last executing test programs: 1.794255955s ago: executing program 3 (id=623): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0xee01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00') close(r4) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x240088a4) 1.37126099s ago: executing program 3 (id=633): socketpair(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x80, 0xa, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x9, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r0 = getpgrp(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r2 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000018c0), 0x0, 0x0, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket(0x29, 0x800, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000000300), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) flock(0xffffffffffffffff, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.308930334s ago: executing program 3 (id=635): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) open(0x0, 0x19f040, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") 1.136170054s ago: executing program 0 (id=643): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0xee01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x240088a4) 1.044718329s ago: executing program 1 (id=645): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gre0\x00', 0x0}) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000540001002bbd70000200020007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00030000ac14141a0078cd00000000000000000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000000)={0x407, 0xfffd, 0x5, 0x8}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/156, &(0x7f0000000400)=0x9c) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.012080861s ago: executing program 3 (id=646): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, 0xfffffffffffffffc, 0x4}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000230000006111480000000000180000000000000400000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x1010, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x50) mbind(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000680)=0x10000, 0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000900)=""/286, 0x11e, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) 887.366898ms ago: executing program 3 (id=649): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002000000a2281b2b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20) 765.288265ms ago: executing program 3 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 764.098425ms ago: executing program 1 (id=652): socket$inet6(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socket$nl_rdma(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/215, 0xd7}], 0x1, 0x400009, 0x8) 732.841227ms ago: executing program 1 (id=654): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000780)='./file0\x00', 0x19f040, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") 677.54243ms ago: executing program 2 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 623.033243ms ago: executing program 2 (id=657): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x1, 0x2, 0x4, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 569.753096ms ago: executing program 0 (id=658): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x576d2da7}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x9, @empty, 0x3d15}, @in={0x2, 0x4e23, @multicast2}], 0xd0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0xa]}}}}]}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000400)=""/69, 0x45}], 0x2}, 0x100) 569.247276ms ago: executing program 4 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x64}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x0) 556.663797ms ago: executing program 1 (id=660): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') setreuid(0xee01, 0xee01) utimensat(r0, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x114, r2, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "327d34be7ac12a7bd2e3a46a9d74f877e6aa3f11a8e0c50ef02039d63d6f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xda29}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "9215a6ccf5d5aa2779724c965d75e520f1029a3fa8049ba91b2ca1e08c46c11dfb3c1564582a801585cc29dff8a20d0d55319992a9eed6e0d856e37efd19c45d05a1b16d9af9ec495264a5d27047ccc057b2c82d5f51f4738a9d93ed4f18f2131876f4c5de1138d84fb6fdceca49fb9ed0881d0c0826dce9a6549cf3a0f216e35d8b53151a5813b96ce367b3e9103ab6a96c65bb2d5e361891fd2a3388bb"}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x240048d4}, 0x88c5) syz_read_part_table(0x5e1, &(0x7f0000000000)="$eJzs2z9ok2kcB/AnoUQqiLi5GZohIgcRsp1E0NB7kYAJwUOHO9HNDlnq5BAjGBAH0yUi56KDItSgg04igiBi4iBkKi3tDdeWo8NxcEuglPfI8XY7DnoldwifDzy8z5/v8/54eHnHJ/BVS4ff4jhOhRDiA3vf/f3i7HfnsrUz9QshpMKPIYRf8vM/jVdSSWL3rTPJeC0ZF99ONe4tRnc63UNHX2e3P6eT9VtJ2xw8vLzvwzFxx6+feH9sNDzyphIe90/3Tx1sXLrWy5dbvS+1V2efZp/tfvfChOq/LH08fLs9H3VulOaWouZ69Gv6j9+j8w8eFTILrXp+62SSuzKh+o2di5nnTz6U2xvTxU+VarX7YuV+rjn7rn1zOMgtj+5eTXKr/+LvAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv3f8+on3x0bDI28q4XH/dP/Uwcala718udX7Unt19mn22cxfqelQmFD9l6WPh2+356POjdLcUtRcj8aT0fkHjwqZhVY9v3UyyV35u81xHLf2Wb+xczHz/MmHcntjuvipUq12X6zczzVn37VvDge55dHdq0lu9cA+CwEAAAAAAAAAAAAAAAAAAMA/OpetnalfGPd+CCF8M/ftwrgfJ/fdU0lqJnmujefTIRTfTjXuLUZ3Ot1DR19ntz//nORvJW1z8PByCFP/w3nYiz8DAAD//9HAilQ=") openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 519.04899ms ago: executing program 4 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$int_out(r0, 0x2, &(0x7f0000000600)) fcntl$getown(r0, 0x9) 467.979782ms ago: executing program 4 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r0, 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xb7, 0x6, 0x0, @mcast2, @empty, 0x700, 0x0, 0x2, 0x265}}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x6, 0x9, 0x53, 0x1200, 0x1, 0x9, '\x00', r1, r2, 0x3, 0x5, 0x1}, 0x50) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x4, @empty, 0x7fffffff}}}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x2, 0x6, 0x303, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4000880) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000300)={0x3, 0x200, 0x4, 0x9ea8, 0x7, 0x6, 0x3, 0x70, 0x6, 0x7, 0x1, 0x2, 0xf06a, 0x2}) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000340)={0x59, "74736a8cdbc6c5bf179b913a6ec9ed3b23b0361e4ebb439afd3d8bee130a8c81feba1d03bcb14fcd0d41bae60512c5605bb7f6e7855401d9980dc4a848d269e5631ac552f5cf70326be145a842736f141de92331f408ef1a82"}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000003c0)='./file0\x00', r5, r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, @llc={0x1a, 0x337, 0x9, 0xce, 0x1, 0x4, @local}, @isdn={0x22, 0x5, 0x5, 0x9, 0xf2}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)='veth1_to_team\x00', 0x8000, 0x5d1, 0x8}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x90000, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000680)={0x4, 0x8, 0xfa00, {r8, 0xfffff380}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000006c0)={0x8, {{0xa, 0x4e23, 0x1bb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {{0xa, 0x4e24, 0x80000001, @mcast1, 0x2}}}, 0x108) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000840), r2) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r11, 0x6, 0x2, &(0x7f0000000980)=0x3, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r12, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 467.265912ms ago: executing program 2 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="81ba39f5d0b948e6504995d6d47c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2800, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x401}, 0x0, 0x0, 0x4, 0x3, 0xfff, 0x155edff5, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = memfd_secret(0x80000) ftruncate(r4, 0x1) ftruncate(r4, 0x2) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)) close(r6) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001000)) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xe, 0x9, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) 394.476937ms ago: executing program 0 (id=664): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) brk(0x200000ffc000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf84b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000001600), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb6d}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, 0x1}, 0xc) unshare(0x28000600) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\n@', @ANYRES64=0x0], 0x20) 332.94475ms ago: executing program 1 (id=665): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x8006, 0x0, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 314.551331ms ago: executing program 4 (id=666): socket$inet6(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/215, 0xd7}], 0x1, 0x400009, 0x8) 263.872564ms ago: executing program 4 (id=667): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x100, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c4000200", @ANYRESOCT=r0, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x4008800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r3, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000700000000230000000000008500e3f79d64848cd30000390000008500000050000000c0da4b57e4c46344"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r5, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0x355b, 0x2, 0xfffffffe, 0x181}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x3, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000f40000000000000000711021000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0xffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40012) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5e1, &(0x7f0000000600)="$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") r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 263.095425ms ago: executing program 2 (id=668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x7}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) unshare(0x28000600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3ff}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in=@multicast2, {0x0, 0x0, 0x2}, {0x0, 0x200001, 0x7}, {0x40000}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) lseek(0xffffffffffffffff, 0xdfffffffffffffff, 0x0) 222.347457ms ago: executing program 2 (id=669): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0xee01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x240088a4) 204.513717ms ago: executing program 0 (id=670): unlink(&(0x7f0000000100)='./file0\x00') 179.278279ms ago: executing program 0 (id=671): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(&(0x7f0000000540), 0x7, 0x2142) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r3, @ANYBLOB="080004006401010208000100e000000208000200ac14143d080002007fecae845f365d578d0000050800090600000000000000f7dded72f45986278db964e2838526b1f8e2857110d05f2c46051b9add1e80b039d269dc99a5ef85a9"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket(0xb, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0x4}, {0xc, 0xf}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x6d, 0xfffffffa, 0x1, 0x788, 0x803, 0x2}}, {0x8, 0x2, [0x8, 0x100]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffff}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r10 = socket(0x1, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000180), &(0x7f00000000c0)=@tcp=r10}, 0x20) close_range(r9, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 134.677452ms ago: executing program 1 (id=672): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5e1, &(0x7f0000000000)="$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") 43.982877ms ago: executing program 0 (id=673): r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, &(0x7f0000000280)="2c088334e85eece341fd4b042ec9306cf884010431f2e22989b4b7e4c646e371b62aa29cbfcac76ee3f5c07d4b30fca62af3ecb1e34d88c7f7de7c354dd3ec40e5c07f780419e5ef2d2a9bad5dcf825cc44290cfbd0207755b0afb770334c4f1f47ca99af91f8f66604aa8764b289a61b59cc1e87e230c64ee27abfc20f7500764d3f534de5d6f0efdd53cfdad34b3117712f71f5d54069bed13ef95b98db318e4c7a05e8d27d33e", 0xa8) r3 = socket(0x11, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f00000018c0)=""/174, 0xae}], 0x6}, 0x60}], 0x1, 0x42, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000000080)=0x2c) sendfile(r3, r1, 0x0, 0x800000009) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 14.571318ms ago: executing program 4 (id=674): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, 0xfffffffffffffffc, 0x4}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000230000006111480000000000180000000000000400000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x1010, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x50) mbind(&(0x7f00007d6000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000680)=0x10000, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000900)=""/286, 0x11e, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a05"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4005) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) 0s ago: executing program 2 (id=675): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x7, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x963}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffc}, {{@in=@loopback, 0xfffffffc, 0x2b}, 0x0, @in=@multicast1, 0x3504, 0x4, 0x0, 0x0, 0x800}]}]}, 0x13c}}, 0x4048050) kernel console output (not intermixed with test programs): =process permissive=1 [ 19.042872][ T29] audit: type=1400 audit(1769869671.833:61): avc: denied { siginh } for pid=3186 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.552885][ T29] audit: type=1400 audit(1769869676.423:62): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.575002][ T29] audit: type=1400 audit(1769869676.423:63): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.597627][ T29] audit: type=1400 audit(1769869676.423:64): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.620560][ T29] audit: type=1400 audit(1769869676.423:65): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.643606][ T29] audit: type=1400 audit(1769869676.423:66): avc: denied { read open } for pid=3197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 27.947937][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 27.947954][ T29] audit: type=1400 audit(1769869680.823:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.977799][ T29] audit: type=1400 audit(1769869680.853:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.980754][ T3301] cgroup: Unknown subsys name 'net' [ 28.006645][ T29] audit: type=1400 audit(1769869680.883:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.098731][ T3301] cgroup: Unknown subsys name 'cpuset' [ 28.104995][ T3301] cgroup: Unknown subsys name 'rlimit' [ 28.217530][ T29] audit: type=1400 audit(1769869681.083:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.241666][ T29] audit: type=1400 audit(1769869681.093:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.262356][ T29] audit: type=1400 audit(1769869681.093:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.282805][ T29] audit: type=1400 audit(1769869681.093:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.305452][ T29] audit: type=1400 audit(1769869681.113:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.330392][ T29] audit: type=1400 audit(1769869681.113:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.354699][ T29] audit: type=1400 audit(1769869681.183:79): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.359194][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.452689][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.683805][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.758016][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.803757][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.811009][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.818404][ T3316] bridge_slave_0: entered allmulticast mode [ 29.825165][ T3316] bridge_slave_0: entered promiscuous mode [ 29.834341][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.841512][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.848852][ T3316] bridge_slave_1: entered allmulticast mode [ 29.855417][ T3316] bridge_slave_1: entered promiscuous mode [ 29.871711][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.884167][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.922547][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.942205][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.954917][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.004604][ T3316] team0: Port device team_slave_0 added [ 30.032377][ T3316] team0: Port device team_slave_1 added [ 30.038229][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.045298][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.052672][ T3319] bridge_slave_0: entered allmulticast mode [ 30.059417][ T3319] bridge_slave_0: entered promiscuous mode [ 30.065998][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.073316][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.080758][ T3321] bridge_slave_0: entered allmulticast mode [ 30.087317][ T3321] bridge_slave_0: entered promiscuous mode [ 30.110065][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.117300][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.124987][ T3319] bridge_slave_1: entered allmulticast mode [ 30.131686][ T3319] bridge_slave_1: entered promiscuous mode [ 30.139069][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.146344][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.153593][ T3321] bridge_slave_1: entered allmulticast mode [ 30.160641][ T3321] bridge_slave_1: entered promiscuous mode [ 30.167046][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.174315][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.182534][ T3315] bridge_slave_0: entered allmulticast mode [ 30.189129][ T3315] bridge_slave_0: entered promiscuous mode [ 30.219824][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.227123][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.234537][ T3315] bridge_slave_1: entered allmulticast mode [ 30.241270][ T3315] bridge_slave_1: entered promiscuous mode [ 30.248228][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.255315][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.281615][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.304065][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.315163][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.329859][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.337021][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.364106][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.375642][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.382781][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.390335][ T3314] bridge_slave_0: entered allmulticast mode [ 30.396902][ T3314] bridge_slave_0: entered promiscuous mode [ 30.404535][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.415749][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.437709][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.444808][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.452320][ T3314] bridge_slave_1: entered allmulticast mode [ 30.459397][ T3314] bridge_slave_1: entered promiscuous mode [ 30.482526][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.492574][ T3319] team0: Port device team_slave_0 added [ 30.499948][ T3319] team0: Port device team_slave_1 added [ 30.506733][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.531574][ T3321] team0: Port device team_slave_0 added [ 30.553886][ T3315] team0: Port device team_slave_0 added [ 30.561179][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.571446][ T3321] team0: Port device team_slave_1 added [ 30.581833][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.589243][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.616140][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.628112][ T3315] team0: Port device team_slave_1 added [ 30.634796][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.663862][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.671145][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.697137][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.708513][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.715493][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.741712][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.777826][ T3316] hsr_slave_0: entered promiscuous mode [ 30.784019][ T3316] hsr_slave_1: entered promiscuous mode [ 30.790517][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.797604][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.824232][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849815][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.856958][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.883102][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.894953][ T3314] team0: Port device team_slave_0 added [ 30.902218][ T3314] team0: Port device team_slave_1 added [ 30.918406][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.925400][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.951707][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.976100][ T3315] hsr_slave_0: entered promiscuous mode [ 30.982382][ T3315] hsr_slave_1: entered promiscuous mode [ 30.988773][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.994510][ T3315] Cannot create hsr debugfs directory [ 31.002451][ T3319] hsr_slave_0: entered promiscuous mode [ 31.009009][ T3319] hsr_slave_1: entered promiscuous mode [ 31.015322][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.021188][ T3319] Cannot create hsr debugfs directory [ 31.035525][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.042599][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.068657][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.086325][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.093372][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.119581][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.169702][ T3321] hsr_slave_0: entered promiscuous mode [ 31.176009][ T3321] hsr_slave_1: entered promiscuous mode [ 31.182141][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 31.188102][ T3321] Cannot create hsr debugfs directory [ 31.273545][ T3314] hsr_slave_0: entered promiscuous mode [ 31.279670][ T3314] hsr_slave_1: entered promiscuous mode [ 31.285475][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 31.291297][ T3314] Cannot create hsr debugfs directory [ 31.378168][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.402583][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.425244][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.436940][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.471602][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.481228][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.495978][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.508691][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.532233][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.547375][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.556760][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.566243][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.594209][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.603492][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.612786][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.638153][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.684765][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.692032][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.707023][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.721228][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.730626][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.743942][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.769493][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.798609][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.811802][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.818897][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.828222][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.835386][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.844161][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.851284][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.880397][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.890379][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.897501][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.913727][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.924386][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.959450][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.972057][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.984473][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.991791][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.020959][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.031844][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.039036][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.053029][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.071951][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.079055][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.092670][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.099823][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113933][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.143068][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.159690][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.166860][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.192882][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.200043][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.258553][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.341740][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.366183][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.393584][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.430621][ T3319] veth0_vlan: entered promiscuous mode [ 32.457915][ T3319] veth1_vlan: entered promiscuous mode [ 32.499971][ T3319] veth0_macvtap: entered promiscuous mode [ 32.518749][ T3319] veth1_macvtap: entered promiscuous mode [ 32.572716][ T3315] veth0_vlan: entered promiscuous mode [ 32.592536][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.601973][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.616572][ T3314] veth0_vlan: entered promiscuous mode [ 32.625084][ T3314] veth1_vlan: entered promiscuous mode [ 32.633478][ T3315] veth1_vlan: entered promiscuous mode [ 32.658179][ T3314] veth0_macvtap: entered promiscuous mode [ 32.665138][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.685223][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.696000][ T3315] veth0_macvtap: entered promiscuous mode [ 32.709811][ T3314] veth1_macvtap: entered promiscuous mode [ 32.716282][ T3316] veth0_vlan: entered promiscuous mode [ 32.723672][ T3315] veth1_macvtap: entered promiscuous mode [ 32.730386][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740032][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.751789][ T3321] veth0_vlan: entered promiscuous mode [ 32.767334][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.775589][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.783997][ T3321] veth1_vlan: entered promiscuous mode [ 32.797078][ T3316] veth1_vlan: entered promiscuous mode [ 32.805505][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.813725][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.833067][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.859338][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.873376][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.888025][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888114][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.906430][ T3316] veth0_macvtap: entered promiscuous mode [ 32.914113][ T3321] veth0_macvtap: entered promiscuous mode [ 32.928379][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.938254][ T3316] veth1_macvtap: entered promiscuous mode [ 32.963543][ T3321] veth1_macvtap: entered promiscuous mode [ 32.972654][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.992531][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.013759][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.040409][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 33.040427][ T29] audit: type=1400 audit(1769869685.913:102): avc: denied { create } for pid=3486 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.069419][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.071518][ T29] audit: type=1400 audit(1769869685.943:103): avc: denied { write } for pid=3486 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.097303][ T29] audit: type=1400 audit(1769869685.943:104): avc: denied { read append } for pid=3486 comm="syz.0.6" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.120939][ T29] audit: type=1400 audit(1769869685.943:105): avc: denied { open } for pid=3486 comm="syz.0.6" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.142714][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.155431][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.185934][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.196317][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.204669][ T29] audit: type=1400 audit(1769869686.083:106): avc: denied { create } for pid=3490 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.241891][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.253166][ T29] audit: type=1400 audit(1769869686.093:107): avc: denied { setopt } for pid=3490 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.273206][ T29] audit: type=1400 audit(1769869686.093:108): avc: denied { bind } for pid=3490 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.292555][ T29] audit: type=1400 audit(1769869686.093:109): avc: denied { name_bind } for pid=3490 comm="syz.3.7" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 33.308347][ T3497] 9p: Bad value for 'rfdno' [ 33.314925][ T29] audit: type=1400 audit(1769869686.093:110): avc: denied { node_bind } for pid=3490 comm="syz.3.7" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 33.340748][ T29] audit: type=1400 audit(1769869686.093:111): avc: denied { write } for pid=3490 comm="syz.3.7" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.357754][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.378118][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.387902][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.398568][ T3497] bridge_slave_0: default FDB implementation only supports local addresses [ 33.414063][ T3499] FAULT_INJECTION: forcing a failure. [ 33.414063][ T3499] name failslab, interval 1, probability 0, space 0, times 1 [ 33.426890][ T3499] CPU: 1 UID: 0 PID: 3499 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.426919][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.426945][ T3499] Call Trace: [ 33.426956][ T3499] [ 33.426964][ T3499] __dump_stack+0x1d/0x30 [ 33.427042][ T3499] dump_stack_lvl+0x95/0xd0 [ 33.427064][ T3499] dump_stack+0x15/0x1b [ 33.427098][ T3499] should_fail_ex+0x263/0x280 [ 33.427156][ T3499] should_failslab+0x8c/0xb0 [ 33.427185][ T3499] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 33.427218][ T3499] ? __alloc_skb+0x2f0/0x4b0 [ 33.427262][ T3499] __alloc_skb+0x2f0/0x4b0 [ 33.427360][ T3499] ? __alloc_skb+0x219/0x4b0 [ 33.427396][ T3499] netlink_alloc_large_skb+0xbf/0xf0 [ 33.427428][ T3499] netlink_sendmsg+0x40c/0x6f0 [ 33.427449][ T3499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.427516][ T3499] ____sys_sendmsg+0x5af/0x600 [ 33.427540][ T3499] ___sys_sendmsg+0x195/0x1e0 [ 33.427569][ T3499] __x64_sys_sendmsg+0xd4/0x160 [ 33.427591][ T3499] x64_sys_call+0x17ba/0x3000 [ 33.427681][ T3499] do_syscall_64+0xc0/0x2a0 [ 33.427720][ T3499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.427748][ T3499] RIP: 0033:0x7fa1233daeb9 [ 33.427778][ T3499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.427802][ T3499] RSP: 002b:00007fa121e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.427962][ T3499] RAX: ffffffffffffffda RBX: 00007fa123655fa0 RCX: 00007fa1233daeb9 [ 33.427986][ T3499] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 33.428003][ T3499] RBP: 00007fa121e37090 R08: 0000000000000000 R09: 0000000000000000 [ 33.428038][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.428054][ T3499] R13: 00007fa123656038 R14: 00007fa123655fa0 R15: 00007ffd3f288508 [ 33.428086][ T3499] [ 33.633291][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646382][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.710213][ T3510] FAULT_INJECTION: forcing a failure. [ 33.710213][ T3510] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.723577][ T3510] CPU: 1 UID: 0 PID: 3510 Comm: syz.3.12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.723611][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.723693][ T3510] Call Trace: [ 33.723701][ T3510] [ 33.723712][ T3510] __dump_stack+0x1d/0x30 [ 33.723743][ T3510] dump_stack_lvl+0x95/0xd0 [ 33.723772][ T3510] dump_stack+0x15/0x1b [ 33.723797][ T3510] should_fail_ex+0x263/0x280 [ 33.723880][ T3510] should_fail+0xb/0x20 [ 33.723916][ T3510] should_fail_usercopy+0x1a/0x20 [ 33.723987][ T3510] _copy_from_user+0x1c/0xb0 [ 33.724015][ T3510] ___sys_sendmsg+0xc1/0x1e0 [ 33.724065][ T3510] __x64_sys_sendmsg+0xd4/0x160 [ 33.724097][ T3510] x64_sys_call+0x17ba/0x3000 [ 33.724130][ T3510] do_syscall_64+0xc0/0x2a0 [ 33.724196][ T3510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.724286][ T3510] RIP: 0033:0x7fba0065aeb9 [ 33.724307][ T3510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.724329][ T3510] RSP: 002b:00007fb9ff0b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.724356][ T3510] RAX: ffffffffffffffda RBX: 00007fba008d5fa0 RCX: 00007fba0065aeb9 [ 33.724378][ T3510] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 33.724391][ T3510] RBP: 00007fb9ff0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.724403][ T3510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.724415][ T3510] R13: 00007fba008d6038 R14: 00007fba008d5fa0 R15: 00007fffdd28f1d8 [ 33.724437][ T3510] [ 33.753403][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.753641][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.909450][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.999980][ C1] hrtimer: interrupt took 42404 ns [ 34.039417][ T3523] loop3: detected capacity change from 0 to 128 [ 34.066424][ T3531] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 34.150537][ T3523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.176178][ T3523] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.211620][ T3538] Zero length message leads to an empty skb [ 34.253400][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.333503][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'. [ 34.342990][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'. [ 34.403934][ T3551] loop1: detected capacity change from 0 to 512 [ 34.469331][ T3551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24: bg 0: block 248: padding at end of block bitmap is not set [ 34.527600][ T3551] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.24: Failed to acquire dquot type 1 [ 34.564964][ T3551] EXT4-fs (loop1): 1 truncate cleaned up [ 34.586042][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.618200][ T3573] FAULT_INJECTION: forcing a failure. [ 34.618200][ T3573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.631738][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.631767][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.631781][ T3573] Call Trace: [ 34.631789][ T3573] [ 34.631800][ T3573] __dump_stack+0x1d/0x30 [ 34.631878][ T3573] dump_stack_lvl+0x95/0xd0 [ 34.631908][ T3573] dump_stack+0x15/0x1b [ 34.631930][ T3573] should_fail_ex+0x263/0x280 [ 34.631964][ T3573] should_fail+0xb/0x20 [ 34.631994][ T3573] should_fail_usercopy+0x1a/0x20 [ 34.632043][ T3573] _copy_from_iter+0xcf/0xea0 [ 34.632063][ T3573] ? __alloc_skb+0x397/0x4b0 [ 34.632095][ T3573] ? __alloc_skb+0x219/0x4b0 [ 34.632195][ T3573] netlink_sendmsg+0x4ae/0x6f0 [ 34.632261][ T3573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.632281][ T3573] ____sys_sendmsg+0x5af/0x600 [ 34.632305][ T3573] ___sys_sendmsg+0x195/0x1e0 [ 34.632386][ T3573] __x64_sys_sendmsg+0xd4/0x160 [ 34.632481][ T3573] x64_sys_call+0x17ba/0x3000 [ 34.632508][ T3573] do_syscall_64+0xc0/0x2a0 [ 34.632542][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.632565][ T3573] RIP: 0033:0x7fba0065aeb9 [ 34.632610][ T3573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.632629][ T3573] RSP: 002b:00007fb9ff0b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.632650][ T3573] RAX: ffffffffffffffda RBX: 00007fba008d5fa0 RCX: 00007fba0065aeb9 [ 34.632664][ T3573] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 34.632678][ T3573] RBP: 00007fb9ff0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.632692][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.632705][ T3573] R13: 00007fba008d6038 R14: 00007fba008d5fa0 R15: 00007fffdd28f1d8 [ 34.632791][ T3573] [ 34.826133][ T3551] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.859690][ T3551] syz.1.24 (3551) used greatest stack depth: 9136 bytes left [ 34.890137][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.919742][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 34.939272][ T3578] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.964865][ T3580] loop1: detected capacity change from 0 to 512 [ 35.014266][ T3580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.047739][ T3580] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.102558][ T3588] loop2: detected capacity change from 0 to 512 [ 35.121959][ T3592] loop4: detected capacity change from 0 to 1024 [ 35.128811][ T3592] ======================================================= [ 35.128811][ T3592] WARNING: The mand mount option has been deprecated and [ 35.128811][ T3592] and is ignored by this kernel. Remove the mand [ 35.128811][ T3592] option from the mount to silence this warning. [ 35.128811][ T3592] ======================================================= [ 35.186722][ T3592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.191975][ T3588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.216540][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.216618][ T3588] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.226988][ T3595] 9p: Bad value for 'rfdno' [ 35.252815][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.304657][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.345219][ T3609] loop3: detected capacity change from 0 to 512 [ 35.376359][ T3609] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.412466][ T3614] 9p: Bad value for 'rfdno' [ 35.423022][ T3610] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 35.437389][ T3609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.452324][ T3609] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.496682][ T3618] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.560547][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.592629][ T3632] 9p: Bad value for 'rfdno' [ 35.667357][ T3641] loop3: detected capacity change from 0 to 512 [ 35.681053][ T3640] loop4: detected capacity change from 0 to 2048 [ 35.707025][ T3641] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.720718][ T3641] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.730293][ T3641] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 35.757313][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 35.766499][ T3646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 35.778962][ T3306] Alternate GPT is invalid, using primary GPT. [ 35.785511][ T3306] loop4: p1 p2 p3 [ 35.805279][ T3641] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 35.817966][ T3644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 35.826793][ T3644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 35.846579][ T3641] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 35.854956][ T3641] System zones: 0-2, 18-18, 34-35 [ 35.860978][ T3641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.867519][ T3640] Alternate GPT is invalid, using primary GPT. [ 35.879679][ T3640] loop4: p1 p2 p3 [ 35.888118][ T3641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.901387][ T3654] loop1: detected capacity change from 0 to 1024 [ 35.908490][ T3654] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.919123][ T3654] JBD2: no valid journal superblock found [ 35.924930][ T3654] EXT4-fs (loop1): Could not load journal inode [ 35.995712][ T3663] FAULT_INJECTION: forcing a failure. [ 35.995712][ T3663] name failslab, interval 1, probability 0, space 0, times 0 [ 36.008631][ T3663] CPU: 1 UID: 0 PID: 3663 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.008663][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.008680][ T3663] Call Trace: [ 36.008686][ T3663] [ 36.008708][ T3663] __dump_stack+0x1d/0x30 [ 36.008735][ T3663] dump_stack_lvl+0x95/0xd0 [ 36.008756][ T3663] dump_stack+0x15/0x1b [ 36.008791][ T3663] should_fail_ex+0x263/0x280 [ 36.008828][ T3663] should_failslab+0x8c/0xb0 [ 36.008851][ T3663] __kmalloc_cache_noprof+0x64/0x4a0 [ 36.008881][ T3663] ? alloc_pipe_info+0xad/0x340 [ 36.008994][ T3663] alloc_pipe_info+0xad/0x340 [ 36.009022][ T3663] splice_direct_to_actor+0x591/0x670 [ 36.009049][ T3663] ? __pfx_direct_splice_actor+0x10/0x10 [ 36.009069][ T3663] ? selinux_file_permission+0x633/0x690 [ 36.009102][ T3663] do_splice_direct+0x119/0x1a0 [ 36.009175][ T3663] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 36.009212][ T3663] do_sendfile+0x382/0x650 [ 36.009263][ T3663] __x64_sys_sendfile64+0x105/0x150 [ 36.009294][ T3663] x64_sys_call+0x2db1/0x3000 [ 36.009325][ T3663] do_syscall_64+0xc0/0x2a0 [ 36.009378][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.009399][ T3663] RIP: 0033:0x7f3a947aaeb9 [ 36.009415][ T3663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.009495][ T3663] RSP: 002b:00007f3a93207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 36.009515][ T3663] RAX: ffffffffffffffda RBX: 00007f3a94a25fa0 RCX: 00007f3a947aaeb9 [ 36.009531][ T3663] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 36.009546][ T3663] RBP: 00007f3a93207090 R08: 0000000000000000 R09: 0000000000000000 [ 36.009636][ T3663] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 36.009650][ T3663] R13: 00007f3a94a26038 R14: 00007f3a94a25fa0 R15: 00007ffdab016548 [ 36.009675][ T3663] [ 36.312291][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 36.325024][ T3674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3674 comm=syz.4.67 [ 36.419174][ T3685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=3685 comm=syz.1.73 [ 36.432316][ T3685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.73'. [ 36.460727][ T3691] loop1: detected capacity change from 0 to 512 [ 36.468159][ T3691] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 36.495258][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 36.652966][ T3713] 9p: Bad value for 'rfdno' [ 36.750280][ T3721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3721 comm=syz.2.87 [ 36.805166][ T3728] FAULT_INJECTION: forcing a failure. [ 36.805166][ T3728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.823085][ T3728] CPU: 1 UID: 0 PID: 3728 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.823184][ T3728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.823202][ T3728] Call Trace: [ 36.823210][ T3728] [ 36.823219][ T3728] __dump_stack+0x1d/0x30 [ 36.823343][ T3728] dump_stack_lvl+0x95/0xd0 [ 36.823366][ T3728] dump_stack+0x15/0x1b [ 36.823392][ T3728] should_fail_ex+0x263/0x280 [ 36.823437][ T3728] should_fail+0xb/0x20 [ 36.823474][ T3728] should_fail_usercopy+0x1a/0x20 [ 36.823561][ T3728] _copy_from_user+0x1c/0xb0 [ 36.823639][ T3728] sg_new_write+0x748/0x8c0 [ 36.823747][ T3728] ? do_vfs_ioctl+0x84f/0xe70 [ 36.823790][ T3728] sg_ioctl+0xbf8/0x1350 [ 36.823841][ T3728] ? mutex_lock+0x57/0x90 [ 36.823933][ T3728] ? __pfx_sg_ioctl+0x10/0x10 [ 36.823976][ T3728] __se_sys_ioctl+0xce/0x140 [ 36.824021][ T3728] __x64_sys_ioctl+0x43/0x50 [ 36.824135][ T3728] x64_sys_call+0x14b0/0x3000 [ 36.824169][ T3728] do_syscall_64+0xc0/0x2a0 [ 36.824289][ T3728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.824318][ T3728] RIP: 0033:0x7f197ea8aeb9 [ 36.824339][ T3728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.824364][ T3728] RSP: 002b:00007f197d4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.824390][ T3728] RAX: ffffffffffffffda RBX: 00007f197ed05fa0 RCX: 00007f197ea8aeb9 [ 36.824460][ T3728] RDX: 0000200000000140 RSI: 0000000000002285 RDI: 0000000000000006 [ 36.824477][ T3728] RBP: 00007f197d4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.824494][ T3728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.824534][ T3728] R13: 00007f197ed06038 R14: 00007f197ed05fa0 R15: 00007ffc2234ada8 [ 36.824560][ T3728] [ 37.033625][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.040816][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.093044][ T3732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.129036][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.236479][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.323864][ T3746] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.358300][ T3746] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.395981][ T3763] FAULT_INJECTION: forcing a failure. [ 37.395981][ T3763] name failslab, interval 1, probability 0, space 0, times 0 [ 37.408973][ T3763] CPU: 1 UID: 0 PID: 3763 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.409011][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.409024][ T3763] Call Trace: [ 37.409030][ T3763] [ 37.409038][ T3763] __dump_stack+0x1d/0x30 [ 37.409071][ T3763] dump_stack_lvl+0x95/0xd0 [ 37.409101][ T3763] dump_stack+0x15/0x1b [ 37.409127][ T3763] should_fail_ex+0x263/0x280 [ 37.409166][ T3763] should_failslab+0x8c/0xb0 [ 37.409240][ T3763] kmem_cache_alloc_noprof+0x68/0x490 [ 37.409269][ T3763] ? alloc_empty_file+0x76/0x200 [ 37.409333][ T3763] alloc_empty_file+0x76/0x200 [ 37.409528][ T3763] path_openat+0x62/0x23c0 [ 37.409571][ T3763] ? _parse_integer_limit+0x170/0x190 [ 37.409607][ T3763] ? _parse_integer+0x27/0x40 [ 37.409633][ T3763] ? kstrtoull+0x111/0x140 [ 37.409723][ T3763] ? kstrtouint+0x76/0xc0 [ 37.409840][ T3763] do_filp_open+0x15d/0x280 [ 37.409898][ T3763] do_sys_openat2+0xa6/0x150 [ 37.409939][ T3763] __x64_sys_openat+0xf2/0x120 [ 37.409979][ T3763] x64_sys_call+0x2b07/0x3000 [ 37.410012][ T3763] do_syscall_64+0xc0/0x2a0 [ 37.410093][ T3763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.410158][ T3763] RIP: 0033:0x7fba0065aeb9 [ 37.410250][ T3763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.410270][ T3763] RSP: 002b:00007fb9ff0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.410297][ T3763] RAX: ffffffffffffffda RBX: 00007fba008d5fa0 RCX: 00007fba0065aeb9 [ 37.410316][ T3763] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 37.410365][ T3763] RBP: 00007fb9ff0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.410390][ T3763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.410407][ T3763] R13: 00007fba008d6038 R14: 00007fba008d5fa0 R15: 00007fffdd28f1d8 [ 37.410435][ T3763] [ 37.624686][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.850525][ T3793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3793 comm=syz.3.113 [ 37.923659][ T3797] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.957505][ T3797] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.973639][ T3802] vhci_hcd vhci_hcd.4: invalid port number 255 [ 37.980255][ T3802] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 38.047449][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.130326][ T3812] netlink: 'syz.4.106': attribute type 30 has an invalid length. [ 38.195892][ T3811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.223677][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 38.223696][ T29] audit: type=1400 audit(1769869691.093:301): avc: denied { remove_name } for pid=3809 comm="syz.2.117" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.252752][ T29] audit: type=1400 audit(1769869691.093:302): avc: denied { unlink } for pid=3809 comm="syz.2.117" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.450187][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.471222][ T3829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3829 comm=syz.1.126 [ 38.547465][ T3836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3836 comm=syz.3.128 [ 38.620658][ T29] audit: type=1400 audit(1769869691.493:303): avc: denied { create } for pid=3838 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.644980][ T29] audit: type=1400 audit(1769869691.493:304): avc: denied { setopt } for pid=3838 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.664558][ T29] audit: type=1400 audit(1769869691.493:305): avc: denied { write } for pid=3838 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.715730][ T3846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3846 comm=syz.1.132 [ 38.756065][ T29] audit: type=1400 audit(1769869691.603:306): avc: denied { module_request } for pid=3845 comm="syz.1.132" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.776465][ T3849] bridge_slave_0: default FDB implementation only supports local addresses [ 38.857250][ T3859] FAULT_INJECTION: forcing a failure. [ 38.857250][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.870482][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.870549][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.870563][ T3859] Call Trace: [ 38.870569][ T3859] [ 38.870576][ T3859] __dump_stack+0x1d/0x30 [ 38.870603][ T3859] dump_stack_lvl+0x95/0xd0 [ 38.870631][ T3859] dump_stack+0x15/0x1b [ 38.870695][ T3859] should_fail_ex+0x263/0x280 [ 38.870741][ T3859] should_fail+0xb/0x20 [ 38.870770][ T3859] should_fail_usercopy+0x1a/0x20 [ 38.870813][ T3859] _copy_from_iter+0xcf/0xea0 [ 38.870868][ T3859] ? __alloc_skb+0x397/0x4b0 [ 38.870908][ T3859] ? __alloc_skb+0x219/0x4b0 [ 38.870963][ T3859] ? netlink_sendmsg+0x46d/0x6f0 [ 38.870985][ T3859] netlink_sendmsg+0x4ae/0x6f0 [ 38.871013][ T3859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.871142][ T3859] ____sys_sendmsg+0x5af/0x600 [ 38.871175][ T3859] ___sys_sendmsg+0x195/0x1e0 [ 38.871216][ T3859] __x64_sys_sendmsg+0xd4/0x160 [ 38.871249][ T3859] x64_sys_call+0x17ba/0x3000 [ 38.871345][ T3859] do_syscall_64+0xc0/0x2a0 [ 38.871434][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.871459][ T3859] RIP: 0033:0x7fa3e1bbaeb9 [ 38.871479][ T3859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.871498][ T3859] RSP: 002b:00007fa3e0617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.871587][ T3859] RAX: ffffffffffffffda RBX: 00007fa3e1e35fa0 RCX: 00007fa3e1bbaeb9 [ 38.871608][ T3859] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 38.871626][ T3859] RBP: 00007fa3e0617090 R08: 0000000000000000 R09: 0000000000000000 [ 38.871644][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.871656][ T3859] R13: 00007fa3e1e36038 R14: 00007fa3e1e35fa0 R15: 00007ffe0ecca318 [ 38.871677][ T3859] [ 39.094969][ T3862] IPVS: sed: FWM 3 0x00000003 - no destination available [ 39.106892][ T3862] netlink: 'syz.4.140': attribute type 16 has an invalid length. [ 39.114850][ T3862] netlink: 'syz.4.140': attribute type 17 has an invalid length. [ 39.123746][ T29] audit: type=1400 audit(1769869691.963:307): avc: denied { create } for pid=3861 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.143570][ T29] audit: type=1400 audit(1769869691.963:308): avc: denied { connect } for pid=3861 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.163572][ T29] audit: type=1400 audit(1769869691.963:309): avc: denied { create } for pid=3866 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.187298][ T3193] IPVS: starting estimator thread 0... [ 39.244185][ T3877] set_capacity_and_notify: 6 callbacks suppressed [ 39.244208][ T3877] loop2: detected capacity change from 0 to 512 [ 39.264712][ T3877] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.273856][ T3862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.274053][ T3877] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 39.289376][ T3868] IPVS: using max 1920 ests per chain, 96000 per kthread [ 39.336657][ T3877] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 39.346150][ T3877] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 39.354448][ T3877] System zones: 0-2, 18-18, 34-35 [ 39.360696][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.386371][ T3883] loop4: detected capacity change from 0 to 128 [ 39.421532][ T3886] __nla_validate_parse: 11 callbacks suppressed [ 39.421632][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 39.437490][ T29] audit: type=1400 audit(1769869692.243:310): avc: denied { ioctl } for pid=3881 comm="syz.0.146" path="socket:[5599]" dev="sockfs" ino=5599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.495558][ T3891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 39.512267][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.525917][ T3893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 39.528093][ T3891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3891 comm=syz.1.148 [ 39.555126][ T3893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3893 comm=syz.0.151 [ 39.571483][ T3883] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.608201][ T3883] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.651888][ T3900] bridge_slave_1: left allmulticast mode [ 39.657666][ T3900] bridge_slave_1: left promiscuous mode [ 39.663361][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.672142][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.684525][ T3900] bridge_slave_0: left allmulticast mode [ 39.690345][ T3900] bridge_slave_0: left promiscuous mode [ 39.696158][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.758959][ T3907] vhci_hcd vhci_hcd.4: invalid port number 255 [ 39.765192][ T3907] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 39.811759][ T3914] loop1: detected capacity change from 0 to 512 [ 39.836324][ T3914] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.845571][ T3914] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 39.877435][ T3914] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 39.890030][ T3917] loop0: detected capacity change from 0 to 512 [ 39.898797][ T3914] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 39.907087][ T3914] System zones: 0-2, 18-18, 34-35 [ 39.913277][ T3914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.940653][ T3921] loop2: detected capacity change from 0 to 512 [ 39.941227][ T3917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.967988][ T3917] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.981097][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.998231][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.047964][ T3921] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.061447][ T3921] FAULT_INJECTION: forcing a failure. [ 40.061447][ T3921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.074613][ T3921] CPU: 0 UID: 0 PID: 3921 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.074644][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.074754][ T3921] Call Trace: [ 40.074763][ T3921] [ 40.074792][ T3921] __dump_stack+0x1d/0x30 [ 40.074822][ T3921] dump_stack_lvl+0x95/0xd0 [ 40.074850][ T3921] dump_stack+0x15/0x1b [ 40.074876][ T3921] should_fail_ex+0x263/0x280 [ 40.074986][ T3921] should_fail+0xb/0x20 [ 40.075070][ T3921] should_fail_usercopy+0x1a/0x20 [ 40.075113][ T3921] _copy_to_user+0x20/0xa0 [ 40.075195][ T3921] simple_read_from_buffer+0xb5/0x130 [ 40.075241][ T3921] proc_fail_nth_read+0x10e/0x150 [ 40.075282][ T3921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.075399][ T3921] vfs_read+0x1ab/0x7f0 [ 40.075468][ T3921] ? __rcu_read_unlock+0x4e/0x70 [ 40.075508][ T3921] ? __fget_files+0x184/0x1c0 [ 40.075579][ T3921] ? mutex_lock+0x57/0x90 [ 40.075680][ T3921] ksys_read+0xdc/0x1a0 [ 40.075709][ T3921] __x64_sys_read+0x40/0x50 [ 40.075732][ T3921] x64_sys_call+0x2889/0x3000 [ 40.075757][ T3921] do_syscall_64+0xc0/0x2a0 [ 40.075792][ T3921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.075863][ T3921] RIP: 0033:0x7fa3e1b7b78e [ 40.075882][ T3921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.075969][ T3921] RSP: 002b:00007fa3e0616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.075992][ T3921] RAX: ffffffffffffffda RBX: 00007fa3e06176c0 RCX: 00007fa3e1b7b78e [ 40.076009][ T3921] RDX: 000000000000000f RSI: 00007fa3e06170a0 RDI: 0000000000000005 [ 40.076025][ T3921] RBP: 00007fa3e0617090 R08: 0000000000000000 R09: 0000000000000000 [ 40.076041][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.076057][ T3921] R13: 00007fa3e1e36038 R14: 00007fa3e1e35fa0 R15: 00007ffe0ecca318 [ 40.076120][ T3921] [ 40.291638][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.332590][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.332590][ T3937] Use struct sctp_assoc_value instead [ 40.353485][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.381424][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.381424][ T3937] Use struct sctp_assoc_value instead [ 40.396238][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.396238][ T3937] Use struct sctp_assoc_value instead [ 40.411637][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.411637][ T3937] Use struct sctp_assoc_value instead [ 40.456292][ T3944] loop2: detected capacity change from 0 to 2048 [ 40.474263][ T3948] FAULT_INJECTION: forcing a failure. [ 40.474263][ T3948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.487722][ T3948] CPU: 0 UID: 0 PID: 3948 Comm: syz.1.171 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.487825][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.487842][ T3948] Call Trace: [ 40.487851][ T3948] [ 40.487862][ T3948] __dump_stack+0x1d/0x30 [ 40.487946][ T3948] dump_stack_lvl+0x95/0xd0 [ 40.488018][ T3948] dump_stack+0x15/0x1b [ 40.488058][ T3948] should_fail_ex+0x263/0x280 [ 40.488154][ T3948] should_fail+0xb/0x20 [ 40.488270][ T3948] should_fail_usercopy+0x1a/0x20 [ 40.488308][ T3948] _copy_from_user+0x1c/0xb0 [ 40.488329][ T3948] ___sys_sendmsg+0xc1/0x1e0 [ 40.488391][ T3948] __x64_sys_sendmsg+0xd4/0x160 [ 40.488421][ T3948] x64_sys_call+0x17ba/0x3000 [ 40.488447][ T3948] do_syscall_64+0xc0/0x2a0 [ 40.488494][ T3948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.488548][ T3948] RIP: 0033:0x7fa1233daeb9 [ 40.488565][ T3948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.488583][ T3948] RSP: 002b:00007fa121e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.488603][ T3948] RAX: ffffffffffffffda RBX: 00007fa123655fa0 RCX: 00007fa1233daeb9 [ 40.488617][ T3948] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 40.488634][ T3948] RBP: 00007fa121e37090 R08: 0000000000000000 R09: 0000000000000000 [ 40.488652][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.488669][ T3948] R13: 00007fa123656038 R14: 00007fa123655fa0 R15: 00007ffd3f288508 [ 40.488751][ T3948] [ 40.491363][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.491363][ T3937] Use struct sctp_assoc_value instead [ 40.694095][ T3949] loop0: detected capacity change from 0 to 8192 [ 40.721999][ T3937] sctp: [Deprecated]: syz.3.168 (pid 3937) Use of int in max_burst socket option. [ 40.721999][ T3937] Use struct sctp_assoc_value instead [ 40.744338][ T3949] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.867366][ T3957] loop4: detected capacity change from 0 to 512 [ 40.878609][ T3963] loop1: detected capacity change from 0 to 512 [ 40.890172][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.179'. [ 40.891175][ T3957] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.928059][ T3967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3967 comm=syz.3.179 [ 40.949398][ T3963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.949692][ T3957] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 40.967524][ T3957] System zones: 1-12 [ 40.976574][ T3957] EXT4-fs (loop4): 1 truncate cleaned up [ 40.982897][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.004784][ T3963] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.177: corrupted in-inode xattr: overlapping e_value [ 41.035085][ T3957] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 41.050575][ T3963] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.177: couldn't read orphan inode 15 (err -117) [ 41.063004][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.081167][ T3973] loop2: detected capacity change from 0 to 128 [ 41.089367][ T3957] netlink: 25 bytes leftover after parsing attributes in process `syz.4.176'. [ 41.137284][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.206987][ T3973] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.232094][ T3973] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.267752][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.330308][ T3994] vhci_hcd vhci_hcd.4: invalid port number 255 [ 41.336743][ T3994] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 41.379559][ T4001] netlink: 'syz.2.186': attribute type 13 has an invalid length. [ 41.387356][ T4001] netlink: 'syz.2.186': attribute type 27 has an invalid length. [ 41.486004][ T4012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 41.688502][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.708943][ T4036] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.747986][ T4036] EXT4-fs (loop3): mount failed [ 41.832480][ T4047] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.208: corrupted in-inode xattr: e_name out of bounds [ 41.848661][ T4047] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.208: couldn't read orphan inode 15 (err -117) [ 41.861144][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.875076][ T4047] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.886760][ T4047] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 41.896918][ T4047] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.208: Corrupt directory, running e2fsck is recommended [ 41.919049][ T4047] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=4047 comm=syz.4.208 [ 41.990601][ T4057] FAULT_INJECTION: forcing a failure. [ 41.990601][ T4057] name failslab, interval 1, probability 0, space 0, times 0 [ 42.003329][ T4057] CPU: 1 UID: 0 PID: 4057 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.003360][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.003393][ T4057] Call Trace: [ 42.003401][ T4057] [ 42.003440][ T4057] __dump_stack+0x1d/0x30 [ 42.003468][ T4057] dump_stack_lvl+0x95/0xd0 [ 42.003490][ T4057] dump_stack+0x15/0x1b [ 42.003510][ T4057] should_fail_ex+0x263/0x280 [ 42.003556][ T4057] should_failslab+0x8c/0xb0 [ 42.003591][ T4057] __kmalloc_cache_noprof+0x64/0x4a0 [ 42.003620][ T4057] ? __se_sys_memfd_create+0x1df/0x3b0 [ 42.003700][ T4057] ? fput+0x8f/0xc0 [ 42.003790][ T4057] __se_sys_memfd_create+0x1df/0x3b0 [ 42.003882][ T4057] __x64_sys_memfd_create+0x31/0x40 [ 42.003964][ T4057] x64_sys_call+0x28cb/0x3000 [ 42.003991][ T4057] do_syscall_64+0xc0/0x2a0 [ 42.004032][ T4057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.004057][ T4057] RIP: 0033:0x7f3a947aaeb9 [ 42.004153][ T4057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.004171][ T4057] RSP: 002b:00007f3a93206e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 42.004191][ T4057] RAX: ffffffffffffffda RBX: 0000000000000606 RCX: 00007f3a947aaeb9 [ 42.004233][ T4057] RDX: 00007f3a93206ee0 RSI: 0000000000000000 RDI: 00007f3a94817333 [ 42.004246][ T4057] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 42.004259][ T4057] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000005c0 [ 42.004271][ T4057] R13: 00007f3a93206ee0 R14: 00007f3a93206ea0 R15: 0000200000000000 [ 42.004303][ T4057] [ 42.251023][ T4070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.218'. [ 42.268033][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.394048][ T4068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.438922][ T4068] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.510543][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.556014][ T4093] Unable to read rock-ridge attributes [ 42.566416][ T4093] Unable to read rock-ridge attributes [ 42.573605][ T4093] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.648907][ T4101] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 42.667882][ T4091] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.728067][ T4091] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.792691][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.815475][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.839011][ T4102] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.856667][ T4102] EXT4-fs: Cannot specify journal on remount [ 43.154805][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.185798][ T4126] SELinux: policydb string SE Linuî does not match my string SE Linux [ 43.194727][ T4126] SELinux: failed to load policy [ 43.280539][ T4153] EXT4-fs: Ignoring removed oldalloc option [ 43.289049][ T4153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.301391][ T4153] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 43.307148][ T4155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 43.319375][ T4153] EXT4-fs (loop0): 1 truncate cleaned up [ 43.330075][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.354443][ T4155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4155 comm=syz.1.251 [ 43.356812][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.501009][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 43.501030][ T29] audit: type=1326 audit(1769869696.373:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.539007][ T29] audit: type=1326 audit(1769869696.413:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.562865][ T29] audit: type=1326 audit(1769869696.413:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.586574][ T29] audit: type=1326 audit(1769869696.413:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.609976][ T29] audit: type=1326 audit(1769869696.413:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.636565][ T29] audit: type=1326 audit(1769869696.513:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.660056][ T29] audit: type=1326 audit(1769869696.513:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.684418][ T29] audit: type=1326 audit(1769869696.513:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.707804][ T29] audit: type=1326 audit(1769869696.513:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.731374][ T29] audit: type=1326 audit(1769869696.513:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e1bbaeb9 code=0x7ffc0000 [ 43.819674][ T4173] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.837063][ T4173] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.885580][ T4182] ip6t_rpfilter: unknown options [ 43.906176][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.941145][ T4190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'. [ 43.975675][ T4190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4190 comm=syz.1.265 [ 44.109154][ T4198] capability: warning: `syz.1.267' uses 32-bit capabilities (legacy support in use) [ 44.288643][ T4220] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 44.298871][ T4220] bridge_slave_0: default FDB implementation only supports local addresses [ 44.332121][ T4222] set_capacity_and_notify: 9 callbacks suppressed [ 44.332140][ T4222] loop0: detected capacity change from 0 to 512 [ 44.408615][ T4222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.431361][ T4224] loop2: detected capacity change from 0 to 128 [ 44.438945][ T4222] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.459143][ T4222] FAULT_INJECTION: forcing a failure. [ 44.459143][ T4222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.472917][ T4222] CPU: 0 UID: 0 PID: 4222 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.473002][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.473032][ T4222] Call Trace: [ 44.473042][ T4222] [ 44.473053][ T4222] __dump_stack+0x1d/0x30 [ 44.473088][ T4222] dump_stack_lvl+0x95/0xd0 [ 44.473114][ T4222] dump_stack+0x15/0x1b [ 44.473191][ T4222] should_fail_ex+0x263/0x280 [ 44.473231][ T4222] should_fail+0xb/0x20 [ 44.473467][ T4222] should_fail_usercopy+0x1a/0x20 [ 44.473511][ T4222] _copy_to_user+0x20/0xa0 [ 44.473540][ T4222] simple_read_from_buffer+0xb5/0x130 [ 44.473822][ T4222] proc_fail_nth_read+0x10e/0x150 [ 44.473899][ T4222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.473937][ T4222] vfs_read+0x1ab/0x7f0 [ 44.474012][ T4222] ? __rcu_read_unlock+0x4e/0x70 [ 44.474051][ T4222] ? __fget_files+0x184/0x1c0 [ 44.474080][ T4222] ? mutex_lock+0x57/0x90 [ 44.474119][ T4222] ksys_read+0xdc/0x1a0 [ 44.474195][ T4222] __x64_sys_read+0x40/0x50 [ 44.474222][ T4222] x64_sys_call+0x2889/0x3000 [ 44.474257][ T4222] do_syscall_64+0xc0/0x2a0 [ 44.474425][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.474497][ T4222] RIP: 0033:0x7f3a9476b78e [ 44.474518][ T4222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.474541][ T4222] RSP: 002b:00007f3a93206fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.474565][ T4222] RAX: ffffffffffffffda RBX: 00007f3a932076c0 RCX: 00007f3a9476b78e [ 44.474645][ T4222] RDX: 000000000000000f RSI: 00007f3a932070a0 RDI: 0000000000000006 [ 44.474663][ T4222] RBP: 00007f3a93207090 R08: 0000000000000000 R09: 0000000000000000 [ 44.474681][ T4222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.474697][ T4222] R13: 00007f3a94a26038 R14: 00007f3a94a25fa0 R15: 00007ffdab016548 [ 44.474725][ T4222] [ 44.504640][ T4224] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.652842][ T4233] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.753055][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.765976][ T4224] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.793809][ T4235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.277'. [ 44.803426][ T4235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4235 comm=syz.0.277 [ 44.847396][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.885721][ T4247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.282'. [ 44.920191][ T4240] loop4: detected capacity change from 0 to 512 [ 44.963807][ T4250] netlink: 52 bytes leftover after parsing attributes in process `syz.0.283'. [ 45.001744][ T4256] loop0: detected capacity change from 0 to 512 [ 45.016478][ T4256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.033491][ T4256] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.045843][ T4256] netlink: 14 bytes leftover after parsing attributes in process `syz.0.286'. [ 45.073054][ T4256] team0 (unregistering): Port device team_slave_0 removed [ 45.108542][ T4256] team0 (unregistering): Port device team_slave_1 removed [ 45.182507][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.209047][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 45.257256][ T4273] program syz.1.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.302502][ T4277] loop0: detected capacity change from 0 to 1024 [ 45.311717][ T4277] EXT4-fs: Ignoring removed orlov option [ 45.331080][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.375341][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.461991][ T4301] netlink: 'syz.1.300': attribute type 36 has an invalid length. [ 45.470337][ T4297] 9p: Could not find request transport: fd0x0000000000000004 [ 45.488126][ T4301] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 45.498084][ T4301] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.615799][ T4314] loop1: detected capacity change from 0 to 128 [ 45.682136][ T4314] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.696475][ T4314] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.718665][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.823950][ T4331] FAULT_INJECTION: forcing a failure. [ 45.823950][ T4331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.837200][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.837301][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.837316][ T4331] Call Trace: [ 45.837325][ T4331] [ 45.837335][ T4331] __dump_stack+0x1d/0x30 [ 45.837370][ T4331] dump_stack_lvl+0x95/0xd0 [ 45.837576][ T4331] dump_stack+0x15/0x1b [ 45.837598][ T4331] should_fail_ex+0x263/0x280 [ 45.837644][ T4331] should_fail+0xb/0x20 [ 45.837756][ T4331] should_fail_usercopy+0x1a/0x20 [ 45.837794][ T4331] _copy_from_user+0x1c/0xb0 [ 45.837819][ T4331] core_sys_select+0x26f/0x730 [ 45.837908][ T4331] ? set_user_sigmask+0x8b/0x140 [ 45.837943][ T4331] __se_sys_pselect6+0x23c/0x2a0 [ 45.837975][ T4331] __x64_sys_pselect6+0x78/0x90 [ 45.838078][ T4331] x64_sys_call+0x2e98/0x3000 [ 45.838109][ T4331] do_syscall_64+0xc0/0x2a0 [ 45.838146][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.838216][ T4331] RIP: 0033:0x7fa3e1bbaeb9 [ 45.838237][ T4331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.838350][ T4331] RSP: 002b:00007fa3e0617028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 45.838386][ T4331] RAX: ffffffffffffffda RBX: 00007fa3e1e35fa0 RCX: 00007fa3e1bbaeb9 [ 45.838402][ T4331] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000040 [ 45.838493][ T4331] RBP: 00007fa3e0617090 R08: 0000000000000000 R09: 0000000000000000 [ 45.838544][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.838558][ T4331] R13: 00007fa3e1e36038 R14: 00007fa3e1e35fa0 R15: 00007ffe0ecca318 [ 45.838581][ T4331] [ 46.090929][ T4334] 9p: Could not find request transport: fd0x0000000000000004 [ 46.245226][ T4352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 46.255753][ T4352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4352 comm=syz.3.319 [ 46.379385][ T4363] loop4: detected capacity change from 0 to 128 [ 46.445371][ T4367] FAULT_INJECTION: forcing a failure. [ 46.445371][ T4367] name failslab, interval 1, probability 0, space 0, times 0 [ 46.458170][ T4367] CPU: 0 UID: 0 PID: 4367 Comm: syz.4.322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.458218][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.458236][ T4367] Call Trace: [ 46.458246][ T4367] [ 46.458298][ T4367] __dump_stack+0x1d/0x30 [ 46.458329][ T4367] dump_stack_lvl+0x95/0xd0 [ 46.458358][ T4367] dump_stack+0x15/0x1b [ 46.458385][ T4367] should_fail_ex+0x263/0x280 [ 46.458552][ T4367] should_failslab+0x8c/0xb0 [ 46.458590][ T4367] kmem_cache_alloc_noprof+0x68/0x490 [ 46.458623][ T4367] ? security_file_alloc+0x32/0xf0 [ 46.458656][ T4367] security_file_alloc+0x32/0xf0 [ 46.458686][ T4367] init_file+0x5c/0x1c0 [ 46.458842][ T4367] alloc_empty_file+0x8b/0x200 [ 46.458882][ T4367] path_openat+0x62/0x23c0 [ 46.458959][ T4367] ? _parse_integer_limit+0x170/0x190 [ 46.458992][ T4367] ? _parse_integer+0x27/0x40 [ 46.459086][ T4367] ? kstrtoull+0x111/0x140 [ 46.459203][ T4367] ? kstrtouint+0x76/0xc0 [ 46.459324][ T4367] do_filp_open+0x15d/0x280 [ 46.459385][ T4367] do_sys_openat2+0xa6/0x150 [ 46.459459][ T4367] __x64_sys_openat+0xf2/0x120 [ 46.459496][ T4367] x64_sys_call+0x2b07/0x3000 [ 46.459531][ T4367] do_syscall_64+0xc0/0x2a0 [ 46.459631][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.459662][ T4367] RIP: 0033:0x7f197ea8aeb9 [ 46.459752][ T4367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.459776][ T4367] RSP: 002b:00007f197d4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.459803][ T4367] RAX: ffffffffffffffda RBX: 00007f197ed06090 RCX: 00007f197ea8aeb9 [ 46.459818][ T4367] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 46.459843][ T4367] RBP: 00007f197d4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.459865][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.459954][ T4367] R13: 00007f197ed06128 R14: 00007f197ed06090 R15: 00007ffc2234ada8 [ 46.459983][ T4367] [ 46.495217][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 46.715406][ T4373] 9p: Could not find request transport: fd0x0000000000000004 [ 46.743264][ T4377] SELinux: policydb string SE Linuî does not match my string SE Linux [ 46.785949][ T4377] SELinux: failed to load policy [ 46.800934][ T4380] loop0: detected capacity change from 0 to 128 [ 46.884824][ T4380] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.950634][ T4380] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.977007][ T4398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 46.991326][ T4401] FAULT_INJECTION: forcing a failure. [ 46.991326][ T4401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.004653][ T4401] CPU: 0 UID: 0 PID: 4401 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.004694][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.004708][ T4401] Call Trace: [ 47.004715][ T4401] [ 47.004725][ T4401] __dump_stack+0x1d/0x30 [ 47.004754][ T4401] dump_stack_lvl+0x95/0xd0 [ 47.004820][ T4401] dump_stack+0x15/0x1b [ 47.004842][ T4401] should_fail_ex+0x263/0x280 [ 47.004884][ T4401] should_fail+0xb/0x20 [ 47.004914][ T4401] should_fail_usercopy+0x1a/0x20 [ 47.005024][ T4401] _copy_to_iter+0x251/0xea0 [ 47.005071][ T4401] ? raw_seq_next+0x2a9/0x2e0 [ 47.005311][ T4401] seq_read_iter+0x776/0x940 [ 47.005351][ T4401] seq_read+0x279/0x2c0 [ 47.005387][ T4401] ? __pfx_seq_read+0x10/0x10 [ 47.005455][ T4401] proc_reg_read+0x128/0x1c0 [ 47.005490][ T4401] ? __pfx_proc_reg_read+0x10/0x10 [ 47.005542][ T4401] vfs_readv+0x432/0x6e0 [ 47.005613][ T4401] __x64_sys_preadv+0xfd/0x1c0 [ 47.005717][ T4401] x64_sys_call+0x2805/0x3000 [ 47.005746][ T4401] do_syscall_64+0xc0/0x2a0 [ 47.005781][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.005866][ T4401] RIP: 0033:0x7fba0065aeb9 [ 47.005894][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.005914][ T4401] RSP: 002b:00007fb9ff0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 47.005935][ T4401] RAX: ffffffffffffffda RBX: 00007fba008d5fa0 RCX: 00007fba0065aeb9 [ 47.006007][ T4401] RDX: 0000000000000001 RSI: 0000200000001600 RDI: 0000000000000004 [ 47.006029][ T4401] RBP: 00007fb9ff0b7090 R08: 0000000000000008 R09: 0000000000000000 [ 47.006042][ T4401] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 47.006056][ T4401] R13: 00007fba008d6038 R14: 00007fba008d5fa0 R15: 00007fffdd28f1d8 [ 47.006077][ T4401] [ 47.058769][ T4404] netlink: 52 bytes leftover after parsing attributes in process `syz.1.337'. [ 47.145283][ T4398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4398 comm=syz.2.334 [ 47.256532][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.567597][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.576678][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.585932][ T4430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.345'. [ 47.706872][ T4439] FAULT_INJECTION: forcing a failure. [ 47.706872][ T4439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.720205][ T4439] CPU: 0 UID: 0 PID: 4439 Comm: syz.3.350 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.720234][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.720248][ T4439] Call Trace: [ 47.720278][ T4439] [ 47.720287][ T4439] __dump_stack+0x1d/0x30 [ 47.720313][ T4439] dump_stack_lvl+0x95/0xd0 [ 47.720337][ T4439] dump_stack+0x15/0x1b [ 47.720358][ T4439] should_fail_ex+0x263/0x280 [ 47.720393][ T4439] should_fail+0xb/0x20 [ 47.720436][ T4439] should_fail_usercopy+0x1a/0x20 [ 47.720472][ T4439] _copy_from_user+0x1c/0xb0 [ 47.720495][ T4439] ucma_write+0xd8/0x260 [ 47.720594][ T4439] ? __pfx_ucma_write+0x10/0x10 [ 47.720625][ T4439] vfs_write+0x269/0x9f0 [ 47.720645][ T4439] ? __rcu_read_unlock+0x4e/0x70 [ 47.720706][ T4439] ? __fget_files+0x184/0x1c0 [ 47.720737][ T4439] ksys_write+0xdc/0x1a0 [ 47.720766][ T4439] __x64_sys_write+0x40/0x50 [ 47.720792][ T4439] x64_sys_call+0x2847/0x3000 [ 47.720901][ T4439] do_syscall_64+0xc0/0x2a0 [ 47.720936][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.720959][ T4439] RIP: 0033:0x7fba0065aeb9 [ 47.721046][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.721065][ T4439] RSP: 002b:00007fb9ff0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.721086][ T4439] RAX: ffffffffffffffda RBX: 00007fba008d5fa0 RCX: 00007fba0065aeb9 [ 47.721101][ T4439] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 47.721115][ T4439] RBP: 00007fb9ff0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.721128][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.721142][ T4439] R13: 00007fba008d6038 R14: 00007fba008d5fa0 R15: 00007fffdd28f1d8 [ 47.721206][ T4439] [ 47.957896][ T4441] loop1: detected capacity change from 0 to 128 [ 47.994487][ T4441] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.014532][ T4441] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.053470][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.275950][ T4466] loop3: detected capacity change from 0 to 164 [ 48.352268][ T4456] team_slave_1: mtu less than device minimum [ 48.468045][ T4481] FAULT_INJECTION: forcing a failure. [ 48.468045][ T4481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.481364][ T4481] CPU: 0 UID: 0 PID: 4481 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.481397][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.481467][ T4481] Call Trace: [ 48.481476][ T4481] [ 48.481484][ T4481] __dump_stack+0x1d/0x30 [ 48.481512][ T4481] dump_stack_lvl+0x95/0xd0 [ 48.481535][ T4481] dump_stack+0x15/0x1b [ 48.481555][ T4481] should_fail_ex+0x263/0x280 [ 48.481634][ T4481] should_fail+0xb/0x20 [ 48.481669][ T4481] should_fail_usercopy+0x1a/0x20 [ 48.481705][ T4481] _copy_from_iter+0xcf/0xea0 [ 48.481727][ T4481] ? __rcu_read_unlock+0x4e/0x70 [ 48.481768][ T4481] packet_sendmsg+0x2046/0x3370 [ 48.481808][ T4481] ? path_openat+0x1d94/0x23c0 [ 48.481947][ T4481] ? avc_has_perm+0x101/0x190 [ 48.481990][ T4481] ? selinux_socket_sendmsg+0x192/0x1c0 [ 48.482023][ T4481] ? __pfx_packet_sendmsg+0x10/0x10 [ 48.482102][ T4481] __sys_sendto+0x470/0x4d0 [ 48.482145][ T4481] __x64_sys_sendto+0x76/0x90 [ 48.482201][ T4481] x64_sys_call+0x29a7/0x3000 [ 48.482236][ T4481] do_syscall_64+0xc0/0x2a0 [ 48.482275][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.482357][ T4481] RIP: 0033:0x7fa3e1bbaeb9 [ 48.482374][ T4481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.482392][ T4481] RSP: 002b:00007fa3e0617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 48.482412][ T4481] RAX: ffffffffffffffda RBX: 00007fa3e1e35fa0 RCX: 00007fa3e1bbaeb9 [ 48.482429][ T4481] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 48.482497][ T4481] RBP: 00007fa3e0617090 R08: 0000200000000140 R09: 0000000000000014 [ 48.482511][ T4481] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 48.482523][ T4481] R13: 00007fa3e1e36038 R14: 00007fa3e1e35fa0 R15: 00007ffe0ecca318 [ 48.482571][ T4481] [ 48.683837][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 48.683868][ T29] audit: type=1326 audit(1769869701.553:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a947aaeb9 code=0x7ffc0000 [ 48.713542][ T29] audit: type=1326 audit(1769869701.553:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3a947aac22 code=0x7ffc0000 [ 48.736791][ T29] audit: type=1326 audit(1769869701.553:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3a947aacb7 code=0x7ffc0000 [ 48.760130][ T29] audit: type=1326 audit(1769869701.553:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a94767c51 code=0x7ffc0000 [ 48.783595][ T29] audit: type=1326 audit(1769869701.553:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3a947abcc9 code=0x7ffc0000 [ 48.806905][ T29] audit: type=1326 audit(1769869701.553:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a94767cbb code=0x7ffc0000 [ 48.830129][ T29] audit: type=1326 audit(1769869701.553:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a947aaeb9 code=0x7ffc0000 [ 48.853506][ T29] audit: type=1326 audit(1769869701.553:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a947aaeb9 code=0x7ffc0000 [ 48.876938][ T29] audit: type=1326 audit(1769869701.553:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3a947673ac code=0x7ffc0000 [ 48.900548][ T29] audit: type=1326 audit(1769869701.553:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a9476740e code=0x7ffc0000 [ 49.055535][ T4491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.073708][ T4491] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.135352][ T4491] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.222661][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.260489][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.287820][ T4522] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.317313][ T4522] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.336916][ T4520] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.365616][ T4520] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.390774][ T4520] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.411680][ T4518] set_capacity_and_notify: 4 callbacks suppressed [ 49.411701][ T4518] loop0: detected capacity change from 0 to 764 [ 49.436975][ T4522] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 49.444641][ T4522] macvtap1: entered promiscuous mode [ 49.494950][ T4522] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 49.664927][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.094163][ T4574] __nla_validate_parse: 3 callbacks suppressed [ 50.094184][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'. [ 50.145773][ T4574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4574 comm=syz.1.400 [ 50.584019][ T4612] loop3: detected capacity change from 0 to 512 [ 50.625938][ T4612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.640743][ T4612] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.671157][ T4612] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.419: corrupted xattr block 33: overlapping e_value [ 50.687587][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 50.697212][ T4612] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.419: corrupted xattr block 33: overlapping e_value [ 50.711365][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 50.729817][ T4612] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.419: corrupted xattr block 33: overlapping e_value [ 50.766470][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 50.780849][ T4622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'. [ 50.790350][ T4612] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.419: Failed to acquire dquot type 1 [ 50.802314][ T4622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4622 comm=syz.1.422 [ 50.836734][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.002547][ T4637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 51.012202][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4637 comm=syz.1.429 [ 51.120797][ T4646] loop3: detected capacity change from 0 to 128 [ 51.168449][ T4652] loop0: detected capacity change from 0 to 164 [ 51.192415][ T4652] Unable to read rock-ridge attributes [ 51.199724][ T4652] Unable to read rock-ridge attributes [ 51.223935][ T4652] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 51.241352][ T4646] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.291521][ T4646] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.310005][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 51.337947][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.485916][ T4682] loop1: detected capacity change from 0 to 2048 [ 51.713120][ T4701] loop1: detected capacity change from 0 to 128 [ 51.874462][ T4701] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.896733][ T4701] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.972017][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.128832][ T4723] loop1: detected capacity change from 0 to 512 [ 52.135624][ T4723] ext3: Unknown parameter 'hash' [ 52.283336][ T4729] loop4: detected capacity change from 0 to 128 [ 52.361653][ T4740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 52.395586][ T4745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 52.415718][ T4729] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.452334][ T4749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 52.488795][ T4729] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.513815][ T4729] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.589998][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.598675][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.612780][ T4751] loop2: detected capacity change from 0 to 764 [ 52.822211][ T4775] netlink: 'syz.4.486': attribute type 13 has an invalid length. [ 52.830166][ T4775] netlink: 'syz.4.486': attribute type 27 has an invalid length. [ 52.902312][ T4780] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.916079][ T4782] loop3: detected capacity change from 0 to 128 [ 52.923021][ T4780] vhci_hcd vhci_hcd.2: invalid port number 96 [ 52.929167][ T4780] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 53.034294][ T4782] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.073521][ T4782] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.138639][ T4782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.713957][ T4811] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.732484][ T4811] vhci_hcd vhci_hcd.2: invalid port number 96 [ 53.739531][ T4811] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 53.796157][ T4823] Cannot find set identified by id 0 to match [ 53.920120][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 53.929420][ T4841] netlink: 196 bytes leftover after parsing attributes in process `syz.4.507'. [ 53.958159][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 53.982999][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 53.983016][ T29] audit: type=1400 audit(1769869706.853:1671): avc: denied { name_bind } for pid=4822 comm="syz.4.507" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.178718][ T29] audit: type=1400 audit(1769869707.043:1672): avc: denied { setopt } for pid=4853 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.292623][ T29] audit: type=1326 audit(1769869707.153:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.316788][ T29] audit: type=1326 audit(1769869707.153:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.340482][ T29] audit: type=1326 audit(1769869707.153:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.363836][ T29] audit: type=1326 audit(1769869707.153:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.387328][ T29] audit: type=1326 audit(1769869707.153:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.410933][ T29] audit: type=1326 audit(1769869707.153:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.435102][ T29] audit: type=1326 audit(1769869707.153:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.459957][ T29] audit: type=1326 audit(1769869707.153:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1233daeb9 code=0x7ffc0000 [ 54.808619][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.841633][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.850873][ T4889] SELinux: policydb string SE Linuî does not match my string SE Linux [ 54.869616][ T4889] SELinux: failed to load policy [ 55.173415][ T4877] __nla_validate_parse: 2 callbacks suppressed [ 55.173516][ T4877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'. [ 55.232596][ T4926] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.537'. [ 55.242041][ T4926] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.537'. [ 55.263438][ T4936] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.279914][ T4936] vhci_hcd vhci_hcd.2: invalid port number 96 [ 55.283679][ T4932] set_capacity_and_notify: 1 callbacks suppressed [ 55.284590][ T4932] loop4: detected capacity change from 0 to 128 [ 55.286160][ T4936] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 55.357873][ T4940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 55.373283][ T4940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4940 comm=syz.1.542 [ 55.451846][ T4877] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.482453][ T4932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.497681][ T4932] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.525565][ T4947] SELinux: policydb string SE Linuî does not match my string SE Linux [ 55.534948][ T4947] SELinux: failed to load policy [ 55.541530][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.588464][ T4949] loop4: detected capacity change from 0 to 128 [ 55.607228][ T4951] FAULT_INJECTION: forcing a failure. [ 55.607228][ T4951] name failslab, interval 1, probability 0, space 0, times 0 [ 55.620436][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: syz.1.546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.620469][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.620486][ T4951] Call Trace: [ 55.620495][ T4951] [ 55.620505][ T4951] __dump_stack+0x1d/0x30 [ 55.620537][ T4951] dump_stack_lvl+0x95/0xd0 [ 55.620595][ T4951] dump_stack+0x15/0x1b [ 55.620620][ T4951] should_fail_ex+0x263/0x280 [ 55.620700][ T4951] should_failslab+0x8c/0xb0 [ 55.620810][ T4951] kmem_cache_alloc_noprof+0x68/0x490 [ 55.620837][ T4951] ? getname_flags+0x7f/0x3b0 [ 55.620871][ T4951] getname_flags+0x7f/0x3b0 [ 55.620921][ T4951] do_sys_openat2+0x60/0x150 [ 55.621025][ T4951] __x64_sys_openat+0xf2/0x120 [ 55.621064][ T4951] x64_sys_call+0x2b07/0x3000 [ 55.621098][ T4951] do_syscall_64+0xc0/0x2a0 [ 55.621139][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.621197][ T4951] RIP: 0033:0x7fa1233daeb9 [ 55.621303][ T4951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.621327][ T4951] RSP: 002b:00007fa121e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.621354][ T4951] RAX: ffffffffffffffda RBX: 00007fa123655fa0 RCX: 00007fa1233daeb9 [ 55.621373][ T4951] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 55.621402][ T4951] RBP: 00007fa121e37090 R08: 0000000000000000 R09: 0000000000000000 [ 55.621415][ T4951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.621470][ T4951] R13: 00007fa123656038 R14: 00007fa123655fa0 R15: 00007ffd3f288508 [ 55.621508][ T4951] [ 55.816752][ T4949] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.833464][ T4949] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.864560][ T4949] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.979445][ T4962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 55.993872][ T4965] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.019963][ T4962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4962 comm=syz.0.553 [ 56.029700][ T4965] SELinux: failed to load policy [ 56.041464][ T4966] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.049062][ T4966] vhci_hcd vhci_hcd.2: invalid port number 96 [ 56.055214][ T4966] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 56.208482][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 56.472187][ T5008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.545389][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'. [ 56.566665][ T5011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5011 comm=syz.4.572 [ 56.585199][ T5015] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.594176][ T5015] vhci_hcd vhci_hcd.2: invalid port number 96 [ 56.600514][ T5015] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 56.632907][ T5017] loop2: detected capacity change from 0 to 128 [ 56.689462][ T5017] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.711356][ T5017] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.741297][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.842618][ T5027] loop2: detected capacity change from 0 to 128 [ 56.913832][ T5032] bridge_slave_0: default FDB implementation only supports local addresses [ 56.964108][ T5025] SELinux: policydb string SE Linuî does not match my string SE Linux [ 56.974104][ T5027] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.978932][ T5025] SELinux: failed to load policy [ 57.317279][ T5051] loop1: detected capacity change from 0 to 512 [ 57.517786][ T5065] SELinux: policydb string SE Linuî does not match my string SE Linux [ 57.540307][ T5065] SELinux: failed to load policy [ 57.892211][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 57.950458][ T5100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5100 comm=syz.3.607 [ 57.992557][ T5083] loop0: detected capacity change from 0 to 512 [ 58.094870][ T5110] loop2: detected capacity change from 0 to 128 [ 58.146853][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.159071][ T5110] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.171947][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.180269][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.206769][ T5124] loop3: detected capacity change from 0 to 512 [ 58.220516][ T5124] EXT4-fs: Ignoring removed nobh option [ 58.241219][ T5124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.267576][ T5124] EXT4-fs (loop3): 1 truncate cleaned up [ 58.299574][ T5131] loop4: detected capacity change from 0 to 128 [ 58.340299][ T5133] loop2: detected capacity change from 0 to 512 [ 58.355629][ T5120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.614'. [ 58.382777][ T5123] infiniband syz2: set active [ 58.387938][ T5123] infiniband syz2: added ip6_vti0 [ 58.393472][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.419444][ T5131] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.432668][ T5133] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.619: iget: bad i_size value: 38620345925642 [ 58.452883][ T5123] RDS/IB: syz2: added [ 58.458621][ T5133] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.619: couldn't read orphan inode 15 (err -117) [ 58.471049][ T5123] smc: adding ib device syz2 with port count 1 [ 58.477293][ T5123] smc: ib device syz2 port 1 has no pnetid [ 58.483569][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.490497][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.503751][ T5133] /dev/sg0: Can't lookup blockdev [ 58.607349][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.629955][ T5141] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.658936][ T5141] vhci_hcd vhci_hcd.2: invalid port number 96 [ 58.665218][ T5141] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 58.720186][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 58.790240][ T2441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 58.830040][ T2441] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 58.843059][ T2441] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.843059][ T2441] [ 58.853001][ T2441] EXT4-fs (loop2): Total free blocks count 0 [ 58.859213][ T2441] EXT4-fs (loop2): Free/Dirty block details [ 58.865394][ T2441] EXT4-fs (loop2): free_blocks=0 [ 58.870505][ T2441] EXT4-fs (loop2): dirty_blocks=1 [ 58.875780][ T2441] EXT4-fs (loop2): Block reservation details [ 58.881868][ T2441] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 58.921826][ T5157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 59.005296][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.052897][ T5159] 9p: Bad value for 'rfdno' [ 59.100697][ T5171] SELinux: policydb string does not match my string SE Linux [ 59.114666][ T5171] SELinux: failed to load policy [ 59.146900][ T5123] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.351507][ T5184] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.399832][ T5200] SELinux: policydb string does not match my string SE Linux [ 59.435665][ T5200] SELinux: failed to load policy [ 59.583844][ T29] kauditd_printk_skb: 1562 callbacks suppressed [ 59.583863][ T29] audit: type=1400 audit(1769869712.453:3243): avc: denied { mount } for pid=5217 comm="syz.2.648" name="/" dev="hugetlbfs" ino=10107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 59.625409][ T29] audit: type=1400 audit(1769869712.493:3244): avc: denied { append } for pid=5217 comm="syz.2.648" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.649104][ T29] audit: type=1400 audit(1769869712.493:3245): avc: denied { open } for pid=5217 comm="syz.2.648" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.673108][ T29] audit: type=1400 audit(1769869712.493:3246): avc: denied { ioctl } for pid=5217 comm="syz.2.648" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.896213][ T5235] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.986728][ T29] audit: type=1400 audit(1769869712.853:3247): avc: denied { setattr } for pid=5253 comm="syz.1.660" name="sockstat" dev="proc" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.042421][ T5252] tmpfs: Bad value for 'mpol' [ 60.069983][ T29] audit: type=1400 audit(1769869712.913:3248): avc: denied { mounton } for pid=5248 comm="syz.0.658" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 60.094420][ T29] audit: type=1400 audit(1769869712.943:3249): avc: denied { bind } for pid=5258 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.114075][ T29] audit: type=1400 audit(1769869712.973:3250): avc: denied { ioctl } for pid=5258 comm="syz.4.662" path="socket:[11057]" dev="sockfs" ino=11057 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.148002][ T29] audit: type=1326 audit(1769869713.023:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a947aaeb9 code=0x7ffc0000 [ 60.171755][ T29] audit: type=1326 audit(1769869713.023:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a947aaeb9 code=0x7ffc0000 [ 60.283015][ T5269] EXT4-fs: Ignoring removed nobh option [ 60.292956][ T5269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.317207][ T5269] EXT4-fs (loop4): 1 truncate cleaned up [ 60.362399][ T5278] __nla_validate_parse: 1 callbacks suppressed [ 60.362418][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 60.398902][ T5269] netlink: 14 bytes leftover after parsing attributes in process `syz.4.667'. [ 60.421374][ T5282] set_capacity_and_notify: 3 callbacks suppressed [ 60.421397][ T5282] loop1: detected capacity change from 0 to 2048 [ 60.437861][ T5278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5278 comm=syz.0.671 [ 60.493552][ T5282] Alternate GPT is invalid, using primary GPT. [ 60.500661][ T5282] loop1: p1 p2 p3 [ 60.544773][ T3552] ================================================================== [ 60.552936][ T3552] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 60.556380][ T5290] loop0: detected capacity change from 0 to 512 [ 60.560118][ T3552] [ 60.560128][ T3552] write to 0xffff888105255834 of 4 bytes by task 3306 on cpu 1: [ 60.560156][ T3552] simple_unlink+0x54/0x80 [ 60.560198][ T3552] shmem_unlink+0x12d/0x140 [ 60.560220][ T3552] shmem_rename2+0x18e/0x310 [ 60.590119][ T3552] vfs_rename+0xa9e/0xbf0 [ 60.594494][ T3552] do_renameat2+0x39a/0x850 [ 60.599132][ T3552] __x64_sys_rename+0x58/0x70 [ 60.603840][ T3552] x64_sys_call+0x24e/0x3000 [ 60.608469][ T3552] do_syscall_64+0xc0/0x2a0 [ 60.613009][ T3552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.618957][ T3552] [ 60.621312][ T3552] read to 0xffff888105255834 of 4 bytes by task 3552 on cpu 0: [ 60.628982][ T3552] fill_mg_cmtime+0x5b/0x260 [ 60.633624][ T3552] generic_fillattr+0x24a/0x340 [ 60.638515][ T3552] shmem_getattr+0x181/0x200 [ 60.643157][ T3552] vfs_getattr_nosec+0x146/0x1e0 [ 60.648165][ T3552] vfs_getattr+0x48/0x60 [ 60.652440][ T3552] vfs_statx_path+0x28/0x140 [ 60.657075][ T3552] vfs_statx+0xc4/0x170 [ 60.661300][ T3552] vfs_fstatat+0x115/0x170 [ 60.665833][ T3552] __se_sys_newfstatat+0x55/0x3e0 [ 60.670904][ T3552] __x64_sys_newfstatat+0x55/0x70 [ 60.676054][ T3552] x64_sys_call+0x111f/0x3000 [ 60.680769][ T3552] do_syscall_64+0xc0/0x2a0 [ 60.685466][ T3552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.691497][ T3552] [ 60.693853][ T3552] value changed: 0x18abf975 -> 0x199202a2 [ 60.699603][ T3552] [ 60.701951][ T3552] Reported by Kernel Concurrency Sanitizer on: [ 60.708118][ T3552] CPU: 0 UID: 0 PID: 3552 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.717437][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.727714][ T3552] ================================================================== [ 60.755045][ T5290] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.763433][ T5290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 60.771877][ T5290] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.778514][ T5290] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.794257][ T5290] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 60.804570][ T5290] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.676: bg 0: block 40: padding at end of block bitmap is not set [ 60.819530][ T5290] EXT4-fs (loop0): Remounting filesystem read-only [ 60.826158][ T5290] EXT4-fs (loop0): 1 truncate cleaned up