promiscuous mode [ 50.271851][ T3838] debugfs: 'hsr0' already exists in 'hsr' [ 50.278101][ T3838] Cannot create hsr debugfs directory [ 50.298313][ T3985] can: request_module (can-proto-0) failed. [ 50.347174][ T3995] loop1: detected capacity change from 0 to 512 [ 50.356868][ T3995] EXT4-fs: Ignoring removed orlov option [ 50.368675][ T3995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.394884][ T3995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 50.403332][ T3995] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.149: corrupted in-inode xattr: e_value size too large [ 50.418854][ T3995] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.149: couldn't read orphan inode 15 (err -117) [ 50.431522][ T3995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.459588][ T4003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.151'. [ 50.472624][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.481642][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.491713][ T4003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.151'. [ 50.541205][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.588783][ T4010] bridge0: entered promiscuous mode [ 50.613281][ T4010] bridge0: port 3(macvtap1) entered blocking state [ 50.620052][ T4010] bridge0: port 3(macvtap1) entered disabled state [ 50.628088][ T4010] macvtap1: entered allmulticast mode [ 50.633589][ T4010] bridge0: entered allmulticast mode [ 50.640301][ T4010] macvtap1: left allmulticast mode [ 50.645536][ T4010] bridge0: left allmulticast mode [ 50.654155][ T4010] bridge0: left promiscuous mode [ 50.665993][ T4021] loop3: detected capacity change from 0 to 764 [ 50.707710][ T4025] loop1: detected capacity change from 0 to 512 [ 50.757078][ T4025] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.798306][ T3838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.807601][ T4036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32528 sclass=netlink_route_socket pid=4036 comm=syz.0.159 [ 50.824284][ T4025] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.156: iget: bad i_size value: 12154757448730 [ 50.846333][ T3838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.858595][ T4025] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.156: couldn't read orphan inode 13 (err -117) [ 50.872737][ T3838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.881764][ T3838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.890044][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.946897][ T4043] loop0: detected capacity change from 0 to 512 [ 50.954885][ T4025] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.959686][ T4043] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.071163][ T3838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.060248][ T3838] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.070661][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.077818][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.098593][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.105739][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.131394][ T3838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.141879][ T3838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.165300][ T4069] loop2: detected capacity change from 0 to 128 [ 52.181515][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.194799][ T4069] FAT-fs (loop2): bogus logical sector size 2134 [ 52.201296][ T4069] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 52.210684][ T4069] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.270218][ T4069] FAULT_INJECTION: forcing a failure. [ 52.270218][ T4069] name failslab, interval 1, probability 0, space 0, times 0 [ 52.284015][ T4069] CPU: 1 UID: 0 PID: 4069 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.284047][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.284063][ T4069] Call Trace: [ 52.284070][ T4069] [ 52.284079][ T4069] __dump_stack+0x1d/0x30 [ 52.284202][ T4069] dump_stack_lvl+0x95/0xd0 [ 52.284227][ T4069] dump_stack+0x15/0x1b [ 52.284246][ T4069] should_fail_ex+0x263/0x280 [ 52.284273][ T4069] should_failslab+0x8c/0xb0 [ 52.284302][ T4069] __kmalloc_cache_noprof+0x64/0x4a0 [ 52.284332][ T4069] ? nf_tables_newtable+0x375/0xea0 [ 52.284357][ T4069] ? __nla_validate_parse+0x1650/0x1cf0 [ 52.284412][ T4069] nf_tables_newtable+0x375/0xea0 [ 52.284444][ T4069] nfnetlink_rcv+0xc1e/0x1720 [ 52.284564][ T4069] netlink_unicast+0x5c0/0x690 [ 52.284600][ T4069] netlink_sendmsg+0x5c8/0x6f0 [ 52.284622][ T4069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.284642][ T4069] __sock_sendmsg+0x145/0x170 [ 52.284693][ T4069] ____sys_sendmsg+0x31e/0x4a0 [ 52.284744][ T4069] ___sys_sendmsg+0x195/0x1e0 [ 52.284789][ T4069] __x64_sys_sendmsg+0xd4/0x160 [ 52.284847][ T4069] x64_sys_call+0x17ba/0x3000 [ 52.284877][ T4069] do_syscall_64+0xc0/0x2a0 [ 52.284901][ T4069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.284983][ T4069] RIP: 0033:0x7effa806acb9 [ 52.285000][ T4069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.285022][ T4069] RSP: 002b:00007effa6ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.285046][ T4069] RAX: ffffffffffffffda RBX: 00007effa82e5fa0 RCX: 00007effa806acb9 [ 52.285108][ T4069] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 52.285123][ T4069] RBP: 00007effa6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.285189][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.285201][ T4069] R13: 00007effa82e6038 R14: 00007effa82e5fa0 R15: 00007ffd7b5b3e38 [ 52.285226][ T4069] [ 52.362034][ T3838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.525995][ T4089] loop0: detected capacity change from 0 to 128 [ 52.535110][ T4089] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 52.552704][ T4089] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.567828][ T4089] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.663504][ T4100] loop2: detected capacity change from 0 to 2048 [ 52.709110][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.730706][ T4113] loop3: detected capacity change from 0 to 1024 [ 52.756880][ T3838] veth0_vlan: entered promiscuous mode [ 52.757815][ T4100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.776082][ T3838] veth1_vlan: entered promiscuous mode [ 52.790463][ T3838] veth0_macvtap: entered promiscuous mode [ 52.812018][ T4118] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.826834][ T3838] veth1_macvtap: entered promiscuous mode [ 52.845377][ T3838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.855860][ T3838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.868564][ T923] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.886214][ T4113] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.173: bad orphan inode 134217728 [ 52.898304][ T923] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.911090][ T923] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.919426][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.024676][ T923] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.061232][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.105322][ T4127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.192306][ T4127] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.281654][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.331402][ T4143] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.182: bad orphan inode 134217728 [ 53.377490][ T4143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.445181][ T4148] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.506874][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.536197][ T4151] syz.3.185 uses obsolete (PF_INET,SOCK_PACKET) [ 53.544567][ T4146] loop2: p1 p2 p3 p4 [ 53.550371][ T4146] loop2: p3 start 117772289 is beyond EOD, truncated [ 53.558216][ T4146] loop2: p4 size 262144 extends beyond EOD, truncated [ 53.716910][ T4157] EXT4-fs: Ignoring removed orlov option [ 53.747764][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.786394][ T4162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4162 comm=syz.1.190 [ 53.830882][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.860116][ T4168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4168 comm=syz.1.190 [ 53.898929][ T3413] IPVS: starting estimator thread 0... [ 53.993969][ T4172] IPVS: using max 2256 ests per chain, 112800 per kthread [ 54.133307][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 54.133329][ T29] audit: type=1400 audit(1768711621.784:628): avc: denied { create } for pid=4184 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.163465][ T29] audit: type=1400 audit(1768711621.784:629): avc: denied { setopt } for pid=4184 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.189402][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.215096][ T29] audit: type=1400 audit(1768711621.874:630): avc: denied { getopt } for pid=4184 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.289002][ T29] audit: type=1400 audit(1768711621.944:631): avc: denied { load_policy } for pid=4184 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.351846][ T4185] SELinux: failed to load policy [ 54.401381][ T4185] blktrace: Concurrent blktraces are not allowed on sg0 [ 54.413839][ T29] audit: type=1400 audit(1768711622.054:632): avc: denied { append } for pid=4184 comm="syz.5.196" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.503779][ T29] audit: type=1326 audit(1768711622.154:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046e95acb9 code=0x7ffc0000 [ 54.527983][ T29] audit: type=1326 audit(1768711622.154:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046e95acb9 code=0x7ffc0000 [ 54.551413][ T29] audit: type=1326 audit(1768711622.154:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046e95acb9 code=0x7ffc0000 [ 54.575583][ T29] audit: type=1326 audit(1768711622.154:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046e95acb9 code=0x7ffc0000 [ 54.598941][ T29] audit: type=1326 audit(1768711622.154:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046e95acb9 code=0x7ffc0000 [ 54.732360][ T4202] __nla_validate_parse: 2 callbacks suppressed [ 54.732396][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 54.747583][ T4202] netlink: 'syz.3.201': attribute type 30 has an invalid length. [ 54.809431][ T2018] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.818355][ T2018] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.830161][ T2018] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.854580][ T2018] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.027556][ T4230] -1: renamed from syzkaller0 [ 55.137504][ T4240] bond1: (slave bond_slave_1): Device is not our slave [ 55.144478][ T4240] bond1: option active_slave: invalid value (bond_slave_1) [ 55.177174][ T4240] bond1 (unregistering): Released all slaves [ 55.393154][ T4252] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 55.401736][ T4252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.218'. [ 55.422194][ T4254] set_capacity_and_notify: 7 callbacks suppressed [ 55.422211][ T4254] loop2: detected capacity change from 0 to 1024 [ 55.437499][ T4254] EXT4-fs: Ignoring removed nobh option [ 55.473617][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.487345][ T4254] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 55.502258][ T4254] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.515979][ T4254] netlink: 'syz.2.219': attribute type 21 has an invalid length. [ 55.523733][ T4254] netlink: 128 bytes leftover after parsing attributes in process `syz.2.219'. [ 55.533192][ T4254] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 55.540884][ T4254] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 55.548575][ T4254] netlink: 3 bytes leftover after parsing attributes in process `syz.2.219'. [ 55.574849][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.587260][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.587260][ T31] [ 55.597147][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 55.603277][ T31] EXT4-fs (loop2): Free/Dirty block details [ 55.609921][ T31] EXT4-fs (loop2): free_blocks=20480 [ 55.615298][ T31] EXT4-fs (loop2): dirty_blocks=16 [ 55.620453][ T31] EXT4-fs (loop2): Block reservation details [ 55.626602][ T31] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 55.657553][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.700528][ T4269] loop2: detected capacity change from 0 to 128 [ 55.710095][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 55.719452][ T4269] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 55.750890][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 55.773356][ T4269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4269 comm=syz.2.220 [ 55.798069][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 55.876586][ T4281] loop0: detected capacity change from 0 to 512 [ 55.884425][ T4281] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.894260][ T4281] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 55.905456][ T4281] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.227: inode #15: comm syz.0.227: iget: illegal inode # [ 55.918726][ T4281] EXT4-fs (loop0): Remounting filesystem read-only [ 55.926129][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.951633][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.215252][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 56.225840][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 56.241499][ T4311] loop3: detected capacity change from 0 to 512 [ 56.348565][ T4323] team0 (unregistering): Port device team_slave_0 removed [ 56.359243][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 56.403586][ T4326] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 56.422693][ T4326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.435467][ T4329] loop2: detected capacity change from 0 to 512 [ 56.452515][ T4329] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.463866][ T4329] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 56.473720][ T4329] EXT4-fs (loop2): group descriptors corrupted! [ 56.668788][ T4356] loop5: detected capacity change from 0 to 128 [ 56.683230][ T4356] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 56.694109][ T4356] bio_check_eod: 14 callbacks suppressed [ 56.694126][ T4356] syz.5.252: attempt to access beyond end of device [ 56.694126][ T4356] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 56.722455][ T4356] syz.5.252: attempt to access beyond end of device [ 56.722455][ T4356] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 56.736157][ T4356] buffer_io_error: 11 callbacks suppressed [ 56.736174][ T4356] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 56.752891][ T4356] syz.5.252: attempt to access beyond end of device [ 56.752891][ T4356] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 56.781735][ T4356] syz.5.252: attempt to access beyond end of device [ 56.781735][ T4356] loop5: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 56.782934][ T4362] loop2: detected capacity change from 0 to 512 [ 56.812951][ T4362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.825976][ T4362] EXT4-fs (loop2): 1 truncate cleaned up [ 56.836033][ T4362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.866711][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.932736][ T4376] netlink: 64 bytes leftover after parsing attributes in process `syz.3.258'. [ 56.981064][ T4376] loop3: detected capacity change from 0 to 512 [ 57.035090][ T4376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.100742][ T4376] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.156599][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.181332][ T4402] loop2: detected capacity change from 0 to 2048 [ 57.208057][ T4408] loop3: detected capacity change from 0 to 512 [ 57.230049][ T4408] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.238328][ T4408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 57.249901][ T3312] loop2: p1 p2 p3 [ 57.270706][ T4402] loop2: p1 p2 p3 [ 57.275387][ T4411] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 57.275915][ T4408] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.291491][ T4408] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.306757][ T4408] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 57.334906][ T4413] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.348387][ T4408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.269: bg 0: block 40: padding at end of block bitmap is not set [ 57.364085][ T4413] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.410164][ T4408] EXT4-fs (loop3): Remounting filesystem read-only [ 57.417198][ T4408] EXT4-fs (loop3): 1 truncate cleaned up [ 57.434413][ T4411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4411 comm=syz.1.270 [ 57.449529][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.484133][ T3838] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.510543][ T4420] udevd[4420]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.522694][ T4426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.274'. [ 57.532654][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.547214][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 57.575059][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.635274][ T4439] FAULT_INJECTION: forcing a failure. [ 57.635274][ T4439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.649178][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.649211][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.649278][ T4439] Call Trace: [ 57.649285][ T4439] [ 57.649293][ T4439] __dump_stack+0x1d/0x30 [ 57.649325][ T4439] dump_stack_lvl+0x95/0xd0 [ 57.649352][ T4439] dump_stack+0x15/0x1b [ 57.649432][ T4439] should_fail_ex+0x263/0x280 [ 57.649463][ T4439] should_fail+0xb/0x20 [ 57.649517][ T4439] should_fail_usercopy+0x1a/0x20 [ 57.649582][ T4439] _copy_from_user+0x1c/0xb0 [ 57.649677][ T4439] ___sys_sendmsg+0xc1/0x1e0 [ 57.649730][ T4439] __x64_sys_sendmsg+0xd4/0x160 [ 57.649832][ T4439] x64_sys_call+0x17ba/0x3000 [ 57.649858][ T4439] do_syscall_64+0xc0/0x2a0 [ 57.649886][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.649965][ T4439] RIP: 0033:0x7f046e95acb9 [ 57.650032][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.650055][ T4439] RSP: 002b:00007f046d3b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.650108][ T4439] RAX: ffffffffffffffda RBX: 00007f046ebd5fa0 RCX: 00007f046e95acb9 [ 57.650127][ T4439] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 57.650183][ T4439] RBP: 00007f046d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.650196][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.650289][ T4439] R13: 00007f046ebd6038 R14: 00007f046ebd5fa0 R15: 00007fff73f49f38 [ 57.650380][ T4439] [ 57.835739][ T4444] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.852477][ T4446] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.883338][ T4449] 9p: Bad value for 'rfdno' [ 58.043877][ T4462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4462 comm=syz.2.288 [ 58.064814][ T4463] EXT4-fs: Invalid want_extra_isize 95 [ 58.097568][ T4468] macvlan1: entered promiscuous mode [ 58.106750][ T4470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.292'. [ 58.117665][ T4468] dummy0: entered promiscuous mode [ 58.140254][ T4468] dummy0: left promiscuous mode [ 58.150071][ T4468] macvlan1: left promiscuous mode [ 58.386250][ T4477] ------------[ cut here ]------------ [ 58.391802][ T4477] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 58.412383][ T4477] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.294/4477 [ 58.424692][ T4477] Modules linked in: [ 58.428705][ T4477] CPU: 0 UID: 0 PID: 4477 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.439154][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.449400][ T4477] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 58.457048][ T4477] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 58.477599][ T4477] RSP: 0018:ffffc90010b573a0 EFLAGS: 00010246 [ 58.483708][ T4477] RAX: ffff88811ad0ab90 RBX: 00000000ffffffff RCX: 0000000000000000 [ 58.492997][ T4477] RDX: ffffffff867fcb34 RSI: ffffffff86810d65 RDI: ffffffff86fb6f20 [ 58.501154][ T4477] RBP: ffff88810e3aa840 R08: 0000007800000000 R09: 0000000000000000 [ 58.510028][ T4477] R10: ffffffff89130aa8 R11: 0000000080000000 R12: ffff88810e3aa800 [ 58.519466][ T4477] R13: 0000000000000000 R14: ffff88810e3aa84c R15: ffff88810e3aa838 [ 58.527613][ T4477] FS: 00007effa6aa66c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 58.537311][ T4477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.545417][ T4477] CR2: 00007effa6aa5ff8 CR3: 000000011b11c000 CR4: 00000000003506f0 [ 58.553505][ T4477] Call Trace: [ 58.556857][ T4477] [ 58.559834][ T4477] reg_set_min_max+0x1f2/0x260 [ 58.565368][ T4477] check_cond_jmp_op+0x13bd/0x1a80 [ 58.570527][ T4477] do_check+0x3356/0x8250 [ 58.576290][ T4477] do_check_common+0xccf/0x1300 [ 58.576401][ T4479] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.588082][ T4477] bpf_check+0x2f85/0xc890 [ 58.592565][ T4477] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 58.599480][ T4477] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 58.606833][ T4477] ? _find_next_zero_bit+0x29/0xa0 [ 58.612100][ T4477] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 58.618275][ T4477] ? _find_next_zero_bit+0x64/0xa0 [ 58.623460][ T4477] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 58.624361][ T4479] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.631420][ T4477] ? css_rstat_updated+0xbb/0x280 [ 58.645970][ T4477] ? mod_memcg_state+0x182/0x260 [ 58.650962][ T4477] ? __rcu_read_unlock+0x4e/0x70 [ 58.656618][ T4477] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 58.662487][ T4477] ? pcpu_alloc_noprof+0xd18/0x1210 [ 58.669199][ T4477] ? should_fail_ex+0x30/0x280 [ 58.674078][ T4477] ? __kmalloc_noprof+0x2a3/0x580 [ 58.679151][ T4477] ? security_bpf_prog_load+0x60/0x140 [ 58.685398][ T4477] ? selinux_bpf_prog_load+0xac/0xd0 [ 58.690746][ T4477] ? security_bpf_prog_load+0x9e/0x140 [ 58.697615][ T4477] bpf_prog_load+0xf76/0x1140 [ 58.702517][ T4477] ? security_bpf+0x2b/0x90 [ 58.707211][ T4477] __sys_bpf+0x469/0x7b0 [ 58.711516][ T4477] __x64_sys_bpf+0x41/0x50 [ 58.716868][ T4477] x64_sys_call+0x28e1/0x3000 [ 58.721627][ T4477] do_syscall_64+0xc0/0x2a0 [ 58.727586][ T4477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.733533][ T4477] RIP: 0033:0x7effa806acb9 [ 58.738059][ T4477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.759717][ T4477] RSP: 002b:00007effa6aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.768230][ T4477] RAX: ffffffffffffffda RBX: 00007effa82e6090 RCX: 00007effa806acb9 [ 58.776352][ T4477] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 58.786397][ T4477] RBP: 00007effa80d8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 58.794455][ T4477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.802505][ T4477] R13: 00007effa82e6128 R14: 00007effa82e6090 R15: 00007ffd7b5b3e38 [ 58.810614][ T4477] [ 58.813708][ T4477] ---[ end trace 0000000000000000 ]--- [ 58.827603][ T4479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 58.841381][ T4477] syz.2.294 (4477) used greatest stack depth: 10040 bytes left [ 58.859581][ T4479] System zones: 1-12 [ 58.863656][ T4479] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.891487][ T4479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.295: bg 0: block 361: padding at end of block bitmap is not set [ 58.943308][ T1633] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.990102][ T4479] EXT4-fs (loop0): Remounting filesystem read-only [ 59.028716][ T4479] EXT4-fs (loop0): 1 truncate cleaned up [ 59.042246][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 59.069416][ T4493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.085381][ T4491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.108448][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 59.120080][ T4491] EXT4-fs error (device loop3): ext4_get_first_dir_block:3527: inode #12: comm syz.3.301: Directory block failed checksum [ 59.139497][ T4491] ucma_write: process 182 (syz.3.301) changed security contexts after opening file descriptor, this is not allowed. [ 59.153432][ T4493] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.194076][ T4503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.212782][ T4493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.300: bg 0: block 112: padding at end of block bitmap is not set [ 59.244294][ T4503] EXT4-fs (loop5): 1 truncate cleaned up [ 59.254215][ T4493] EXT4-fs (loop2): Remounting filesystem read-only [ 59.263685][ T4503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.288469][ T4512] FAULT_INJECTION: forcing a failure. [ 59.288469][ T4512] name failslab, interval 1, probability 0, space 0, times 0 [ 59.303192][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: syz.1.308 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.303235][ T4512] Tainted: [W]=WARN [ 59.303244][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.303263][ T4512] Call Trace: [ 59.303321][ T4512] [ 59.303330][ T4512] __dump_stack+0x1d/0x30 [ 59.303356][ T4512] dump_stack_lvl+0x95/0xd0 [ 59.303383][ T4512] dump_stack+0x15/0x1b [ 59.303408][ T4512] should_fail_ex+0x263/0x280 [ 59.303510][ T4512] should_failslab+0x8c/0xb0 [ 59.303595][ T4512] __kmalloc_noprof+0xb8/0x580 [ 59.303618][ T4512] ? kernfs_fop_write_iter+0xe2/0x300 [ 59.303653][ T4512] ? avc_policy_seqno+0x15/0x30 [ 59.303677][ T4512] ? selinux_file_permission+0x1e1/0x320 [ 59.303841][ T4512] kernfs_fop_write_iter+0xe2/0x300 [ 59.303884][ T4512] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 59.303918][ T4512] vfs_write+0x5a6/0x9f0 [ 59.304001][ T4512] ksys_write+0xdc/0x1a0 [ 59.304094][ T4512] __x64_sys_write+0x40/0x50 [ 59.304175][ T4512] x64_sys_call+0x2847/0x3000 [ 59.304205][ T4512] do_syscall_64+0xc0/0x2a0 [ 59.304229][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.304321][ T4512] RIP: 0033:0x7f761d61acb9 [ 59.304345][ T4512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.304401][ T4512] RSP: 002b:00007f761c077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.304425][ T4512] RAX: ffffffffffffffda RBX: 00007f761d895fa0 RCX: 00007f761d61acb9 [ 59.304440][ T4512] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000005 [ 59.304491][ T4512] RBP: 00007f761c077090 R08: 0000000000000000 R09: 0000000000000000 [ 59.304507][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.304530][ T4512] R13: 00007f761d896038 R14: 00007f761d895fa0 R15: 00007fff7bada768 [ 59.304562][ T4512] [ 59.510198][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.520262][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.529989][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 59.530003][ T29] audit: type=1400 audit(1768711627.184:750): avc: denied { connect } for pid=4513 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.564352][ T29] audit: type=1400 audit(1768711627.184:751): avc: denied { write } for pid=4513 comm="syz.0.309" path="socket:[8182]" dev="sockfs" ino=8182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.595133][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.643390][ T4521] netlink: 'syz.5.311': attribute type 3 has an invalid length. [ 59.652051][ T4520] FAULT_INJECTION: forcing a failure. [ 59.652051][ T4520] name failslab, interval 1, probability 0, space 0, times 0 [ 59.652092][ T4520] CPU: 1 UID: 0 PID: 4520 Comm: syz.3.313 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.652127][ T4520] Tainted: [W]=WARN [ 59.652136][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.652151][ T4520] Call Trace: [ 59.652161][ T4520] [ 59.652168][ T4520] __dump_stack+0x1d/0x30 [ 59.652247][ T4520] dump_stack_lvl+0x95/0xd0 [ 59.652331][ T4520] dump_stack+0x15/0x1b [ 59.652356][ T4520] should_fail_ex+0x263/0x280 [ 59.652459][ T4520] should_failslab+0x8c/0xb0 [ 59.652553][ T4520] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 59.652585][ T4520] ? sidtab_sid2str_get+0xa0/0x130 [ 59.652620][ T4520] kmemdup_noprof+0x2b/0x70 [ 59.652678][ T4520] sidtab_sid2str_get+0xa0/0x130 [ 59.652715][ T4520] security_sid_to_context_core+0x1eb/0x2e0 [ 59.652751][ T4520] security_sid_to_context+0x27/0x40 [ 59.652784][ T4520] avc_audit_post_callback+0x10f/0x520 [ 59.652875][ T4520] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 59.652916][ T4520] common_lsm_audit+0x1ba/0x230 [ 59.652949][ T4520] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 59.653080][ T4520] ? avc_denied+0xe4/0x100 [ 59.653100][ T4520] slow_avc_audit+0x14c/0x190 [ 59.653200][ T4520] avc_has_perm+0x144/0x190 [ 59.653314][ T4520] selinux_lsm_setattr+0x120/0x660 [ 59.653456][ T4520] selinux_setprocattr+0x4f/0x70 [ 59.653600][ T4520] security_setprocattr+0x1a7/0x1d0 [ 59.653726][ T4520] proc_pid_attr_write+0x1ea/0x220 [ 59.653858][ T4520] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 59.653942][ T4520] vfs_write+0x269/0x9f0 [ 59.654046][ T4520] ? __rcu_read_unlock+0x4e/0x70 [ 59.654111][ T4520] ? __fget_files+0x184/0x1c0 [ 59.654191][ T4520] ? mutex_lock+0x57/0x90 [ 59.654287][ T4520] ksys_write+0xdc/0x1a0 [ 59.654437][ T4520] __x64_sys_write+0x40/0x50 [ 59.654499][ T4520] x64_sys_call+0x2847/0x3000 [ 59.654625][ T4520] do_syscall_64+0xc0/0x2a0 [ 59.654785][ T4520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.654866][ T4520] RIP: 0033:0x7f046e95acb9 [ 59.654917][ T4520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.654973][ T4520] RSP: 002b:00007f046d3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.655044][ T4520] RAX: ffffffffffffffda RBX: 00007f046ebd5fa0 RCX: 00007f046e95acb9 [ 59.655087][ T4520] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 59.655129][ T4520] RBP: 00007f046d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.655157][ T4520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.655192][ T4520] R13: 00007f046ebd6038 R14: 00007f046ebd5fa0 R15: 00007fff73f49f38 [ 59.655296][ T4520] [ 59.735835][ T29] audit: type=1400 audit(1768711627.314:752): avc: denied { setcurrent } for pid=4519 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tsid=137 tclass=process permissive=1 [ 59.735915][ T29] audit: type=1401 audit(1768711627.314:753): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 59.740984][ T29] audit: type=1400 audit(1768711627.394:754): avc: denied { bind } for pid=4522 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.742060][ T4521] netlink: 'syz.5.311': attribute type 15 has an invalid length. [ 60.009796][ T29] audit: type=1400 audit(1768711627.514:755): avc: denied { accept } for pid=4522 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.030063][ T29] audit: type=1400 audit(1768711627.644:756): avc: denied { name_connect } for pid=4528 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 60.050249][ T29] audit: type=1400 audit(1768711627.694:757): avc: denied { shutdown } for pid=4528 comm="syz.5.315" lport=41673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.096682][ T29] audit: type=1400 audit(1768711627.754:758): avc: denied { create } for pid=4534 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.150716][ T29] audit: type=1400 audit(1768711627.804:759): avc: denied { write } for pid=4538 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.200194][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 60.227903][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 60.264385][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.321: inode has both inline data and extents flags [ 60.291189][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.321: couldn't read orphan inode 15 (err -117) [ 60.304107][ T4547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.350340][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 60.380607][ T4550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 60.411052][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.546666][ T4563] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 60.574207][ T4563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.603410][ T4563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4563 comm=syz.2.328 [ 60.649877][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 60.815394][ T4571] veth3: entered promiscuous mode [ 60.858762][ T4577] set_capacity_and_notify: 11 callbacks suppressed [ 60.858780][ T4577] loop1: detected capacity change from 0 to 512 [ 60.891702][ T4575] loop3: detected capacity change from 0 to 512 [ 60.909393][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.333: inode has both inline data and extents flags [ 60.925776][ T4582] netlink: 48 bytes leftover after parsing attributes in process `syz.5.334'. [ 60.952393][ T4575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.985892][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.333: couldn't read orphan inode 15 (err -117) [ 60.998467][ T4575] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.012436][ T4582] loop5: detected capacity change from 0 to 1024 [ 61.019897][ T4582] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 61.029887][ T4575] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.331: inode #15: comm syz.3.331: iget: illegal inode # [ 61.051128][ T4582] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.062784][ T4577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.089173][ T4575] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.331: couldn't read orphan inode 15 (err -117) [ 61.112875][ T4582] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.334: iget: special inode unallocated [ 61.126187][ T4582] EXT4-fs (loop5): Remounting filesystem read-only [ 61.130581][ T4575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.133476][ T4582] EXT4-fs (loop5): no journal found [ 61.147753][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.150596][ T4582] EXT4-fs (loop5): can't get journal size [ 61.152602][ T4582] EXT4-fs (loop5): filesystem is read-only [ 61.172483][ T4582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.197557][ T4575] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.331: inode #15: comm syz.3.331: iget: illegal inode # [ 61.507690][ T4605] ip6gre0: entered promiscuous mode [ 61.550304][ T4598] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 61.562718][ T4598] team0: Failed to send options change via netlink (err -105) [ 61.570379][ T4598] team0: Port device dummy0 added [ 61.580994][ T4598] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 61.589250][ T4598] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.600410][ T4598] team0: Failed to send options change via netlink (err -105) [ 61.608678][ T4598] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.617687][ T4598] team0: Port device dummy0 removed [ 61.624644][ T4598] dummy0: entered promiscuous mode [ 61.628988][ T4615] netlink: 48 bytes leftover after parsing attributes in process `syz.5.341'. [ 61.630990][ T4598] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.817913][ T4624] loop5: detected capacity change from 0 to 512 [ 61.878381][ T4624] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.341: error while reading EA inode 32 err=-116 [ 61.912773][ T4627] loop2: detected capacity change from 0 to 2048 [ 61.933778][ T4633] loop3: detected capacity change from 0 to 512 [ 61.946596][ T4634] loop1: detected capacity change from 0 to 512 [ 61.989000][ T4624] EXT4-fs (loop5): Remounting filesystem read-only [ 61.996213][ T4633] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.008883][ T4634] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.050935][ T4634] EXT4-fs (loop1): invalid journal inode [ 62.064762][ T4624] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.082691][ T4634] EXT4-fs (loop1): can't get journal size [ 62.093235][ T4634] EXT4-fs (loop1): 1 truncate cleaned up [ 62.123845][ T4624] EXT4-fs (loop5): 1 orphan inode deleted [ 62.263080][ T4656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.349'. [ 62.306807][ T4656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.328672][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.355688][ T4656] bond1: (slave bond0): Enslaving as an active interface with an up link [ 62.379950][ T4663] bond1 (unregistering): (slave bond0): Releasing backup interface [ 62.390076][ T4663] bond1 (unregistering): Released all slaves [ 62.506635][ T4670] loop5: detected capacity change from 0 to 128 [ 62.516753][ T4670] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 62.752259][ T53] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 62.769703][ T4683] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 62.796651][ T4683] bond2: entered promiscuous mode [ 62.801763][ T4683] bond2: entered allmulticast mode [ 62.813124][ T4683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.841107][ T4689] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 62.848835][ T4689] netlink: 224 bytes leftover after parsing attributes in process `syz.1.361'. [ 62.850557][ T4683] erspan1: entered allmulticast mode [ 62.867413][ T4683] bond2: (slave erspan1): making interface the new active one [ 62.876500][ T4683] erspan1: entered promiscuous mode [ 62.884105][ T4693] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 62.891842][ T4693] netlink: 224 bytes leftover after parsing attributes in process `syz.3.362'. [ 62.900830][ T4683] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 62.925981][ T4683] syz.2.358 (4683) used greatest stack depth: 9768 bytes left [ 62.934953][ T4696] tipc: Started in network mode [ 62.939890][ T4696] tipc: Node identity ac14140f, cluster identity 4711 [ 62.985059][ T4696] tipc: New replicast peer: 172.20.20.187 [ 62.991226][ T4696] tipc: Enabled bearer , priority 10 [ 63.005379][ T4708] loop2: detected capacity change from 0 to 128 [ 63.224829][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 63.243752][ T4730] loop3: detected capacity change from 0 to 2048 [ 63.374980][ T4748] netlink: 'syz.3.378': attribute type 3 has an invalid length. [ 63.387192][ T4725] iso9660: Unknown parameter 'mod¶000008000' [ 63.477029][ T4725] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.723275][ T4794] FAULT_INJECTION: forcing a failure. [ 63.723275][ T4794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.737106][ T4794] CPU: 1 UID: 0 PID: 4794 Comm: syz.2.391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.737147][ T4794] Tainted: [W]=WARN [ 63.737153][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.737190][ T4794] Call Trace: [ 63.737196][ T4794] [ 63.737204][ T4794] __dump_stack+0x1d/0x30 [ 63.737235][ T4794] dump_stack_lvl+0x95/0xd0 [ 63.737263][ T4794] dump_stack+0x15/0x1b [ 63.737287][ T4794] should_fail_ex+0x263/0x280 [ 63.737312][ T4794] should_fail+0xb/0x20 [ 63.737402][ T4794] should_fail_usercopy+0x1a/0x20 [ 63.737434][ T4794] _copy_from_iter+0xcf/0xea0 [ 63.737487][ T4794] ? __alloc_skb+0x397/0x4b0 [ 63.737519][ T4794] ? __alloc_skb+0x219/0x4b0 [ 63.737545][ T4794] netlink_sendmsg+0x4ae/0x6f0 [ 63.737773][ T4794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.737794][ T4794] __sock_sendmsg+0x145/0x170 [ 63.737819][ T4794] ____sys_sendmsg+0x31e/0x4a0 [ 63.737859][ T4794] ___sys_sendmsg+0x195/0x1e0 [ 63.738046][ T4794] __x64_sys_sendmsg+0xd4/0x160 [ 63.738087][ T4794] x64_sys_call+0x17ba/0x3000 [ 63.738113][ T4794] do_syscall_64+0xc0/0x2a0 [ 63.738138][ T4794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.738219][ T4794] RIP: 0033:0x7effa806acb9 [ 63.738240][ T4794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.738264][ T4794] RSP: 002b:00007effa6ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.738285][ T4794] RAX: ffffffffffffffda RBX: 00007effa82e5fa0 RCX: 00007effa806acb9 [ 63.738317][ T4794] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 63.738330][ T4794] RBP: 00007effa6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.738343][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.738359][ T4794] R13: 00007effa82e6038 R14: 00007effa82e5fa0 R15: 00007ffd7b5b3e38 [ 63.738382][ T4794] [ 63.993119][ T4799] EXT4-fs: Ignoring removed oldalloc option [ 64.003138][ T4799] EXT4-fs (loop1): 1 truncate cleaned up [ 64.011932][ T4799] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.392: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 64.032992][ T4799] EXT4-fs (loop1): Remounting filesystem read-only [ 64.076596][ T4243] tipc: Node number set to 2886997007 [ 64.578906][ T4856] FAULT_INJECTION: forcing a failure. [ 64.578906][ T4856] name failslab, interval 1, probability 0, space 0, times 0 [ 64.592437][ T4856] CPU: 1 UID: 0 PID: 4856 Comm: syz.2.411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.592479][ T4856] Tainted: [W]=WARN [ 64.592528][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.592544][ T4856] Call Trace: [ 64.592553][ T4856] [ 64.592563][ T4856] __dump_stack+0x1d/0x30 [ 64.592595][ T4856] dump_stack_lvl+0x95/0xd0 [ 64.592623][ T4856] dump_stack+0x15/0x1b [ 64.592650][ T4856] should_fail_ex+0x263/0x280 [ 64.592733][ T4856] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 64.592765][ T4856] should_failslab+0x8c/0xb0 [ 64.592829][ T4856] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 64.592858][ T4856] ? debugfs_alloc_inode+0x34/0x40 [ 64.592902][ T4856] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 64.592927][ T4856] debugfs_alloc_inode+0x34/0x40 [ 64.592950][ T4856] alloc_inode+0x40/0x170 [ 64.592972][ T4856] new_inode+0x1d/0xe0 [ 64.593022][ T4856] __debugfs_create_file+0x97/0x2b0 [ 64.593092][ T4856] debugfs_create_file_full+0x3f/0x60 [ 64.593114][ T4856] ? __pfx_xfrmi_dev_setup+0x10/0x10 [ 64.593142][ T4856] ref_tracker_dir_debugfs+0x10e/0x220 [ 64.593223][ T4856] alloc_netdev_mqs+0x1a7/0xa40 [ 64.593260][ T4856] rtnl_create_link+0x239/0x720 [ 64.593353][ T4856] rtnl_newlink_create+0x174/0x650 [ 64.593381][ T4856] ? security_capable+0x7b/0x90 [ 64.593491][ T4856] ? netlink_ns_capable+0x86/0xa0 [ 64.593524][ T4856] rtnl_newlink+0xf5b/0x1370 [ 64.593557][ T4856] ? skb_network_protocol+0x329/0x420 [ 64.593697][ T4856] ? __rcu_read_unlock+0x4e/0x70 [ 64.593721][ T4856] ? avc_has_perm_noaudit+0xab/0x130 [ 64.593748][ T4856] ? cred_has_capability+0x224/0x290 [ 64.593855][ T4856] ? selinux_capable+0x31/0x40 [ 64.593885][ T4856] ? security_capable+0x7b/0x90 [ 64.593922][ T4856] ? ns_capable+0x7c/0xb0 [ 64.594028][ T4856] ? __pfx_rtnl_newlink+0x10/0x10 [ 64.594067][ T4856] rtnetlink_rcv_msg+0x64b/0x720 [ 64.594096][ T4856] netlink_rcv_skb+0x123/0x220 [ 64.594207][ T4856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.594296][ T4856] rtnetlink_rcv+0x1c/0x30 [ 64.594320][ T4856] netlink_unicast+0x5c0/0x690 [ 64.594361][ T4856] netlink_sendmsg+0x5c8/0x6f0 [ 64.594408][ T4856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.594501][ T4856] __sock_sendmsg+0x145/0x170 [ 64.594528][ T4856] ____sys_sendmsg+0x31e/0x4a0 [ 64.594573][ T4856] ___sys_sendmsg+0x195/0x1e0 [ 64.594644][ T4856] __x64_sys_sendmsg+0xd4/0x160 [ 64.594686][ T4856] x64_sys_call+0x17ba/0x3000 [ 64.594749][ T4856] do_syscall_64+0xc0/0x2a0 [ 64.594821][ T4856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.594848][ T4856] RIP: 0033:0x7effa806acb9 [ 64.594930][ T4856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.594953][ T4856] RSP: 002b:00007effa6ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.594980][ T4856] RAX: ffffffffffffffda RBX: 00007effa82e5fa0 RCX: 00007effa806acb9 [ 64.594997][ T4856] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 64.595011][ T4856] RBP: 00007effa6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.595028][ T4856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.595054][ T4856] R13: 00007effa82e6038 R14: 00007effa82e5fa0 R15: 00007ffd7b5b3e38 [ 64.595077][ T4856] [ 64.920648][ T4856] debugfs: out of free dentries, can not create file 'netdev@ffff88811adaf558' [ 64.994879][ T4863] EXT4-fs: Ignoring removed bh option [ 65.123602][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 65.123622][ T29] audit: type=1400 audit(1768711632.774:813): avc: denied { ioctl } for pid=4862 comm="syz.2.414" path="/90/file1/file1" dev="loop2" ino=15 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.173367][ T4863] raw_sendmsg: syz.2.414 forgot to set AF_INET. Fix it! [ 65.241600][ T29] audit: type=1400 audit(1768711632.894:814): avc: denied { setopt } for pid=4862 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.717189][ T29] audit: type=1326 audit(1768711633.334:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.741820][ T29] audit: type=1326 audit(1768711633.334:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.831754][ T29] audit: type=1326 audit(1768711633.374:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.857115][ T29] audit: type=1326 audit(1768711633.374:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.880409][ T29] audit: type=1326 audit(1768711633.374:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.884116][ T4890] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.419: error while reading EA inode 32 err=-116 [ 65.907877][ T29] audit: type=1326 audit(1768711633.374:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.942013][ T29] audit: type=1326 audit(1768711633.374:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.967389][ T29] audit: type=1326 audit(1768711633.374:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 65.991392][ T4890] EXT4-fs (loop3): Remounting filesystem read-only [ 65.999936][ T4890] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 66.010186][ T4890] EXT4-fs (loop3): 1 orphan inode deleted [ 66.011533][ T4881] set_capacity_and_notify: 6 callbacks suppressed [ 66.011685][ T4881] loop2: detected capacity change from 0 to 1024 [ 66.112287][ T4877] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.417'. [ 66.219053][ T4877] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.417'. [ 66.427711][ T4906] SELinux: failed to load policy [ 66.529745][ T4914] loop3: detected capacity change from 0 to 128 [ 66.542103][ T4914] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.865703][ T1633] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.950286][ T4925] loop3: detected capacity change from 0 to 128 [ 66.970974][ T4925] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.000116][ T4925] ext2 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.160210][ T4940] loop1: detected capacity change from 0 to 512 [ 67.185585][ T4940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.196010][ T4940] EXT4-fs: dax option not supported [ 67.207772][ T4944] loop5: detected capacity change from 0 to 128 [ 67.222233][ T4944] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 67.391091][ T4957] loop3: detected capacity change from 0 to 1024 [ 67.405178][ T4959] loop2: detected capacity change from 0 to 128 [ 67.409642][ T4957] EXT4-fs: Ignoring removed nobh option [ 67.426939][ T4959] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 67.444935][ T4957] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.464796][ T4961] loop0: detected capacity change from 0 to 1024 [ 67.476216][ T4959] ext2 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.486306][ T4957] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.441: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 67.514945][ T4961] EXT4-fs: Ignoring removed nobh option [ 67.524178][ T4957] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.441: couldn't read orphan inode 11 (err -117) [ 67.545941][ T4961] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.572290][ T4957] FAULT_INJECTION: forcing a failure. [ 67.572290][ T4957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.586173][ T4957] CPU: 1 UID: 0 PID: 4957 Comm: syz.3.441 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.586264][ T4957] Tainted: [W]=WARN [ 67.586272][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.586285][ T4957] Call Trace: [ 67.586298][ T4957] [ 67.586306][ T4957] __dump_stack+0x1d/0x30 [ 67.586332][ T4957] dump_stack_lvl+0x95/0xd0 [ 67.586355][ T4957] dump_stack+0x15/0x1b [ 67.586382][ T4957] should_fail_ex+0x263/0x280 [ 67.586408][ T4957] should_fail+0xb/0x20 [ 67.586429][ T4957] should_fail_usercopy+0x1a/0x20 [ 67.586456][ T4957] _copy_to_user+0x20/0xa0 [ 67.586512][ T4957] simple_read_from_buffer+0xb5/0x130 [ 67.586601][ T4957] proc_fail_nth_read+0x10e/0x150 [ 67.586712][ T4957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.586788][ T4957] vfs_read+0x1ab/0x7f0 [ 67.586821][ T4957] ? __rcu_read_unlock+0x4e/0x70 [ 67.586842][ T4957] ? __fget_files+0x184/0x1c0 [ 67.586865][ T4957] ? mutex_lock+0x57/0x90 [ 67.586895][ T4957] ksys_read+0xdc/0x1a0 [ 67.587017][ T4957] __x64_sys_read+0x40/0x50 [ 67.587036][ T4957] x64_sys_call+0x2889/0x3000 [ 67.587062][ T4957] do_syscall_64+0xc0/0x2a0 [ 67.587085][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.587180][ T4957] RIP: 0033:0x7f046e91b58e [ 67.587196][ T4957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.587215][ T4957] RSP: 002b:00007f046d3b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.587257][ T4957] RAX: ffffffffffffffda RBX: 00007f046d3b76c0 RCX: 00007f046e91b58e [ 67.587271][ T4957] RDX: 000000000000000f RSI: 00007f046d3b70a0 RDI: 0000000000000005 [ 67.587284][ T4957] RBP: 00007f046d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.587297][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.587315][ T4957] R13: 00007f046ebd6038 R14: 00007f046ebd5fa0 R15: 00007fff73f49f38 [ 67.587336][ T4957] [ 67.829023][ T4961] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 67.864048][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 67.951363][ T4961] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.443: couldn't read orphan inode 11 (err -117) [ 68.014272][ T4978] FAULT_INJECTION: forcing a failure. [ 68.014272][ T4978] name failslab, interval 1, probability 0, space 0, times 0 [ 68.027781][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.1.448 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.027889][ T4978] Tainted: [W]=WARN [ 68.027897][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.027912][ T4978] Call Trace: [ 68.027919][ T4978] [ 68.027928][ T4978] __dump_stack+0x1d/0x30 [ 68.028045][ T4978] dump_stack_lvl+0x95/0xd0 [ 68.028073][ T4978] dump_stack+0x15/0x1b [ 68.028095][ T4978] should_fail_ex+0x263/0x280 [ 68.028200][ T4978] should_failslab+0x8c/0xb0 [ 68.028240][ T4978] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 68.028271][ T4978] ? __get_vm_area_node+0x106/0x1d0 [ 68.028295][ T4978] __get_vm_area_node+0x106/0x1d0 [ 68.028327][ T4978] __vmalloc_node_range_noprof+0x291/0x12b0 [ 68.028419][ T4978] ? bpf_check+0xe6/0xc890 [ 68.028461][ T4978] ? css_rstat_updated+0xbb/0x280 [ 68.028504][ T4978] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 68.028530][ T4978] ? __rcu_read_unlock+0x4e/0x70 [ 68.028553][ T4978] ? lruvec_stat_mod_folio+0xd2/0x110 [ 68.028637][ T4978] ? ___kmalloc_large_node+0x7f/0xe0 [ 68.028665][ T4978] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 68.028710][ T4978] ? bpf_check+0xe6/0xc890 [ 68.028793][ T4978] vzalloc_noprof+0x82/0xb0 [ 68.028817][ T4978] ? bpf_check+0xe6/0xc890 [ 68.028846][ T4978] bpf_check+0xe6/0xc890 [ 68.028923][ T4978] ? __memcg_kmem_charge_page+0xd0/0x170 [ 68.028959][ T4978] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 68.029034][ T4978] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 68.029066][ T4978] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 68.029099][ T4978] ? pcpu_block_update+0x24e/0x3b0 [ 68.029134][ T4978] ? _find_next_zero_bit+0x64/0xa0 [ 68.029173][ T4978] ? pcpu_block_refresh_hint+0x157/0x170 [ 68.029231][ T4978] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 68.029271][ T4978] ? css_rstat_updated+0xbb/0x280 [ 68.029314][ T4978] ? mod_memcg_state+0x182/0x260 [ 68.029389][ T4978] ? __rcu_read_unlock+0x4e/0x70 [ 68.029413][ T4978] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 68.029450][ T4978] ? pcpu_alloc_noprof+0xd18/0x1210 [ 68.029513][ T4978] ? should_fail_ex+0xd9/0x280 [ 68.029598][ T4978] ? __kmalloc_noprof+0x2a3/0x580 [ 68.029624][ T4978] ? security_bpf_prog_load+0x60/0x140 [ 68.029711][ T4978] ? selinux_bpf_prog_load+0xac/0xd0 [ 68.029749][ T4978] ? security_bpf_prog_load+0x9e/0x140 [ 68.029932][ T4978] bpf_prog_load+0xf76/0x1140 [ 68.029969][ T4978] ? security_bpf+0x2b/0x90 [ 68.030004][ T4978] __sys_bpf+0x469/0x7b0 [ 68.030036][ T4978] __x64_sys_bpf+0x41/0x50 [ 68.030109][ T4978] x64_sys_call+0x28e1/0x3000 [ 68.030141][ T4978] do_syscall_64+0xc0/0x2a0 [ 68.030169][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.030197][ T4978] RIP: 0033:0x7f761d61acb9 [ 68.030290][ T4978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.030314][ T4978] RSP: 002b:00007f761c077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.030339][ T4978] RAX: ffffffffffffffda RBX: 00007f761d895fa0 RCX: 00007f761d61acb9 [ 68.030356][ T4978] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 68.030372][ T4978] RBP: 00007f761c077090 R08: 0000000000000000 R09: 0000000000000000 [ 68.030388][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.030432][ T4978] R13: 00007f761d896038 R14: 00007f761d895fa0 R15: 00007fff7bada768 [ 68.030457][ T4978] [ 68.030766][ T4978] syz.1.448: vmalloc error: size 2112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 68.391994][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.1.448 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.392049][ T4978] Tainted: [W]=WARN [ 68.392061][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.392150][ T4978] Call Trace: [ 68.392160][ T4978] [ 68.392170][ T4978] __dump_stack+0x1d/0x30 [ 68.392214][ T4978] dump_stack_lvl+0x95/0xd0 [ 68.392233][ T4978] dump_stack+0x15/0x1b [ 68.392251][ T4978] warn_alloc+0x145/0x1c0 [ 68.392342][ T4978] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 68.392365][ T4978] ? css_rstat_updated+0xbb/0x280 [ 68.392398][ T4978] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 68.392484][ T4978] ? __rcu_read_unlock+0x4e/0x70 [ 68.392501][ T4978] ? lruvec_stat_mod_folio+0xd2/0x110 [ 68.392592][ T4978] ? ___kmalloc_large_node+0x7f/0xe0 [ 68.392612][ T4978] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 68.392650][ T4978] ? bpf_check+0xe6/0xc890 [ 68.392741][ T4978] vzalloc_noprof+0x82/0xb0 [ 68.392762][ T4978] ? bpf_check+0xe6/0xc890 [ 68.392787][ T4978] bpf_check+0xe6/0xc890 [ 68.392820][ T4978] ? __memcg_kmem_charge_page+0xd0/0x170 [ 68.392859][ T4978] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 68.392886][ T4978] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 68.392908][ T4978] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 68.392930][ T4978] ? pcpu_block_update+0x24e/0x3b0 [ 68.393022][ T4978] ? _find_next_zero_bit+0x64/0xa0 [ 68.393150][ T4978] ? pcpu_block_refresh_hint+0x157/0x170 [ 68.393177][ T4978] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 68.393257][ T4978] ? css_rstat_updated+0xbb/0x280 [ 68.393297][ T4978] ? mod_memcg_state+0x182/0x260 [ 68.393317][ T4978] ? __rcu_read_unlock+0x4e/0x70 [ 68.393387][ T4978] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 68.393414][ T4978] ? pcpu_alloc_noprof+0xd18/0x1210 [ 68.393436][ T4978] ? should_fail_ex+0xd9/0x280 [ 68.393500][ T4978] ? __kmalloc_noprof+0x2a3/0x580 [ 68.393519][ T4978] ? security_bpf_prog_load+0x60/0x140 [ 68.393546][ T4978] ? selinux_bpf_prog_load+0xac/0xd0 [ 68.393573][ T4978] ? security_bpf_prog_load+0x9e/0x140 [ 68.393599][ T4978] bpf_prog_load+0xf76/0x1140 [ 68.393632][ T4978] ? security_bpf+0x2b/0x90 [ 68.393661][ T4978] __sys_bpf+0x469/0x7b0 [ 68.393714][ T4978] __x64_sys_bpf+0x41/0x50 [ 68.393741][ T4978] x64_sys_call+0x28e1/0x3000 [ 68.393815][ T4978] do_syscall_64+0xc0/0x2a0 [ 68.393844][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.393885][ T4978] RIP: 0033:0x7f761d61acb9 [ 68.393899][ T4978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.393914][ T4978] RSP: 002b:00007f761c077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.393933][ T4978] RAX: ffffffffffffffda RBX: 00007f761d895fa0 RCX: 00007f761d61acb9 [ 68.393945][ T4978] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 68.393972][ T4978] RBP: 00007f761c077090 R08: 0000000000000000 R09: 0000000000000000 [ 68.393984][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.393994][ T4978] R13: 00007f761d896038 R14: 00007f761d895fa0 R15: 00007fff7bada768 [ 68.394012][ T4978] [ 68.705070][ T4978] Mem-Info: [ 68.708214][ T4978] active_anon:9619 inactive_anon:6 isolated_anon:0 [ 68.708214][ T4978] active_file:9289 inactive_file:2327 isolated_file:0 [ 68.708214][ T4978] unevictable:0 dirty:287 writeback:2 [ 68.708214][ T4978] slab_reclaimable:3255 slab_unreclaimable:15224 [ 68.708214][ T4978] mapped:29445 shmem:411 pagetables:1248 [ 68.708214][ T4978] sec_pagetables:0 bounce:0 [ 68.708214][ T4978] kernel_misc_reclaimable:0 [ 68.708214][ T4978] free:1899770 free_pcp:3016 free_cma:0 [ 68.753907][ T4978] Node 0 active_anon:35344kB inactive_anon:24kB active_file:37156kB inactive_file:9308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117780kB dirty:1148kB writeback:8kB shmem:1644kB kernel_stack:3792kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 68.781397][ T4978] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.811193][ T4978] lowmem_reserve[]: 0 2879 7858 7858 [ 68.817367][ T4978] Node 0 DMA32 free:2945360kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948988kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 68.849421][ T4978] lowmem_reserve[]: 0 0 4978 4978 [ 68.854653][ T4978] Node 0 Normal free:4638360kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35344kB inactive_anon:24kB active_file:37156kB inactive_file:9308kB unevictable:0kB writepending:1156kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:11752kB local_pcp:1808kB free_cma:0kB [ 68.888379][ T4978] lowmem_reserve[]: 0 0 0 0 [ 68.892927][ T4978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.905906][ T4978] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945360kB [ 68.923389][ T4978] Node 0 Normal: 1018*4kB (UME) 710*8kB (UME) 201*16kB (UME) 189*32kB (UME) 168*64kB (UME) 142*128kB (UME) 109*256kB (UM) 77*512kB (UME) 57*1024kB (UM) 40*2048kB (UME) 1070*4096kB (UM) = 4638280kB [ 68.943454][ T4978] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 68.953468][ T4978] 11998 total pagecache pages [ 68.958218][ T4978] 8 pages in swap cache [ 68.962461][ T4978] Free swap = 124972kB [ 68.966672][ T4978] Total swap = 124996kB [ 68.970838][ T4978] 2097051 pages RAM [ 68.975241][ T4978] 0 pages HighMem/MovableOnly [ 68.979914][ T4978] 81404 pages reserved [ 68.986990][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.271264][ T4997] loop0: detected capacity change from 0 to 128 [ 69.282221][ T4992] ipvlan1: entered promiscuous mode [ 69.289474][ T4992] ipvlan1: entered allmulticast mode [ 69.294852][ T4992] veth0_vlan: entered allmulticast mode [ 69.324475][ T4992] loop1: detected capacity change from 0 to 1024 [ 69.330506][ T4997] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 69.336181][ T4992] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 69.352090][ T4992] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 69.385631][ T4997] ext2 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.501733][ T4992] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.514400][ T4992] EXT4-fs (loop1): invalid journal inode [ 69.868738][ T5005] ext4: Bad value for 'init_itable' [ 70.984087][ T5014] netlink: 'syz.2.459': attribute type 3 has an invalid length. [ 71.004722][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 71.004741][ T29] audit: type=1400 audit(1768711638.634:904): avc: denied { read } for pid=5013 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.062385][ T3318] EXT4-fs unmount: 25 callbacks suppressed [ 71.062405][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.093395][ T29] audit: type=1400 audit(1768711638.744:905): avc: denied { remount } for pid=4991 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.368297][ T5022] set_capacity_and_notify: 1 callbacks suppressed [ 71.368317][ T5022] loop2: detected capacity change from 0 to 8192 [ 71.406094][ T5022] syz.2.461: attempt to access beyond end of device [ 71.406094][ T5022] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 71.421365][ T5022] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 71.429285][ T5022] FAT-fs (loop2): Filesystem has been set read-only [ 71.436875][ T5022] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 71.445772][ T5022] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 71.488365][ T5024] loop1: detected capacity change from 0 to 512 [ 71.515968][ T5024] EXT4-fs: inline encryption not supported [ 71.544807][ T5024] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 71.553143][ T5024] EXT4-fs (loop1): blocks per group (32) and clusters per group (8192) inconsistent [ 71.628049][ T29] audit: type=1326 audit(1768711639.264:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.652121][ T29] audit: type=1326 audit(1768711639.264:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.677471][ T29] audit: type=1326 audit(1768711639.264:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.700764][ T29] audit: type=1326 audit(1768711639.264:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.726138][ T29] audit: type=1326 audit(1768711639.264:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.740025][ T5035] loop0: detected capacity change from 0 to 512 [ 71.749686][ T29] audit: type=1326 audit(1768711639.264:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa806acb9 code=0x7ffc0000 [ 71.830197][ T5041] loop3: detected capacity change from 0 to 128 [ 71.849033][ T5041] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 71.875314][ T5041] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.903750][ T5035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.934032][ T5041] ext2 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.975279][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.978964][ T29] audit: type=1400 audit(1768711639.634:912): avc: denied { watch watch_reads } for pid=5044 comm="syz.1.468" path="/103" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.065684][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.146913][ T5053] SELinux: failed to load policy [ 72.336982][ T5068] loop5: detected capacity change from 0 to 512 [ 72.351028][ T5068] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.478: inode has both inline data and extents flags [ 72.381747][ T5068] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.478: couldn't read orphan inode 15 (err -117) [ 72.398212][ T5068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.399668][ T5075] netlink: zone id is out of range [ 72.420657][ T5075] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 72.453279][ T5077] loop1: detected capacity change from 0 to 1024 [ 72.462126][ T5077] EXT4-fs: Ignoring removed bh option [ 72.483754][ T5077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.509021][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.533319][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.583751][ T5083] loop5: detected capacity change from 0 to 512 [ 72.620530][ T5087] loop0: detected capacity change from 0 to 512 [ 72.627666][ T5083] ext4: Unknown parameter 'uid<00000000000000000000' [ 72.637775][ T5087] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.656802][ T5083] 9p: Bad value for 'rfdno' [ 72.657732][ T29] audit: type=1400 audit(1768711640.314:913): avc: denied { write } for pid=5082 comm="syz.5.482" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.183396][ T5106] netlink: 108 bytes leftover after parsing attributes in process `syz.2.488'. [ 73.404242][ T5120] bond1 (unregistering): Released all slaves [ 73.425809][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 73.465334][ T5123] loop2: detected capacity change from 0 to 512 [ 73.488359][ T5123] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.492: inode has both inline data and extents flags [ 73.506143][ T5123] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.492: couldn't read orphan inode 15 (err -117) [ 73.624997][ T5123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.662010][ T5126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.493'. [ 73.689183][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.701773][ T5131] netlink: 'syz.5.494': attribute type 21 has an invalid length. [ 73.709758][ T5131] netlink: 132 bytes leftover after parsing attributes in process `syz.5.494'. [ 73.720774][ T5131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.494'. [ 73.815709][ T5139] FAULT_INJECTION: forcing a failure. [ 73.815709][ T5139] name failslab, interval 1, probability 0, space 0, times 0 [ 73.829178][ T5139] CPU: 1 UID: 0 PID: 5139 Comm: syz.2.496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.829215][ T5139] Tainted: [W]=WARN [ 73.829222][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.829234][ T5139] Call Trace: [ 73.829299][ T5139] [ 73.829308][ T5139] __dump_stack+0x1d/0x30 [ 73.829339][ T5139] dump_stack_lvl+0x95/0xd0 [ 73.829418][ T5139] dump_stack+0x15/0x1b [ 73.829444][ T5139] should_fail_ex+0x263/0x280 [ 73.829527][ T5139] should_failslab+0x8c/0xb0 [ 73.829549][ T5139] __kmalloc_noprof+0xb8/0x580 [ 73.829642][ T5139] ? security_task_alloc+0x4d/0x110 [ 73.829671][ T5139] ? mutex_init_generic+0x4c/0x60 [ 73.829727][ T5139] security_task_alloc+0x4d/0x110 [ 73.829763][ T5139] copy_process+0xbb4/0x1f10 [ 73.829858][ T5139] kernel_clone+0x16b/0x5b0 [ 73.829885][ T5139] ? vfs_write+0x86e/0x9f0 [ 73.829910][ T5139] __x64_sys_clone+0x143/0x180 [ 73.829945][ T5139] x64_sys_call+0x12d0/0x3000 [ 73.830023][ T5139] do_syscall_64+0xc0/0x2a0 [ 73.830052][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.830079][ T5139] RIP: 0033:0x7effa806acb9 [ 73.830110][ T5139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.830133][ T5139] RSP: 002b:00007effa6a40fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 73.830157][ T5139] RAX: ffffffffffffffda RBX: 00007effa82e6090 RCX: 00007effa806acb9 [ 73.830175][ T5139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 73.830191][ T5139] RBP: 00007effa6a41090 R08: 0000000000000000 R09: 0000000000000000 [ 73.830215][ T5139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 73.830231][ T5139] R13: 00007effa82e6128 R14: 00007effa82e6090 R15: 00007ffd7b5b3e38 [ 73.830255][ T5139] [ 74.286581][ T5153] loop3: detected capacity change from 0 to 1024 [ 74.347744][ T5153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.379799][ T5162] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.469088][ T4983] Process accounting resumed [ 74.496945][ T5153] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.546899][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 74.557847][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 74.586485][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 74.595348][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 74.650826][ T5165] ip6gre1: entered promiscuous mode [ 74.696638][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.827130][ T5177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5177 comm=syz.0.510 [ 74.980576][ T5184] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 75.048621][ T5184] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.514: bg 0: block 255: padding at end of block bitmap is not set [ 75.074213][ T5184] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 75.090063][ T5184] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.514: invalid indirect mapped block 1 (level 1) [ 75.115273][ T5190] netlink: 'syz.2.515': attribute type 83 has an invalid length. [ 75.123469][ T5184] EXT4-fs (loop5): 1 truncate cleaned up [ 75.132112][ T5190] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.134405][ T5195] FAULT_INJECTION: forcing a failure. [ 75.134405][ T5195] name failslab, interval 1, probability 0, space 0, times 0 [ 75.154557][ T5184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.167091][ T5195] CPU: 1 UID: 0 PID: 5195 Comm: syz.3.516 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.167124][ T5195] Tainted: [W]=WARN [ 75.167132][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.167192][ T5195] Call Trace: [ 75.167199][ T5195] [ 75.167208][ T5195] __dump_stack+0x1d/0x30 [ 75.167285][ T5195] dump_stack_lvl+0x95/0xd0 [ 75.167307][ T5195] dump_stack+0x15/0x1b [ 75.167327][ T5195] should_fail_ex+0x263/0x280 [ 75.167353][ T5195] should_failslab+0x8c/0xb0 [ 75.167382][ T5195] kmem_cache_alloc_noprof+0x68/0x490 [ 75.167466][ T5195] ? __anon_vma_prepare+0x70/0x2f0 [ 75.167492][ T5195] ? _raw_spin_lock+0x52/0xa0 [ 75.167518][ T5195] __anon_vma_prepare+0x70/0x2f0 [ 75.167597][ T5195] handle_mm_fault+0x2163/0x3030 [ 75.167630][ T5195] ? mt_find+0x291/0x3b0 [ 75.167658][ T5195] do_user_addr_fault+0x3fd/0x1050 [ 75.167691][ T5195] exc_page_fault+0x62/0xa0 [ 75.167734][ T5195] asm_exc_page_fault+0x26/0x30 [ 75.167755][ T5195] RIP: 0010:__put_user_4+0xd/0x20 [ 75.167790][ T5195] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 9f 01 00 90 90 90 90 90 90 90 90 90 90 [ 75.167808][ T5195] RSP: 0018:ffffc9000d473e90 EFLAGS: 00050206 [ 75.167825][ T5195] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 75.167908][ T5195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 75.167980][ T5195] RBP: 0000000000000000 R08: 0001ffff86a5e413 R09: 0000000000000000 [ 75.167993][ T5195] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.168070][ T5195] R13: ffffffff86a5e410 R14: 0000000000000000 R15: 0000000000000000 [ 75.168089][ T5195] __se_sys_getresuid+0xb8/0x130 [ 75.168125][ T5195] __x64_sys_getresuid+0x43/0x50 [ 75.168153][ T5195] x64_sys_call+0x2894/0x3000 [ 75.168186][ T5195] do_syscall_64+0xc0/0x2a0 [ 75.168208][ T5195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.168230][ T5195] RIP: 0033:0x7f046e95acb9 [ 75.168245][ T5195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.168292][ T5195] RSP: 002b:00007f046d3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 75.168379][ T5195] RAX: ffffffffffffffda RBX: 00007f046ebd5fa0 RCX: 00007f046e95acb9 [ 75.168393][ T5195] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 75.168431][ T5195] RBP: 00007f046d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.168444][ T5195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.168519][ T5195] R13: 00007f046ebd6038 R14: 00007f046ebd5fa0 R15: 00007fff73f49f38 [ 75.168539][ T5195] [ 75.192113][ T5190] SELinux: failed to load policy [ 75.468879][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.539781][ T910] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 75.548643][ T5200] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.669148][ T5214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.698536][ T5214] EXT4-fs (loop2): 1 truncate cleaned up [ 75.721858][ T5214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.775411][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.019234][ T5248] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.316497][ T3509] IPVS: starting estimator thread 0... [ 76.351252][ T5271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 76.394744][ T5271] System zones: 1-12 [ 76.404578][ T5275] IPVS: using max 2208 ests per chain, 110400 per kthread [ 76.412439][ T5271] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.533: invalid block [ 76.425748][ T5271] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.533: invalid indirect mapped block 1819239214 (level 1) [ 76.441068][ T5271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.533: bg 0: block 361: padding at end of block bitmap is not set [ 76.458103][ T5271] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 76.482656][ T4893] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.482628][ T5271] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.533: attempt to clear invalid blocks 33619980 len 1 [ 76.506543][ T5271] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.533: invalid indirect mapped block 1819239214 (level 0) [ 76.521748][ T5271] EXT4-fs (loop3): 1 truncate cleaned up [ 76.528282][ T5271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.546038][ T5271] netlink: 72 bytes leftover after parsing attributes in process `syz.3.533'. [ 76.615876][ T5296] set_capacity_and_notify: 7 callbacks suppressed [ 76.615978][ T5296] loop2: detected capacity change from 0 to 512 [ 76.641537][ T5296] EXT4-fs: Ignoring removed nobh option [ 76.654807][ T5296] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.666992][ T5296] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.536: ea_inode file size=4 entry size=6 [ 76.828788][ T5296] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.866468][ T5340] FAULT_INJECTION: forcing a failure. [ 76.866468][ T5340] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.867316][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.879845][ T5340] CPU: 1 UID: 0 PID: 5340 Comm: syz.0.538 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.879882][ T5340] Tainted: [W]=WARN [ 76.879890][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.879902][ T5340] Call Trace: [ 76.879911][ T5340] [ 76.879921][ T5340] __dump_stack+0x1d/0x30 [ 76.880001][ T5340] dump_stack_lvl+0x95/0xd0 [ 76.880114][ T5340] dump_stack+0x15/0x1b [ 76.880139][ T5340] should_fail_ex+0x263/0x280 [ 76.880165][ T5340] should_fail_alloc_page+0xf2/0x100 [ 76.880190][ T5340] __alloc_frozen_pages_noprof+0x108/0x350 [ 76.880258][ T5340] alloc_pages_mpol+0xb3/0x260 [ 76.880298][ T5340] alloc_pages_noprof+0x8f/0x130 [ 76.880334][ T5340] pte_alloc_one+0x1e/0xd0 [ 76.880410][ T5340] __do_fault+0x7b/0x200 [ 76.880445][ T5340] handle_mm_fault+0xfa1/0x3030 [ 76.880557][ T5340] ? mt_find+0x291/0x3b0 [ 76.880591][ T5340] do_user_addr_fault+0x3fd/0x1050 [ 76.880722][ T5340] exc_page_fault+0x62/0xa0 [ 76.880839][ T5340] asm_exc_page_fault+0x26/0x30 [ 76.880964][ T5340] RIP: 0010:__put_user_4+0xd/0x20 [ 76.881038][ T5340] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 9f 01 00 90 90 90 90 90 90 90 90 90 90 [ 76.881094][ T5340] RSP: 0018:ffffc9000f5b3c58 EFLAGS: 00050206 [ 76.881148][ T5340] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 76.881272][ T5340] RDX: 0000000000000234 RSI: 0000000000000000 RDI: ffffc9000f5b3c60 [ 76.881315][ T5340] RBP: 0000000000005411 R08: 0001c9000f5b3c63 R09: 0000000000000000 [ 76.881359][ T5340] R10: 000000000000894b R11: 0000000000000000 R12: ffffffff86e8b5a8 [ 76.881429][ T5340] R13: ffffffff85e01448 R14: ffff88810492af80 R15: 0000000000000000 [ 76.881492][ T5340] sk_ioctl+0x261/0x3c0 [ 76.881571][ T5340] inet_ioctl+0x32b/0x3a0 [ 76.881692][ T5340] sock_do_ioctl+0x73/0x230 [ 76.881761][ T5340] sock_ioctl+0x41b/0x610 [ 76.881887][ T5340] ? mutex_lock+0x57/0x90 [ 76.881981][ T5340] ? __pfx_sock_ioctl+0x10/0x10 [ 76.882119][ T5340] __se_sys_ioctl+0xce/0x140 [ 76.882239][ T5340] __x64_sys_ioctl+0x43/0x50 [ 76.882344][ T5340] x64_sys_call+0x14b0/0x3000 [ 76.882504][ T5340] do_syscall_64+0xc0/0x2a0 [ 76.882577][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.882658][ T5340] RIP: 0033:0x7fc8e394acb9 [ 76.882712][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.882800][ T5340] RSP: 002b:00007fc8e23a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.882866][ T5340] RAX: ffffffffffffffda RBX: 00007fc8e3bc5fa0 RCX: 00007fc8e394acb9 [ 76.882909][ T5340] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 76.882943][ T5340] RBP: 00007fc8e23a7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.882985][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.883036][ T5340] R13: 00007fc8e3bc6038 R14: 00007fc8e3bc5fa0 R15: 00007ffccfc87ae8 [ 76.883169][ T5340] [ 77.036466][ T5296] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.536: corrupted inode contents [ 77.222963][ T5343] loop1: detected capacity change from 0 to 512 [ 77.245874][ T5343] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.258783][ T5296] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.536: mark_inode_dirty error [ 77.275686][ T5296] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.536: corrupted inode contents [ 77.337635][ T5296] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.536: mark_inode_dirty error [ 77.340890][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 77.340934][ T29] audit: type=1400 audit(1768711644.994:932): avc: denied { create } for pid=5345 comm="syz.5.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.385158][ T29] audit: type=1400 audit(1768711645.014:933): avc: denied { connect } for pid=5345 comm="syz.5.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.408245][ T5296] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.536: mark inode dirty (error -117) [ 77.449509][ T5296] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 77.458857][ T5296] EXT4-fs (loop2): 1 orphan inode deleted [ 77.467231][ T5296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.502503][ T5344] loop0: detected capacity change from 0 to 164 [ 77.534530][ T5351] netlink: zone id is out of range [ 77.539720][ T5351] netlink: zone id is out of range [ 77.545569][ T5351] netlink: get zone limit has 4 unknown bytes [ 77.557570][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.625441][ T29] audit: type=1400 audit(1768711645.284:934): avc: denied { connect } for pid=5347 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.669502][ T29] audit: type=1400 audit(1768711645.324:935): avc: denied { bind } for pid=5349 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.690852][ T29] audit: type=1400 audit(1768711645.324:936): avc: denied { write } for pid=5349 comm="syz.1.542" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.715949][ T29] audit: type=1400 audit(1768711645.324:937): avc: denied { ioctl } for pid=5349 comm="syz.1.542" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.857444][ T29] audit: type=1400 audit(1768711645.354:938): avc: denied { read } for pid=5347 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.086095][ T5364] loop1: detected capacity change from 0 to 128 [ 78.093071][ T5364] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.600780][ T5381] __nla_validate_parse: 3 callbacks suppressed [ 78.600799][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 78.686165][ T5383] loop2: detected capacity change from 0 to 512 [ 78.700489][ T910] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.707275][ T5383] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.737255][ T5384] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 78.961878][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 78.975799][ T5395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.557'. [ 78.986517][ T5395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.557'. [ 79.061316][ T5399] loop2: detected capacity change from 0 to 512 [ 79.081039][ T5399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 79.090091][ T5399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 79.168253][ T29] audit: type=1400 audit(1768711646.824:939): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.291476][ T5408] netlink: 'syz.2.560': attribute type 15 has an invalid length. [ 79.756043][ T29] audit: type=1400 audit(1768711647.414:940): avc: denied { cpu } for pid=5416 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.935797][ T5425] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 79.943728][ T5425] netlink: 224 bytes leftover after parsing attributes in process `syz.1.567'. [ 80.011177][ T5427] loop5: detected capacity change from 0 to 764 [ 80.056604][ T29] audit: type=1326 audit(1768711647.704:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.5.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59689bacb9 code=0x7ffc0000 [ 80.132874][ T5429] loop5: detected capacity change from 0 to 512 [ 80.206115][ T5429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.247061][ T5433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.569'. [ 80.350725][ T5429] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.378148][ T5433] netlink: 'syz.1.569': attribute type 21 has an invalid length. [ 80.386726][ T5433] netlink: 100 bytes leftover after parsing attributes in process `syz.1.569'. [ 80.446236][ T5433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.569'. [ 80.470048][ T5440] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 80.472633][ T5440] xt_hashlimit: size too large, truncated to 1048576 [ 80.474863][ T5439] loop3: detected capacity change from 0 to 1024 [ 80.475316][ T5439] EXT4-fs: Ignoring removed bh option [ 80.496245][ T5439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.498096][ T5439] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 80.715995][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.758628][ T5452] netlink: 'syz.1.573': attribute type 39 has an invalid length. [ 80.783079][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.957521][ T5461] loop1: detected capacity change from 0 to 512 [ 81.072268][ T5461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.072383][ T5461] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.133295][ T5470] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 81.163922][ T5471] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.189021][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.224754][ T5472] ip6gre0: left promiscuous mode [ 81.325203][ T5480] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.583: bad orphan inode 134217728 [ 81.355117][ T5480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.581627][ T5486] ================================================================== [ 81.589786][ T5486] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 81.597909][ T5486] [ 81.600300][ T5486] write to 0xffff88811eab25e8 of 8 bytes by task 5480 on cpu 0: [ 81.607970][ T5486] filemap_splice_read+0x523/0x780 [ 81.613137][ T5486] ext4_file_splice_read+0x8f/0xb0 [ 81.618298][ T5486] splice_direct_to_actor+0x26e/0x670 [ 81.623718][ T5486] do_splice_direct+0x119/0x1a0 [ 81.628603][ T5486] do_sendfile+0x380/0x650 [ 81.633063][ T5486] __x64_sys_sendfile64+0x105/0x150 [ 81.638302][ T5486] x64_sys_call+0x2db1/0x3000 [ 81.643047][ T5486] do_syscall_64+0xc0/0x2a0 [ 81.647585][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.653511][ T5486] [ 81.655866][ T5486] write to 0xffff88811eab25e8 of 8 bytes by task 5486 on cpu 1: [ 81.663535][ T5486] filemap_splice_read+0x523/0x780 [ 81.668704][ T5486] ext4_file_splice_read+0x8f/0xb0 [ 81.673879][ T5486] splice_direct_to_actor+0x26e/0x670 [ 81.679319][ T5486] do_splice_direct+0x119/0x1a0 [ 81.684210][ T5486] do_sendfile+0x380/0x650 [ 81.688700][ T5486] __x64_sys_sendfile64+0x105/0x150 [ 81.693965][ T5486] x64_sys_call+0x2db1/0x3000 [ 81.698716][ T5486] do_syscall_64+0xc0/0x2a0 [ 81.703245][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.709191][ T5486] [ 81.711543][ T5486] value changed: 0x00000000000001c8 -> 0x00000000000001c9 [ 81.718721][ T5486] [ 81.721071][ T5486] Reported by Kernel Concurrency Sanitizer on: [ 81.727252][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.1.583 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.738493][ T5486] Tainted: [W]=WARN [ 81.742324][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.752401][ T5486] ================================================================== [ 82.176189][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.