last executing test programs: 6.022393848s ago: executing program 2 (id=910): r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r4 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000003c0)='./file0\x00', r3, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xa, @empty, 0x101}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x3, 0x5, 0x5, 0xff, 0x105}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x8, 0x2c00}, {0x3, 0x1, 0x1000}], 0x4d, 0x0) 5.742362432s ago: executing program 1 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec010000210000080b000000fbdbdf25fe800000000000000000000000000039ac1e01010000000000000000000000004e2400004e22c48c0a0000201d000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002000000ac000700fc01000000000000d82c0054cacffccccbeb5efba7cf68a6faff000000fc0200000000000000000000000000014e24", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000a0016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) 5.068328467s ago: executing program 2 (id=916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfffffffd}, 0x1c) socket(0x26, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800fbff0000007b8af8ff00000000bfa200000000000007020000f8030000080004d90000000000000000850000000300000095000000000000989312935480304d2b34445c679c952c30ff0000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) mlockall(0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) sendfile(r2, r2, 0x0, 0xe3aa6ea) 4.760877363s ago: executing program 1 (id=919): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4c22, 0x8, @empty, 0xfffffff5}, 0x1c) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x242, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)={0x54, 0x12, 0x905, 0x70bd2b, 0x25dfdbfd, {0xa, 0x9, 0x4, 0x0, {0x4e22, 0x4e21, [0xfffffffb, 0x924, 0x3, 0x6], [0xfffffffd, 0x5, 0x3, 0x2], 0x0, [0x10000]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "006cae4f"}]}, 0x54}, 0x1, 0x0, 0x0, 0x2040011}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='&'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) ptrace$cont(0x21, r1, 0x80000001, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) 4.400684232s ago: executing program 1 (id=920): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x300) 4.389804112s ago: executing program 1 (id=921): r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 4.285527137s ago: executing program 1 (id=923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfffffffd}, 0x1c) socket(0x26, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800fbff0000007b8af8ff00000000bfa200000000000007020000f8030000080004d90000000000000000850000000300000095000000000000989312935480304d2b34445c679c952c30ff0000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mlockall(0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 3.927205077s ago: executing program 0 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec010000210000080b000000fbdbdf25fe800000000000000000000000000039ac1e01010000000000000000000000004e2400004e22c48c0a0000201d000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002000000ac000700fc01000000000000d82c0054cacffccccbeb5efba7cf68a6faff000000fc0200000000000000000000000000014e24", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000a0016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) 3.887978318s ago: executing program 3 (id=925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.477199569s ago: executing program 2 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x10}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 3.185926495s ago: executing program 2 (id=928): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") setreuid(0xffffffffffffffff, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x2, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@rand_addr=0x64010100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x20048050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 3.004617964s ago: executing program 0 (id=929): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.943277997s ago: executing program 3 (id=930): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x5, 0xb, 0x7, 0xc, 0x0, 0x70bd26, 0x2, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}}, 0x84) r2 = socket(0x2b, 0x801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.866183931s ago: executing program 4 (id=931): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x300) 2.840165593s ago: executing program 4 (id=932): syz_open_procfs(0x0, &(0x7f00000003c0)='net/nfsfs\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x8001}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4b, 0x0, &(0x7f00000004c0)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85617a3c037c8ea9f1a44b", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0xfffffffffffffcf5) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002380)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") dup(r4) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) 2.787043686s ago: executing program 0 (id=933): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 2.583180786s ago: executing program 1 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfffffffd}, 0x1c) socket(0x26, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800fbff0000007b8af8ff00000000bfa200000000000007020000f8030000080004d90000000000000000850000000300000095000000000000989312935480304d2b34445c679c952c30ff0000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$eJzs3U9rY1UbAPAnbdqmfd82VcfRGRAPulGEzLQLV26KzIBYUaoVVBDu2FRD0j80pZAiTl25EvwYon4DQfwC3bhxLQgi3bichXilTTo2TdupbdOC/H6bHM45zznP6bkN3HAPd+eVr5bqi83KYrYeA4VCFFeHovggRYqBGIy2rXjx3Z9/eebt995/fWZ29s5cSndn3pl6OaU08ewPH3z63XM/jkTExPcjsT05sPPH9K/b17dv7Pz1bdSaqdZMyyvrKUv3VlbWs3uNalqoNeuVlN5qVLNmNdWWm9W1rvZiRKy2Ura8MD62ulZtNlO23Er1aiutF9L6WitlH2e15VSpVNL4WHAe8988yPM8Is+HYjjyPM9HYyz+F/+P8ZiIckzGY/F4PBHX4sm4Hk/F03Fjr9dV5w0AAAAAAAAAAAAAAAAAAAD/LY84/19w/h8AAAAAAAAAAAAAAAAAAAD67/D5/2KE9/8DAAAAAAAAAAAAAAAAAADAJXvE+/8Pnf9/yfl/AAAAAAAAAAAAAAAAAAAA6IdS+2MupVLE0hcb8xvz7c92/cxi1KIR1bgd5fgz9k7/t7XLd1+bvXM77ZmMW0v3O/H3N+YHu+OnhsoxWTgyfmo0IlJK3fEjMXYwfjrKce3o+afb8x+KL8ULz+/Gf96Or0Q5fvooVqIRCxGFzur34j+bSunVN2dHu+Nv7vY71mCftwUAAAAuUiU91Hv/vtXp1G4vdbe3mzr356nTs3DC7wOH7s+LcbN4VatmX7O1Wc8ajeraGQvDx48zfL6RewqFiMjiYM3E2G9zu5Ofcpz9y+2C8jlQGDxD1NnTGDq5zzn2NIqn/mNu1kunSfX0u9NJfutwTV6OOFBz68M36vtNI8eN8/vXB2pKcdHbfVRh4OFKBzqXWdbYOvXFFlt53tcMe/4ZR1ub9ZGToo7/zij0+TuJy/PPpl91JgAAAAAAAAAAAPwbRz79NxoRPc8DftJTs/94eHd478jHz/7lJawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4mx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//CvzDZg==") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mlockall(0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) sendfile(r2, r2, 0x0, 0xe3aa6ea) 2.279736452s ago: executing program 2 (id=935): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7c, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0x6, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2.092494462s ago: executing program 3 (id=936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) connect$unix(0xffffffffffffffff, &(0x7f0000004700)=@file={0x1, './file1\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) 1.888878142s ago: executing program 3 (id=937): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0x9}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) 1.597132397s ago: executing program 0 (id=938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x10}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 1.54051279s ago: executing program 4 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x34, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec010000210000080b000000fbdbdf25fe800000000000000000000000000039ac1e01010000000000000000000000004e2400004e22c48c0a0000201d000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000002000000ac000700fc01000000000000d82c0054cacffccccbeb5efba7cf68a6faff000000fc0200000000000000000000000000014e24", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000a0016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) 1.216571457s ago: executing program 3 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec010000210000080b000000fbdbdf25fe800000000000000000000000000039ac1e01010000000000000000000000004e2400004e22c48c0a0000201d000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002000000ac000700fc01000000000000d82c0054cacffccccbeb5efba7cf68a6faff000000fc0200000000000000000000000000014e24", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000a0016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) 310.111514ms ago: executing program 4 (id=941): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) creat(0x0, 0x100) sendmsg$nl_route(r0, 0x0, 0x40000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',cache=l']) 214.532359ms ago: executing program 0 (id=942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, 0x0, 0x0) 185.69307ms ago: executing program 3 (id=943): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7c, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0x6, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 173.863021ms ago: executing program 2 (id=944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @private0={0xfc, 0x0, '\x00', 0x5}, 0xfffffffd}, 0x1c) socket(0x26, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800fbff0000007b8af8ff00000000bfa200000000000007020000f8030000080004d90000000000000000850000000300000095000000000000989312935480304d2b34445c679c952c30ff0000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$inet(0x2, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$eJzs3U9rY1UbAPAnbdqmfd82VcfRGRAPulGEzLQLV26KzIBYUaoVVBDu2FRD0j80pZAiTl25EvwYon4DQfwC3bhxLQgi3bichXilTTo2TdupbdOC/H6bHM45zznP6bkN3HAPd+eVr5bqi83KYrYeA4VCFFeHovggRYqBGIy2rXjx3Z9/eebt995/fWZ29s5cSndn3pl6OaU08ewPH3z63XM/jkTExPcjsT05sPPH9K/b17dv7Pz1bdSaqdZMyyvrKUv3VlbWs3uNalqoNeuVlN5qVLNmNdWWm9W1rvZiRKy2Ura8MD62ulZtNlO23Er1aiutF9L6WitlH2e15VSpVNL4WHAe8988yPM8Is+HYjjyPM9HYyz+F/+P8ZiIckzGY/F4PBHX4sm4Hk/F03Fjr9dV5w0AAAAAAAAAAAAAAAAAAAD/LY84/19w/h8AAAAAAAAAAAAAAAAAAAD67/D5/2KE9/8DAAAAAAAAAAAAAAAAAADAJXvE+/8Pnf9/yfl/AAAAAAAAAAAAAAAAAAAA6IdS+2MupVLE0hcb8xvz7c92/cxi1KIR1bgd5fgz9k7/t7XLd1+bvXM77ZmMW0v3O/H3N+YHu+OnhsoxWTgyfmo0IlJK3fEjMXYwfjrKce3o+afb8x+KL8ULz+/Gf96Or0Q5fvooVqIRCxGFzur34j+bSunVN2dHu+Nv7vY71mCftwUAAAAuUiU91Hv/vtXp1G4vdbe3mzr356nTs3DC7wOH7s+LcbN4VatmX7O1Wc8ajeraGQvDx48zfL6RewqFiMjiYM3E2G9zu5Ofcpz9y+2C8jlQGDxD1NnTGDq5zzn2NIqn/mNu1kunSfX0u9NJfutwTV6OOFBz68M36vtNI8eN8/vXB2pKcdHbfVRh4OFKBzqXWdbYOvXFFlt53tcMe/4ZR1ub9ZGToo7/zij0+TuJy/PPpl91JgAAAAAAAAAAAPwbRz79NxoRPc8DftJTs/94eHd478jHz/7lJawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4mx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//CvzDZg==") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mlockall(0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 106.115434ms ago: executing program 4 (id=945): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") setreuid(0xffffffffffffffff, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x2, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@rand_addr=0x64010100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x20048050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 105.710754ms ago: executing program 0 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, 0x0, 0xfb6a098d1ab8acb8}, 0x20) socketpair$unix(0x1, 0x9c0ceeb953cf4503, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '-\x00', 0x19, 0x84, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x4) mount$9p_rdma(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x10}}]}}) tee(0xffffffffffffffff, r3, 0xc1, 0xb) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4042440}, 0x900) pidfd_send_signal(r4, 0x3c, &(0x7f0000000000)={0x35, 0x4, 0x7}, 0x0) write(r1, 0x0, 0x0) 0s ago: executing program 4 (id=947): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x98a8}, 0x2000c893) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x7437, 0xa526, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r2) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1101, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c666c7573682c646f74732c71756965742c74696d655f6f66667365743d3078303030303030303030303030303261302c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d55544303646f733178666c6f7070792c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c636865636b3d7374726963742c652c000000000000"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (fail_nth: 3) connect$unix(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 655730][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.299,pid=4449,uid=0 [ 88.701541][ T3321] Memory cgroup out of memory: Killed process 4449 (syz.3.299) total-vm:94296kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 88.774376][ T4505] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.797012][ T4500] loop2: detected capacity change from 0 to 512 [ 88.828079][ T4500] EXT4-fs: Ignoring removed oldalloc option [ 88.836729][ T4505] 9p: Unknown Cache mode or invalid value l [ 88.843227][ T4500] EXT4-fs: dax option not supported [ 88.868869][ T4507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.318'. [ 88.973240][ T4513] program syz.0.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.984652][ T4515] netlink: 48 bytes leftover after parsing attributes in process `syz.3.321'. [ 89.437398][ T4525] loop1: detected capacity change from 0 to 164 [ 89.538141][ T4513] loop0: detected capacity change from 0 to 8192 [ 89.843399][ T4537] loop3: detected capacity change from 0 to 512 [ 89.858537][ T4536] loop2: detected capacity change from 0 to 512 [ 89.885766][ T4537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.896568][ T4536] EXT4-fs: Ignoring removed oldalloc option [ 89.904206][ T4536] EXT4-fs: dax option not supported [ 89.954481][ T4537] EXT4-fs (loop3): orphan file too big: 4294967295 [ 89.963752][ T4537] EXT4-fs (loop3): mount failed [ 89.981752][ T28] audit: type=1400 audit(1776811118.479:312): avc: denied { read write } for pid=4541 comm="syz.4.331" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.027291][ T4546] loop2: detected capacity change from 0 to 512 [ 90.028673][ T28] audit: type=1400 audit(1776811118.479:313): avc: denied { open } for pid=4541 comm="syz.4.331" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.061667][ T4546] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.332: inode has both inline data and extents flags [ 90.066729][ T28] audit: type=1400 audit(1776811118.529:314): avc: denied { write } for pid=4541 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.095201][ T4546] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.096362][ T4546] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.332: couldn't read orphan inode 15 (err -117) [ 90.105662][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.105682][ C0] EXT4-fs (loop2): initial error at time 1776811118: ext4_orphan_get:1397: inode 15 [ 90.105718][ C0] EXT4-fs (loop2): last error at time 1776811118: ext4_orphan_get:1397: inode 15 [ 90.148306][ T4546] loop2: lost filesystem error report for type 5 error -117 [ 90.148767][ T4546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.207468][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.242869][ T4552] tipc: Started in network mode [ 90.249724][ T4552] tipc: Node identity 8a13fb69e81f, cluster identity 4711 [ 90.315961][ T4552] tipc: Enabled bearer , priority 0 [ 90.433628][ T4552] syzkaller0: entered promiscuous mode [ 90.448503][ T4552] syzkaller0: entered allmulticast mode [ 90.470070][ T4552] tipc: Resetting bearer [ 90.606076][ T4550] tipc: Resetting bearer [ 90.643655][ T4550] tipc: Disabling bearer [ 90.709249][ T4532] syz.3.328 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 90.823076][ T4558] loop0: detected capacity change from 0 to 164 [ 90.834099][ T4532] CPU: 1 UID: 0 PID: 4532 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT(full) [ 90.834133][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 90.834211][ T4532] Call Trace: [ 90.834221][ T4532] [ 90.834231][ T4532] __dump_stack+0x1d/0x30 [ 90.834292][ T4532] dump_stack_lvl+0x95/0xd0 [ 90.834317][ T4532] dump_stack+0x15/0x1b [ 90.834383][ T4532] dump_header+0x80/0x240 [ 90.834413][ T4532] oom_kill_process+0x295/0x350 [ 90.834511][ T4532] out_of_memory+0x97d/0xb80 [ 90.834551][ T4532] try_charge_memcg+0x62f/0xa10 [ 90.834594][ T4532] charge_memcg+0x6d/0x120 [ 90.834703][ T4532] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 90.834793][ T4532] __swap_cache_prepare_and_add+0x69/0x4a0 [ 90.834833][ T4532] ? alloc_pages_mpol+0x217/0x260 [ 90.834921][ T4532] swap_cache_alloc_folio+0xa2/0x120 [ 90.834955][ T4532] swap_cluster_readahead+0x25f/0x3c0 [ 90.834999][ T4532] swapin_readahead+0xde/0x840 [ 90.835026][ T4532] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 90.835167][ T4532] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 90.835210][ T4532] ? __rcu_read_unlock+0x4e/0x70 [ 90.835281][ T4532] ? swap_cache_get_folio+0x1e0/0x1f0 [ 90.835312][ T4532] do_swap_page+0x31e/0x2180 [ 90.835368][ T4532] ? css_rstat_updated+0xbb/0x280 [ 90.835403][ T4532] ? __rcu_read_lock+0x36/0x50 [ 90.835441][ T4532] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 90.835475][ T4532] handle_mm_fault+0xb2e/0x2e70 [ 90.835506][ T4532] ? vma_start_read+0x1c7/0x2c0 [ 90.835555][ T4532] do_user_addr_fault+0x62f/0x1050 [ 90.835590][ T4532] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 90.835618][ T4532] ? trace_page_fault_user+0x1f/0xa0 [ 90.835703][ T4532] exc_page_fault+0x62/0xa0 [ 90.835772][ T4532] asm_exc_page_fault+0x26/0x30 [ 90.835794][ T4532] RIP: 0033:0x7f31e7670e07 [ 90.835821][ T4532] Code: 00 00 00 41 57 41 56 41 55 41 54 55 53 48 83 ec 28 80 7f 60 00 8b 6f 50 88 4c 24 0f 0f 85 b3 03 00 00 85 ed 0f 85 a6 03 00 00 <4c> 8b 6a 38 49 89 d4 4c 03 6a 18 c6 47 60 01 8b 52 04 4c 89 2c 24 [ 90.835839][ T4532] RSP: 002b:00007ffdfe5bba50 EFLAGS: 00010246 [ 90.835857][ T4532] RAX: 00007f31e7a15fa0 RBX: 0000000000000026 RCX: 0000000000000001 [ 90.835874][ T4532] RDX: 00007f31e7a16038 RSI: 0000000000000002 RDI: 00007f31e8545720 [ 90.835888][ T4532] RBP: 0000000000000000 R08: 0000000000000001 R09: 00007f31e7a16038 [ 90.835901][ T4532] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000161a3 [ 90.835990][ T4532] R13: 00007f31e7a1609c R14: 0000000000016013 R15: 0000000000000001 [ 90.836014][ T4532] [ 91.119383][ T4532] memory: usage 258736kB, limit 307200kB, failcnt 706 [ 91.126652][ T4532] memory+swap: usage 258928kB, limit 9007199254740988kB, failcnt 0 [ 91.134757][ T4532] kmem: usage 258712kB, limit 9007199254740988kB, failcnt 0 [ 91.192877][ T4532] Memory cgroup stats for /syz3: [ 91.193111][ T4532] cache 0 [ 91.201374][ T4532] rss 4096 [ 91.204568][ T4532] shmem 0 [ 91.208334][ T4532] mapped_file 0 [ 91.212053][ T4532] dirty 0 [ 91.215944][ T4532] writeback 12288 [ 91.239656][ T4532] workingset_refault_anon 202 [ 91.250455][ T4532] workingset_refault_file 2108 [ 91.265151][ T4532] swap 196608 [ 91.275409][ T4532] swapcached 7536640 [ 91.285405][ T4567] loop1: detected capacity change from 0 to 512 [ 91.290094][ T4532] pgpgin 48097 [ 91.295469][ T4532] pgpgout 48094 [ 91.299438][ T4532] pgfault 55992 [ 91.302983][ T4532] pgmajfault 126 [ 91.307140][ T4532] inactive_anon 12288 [ 91.311253][ T4532] active_anon 0 [ 91.315385][ T4532] inactive_file 0 [ 91.325173][ T4532] active_file 0 [ 91.331119][ T4567] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.405752][ T4532] unevictable 0 [ 91.409727][ T4532] hierarchical_memory_limit 314572800 [ 91.430173][ T4567] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 91.430699][ T4532] hierarchical_memsw_limit 9223372036854771712 [ 91.468973][ T4532] total_cache 0 [ 91.478157][ T4532] total_rss 4096 [ 91.484534][ T4532] total_shmem 0 [ 91.489420][ T4532] total_mapped_file 0 [ 91.493533][ T4532] total_dirty 0 [ 91.503420][ T4532] total_writeback 12288 [ 91.507874][ T4532] total_workingset_refault_anon 202 [ 91.513184][ T4532] total_workingset_refault_file 2108 [ 91.531127][ T4532] total_swap 196608 [ 91.541191][ T28] audit: type=1326 audit(1776811120.039:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.0.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67e938c819 code=0x0 [ 91.564010][ T4532] total_swapcached 7536640 [ 91.574535][ T4532] total_pgpgin 48097 [ 91.582807][ T4532] total_pgpgout 48094 [ 91.596739][ T4532] total_pgfault 55992 [ 91.602288][ T4532] total_pgmajfault 126 [ 91.606720][ T4532] total_inactive_anon 12288 [ 91.612861][ T28] audit: type=1326 audit(1776811120.079:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.4.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe989dcc819 code=0x0 [ 91.637068][ T4532] total_active_anon 0 [ 91.642699][ T4532] total_inactive_file 0 [ 91.651309][ T4532] total_active_file 0 [ 91.655421][ T4532] total_unevictable 0 [ 91.659442][ T4532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.328,pid=4532,uid=0 [ 91.674191][ T4532] Memory cgroup out of memory: Killed process 4532 (syz.3.328) total-vm:94296kB, anon-rss:1232kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 91.804809][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 91.824077][ T4592] loop0: detected capacity change from 0 to 1024 [ 91.853974][ T4592] EXT4-fs: Ignoring removed bh option [ 91.892891][ T4592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.906589][ T28] audit: type=1400 audit(1776811120.409:317): avc: denied { map } for pid=4591 comm="syz.0.344" path="socket:[7901]" dev="sockfs" ino=7901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.930640][ T28] audit: type=1400 audit(1776811120.419:318): avc: denied { accept } for pid=4591 comm="syz.0.344" path="socket:[7901]" dev="sockfs" ino=7901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.952007][ T4598] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.955069][ T4592] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.981147][ T4592] openvswitch: netlink: EtherType 0 is less than min 600 [ 92.044218][ T28] audit: type=1400 audit(1776811120.539:319): avc: denied { ioctl } for pid=4591 comm="syz.0.344" path="/68/file1/file1" dev="loop0" ino=15 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.128480][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.620429][ T4598] loop3: detected capacity change from 0 to 8192 [ 92.933819][ T4620] loop2: detected capacity change from 0 to 512 [ 92.942738][ T4620] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.980553][ T4620] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 93.042529][ T4624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.064206][ T4624] EXT4-fs (loop0): orphan file too big: 4294967295 [ 93.070944][ T4624] EXT4-fs (loop0): mount failed [ 93.312896][ T4632] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.517374][ T4634] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.540114][ T4634] EXT4-fs (loop3): 1 truncate cleaned up [ 93.551004][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.841752][ T4619] syz.0.354 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 93.861110][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) [ 93.861196][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.861212][ T4619] Call Trace: [ 93.861221][ T4619] [ 93.861230][ T4619] __dump_stack+0x1d/0x30 [ 93.861268][ T4619] dump_stack_lvl+0x95/0xd0 [ 93.861302][ T4619] dump_stack+0x15/0x1b [ 93.861342][ T4619] dump_header+0x80/0x240 [ 93.861435][ T4619] oom_kill_process+0x295/0x350 [ 93.861532][ T4619] out_of_memory+0x97d/0xb80 [ 93.861559][ T4619] try_charge_memcg+0x62f/0xa10 [ 93.861649][ T4619] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 93.861743][ T4619] __alloc_frozen_pages_noprof+0x18a/0x350 [ 93.861773][ T4619] alloc_pages_mpol+0xb3/0x260 [ 93.861842][ T4619] ? mod_lruvec_state+0xe0/0xf0 [ 93.861894][ T4619] alloc_pages_noprof+0x8f/0x140 [ 93.861978][ T4619] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 93.862026][ T4619] __kvmalloc_node_noprof+0x3d4/0x640 [ 93.862110][ T4619] ? futex_hash_allocate+0x190/0x9a0 [ 93.862130][ T4619] ? futex_hash_allocate+0x190/0x9a0 [ 93.862218][ T4619] futex_hash_allocate+0x190/0x9a0 [ 93.862240][ T4619] ? cap_task_prctl+0x13f/0x6b0 [ 93.862269][ T4619] futex_hash_prctl+0xd8/0xf0 [ 93.862294][ T4619] __se_sys_prctl+0x4f4/0x1400 [ 93.862337][ T4619] __x64_sys_prctl+0x67/0x80 [ 93.862421][ T4619] x64_sys_call+0x2533/0x3020 [ 93.862502][ T4619] do_syscall_64+0x12c/0x3b0 [ 93.862536][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.862563][ T4619] RIP: 0033:0x7f67e938c819 [ 93.862583][ T4619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.862642][ T4619] RSP: 002b:00007f67e7ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 93.862661][ T4619] RAX: ffffffffffffffda RBX: 00007f67e9605fa0 RCX: 00007f67e938c819 [ 93.862704][ T4619] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 93.862853][ T4619] RBP: 00007f67e9422c91 R08: 0000000000000000 R09: 0000000000000000 [ 93.862869][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.862934][ T4619] R13: 00007f67e9606038 R14: 00007f67e9605fa0 R15: 00007ffef69e3608 [ 93.862954][ T4619] [ 93.862996][ T4619] memory: usage 307200kB, limit 307200kB, failcnt 1532 [ 94.095184][ T4619] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 94.103318][ T4619] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 94.111253][ T4619] Memory cgroup stats for /syz0: [ 94.111562][ T4619] cache 4096 [ 94.120023][ T4619] rss 0 [ 94.137195][ T4619] shmem 0 [ 94.144255][ T4619] mapped_file 0 [ 94.156403][ T4619] dirty 0 [ 94.171737][ T4619] writeback 0 [ 94.178007][ T4619] workingset_refault_anon 112 [ 94.182803][ T4619] workingset_refault_file 2647 [ 94.194066][ T4619] swap 196608 [ 94.197764][ T4619] swapcached 5537792 [ 94.201903][ T4619] pgpgin 54887 [ 94.205590][ T4619] pgpgout 54884 [ 94.209260][ T4619] pgfault 57951 [ 94.212844][ T4619] pgmajfault 99 [ 94.216915][ T4619] inactive_anon 8192 [ 94.221059][ T4619] active_anon 0 [ 94.224681][ T4619] inactive_file 0 [ 94.235669][ T4619] active_file 0 [ 94.239311][ T4619] unevictable 4096 [ 94.243169][ T4619] hierarchical_memory_limit 314572800 [ 94.249225][ T4619] hierarchical_memsw_limit 9223372036854771712 [ 94.255883][ T4619] total_cache 4096 [ 94.259785][ T4619] total_rss 0 [ 94.263158][ T4619] total_shmem 0 [ 94.268642][ T4619] total_mapped_file 0 [ 94.273742][ T4619] total_dirty 0 [ 94.274860][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 94.274926][ T28] audit: type=1326 audit(1776811122.769:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.279637][ T4619] total_writeback 0 [ 94.315757][ T4619] total_workingset_refault_anon 112 [ 94.321098][ T28] audit: type=1326 audit(1776811122.769:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.323041][ T4619] total_workingset_refault_file 2647 [ 94.355823][ T4619] total_swap 196608 [ 94.360032][ T4619] total_swapcached 5537792 [ 94.364536][ T4619] total_pgpgin 54887 [ 94.369077][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.376345][ T28] audit: type=1326 audit(1776811122.779:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.390206][ T4619] total_pgpgout 54884 [ 94.403669][ T28] audit: type=1326 audit(1776811122.779:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.429840][ T28] audit: type=1326 audit(1776811122.779:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.454792][ T4619] total_pgfault 57951 [ 94.459069][ T4619] total_pgmajfault 99 [ 94.463838][ T28] audit: type=1326 audit(1776811122.819:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.466388][ T4619] total_inactive_anon 8192 [ 94.496844][ T4619] total_active_anon 0 [ 94.501042][ T4619] total_inactive_file 0 [ 94.536604][ T4619] total_active_file 0 [ 94.540901][ T4619] total_unevictable 4096 [ 94.545289][ T4619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.354,pid=4618,uid=0 [ 94.545792][ T4654] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.559979][ T4619] Memory cgroup out of memory: Killed process 4618 (syz.0.354) total-vm:94296kB, anon-rss:1232kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 94.603239][ T28] audit: type=1326 audit(1776811122.819:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.632775][ T28] audit: type=1326 audit(1776811122.849:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3836cc819 code=0x7ffc0000 [ 94.635459][ T4654] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 94.700554][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 94.742348][ T4660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.368'. [ 94.751693][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.759020][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.785369][ T4619] syz.0.354 (4619) used greatest stack depth: 9336 bytes left [ 94.797863][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 94.845586][ T4662] program syz.4.367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.121616][ T4671] set_capacity_and_notify: 3 callbacks suppressed [ 95.121647][ T4671] loop1: detected capacity change from 0 to 512 [ 95.247552][ T4671] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.262509][ T4671] EXT4-fs (loop1): mount failed [ 95.269509][ T4677] 9p: Unknown Cache mode or invalid value l [ 95.361038][ T4670] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.496355][ T4679] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.786167][ T4682] loop2: detected capacity change from 0 to 512 [ 95.869314][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.935903][ T4682] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.281321][ T4691] serio: Serial port ttyS3 [ 96.582131][ T4662] loop4: detected capacity change from 0 to 8192 [ 96.752109][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.167142][ T4708] loop1: detected capacity change from 0 to 8192 [ 98.194944][ T4708] syz.1.381: attempt to access beyond end of device [ 98.194944][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.218928][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.286720][ T4708] syz.1.381: attempt to access beyond end of device [ 98.286720][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.310376][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.329583][ T4708] syz.1.381: attempt to access beyond end of device [ 98.329583][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.345183][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.354645][ T4708] syz.1.381: attempt to access beyond end of device [ 98.354645][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.368399][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.376908][ T4708] syz.1.381: attempt to access beyond end of device [ 98.376908][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.390505][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.432863][ T4708] syz.1.381: attempt to access beyond end of device [ 98.432863][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.447473][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.464038][ T4708] syz.1.381: attempt to access beyond end of device [ 98.464038][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.501588][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.530625][ T4708] syz.1.381: attempt to access beyond end of device [ 98.530625][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.557216][ T4714] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 98.572615][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.590154][ T4714] team0: Port device dummy0 added [ 98.596533][ T4708] syz.1.381: attempt to access beyond end of device [ 98.596533][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.619839][ T4714] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 98.683131][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 98.691790][ T4708] syz.1.381: attempt to access beyond end of device [ 98.691790][ T4708] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.705164][ T4708] Buffer I/O error on dev loop1, logical block 57847, async page read [ 99.232541][ T4714] team0: Port device dummy0 removed [ 99.255960][ T4714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.324873][ T4714] syz.4.382 (4714) used greatest stack depth: 9152 bytes left [ 99.485827][ T4740] program syz.3.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.543452][ T4747] loop1: detected capacity change from 0 to 512 [ 99.551805][ T4747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.558946][ T4747] EXT4-fs: dax option not supported [ 99.710860][ T4753] loop1: detected capacity change from 0 to 164 [ 99.862763][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 99.872123][ T4740] loop3: detected capacity change from 0 to 8192 [ 101.719514][ T4787] loop0: detected capacity change from 0 to 1024 [ 101.727349][ T4789] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 101.735196][ T4787] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 101.746850][ T4789] netlink: 152 bytes leftover after parsing attributes in process `syz.4.412'. [ 101.757165][ T4787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.878572][ T4796] loop4: detected capacity change from 0 to 164 [ 102.045310][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 102.045338][ T28] audit: type=1400 audit(1776811386.558:468): avc: denied { mounton } for pid=4786 comm="syz.0.411" path="/81/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.324724][ T4804] 9p: Could not find request transport: f [ 102.605245][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.628413][ T28] audit: type=1400 audit(1776811387.152:469): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.699996][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 103.568952][ T4851] 9p: Unknown Cache mode or invalid value l [ 104.597630][ T4951] loop4: detected capacity change from 0 to 8192 [ 104.742144][ T4951] bio_check_eod: 6424 callbacks suppressed [ 104.742160][ T4951] syz.4.433: attempt to access beyond end of device [ 104.742160][ T4951] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 104.854021][ T4951] buffer_io_error: 6424 callbacks suppressed [ 104.854041][ T4951] Buffer I/O error on dev loop4, logical block 57847, async page read [ 104.877874][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 104.930558][ T4951] syz.4.433: attempt to access beyond end of device [ 104.930558][ T4951] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.012822][ T4951] Buffer I/O error on dev loop4, logical block 57847, async page read [ 105.079145][ T4951] syz.4.433: attempt to access beyond end of device [ 105.079145][ T4951] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.126013][ T4951] Buffer I/O error on dev loop4, logical block 57847, async page read [ 105.915708][ T4983] loop3: detected capacity change from 0 to 512 [ 105.926803][ T4983] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 106.081394][ T4983] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 106.173797][ T4987] loop1: detected capacity change from 0 to 1024 [ 106.181681][ T4987] EXT4-fs: Ignoring removed bh option [ 106.219188][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.225426][ T28] audit: type=1400 audit(1776811390.778:470): avc: denied { create } for pid=4990 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.390586][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.506562][ T5002] loop4: detected capacity change from 0 to 128 [ 106.987926][ T5015] loop1: detected capacity change from 0 to 164 [ 107.083131][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 107.092342][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 107.148659][ T5019] loop2: detected capacity change from 0 to 512 [ 107.162120][ T5019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.219981][ T5019] EXT4-fs (loop2): orphan file too big: 4294967295 [ 107.270113][ T5019] EXT4-fs (loop2): mount failed [ 107.609897][ T5031] 9p: Unknown Cache mode or invalid value l [ 107.747357][ T5029] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 108.221129][ T5013] syz.2.453 (5013) used greatest stack depth: 8912 bytes left [ 108.311064][ T5052] loop1: detected capacity change from 0 to 512 [ 108.332980][ T5052] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.383580][ T5056] loop4: detected capacity change from 0 to 512 [ 108.483159][ T5057] loop0: detected capacity change from 0 to 512 [ 108.515787][ T28] audit: type=1400 audit(1776811392.964:471): avc: denied { bind } for pid=5048 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.561923][ T5054] sctp: [Deprecated]: syz.2.464 (pid 5054) Use of int in max_burst socket option. [ 108.561923][ T5054] Use struct sctp_assoc_value instead [ 108.590464][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.607480][ T5057] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.626394][ T5057] EXT4-fs (loop0): mount failed [ 108.683145][ T5056] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.701040][ T28] audit: type=1400 audit(1776811393.115:472): avc: denied { ioctl } for pid=5048 comm="syz.2.464" path="socket:[9553]" dev="sockfs" ino=9553 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.741208][ T5052] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 108.782776][ T28] audit: type=1400 audit(1776811393.125:473): avc: denied { ioctl } for pid=5048 comm="syz.2.464" path="socket:[9555]" dev="sockfs" ino=9555 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.784538][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.873960][ T5065] loop3: detected capacity change from 0 to 2048 [ 108.916594][ T5065] loop3: p1 p2 [ 108.968015][ T3008] loop3: p1 p2 [ 109.023915][ T3008] loop3: p1 p2 [ 109.272777][ T5071] FAULT_INJECTION: forcing a failure. [ 109.272777][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.400966][ T5071] CPU: 0 UID: 0 PID: 5071 Comm: syz.2.469 Not tainted syzkaller #0 PREEMPT(full) [ 109.400999][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.401016][ T5071] Call Trace: [ 109.401025][ T5071] [ 109.401035][ T5071] __dump_stack+0x1d/0x30 [ 109.401126][ T5071] dump_stack_lvl+0x95/0xd0 [ 109.401152][ T5071] dump_stack+0x15/0x1b [ 109.401182][ T5071] should_fail_ex+0x263/0x280 [ 109.401222][ T5071] should_fail+0xb/0x20 [ 109.401280][ T5071] should_fail_usercopy+0x1a/0x20 [ 109.401323][ T5071] _copy_from_user+0x1c/0xb0 [ 109.401355][ T5071] ___sys_sendmsg+0xc1/0x1e0 [ 109.401472][ T5071] __x64_sys_sendmsg+0xd4/0x160 [ 109.401514][ T5071] x64_sys_call+0x194c/0x3020 [ 109.401549][ T5071] do_syscall_64+0x12c/0x3b0 [ 109.401627][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.401731][ T5071] RIP: 0033:0x7fc3836cc819 [ 109.401750][ T5071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.401799][ T5071] RSP: 002b:00007fc38211f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.401820][ T5071] RAX: ffffffffffffffda RBX: 00007fc383945fa0 RCX: 00007fc3836cc819 [ 109.401892][ T5071] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 109.401978][ T5071] RBP: 00007fc38211f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.401994][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.402010][ T5071] R13: 00007fc383946038 R14: 00007fc383945fa0 R15: 00007ffd84d44248 [ 109.402035][ T5071] [ 110.245321][ T5090] FAULT_INJECTION: forcing a failure. [ 110.245321][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 110.258442][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: syz.4.471 Not tainted syzkaller #0 PREEMPT(full) [ 110.258476][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.258491][ T5090] Call Trace: [ 110.258500][ T5090] [ 110.258508][ T5090] __dump_stack+0x1d/0x30 [ 110.258537][ T5090] dump_stack_lvl+0x95/0xd0 [ 110.258638][ T5090] dump_stack+0x15/0x1b [ 110.258669][ T5090] should_fail_ex+0x263/0x280 [ 110.258711][ T5090] should_failslab+0x8c/0xb0 [ 110.258752][ T5090] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 110.258777][ T5090] ? dup_task_struct+0x5b/0x660 [ 110.258808][ T5090] ? _parse_integer_limit+0x170/0x190 [ 110.258835][ T5090] dup_task_struct+0x5b/0x660 [ 110.258861][ T5090] ? copy_process+0x57a/0x23a0 [ 110.258889][ T5090] copy_process+0x58b/0x23a0 [ 110.258992][ T5090] ? kstrtouint+0x76/0xc0 [ 110.259040][ T5090] ? 0xffffffff81000000 [ 110.259053][ T5090] ? __rcu_read_unlock+0x4e/0x70 [ 110.259081][ T5090] kernel_clone+0x1a5/0x5e0 [ 110.259114][ T5090] ? vfs_write+0x86e/0x9f0 [ 110.259199][ T5090] __x64_sys_clone+0x143/0x180 [ 110.259256][ T5090] x64_sys_call+0x1222/0x3020 [ 110.259292][ T5090] do_syscall_64+0x12c/0x3b0 [ 110.259325][ T5090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.259352][ T5090] RIP: 0033:0x7fe989dcc819 [ 110.259375][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.259393][ T5090] RSP: 002b:00007fe98881efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 110.259483][ T5090] RAX: ffffffffffffffda RBX: 00007fe98a045fa0 RCX: 00007fe989dcc819 [ 110.259497][ T5090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c800411 [ 110.259509][ T5090] RBP: 00007fe98881f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.259523][ T5090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 110.259535][ T5090] R13: 00007fe98a046038 R14: 00007fe98a045fa0 R15: 00007ffe6f774a98 [ 110.259554][ T5090] [ 110.716734][ T5077] udevd[5077]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.843766][ T5112] loop1: detected capacity change from 0 to 512 [ 110.859721][ T5106] loop2: detected capacity change from 0 to 512 [ 110.882143][ T5108] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 110.903709][ T5106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.919127][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.932969][ T5116] 9p: Unknown Cache mode or invalid value l [ 110.939050][ T5112] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.974944][ T5106] EXT4-fs (loop2): orphan file too big: 4294967295 [ 110.982638][ T28] audit: type=1400 audit(1776811395.561:474): avc: denied { setattr } for pid=5109 comm="syz.1.478" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.020437][ T5106] EXT4-fs (loop2): mount failed [ 111.028344][ T5111] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.039100][ T28] audit: type=1400 audit(1776811395.601:475): avc: denied { remount } for pid=5109 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.090504][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.402254][ T5126] loop1: detected capacity change from 0 to 512 [ 111.433877][ T5126] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 111.511296][ T5126] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 111.792830][ T28] audit: type=1400 audit(1776811396.386:476): avc: denied { setopt } for pid=5137 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.815003][ T5138] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 111.847809][ T5138] bond0: (slave dummy0): Releasing backup interface [ 111.933301][ T5138] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.015287][ T5140] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 112.089057][ T5138] team0: Failed to send options change via netlink (err -105) [ 112.147215][ T5138] team0: Port device dummy0 added [ 112.200848][ T5141] ±ÿ: renamed from team_slave_1 (while UP) [ 112.333014][ T5140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.379769][ T5119] loop4: detected capacity change from 0 to 8192 [ 112.407824][ T5140] team0: Failed to send options change via netlink (err -105) [ 112.430115][ T5140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.441377][ T5140] team0: Port device dummy0 removed [ 112.460375][ T5144] loop1: detected capacity change from 0 to 512 [ 112.482045][ T5140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.482963][ T5119] syz.4.480: attempt to access beyond end of device [ 112.482963][ T5119] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.506397][ T5119] Buffer I/O error on dev loop4, logical block 57847, async page read [ 112.519939][ T5119] syz.4.480: attempt to access beyond end of device [ 112.519939][ T5119] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.525965][ T5144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.539672][ T5119] Buffer I/O error on dev loop4, logical block 57847, async page read [ 112.626869][ T5144] EXT4-fs (loop1): 1 orphan inode deleted [ 112.644142][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 112.670153][ T28] audit: type=1400 audit(1776811397.262:477): avc: denied { mount } for pid=5147 comm="syz.2.488" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.692775][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.707372][ T5119] syz.4.480: attempt to access beyond end of device [ 112.707372][ T5119] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.722702][ T5119] Buffer I/O error on dev loop4, logical block 57847, async page read [ 112.732333][ T5150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 112.755484][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.760200][ T5119] syz.4.480: attempt to access beyond end of device [ 112.760200][ T5119] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.789914][ T5150] bridge0: entered promiscuous mode [ 112.819239][ T5119] Buffer I/O error on dev loop4, logical block 57847, async page read [ 112.828558][ T5153] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 112.852296][ T5153] 9p: Unknown Cache mode or invalid value l [ 113.000928][ T5148] loop2: detected capacity change from 0 to 764 [ 113.056440][ T5148] rock: directory entry would overflow storage [ 113.074273][ T5148] rock: sig=0x4654, size=5, remaining=4 [ 113.085822][ T5167] loop3: detected capacity change from 0 to 512 [ 113.104716][ T5148] syz.2.488 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.116343][ T5167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.154116][ T5167] EXT4-fs (loop3): orphan file too big: 4294967295 [ 113.160889][ T5167] EXT4-fs (loop3): mount failed [ 113.394728][ T5180] loop0: detected capacity change from 0 to 164 [ 113.992343][ T5198] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 114.039988][ T5198] 9p: Unknown Cache mode or invalid value l [ 114.535361][ T5201] program syz.1.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.611078][ T5203] netlink: 'syz.2.510': attribute type 21 has an invalid length. [ 114.630618][ T5203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.510'. [ 114.717126][ T5207] FAULT_INJECTION: forcing a failure. [ 114.717126][ T5207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.732280][ T5191] loop0: detected capacity change from 0 to 8192 [ 114.761466][ T5207] CPU: 0 UID: 0 PID: 5207 Comm: syz.2.512 Not tainted syzkaller #0 PREEMPT(full) [ 114.761574][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.761589][ T5207] Call Trace: [ 114.761595][ T5207] [ 114.761602][ T5207] __dump_stack+0x1d/0x30 [ 114.761640][ T5207] dump_stack_lvl+0x95/0xd0 [ 114.761673][ T5207] dump_stack+0x15/0x1b [ 114.761699][ T5207] should_fail_ex+0x263/0x280 [ 114.761731][ T5207] should_fail+0xb/0x20 [ 114.761820][ T5207] should_fail_usercopy+0x1a/0x20 [ 114.761898][ T5207] _copy_to_user+0x20/0xa0 [ 114.761929][ T5207] simple_read_from_buffer+0xb5/0x130 [ 114.761966][ T5207] proc_fail_nth_read+0x10e/0x150 [ 114.762009][ T5207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.762041][ T5207] vfs_read+0x1ab/0x7f0 [ 114.762146][ T5207] ? __rcu_read_unlock+0x4e/0x70 [ 114.762180][ T5207] ? __fget_files+0x184/0x1c0 [ 114.762260][ T5207] ? mutex_lock+0x57/0x90 [ 114.762333][ T5207] ksys_read+0xdc/0x1a0 [ 114.762385][ T5207] __x64_sys_read+0x40/0x50 [ 114.762419][ T5207] x64_sys_call+0x2886/0x3020 [ 114.762479][ T5207] do_syscall_64+0x12c/0x3b0 [ 114.762581][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.762675][ T5207] RIP: 0033:0x7fc38368d04e [ 114.762760][ T5207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.762849][ T5207] RSP: 002b:00007fc38211efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.762870][ T5207] RAX: ffffffffffffffda RBX: 00007fc38211f6c0 RCX: 00007fc38368d04e [ 114.762934][ T5207] RDX: 000000000000000f RSI: 00007fc38211f0a0 RDI: 0000000000000004 [ 114.762947][ T5207] RBP: 00007fc38211f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.762959][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.762971][ T5207] R13: 00007fc383946038 R14: 00007fc383945fa0 R15: 00007ffd84d44248 [ 114.763036][ T5207] [ 114.967526][ T5191] syz.0.505: attempt to access beyond end of device [ 114.967526][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 114.990317][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.013263][ T5191] syz.0.505: attempt to access beyond end of device [ 115.013263][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.050424][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.069758][ T5191] syz.0.505: attempt to access beyond end of device [ 115.069758][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.090860][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.103614][ T5191] syz.0.505: attempt to access beyond end of device [ 115.103614][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.119403][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.128509][ T5191] syz.0.505: attempt to access beyond end of device [ 115.128509][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.145410][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.171529][ T5191] syz.0.505: attempt to access beyond end of device [ 115.171529][ T5191] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.191445][ T5191] Buffer I/O error on dev loop0, logical block 57847, async page read [ 115.282499][ T5201] loop1: detected capacity change from 0 to 8192 [ 115.492785][ T5230] loop3: detected capacity change from 0 to 512 [ 116.048230][ T5234] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 116.064944][ T5234] team0: Failed to send options change via netlink (err -105) [ 116.081363][ T5234] team0: Port device dummy0 added [ 116.110028][ T5234] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 116.139197][ T5234] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 116.198727][ T5234] team0: Failed to send options change via netlink (err -105) [ 116.226579][ T5239] FAULT_INJECTION: forcing a failure. [ 116.226579][ T5239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.249837][ T5234] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 116.268732][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.4.523 Not tainted syzkaller #0 PREEMPT(full) [ 116.268761][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.268777][ T5239] Call Trace: [ 116.268785][ T5239] [ 116.268794][ T5239] __dump_stack+0x1d/0x30 [ 116.268865][ T5239] dump_stack_lvl+0x95/0xd0 [ 116.268948][ T5239] dump_stack+0x15/0x1b [ 116.268978][ T5239] should_fail_ex+0x263/0x280 [ 116.269020][ T5239] should_fail+0xb/0x20 [ 116.269087][ T5239] should_fail_usercopy+0x1a/0x20 [ 116.269121][ T5239] _copy_from_user+0x1c/0xb0 [ 116.269147][ T5239] io_submit_one+0x52/0x1350 [ 116.269227][ T5239] __se_sys_io_submit+0xfb/0x280 [ 116.269267][ T5239] __x64_sys_io_submit+0x43/0x50 [ 116.269304][ T5239] x64_sys_call+0x19d5/0x3020 [ 116.269340][ T5239] do_syscall_64+0x12c/0x3b0 [ 116.269401][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.269439][ T5239] RIP: 0033:0x7fe989dcc819 [ 116.269457][ T5239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.269486][ T5239] RSP: 002b:00007fe98881f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 116.269509][ T5239] RAX: ffffffffffffffda RBX: 00007fe98a045fa0 RCX: 00007fe989dcc819 [ 116.269526][ T5239] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007fe98ab84000 [ 116.269694][ T5239] RBP: 00007fe98881f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.269711][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.269779][ T5239] R13: 00007fe98a046038 R14: 00007fe98a045fa0 R15: 00007ffe6f774a98 [ 116.269804][ T5239] [ 116.355803][ T28] audit: type=1400 audit(1776811400.884:478): avc: denied { create } for pid=5241 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.362095][ T5234] team0: Port device dummy0 removed [ 116.463048][ T5247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 116.472248][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 116.512661][ T5234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.535698][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 116.568963][ T5237] ±ÿ: renamed from team_slave_1 (while UP) [ 116.581993][ T5251] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 116.621689][ T5251] 9p: Unknown Cache mode or invalid value l [ 117.478850][ T5267] program syz.1.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.604416][ T28] audit: type=1400 audit(1776811402.232:479): avc: denied { associate } for pid=5268 comm="syz.2.533" name="file2" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.821998][ T5285] loop0: detected capacity change from 0 to 512 [ 117.829987][ T5285] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 117.832206][ T28] audit: type=1400 audit(1776811402.453:480): avc: denied { bind } for pid=5284 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.968362][ T5267] loop1: detected capacity change from 0 to 8192 [ 118.486897][ T5292] loop4: detected capacity change from 0 to 8192 [ 118.561983][ T5298] FAULT_INJECTION: forcing a failure. [ 118.561983][ T5298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.585553][ T5298] CPU: 1 UID: 0 PID: 5298 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) [ 118.585618][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.585632][ T5298] Call Trace: [ 118.585641][ T5298] [ 118.585651][ T5298] __dump_stack+0x1d/0x30 [ 118.585686][ T5298] dump_stack_lvl+0x95/0xd0 [ 118.585753][ T5298] dump_stack+0x15/0x1b [ 118.585780][ T5298] should_fail_ex+0x263/0x280 [ 118.585897][ T5298] should_fail+0xb/0x20 [ 118.585928][ T5298] should_fail_usercopy+0x1a/0x20 [ 118.585965][ T5298] _copy_from_user+0x1c/0xb0 [ 118.585993][ T5298] ___sys_sendmsg+0xc1/0x1e0 [ 118.586039][ T5298] __x64_sys_sendmsg+0xd4/0x160 [ 118.586150][ T5298] x64_sys_call+0x194c/0x3020 [ 118.586181][ T5298] do_syscall_64+0x12c/0x3b0 [ 118.586243][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.586307][ T5298] RIP: 0033:0x7f31daa3c819 [ 118.586324][ T5298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.586357][ T5298] RSP: 002b:00007f31d9497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.586377][ T5298] RAX: ffffffffffffffda RBX: 00007f31dacb5fa0 RCX: 00007f31daa3c819 [ 118.586391][ T5298] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 118.586404][ T5298] RBP: 00007f31d9497090 R08: 0000000000000000 R09: 0000000000000000 [ 118.586417][ T5298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.586429][ T5298] R13: 00007f31dacb6038 R14: 00007f31dacb5fa0 R15: 00007fffffec6548 [ 118.586484][ T5298] [ 118.602836][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 118.775342][ T5299] vxlan0: entered promiscuous mode [ 118.782205][ T4907] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.791139][ T4907] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.801657][ T4907] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.838574][ T4907] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.716479][ T5328] netlink: 642 bytes leftover after parsing attributes in process `syz.2.553'. [ 120.379565][ T5332] loop1: detected capacity change from 0 to 8192 [ 120.416073][ T5330] loop0: detected capacity change from 0 to 8192 [ 120.442721][ T5332] bio_check_eod: 2190 callbacks suppressed [ 120.442741][ T5332] syz.1.555: attempt to access beyond end of device [ 120.442741][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.465022][ T5332] buffer_io_error: 2190 callbacks suppressed [ 120.465040][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.476773][ T5351] loop2: detected capacity change from 0 to 1024 [ 120.490372][ T5330] syz.0.554: attempt to access beyond end of device [ 120.490372][ T5330] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.492526][ T28] audit: type=1400 audit(1776811405.139:481): avc: denied { create } for pid=5358 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.505976][ T5330] Buffer I/O error on dev loop0, logical block 57847, async page read [ 120.540401][ T5332] syz.1.555: attempt to access beyond end of device [ 120.540401][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.540466][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.540504][ T5332] syz.1.555: attempt to access beyond end of device [ 120.540504][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.540605][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.540668][ T5332] syz.1.555: attempt to access beyond end of device [ 120.540668][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.540689][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.540773][ T5332] syz.1.555: attempt to access beyond end of device [ 120.540773][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.569159][ T28] audit: type=1400 audit(1776811405.169:482): avc: denied { create } for pid=5358 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.583086][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.587831][ T5351] EXT4-fs: Mount option(s) incompatible with ext3 [ 120.631966][ T5351] loop2: detected capacity change from 0 to 512 [ 120.694554][ T5330] syz.0.554: attempt to access beyond end of device [ 120.694554][ T5330] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.709472][ T5332] syz.1.555: attempt to access beyond end of device [ 120.709472][ T5332] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.715644][ T5330] Buffer I/O error on dev loop0, logical block 57847, async page read [ 120.734713][ T5330] syz.0.554: attempt to access beyond end of device [ 120.734713][ T5330] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.750626][ T5330] Buffer I/O error on dev loop0, logical block 57847, async page read [ 120.767543][ T5330] syz.0.554: attempt to access beyond end of device [ 120.767543][ T5330] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 120.774519][ T5351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.782437][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.782499][ T5332] Buffer I/O error on dev loop1, logical block 57847, async page read [ 120.816601][ T5351] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.901085][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.949101][ T5374] FAULT_INJECTION: forcing a failure. [ 120.949101][ T5374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.963499][ T5374] CPU: 1 UID: 0 PID: 5374 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT(full) [ 120.963529][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.963542][ T5374] Call Trace: [ 120.963550][ T5374] [ 120.963559][ T5374] __dump_stack+0x1d/0x30 [ 120.963637][ T5374] dump_stack_lvl+0x95/0xd0 [ 120.963661][ T5374] dump_stack+0x15/0x1b [ 120.963760][ T5374] should_fail_ex+0x263/0x280 [ 120.963791][ T5374] should_fail+0xb/0x20 [ 120.963818][ T5374] should_fail_usercopy+0x1a/0x20 [ 120.963934][ T5374] _copy_from_user+0x1c/0xb0 [ 120.963955][ T5374] ___sys_sendmsg+0xc1/0x1e0 [ 120.964064][ T5374] __x64_sys_sendmsg+0xd4/0x160 [ 120.964094][ T5374] x64_sys_call+0x194c/0x3020 [ 120.964126][ T5374] do_syscall_64+0x12c/0x3b0 [ 120.964151][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.964209][ T5374] RIP: 0033:0x7f31daa3c819 [ 120.964224][ T5374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.964241][ T5374] RSP: 002b:00007f31d9497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.964262][ T5374] RAX: ffffffffffffffda RBX: 00007f31dacb5fa0 RCX: 00007f31daa3c819 [ 120.964346][ T5374] RDX: 00000000000448d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 120.964387][ T5374] RBP: 00007f31d9497090 R08: 0000000000000000 R09: 0000000000000000 [ 120.964404][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.964418][ T5374] R13: 00007f31dacb6038 R14: 00007f31dacb5fa0 R15: 00007fffffec6548 [ 120.964436][ T5374] [ 121.260001][ T5381] SELinux: Context œÐQ' is not valid (left unmapped). [ 121.303672][ T28] audit: type=1400 audit(1776811405.923:483): avc: denied { remount } for pid=5380 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.477320][ T28] audit: type=1400 audit(1776811406.124:484): avc: denied { ioctl } for pid=5385 comm="syz.3.573" path="socket:[11001]" dev="sockfs" ino=11001 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.502582][ T28] audit: type=1400 audit(1776811406.124:485): avc: denied { bind } for pid=5385 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.535227][ T28] audit: type=1400 audit(1776811406.185:486): avc: denied { write } for pid=5385 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.557020][ T5392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.565148][ T5392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.760721][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 121.926064][ T5405] loop4: detected capacity change from 0 to 512 [ 121.938798][ T5405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.951453][ T5405] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.041015][ T5409] loop0: detected capacity change from 0 to 512 [ 122.058131][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.071695][ T5409] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.790714][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.943849][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.978973][ T28] audit: type=1400 audit(1776811407.633:487): avc: denied { wake_alarm } for pid=5420 comm="syz.0.580" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.002610][ T5422] loop4: detected capacity change from 0 to 2048 [ 123.107251][ T5422] xt_ecn: cannot match TCP bits for non-tcp packets [ 123.115734][ T28] audit: type=1400 audit(1776811407.773:488): avc: denied { create } for pid=5414 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.135459][ T28] audit: type=1400 audit(1776811407.773:489): avc: denied { ioctl } for pid=5414 comm="syz.4.578" path="socket:[10161]" dev="sockfs" ino=10161 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.160676][ T28] audit: type=1400 audit(1776811407.824:490): avc: denied { map } for pid=5420 comm="syz.0.580" path="socket:[11085]" dev="sockfs" ino=11085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.184879][ T28] audit: type=1400 audit(1776811407.824:491): avc: denied { accept } for pid=5420 comm="syz.0.580" path="socket:[11085]" dev="sockfs" ino=11085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.674377][ T5425] FAULT_INJECTION: forcing a failure. [ 123.674377][ T5425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.687734][ T5425] CPU: 0 UID: 0 PID: 5425 Comm: syz.4.581 Not tainted syzkaller #0 PREEMPT(full) [ 123.687767][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.687780][ T5425] Call Trace: [ 123.687787][ T5425] [ 123.687795][ T5425] __dump_stack+0x1d/0x30 [ 123.687872][ T5425] dump_stack_lvl+0x95/0xd0 [ 123.687901][ T5425] dump_stack+0x15/0x1b [ 123.687972][ T5425] should_fail_ex+0x263/0x280 [ 123.688008][ T5425] should_fail+0xb/0x20 [ 123.688042][ T5425] should_fail_usercopy+0x1a/0x20 [ 123.688135][ T5425] _copy_from_user+0x1c/0xb0 [ 123.688170][ T5425] ___sys_sendmsg+0xc1/0x1e0 [ 123.688206][ T5425] __x64_sys_sendmsg+0xd4/0x160 [ 123.688234][ T5425] x64_sys_call+0x194c/0x3020 [ 123.688314][ T5425] do_syscall_64+0x12c/0x3b0 [ 123.688337][ T5425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.688363][ T5425] RIP: 0033:0x7fe989dcc819 [ 123.688377][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.688406][ T5425] RSP: 002b:00007fe98881f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.688423][ T5425] RAX: ffffffffffffffda RBX: 00007fe98a045fa0 RCX: 00007fe989dcc819 [ 123.688435][ T5425] RDX: 0000000004000000 RSI: 0000200000000a40 RDI: 0000000000000003 [ 123.688447][ T5425] RBP: 00007fe98881f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.688458][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.688469][ T5425] R13: 00007fe98a046038 R14: 00007fe98a045fa0 R15: 00007ffe6f774a98 [ 123.688522][ T5425] [ 124.173237][ T5381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.298189][ T5433] loop3: detected capacity change from 0 to 164 [ 124.310674][ T5433] iso9660: Unknown parameter ' ' [ 124.385146][ T5443] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 124.402817][ T5443] 9p: Unknown Cache mode or invalid value l [ 125.719882][ T5459] loop2: detected capacity change from 0 to 8192 [ 126.140670][ T5447] loop0: detected capacity change from 0 to 512 [ 126.629270][ T5451] loop1: detected capacity change from 0 to 512 [ 128.066850][ T5466] loop4: detected capacity change from 0 to 512 [ 128.081610][ T5466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.146080][ T5466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.166058][ T5466] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.185560][ T5472] loop1: detected capacity change from 0 to 512 [ 128.197750][ T28] audit: type=1400 audit(1776811412.880:492): avc: denied { write open } for pid=5465 comm="syz.4.594" path="/110/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.199313][ T5473] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 128.268840][ T5472] EXT4-fs (loop1): 1 truncate cleaned up [ 128.279680][ T5472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.328895][ T28] audit: type=1400 audit(1776811413.010:493): avc: denied { append } for pid=5468 comm="syz.1.596" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.446453][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.502923][ T4879] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.509722][ T28] audit: type=1400 audit(1776811413.191:494): avc: denied { map } for pid=5465 comm="syz.4.594" path="/110/bus/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.534223][ T28] audit: type=1400 audit(1776811413.211:495): avc: denied { name_bind } for pid=5480 comm="syz.0.599" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 128.616317][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.000941][ T5502] loop2: detected capacity change from 0 to 1024 [ 129.019123][ T5504] netlink: 'syz.4.605': attribute type 10 has an invalid length. [ 129.053690][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.096382][ T5508] FAULT_INJECTION: forcing a failure. [ 129.096382][ T5508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.204204][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.4.606 Not tainted syzkaller #0 PREEMPT(full) [ 129.204311][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.204325][ T5508] Call Trace: [ 129.204333][ T5508] [ 129.204342][ T5508] __dump_stack+0x1d/0x30 [ 129.204379][ T5508] dump_stack_lvl+0x95/0xd0 [ 129.204409][ T5508] dump_stack+0x15/0x1b [ 129.204458][ T5508] should_fail_ex+0x263/0x280 [ 129.204501][ T5508] should_fail+0xb/0x20 [ 129.204539][ T5508] should_fail_usercopy+0x1a/0x20 [ 129.204669][ T5508] _copy_to_user+0x20/0xa0 [ 129.204719][ T5508] simple_read_from_buffer+0xb5/0x130 [ 129.204813][ T5508] proc_fail_nth_read+0x10e/0x150 [ 129.204858][ T5508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.204899][ T5508] vfs_read+0x1ab/0x7f0 [ 129.204990][ T5508] ? __rcu_read_unlock+0x4e/0x70 [ 129.205026][ T5508] ? __fget_files+0x184/0x1c0 [ 129.205120][ T5508] ? mutex_lock+0x57/0x90 [ 129.205171][ T5508] ksys_read+0xdc/0x1a0 [ 129.205208][ T5508] __x64_sys_read+0x40/0x50 [ 129.205246][ T5508] x64_sys_call+0x2886/0x3020 [ 129.205301][ T5508] do_syscall_64+0x12c/0x3b0 [ 129.205335][ T5508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.205363][ T5508] RIP: 0033:0x7fe989d8d04e [ 129.205380][ T5508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.205481][ T5508] RSP: 002b:00007fe98881efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.205507][ T5508] RAX: ffffffffffffffda RBX: 00007fe98881f6c0 RCX: 00007fe989d8d04e [ 129.205529][ T5508] RDX: 000000000000000f RSI: 00007fe98881f0a0 RDI: 0000000000000005 [ 129.205542][ T5508] RBP: 00007fe98881f090 R08: 0000000000000000 R09: 0000000000000000 [ 129.205554][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.205569][ T5508] R13: 00007fe98a046038 R14: 00007fe98a045fa0 R15: 00007ffe6f774a98 [ 129.205592][ T5508] [ 129.232247][ T28] audit: type=1400 audit(1776811413.875:496): avc: denied { execute } for pid=5501 comm="syz.2.603" path="/124/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.462403][ T5510] loop1: detected capacity change from 0 to 512 [ 129.498241][ T28] audit: type=1400 audit(1776811413.935:497): avc: denied { append } for pid=5501 comm="syz.2.603" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.579447][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.944639][ T5533] loop1: detected capacity change from 0 to 164 [ 130.155935][ T5546] 9p: Unknown Cache mode or invalid value l [ 130.235303][ T5541] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.408825][ T5549] loop4: detected capacity change from 0 to 512 [ 130.534115][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.765973][ T5555] netlink: 52 bytes leftover after parsing attributes in process `syz.1.622'. [ 131.005391][ T5559] loop3: detected capacity change from 0 to 512 [ 131.025055][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.043390][ T5559] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.813262][ T28] audit: type=1400 audit(1776811416.497:498): avc: denied { write } for pid=5563 comm="syz.0.625" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.995748][ T5568] FAULT_INJECTION: forcing a failure. [ 131.995748][ T5568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.008916][ T5568] CPU: 1 UID: 0 PID: 5568 Comm: syz.0.626 Not tainted syzkaller #0 PREEMPT(full) [ 132.008947][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.009030][ T5568] Call Trace: [ 132.009036][ T5568] [ 132.009043][ T5568] __dump_stack+0x1d/0x30 [ 132.009068][ T5568] dump_stack_lvl+0x95/0xd0 [ 132.009117][ T5568] dump_stack+0x15/0x1b [ 132.009138][ T5568] should_fail_ex+0x263/0x280 [ 132.009251][ T5568] should_fail+0xb/0x20 [ 132.009277][ T5568] should_fail_usercopy+0x1a/0x20 [ 132.009307][ T5568] _copy_from_user+0x1c/0xb0 [ 132.009324][ T5568] io_submit_one+0x52/0x1350 [ 132.009419][ T5568] __se_sys_io_submit+0xfb/0x280 [ 132.009447][ T5568] __x64_sys_io_submit+0x43/0x50 [ 132.009510][ T5568] x64_sys_call+0x19d5/0x3020 [ 132.009535][ T5568] do_syscall_64+0x12c/0x3b0 [ 132.009559][ T5568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.009644][ T5568] RIP: 0033:0x7f67e938c819 [ 132.009658][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.009675][ T5568] RSP: 002b:00007f67e7ddf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 132.009693][ T5568] RAX: ffffffffffffffda RBX: 00007f67e9605fa0 RCX: 00007f67e938c819 [ 132.009705][ T5568] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007f67ea13f000 [ 132.009717][ T5568] RBP: 00007f67e7ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 132.009729][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.009807][ T5568] R13: 00007f67e9606038 R14: 00007f67e9605fa0 R15: 00007ffef69e3608 [ 132.009825][ T5568] [ 132.414621][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.414732][ T5579] loop2: detected capacity change from 0 to 164 [ 132.862405][ T28] audit: type=1400 audit(1776811417.572:500): avc: denied { write } for pid=5583 comm="syz.1.633" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.923890][ T28] audit: type=1400 audit(1776811417.562:499): avc: denied { write } for pid=5581 comm="syz.3.632" path="socket:[12382]" dev="sockfs" ino=12382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.978283][ T5585] loop1: detected capacity change from 0 to 1764 [ 132.983741][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 132.985068][ T28] audit: type=1400 audit(1776811417.663:501): avc: denied { bind } for pid=5583 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.008706][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 133.021963][ T5585] iso9660: Bad value for 'map' [ 133.152285][ T5599] loop0: detected capacity change from 0 to 512 [ 133.164604][ T5601] netlink: 72 bytes leftover after parsing attributes in process `syz.3.638'. [ 133.176541][ T5598] loop1: detected capacity change from 0 to 512 [ 133.191427][ T5598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.210079][ T5598] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.225581][ T5599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.255790][ T5610] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 133.271814][ T5599] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.302454][ T5610] 9p: Unknown Cache mode or invalid value l [ 133.379426][ T5607] loop2: detected capacity change from 0 to 1024 [ 133.386223][ T5607] EXT4-fs: test_dummy_encryption option not supported [ 133.532700][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 133.532718][ T28] audit: type=1400 audit(1776811418.245:503): avc: denied { mount } for pid=5618 comm="syz.2.642" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.564066][ T5619] tmpfs: Cannot disable swap on remount [ 133.995598][ T5627] loop3: detected capacity change from 0 to 512 [ 134.850826][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.923237][ T5629] loop0: detected capacity change from 0 to 164 [ 135.062107][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.208196][ T5638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.650'. [ 135.253449][ T5642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 135.301132][ T5649] 9p: Unknown Cache mode or invalid value l [ 135.309484][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 135.327425][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 135.573490][ T5655] loop2: detected capacity change from 0 to 512 [ 135.585433][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.619175][ T5655] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.893128][ T5659] loop3: detected capacity change from 0 to 8192 [ 135.952300][ T5588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.962998][ T5659] bio_check_eod: 1695 callbacks suppressed [ 135.963014][ T5659] syz.3.657: attempt to access beyond end of device [ 135.963014][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.003318][ T5659] buffer_io_error: 1695 callbacks suppressed [ 136.003392][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.032996][ T5659] syz.3.657: attempt to access beyond end of device [ 136.032996][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.068659][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.078845][ T5659] syz.3.657: attempt to access beyond end of device [ 136.078845][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.094267][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.104765][ T5659] syz.3.657: attempt to access beyond end of device [ 136.104765][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.120155][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.130156][ T5659] syz.3.657: attempt to access beyond end of device [ 136.130156][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.144687][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.156319][ T5659] syz.3.657: attempt to access beyond end of device [ 136.156319][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.170165][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.204916][ T5659] syz.3.657: attempt to access beyond end of device [ 136.204916][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.225553][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.236511][ T5659] syz.3.657: attempt to access beyond end of device [ 136.236511][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.250213][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.265927][ T5659] syz.3.657: attempt to access beyond end of device [ 136.265927][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.285186][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 136.300496][ T5659] syz.3.657: attempt to access beyond end of device [ 136.300496][ T5659] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.316668][ T5659] Buffer I/O error on dev loop3, logical block 57847, async page read [ 137.035286][ T5685] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.060684][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.091791][ T5683] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.113261][ T5685] 9p: Unknown Cache mode or invalid value l [ 137.152173][ T5683] 9p: Unknown Cache mode or invalid value l [ 137.582688][ T5695] loop0: detected capacity change from 0 to 128 [ 137.768654][ T5679] loop4: detected capacity change from 0 to 1024 [ 137.783402][ T5679] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.801392][ T5679] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.662: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 137.849887][ T5679] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.851756][ T5679] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.662: couldn't read orphan inode 11 (err -117) [ 137.861981][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 137.862081][ C0] EXT4-fs (loop4): initial error at time 1776811422: ext4_ext_check_inode:521: inode 11 [ 137.862320][ C0] EXT4-fs (loop4): last error at time 1776811422: ext4_ext_check_inode:521: inode 11 [ 137.909285][ T5679] loop4: lost filesystem error report for type 5 error -117 [ 137.937893][ T5698] loop2: detected capacity change from 0 to 8192 [ 137.954416][ T5679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.319956][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 138.335120][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.360885][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 138.381842][ T5711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.671'. [ 138.850977][ T5718] loop4: detected capacity change from 0 to 512 [ 140.077113][ T5723] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 140.112972][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 140.168534][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 141.025897][ T5739] loop1: detected capacity change from 0 to 512 [ 141.426136][ T5741] program syz.4.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.021333][ T5752] loop0: detected capacity change from 0 to 1024 [ 142.065159][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.121948][ T5741] loop4: detected capacity change from 0 to 8192 [ 143.259419][ T5767] netlink: 87 bytes leftover after parsing attributes in process `syz.1.686'. [ 143.276980][ T5766] loop2: detected capacity change from 0 to 512 [ 143.861289][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.919366][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 147.049789][ T5787] loop3: detected capacity change from 0 to 512 [ 147.938634][ T28] audit: type=1400 audit(1776811432.705:504): avc: denied { setopt } for pid=5792 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.963387][ T28] audit: type=1400 audit(1776811432.705:505): avc: denied { getopt } for pid=5792 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.967065][ T5793] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.047049][ T28] audit: type=1400 audit(1776811432.735:506): avc: denied { write } for pid=5792 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.112659][ T5789] loop0: detected capacity change from 0 to 764 [ 148.375115][ T5804] netlink: 14 bytes leftover after parsing attributes in process `syz.3.697'. [ 148.480099][ T28] audit: type=1400 audit(1776811433.247:507): avc: denied { getopt } for pid=5794 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.658335][ T5804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.723047][ T5804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.759973][ T5804] bond0 (unregistering): Released all slaves [ 148.887023][ T5798] loop3: detected capacity change from 0 to 8192 [ 149.164605][ T5826] loop1: detected capacity change from 0 to 512 [ 149.663599][ T5833] loop0: detected capacity change from 0 to 1024 [ 149.934351][ T5833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.239428][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.380618][ T5840] batadv0: entered promiscuous mode [ 150.886933][ T5842] loop4: detected capacity change from 0 to 512 [ 151.268829][ T28] audit: type=1400 audit(1776811436.046:508): avc: denied { accept } for pid=5851 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 151.298314][ T5845] syzkaller0: entered promiscuous mode [ 151.323610][ T5845] syzkaller0: entered allmulticast mode [ 151.370800][ T5855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.714'. [ 151.529951][ T5857] loop3: detected capacity change from 0 to 512 [ 151.537188][ T5859] loop1: detected capacity change from 0 to 256 [ 151.565372][ T5857] EXT4-fs: Ignoring removed bh option [ 151.576350][ T5859] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.628327][ T5857] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 151.648969][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 151.676953][ T5859] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.691061][ T5857] EXT4-fs (loop3): 1 truncate cleaned up [ 151.704278][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.800699][ T5857] syzkaller1: entered promiscuous mode [ 151.815545][ T28] audit: type=1400 audit(1776811436.588:509): avc: denied { read append } for pid=5863 comm="syz.1.718" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.845500][ T5864] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 151.858382][ T5857] syzkaller1: entered allmulticast mode [ 151.887805][ T5865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.715: bg 0: block 465: padding at end of block bitmap is not set [ 151.922485][ T28] audit: type=1400 audit(1776811436.598:510): avc: denied { open } for pid=5863 comm="syz.1.718" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.027731][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.130505][ T5878] loop2: detected capacity change from 0 to 8192 [ 153.214691][ T5877] bio_check_eod: 19390 callbacks suppressed [ 153.214710][ T5877] syz.2.723: attempt to access beyond end of device [ 153.214710][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.276641][ T5877] buffer_io_error: 19390 callbacks suppressed [ 153.276659][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.279935][ T28] audit: type=1400 audit(1776811438.063:511): avc: denied { create } for pid=5882 comm="syz.3.724" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.283878][ T5877] syz.2.723: attempt to access beyond end of device [ 153.283878][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.283907][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.283946][ T5877] syz.2.723: attempt to access beyond end of device [ 153.283946][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.283985][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.284020][ T5877] syz.2.723: attempt to access beyond end of device [ 153.284020][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.284095][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.284134][ T5877] syz.2.723: attempt to access beyond end of device [ 153.284134][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.284156][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.284184][ T5877] syz.2.723: attempt to access beyond end of device [ 153.284184][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.431165][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.439761][ T5877] syz.2.723: attempt to access beyond end of device [ 153.439761][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.453329][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.463530][ T5877] syz.2.723: attempt to access beyond end of device [ 153.463530][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.477229][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.485645][ T5877] syz.2.723: attempt to access beyond end of device [ 153.485645][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.515175][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.549900][ T5877] syz.2.723: attempt to access beyond end of device [ 153.549900][ T5877] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.608289][ T5877] Buffer I/O error on dev loop2, logical block 57847, async page read [ 153.617836][ T5889] program syz.4.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.533139][ T5889] loop4: detected capacity change from 0 to 8192 [ 154.545313][ T28] audit: type=1400 audit(1776811439.337:512): avc: denied { write } for pid=5882 comm="syz.3.724" name="file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.582187][ T28] audit: type=1400 audit(1776811439.337:513): avc: denied { open } for pid=5882 comm="syz.3.724" path="/146/file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.813162][ T28] audit: type=1400 audit(1776811439.598:514): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.960252][ T5917] loop2: detected capacity change from 0 to 512 [ 155.155591][ T5918] loop1: detected capacity change from 0 to 512 [ 155.258504][ T5918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.320211][ T5920] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.438331][ T5922] loop0: detected capacity change from 0 to 128 [ 155.535475][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.564304][ T5920] 9p: Unknown Cache mode or invalid value l [ 155.572909][ T5928] loop4: detected capacity change from 0 to 128 [ 155.610353][ T5928] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.629969][ T5918] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.747190][ T28] audit: type=1400 audit(1776811440.541:515): avc: denied { append } for pid=5914 comm="syz.1.733" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.770980][ T28] audit: type=1400 audit(1776811440.541:516): avc: denied { ioctl } for pid=5914 comm="syz.1.733" path="/156/bus/bus" dev="loop1" ino=18 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 155.815818][ T5934] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.733: iget: bad i_size value: 2533274857506816 [ 155.896822][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.948275][ T28] audit: type=1400 audit(1776811440.612:517): avc: denied { add_name } for pid=5914 comm="syz.1.733" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.994175][ T5937] netlink: 'syz.3.741': attribute type 16 has an invalid length. [ 156.009663][ T5937] netlink: 'syz.3.741': attribute type 17 has an invalid length. [ 156.022602][ T28] audit: type=1400 audit(1776811440.742:518): avc: denied { write } for pid=5936 comm="syz.3.741" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.094279][ T28] audit: type=1400 audit(1776811440.742:519): avc: denied { ioctl } for pid=5936 comm="syz.3.741" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.222504][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.251387][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.429602][ T5942] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.454782][ T5941] 9p: Unknown Cache mode or invalid value l [ 156.537568][ T28] audit: type=1400 audit(1776811441.334:520): avc: denied { relabelfrom } for pid=5943 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.647384][ T5947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.744'. [ 156.698900][ T5949] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.778235][ T5957] loop0: detected capacity change from 0 to 512 [ 156.797350][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.851787][ T5957] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.748: Unimplemented hash flags: 0x0001 [ 156.866267][ T5957] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.748: Corrupt directory, running e2fsck is recommended [ 156.975390][ T5968] netlink: 'syz.0.748': attribute type 4 has an invalid length. [ 157.372077][ T5964] loop2: detected capacity change from 0 to 8192 [ 157.505145][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.111890][ T5988] loop3: detected capacity change from 0 to 512 [ 158.129784][ T5987] loop0: detected capacity change from 0 to 1024 [ 159.959568][ T5976] loop1: detected capacity change from 0 to 8192 [ 159.966625][ T5990] loop2: detected capacity change from 0 to 512 [ 160.932175][ T5987] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 160.932447][ T5987] EXT4-fs: failed to create workqueue [ 161.115444][ T5987] EXT4-fs (loop0): mount failed [ 161.366069][ T6000] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.419081][ T6000] 9p: Unknown Cache mode or invalid value l [ 161.553301][ T6016] loop3: detected capacity change from 0 to 256 [ 161.779515][ T6016] tap0: tun_chr_ioctl cmd 1074025677 [ 161.809196][ T6016] tap0: linktype set to 0 [ 162.141808][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 162.141827][ T28] audit: type=1400 audit(1776811446.690:524): avc: denied { listen } for pid=6015 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 162.177833][ T28] audit: type=1400 audit(1776811446.771:525): avc: denied { setopt } for pid=6015 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.341882][ T6028] loop2: detected capacity change from 0 to 512 [ 162.396643][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.416750][ T6028] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.572361][ T6034] loop4: detected capacity change from 0 to 512 [ 162.959761][ T6035] program syz.0.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.786215][ T6040] loop1: detected capacity change from 0 to 512 [ 165.496436][ T6035] loop0: detected capacity change from 0 to 8192 [ 165.661186][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.693592][ T6051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.730357][ T6048] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.749891][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 165.785687][ T6048] 9p: Unknown Cache mode or invalid value l [ 165.810126][ T28] audit: type=1400 audit(1776811450.631:526): avc: denied { bind } for pid=6056 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.829281][ T6057] netlink: 220 bytes leftover after parsing attributes in process `syz.3.781'. [ 165.849630][ T6057] loop3: detected capacity change from 0 to 512 [ 165.861726][ T6057] EXT4-fs: Ignoring removed nobh option [ 165.873482][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 165.888387][ T6057] EXT4-fs: Invalid want_extra_isize 127 [ 165.896637][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 165.922201][ T28] audit: type=1400 audit(1776811450.742:527): avc: denied { ioctl } for pid=6060 comm="syz.4.782" path="socket:[13217]" dev="sockfs" ino=13217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.331678][ T28] audit: type=1400 audit(1776811451.163:528): avc: denied { map } for pid=6072 comm="syz.1.785" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.638166][ T6079] loop2: detected capacity change from 0 to 256 [ 166.928878][ T6084] tap0: tun_chr_ioctl cmd 1074025677 [ 166.946922][ T6084] tap0: linktype set to 0 [ 166.978108][ T6087] loop0: detected capacity change from 0 to 164 [ 167.019059][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 167.045204][ T28] audit: type=1400 audit(1776811451.875:529): avc: denied { map } for pid=6082 comm="syz.3.789" path="socket:[13273]" dev="sockfs" ino=13273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.070820][ T6083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6083 comm=syz.3.789 [ 167.137131][ T28] audit: type=1400 audit(1776811451.875:530): avc: denied { read } for pid=6082 comm="syz.3.789" path="socket:[13273]" dev="sockfs" ino=13273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.223936][ T6093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 167.268511][ T6098] 9p: Unknown Cache mode or invalid value l [ 167.527134][ T6095] FAULT_INJECTION: forcing a failure. [ 167.527134][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.588068][ T6105] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 167.621628][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.3.794 Not tainted syzkaller #0 PREEMPT(full) [ 167.621664][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.621752][ T6095] Call Trace: [ 167.621761][ T6095] [ 167.621771][ T6095] __dump_stack+0x1d/0x30 [ 167.621808][ T6095] dump_stack_lvl+0x95/0xd0 [ 167.621835][ T6095] dump_stack+0x15/0x1b [ 167.621889][ T6095] should_fail_ex+0x263/0x280 [ 167.621931][ T6095] should_fail+0xb/0x20 [ 167.622097][ T6095] should_fail_usercopy+0x1a/0x20 [ 167.622136][ T6095] _copy_from_user+0x1c/0xb0 [ 167.622180][ T6095] ___sys_recvmsg+0xaa/0x3b0 [ 167.622224][ T6095] ? set_normalized_timespec64+0xe0/0x110 [ 167.622290][ T6095] do_recvmmsg+0x1ef/0x560 [ 167.622330][ T6095] __x64_sys_recvmmsg+0xfb/0x170 [ 167.622371][ T6095] x64_sys_call+0x80f/0x3020 [ 167.622447][ T6095] do_syscall_64+0x12c/0x3b0 [ 167.622481][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.622506][ T6095] RIP: 0033:0x7f31e779c819 [ 167.622522][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.622603][ T6095] RSP: 002b:00007f31e61f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.622624][ T6095] RAX: ffffffffffffffda RBX: 00007f31e7a15fa0 RCX: 00007f31e779c819 [ 167.622682][ T6095] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 167.622737][ T6095] RBP: 00007f31e61f7090 R08: 00002000000001c0 R09: 0000000000000000 [ 167.622754][ T6095] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 167.622770][ T6095] R13: 00007f31e7a16038 R14: 00007f31e7a15fa0 R15: 00007ffdfe5bb9b8 [ 167.622865][ T6095] [ 168.041418][ T28] audit: type=1400 audit(1776811452.847:531): avc: denied { getopt } for pid=6107 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.041545][ T28] audit: type=1400 audit(1776811452.847:532): avc: denied { read } for pid=6107 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.144886][ T6105] team0: Port device vlan0 added [ 168.254707][ T6119] loop1: detected capacity change from 0 to 512 [ 168.273668][ T6119] EXT4-fs: Ignoring removed nobh option [ 168.279857][ T6119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.297072][ T6119] EXT4-fs (loop1): 1 truncate cleaned up [ 168.308709][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.342118][ T6122] loop4: detected capacity change from 0 to 256 [ 168.343712][ T28] audit: type=1400 audit(1776811453.168:533): avc: denied { watch } for pid=6118 comm="syz.1.800" path="/167/file2" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.457073][ T6122] tap0: tun_chr_ioctl cmd 1074025677 [ 168.464078][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.464771][ T6122] tap0: linktype set to 0 [ 168.817777][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.836188][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.011156][ T28] audit: type=1400 audit(1776811453.840:534): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.090102][ T6159] loop2: detected capacity change from 0 to 164 [ 169.114749][ T6157] loop4: detected capacity change from 0 to 128 [ 169.235952][ T6163] loop2: detected capacity change from 0 to 256 [ 169.394272][ T6163] tap0: tun_chr_ioctl cmd 1074025677 [ 169.400696][ T6163] tap0: linktype set to 0 [ 169.498873][ T6167] FAULT_INJECTION: forcing a failure. [ 169.498873][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.512520][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.2.817 Not tainted syzkaller #0 PREEMPT(full) [ 169.512550][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.512563][ T6167] Call Trace: [ 169.512570][ T6167] [ 169.512578][ T6167] __dump_stack+0x1d/0x30 [ 169.512609][ T6167] dump_stack_lvl+0x95/0xd0 [ 169.512642][ T6167] dump_stack+0x15/0x1b [ 169.512671][ T6167] should_fail_ex+0x263/0x280 [ 169.512714][ T6167] should_fail+0xb/0x20 [ 169.512814][ T6167] should_fail_usercopy+0x1a/0x20 [ 169.512923][ T6167] _copy_to_user+0x20/0xa0 [ 169.512941][ T6167] simple_read_from_buffer+0xb5/0x130 [ 169.513017][ T6167] proc_fail_nth_read+0x10e/0x150 [ 169.513107][ T6167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.513137][ T6167] vfs_read+0x1ab/0x7f0 [ 169.513165][ T6167] ? __rcu_read_unlock+0x4e/0x70 [ 169.513232][ T6167] ? __fget_files+0x184/0x1c0 [ 169.513254][ T6167] ? mutex_lock+0x57/0x90 [ 169.513283][ T6167] ksys_read+0xdc/0x1a0 [ 169.513358][ T6167] __x64_sys_read+0x40/0x50 [ 169.513385][ T6167] x64_sys_call+0x2886/0x3020 [ 169.513411][ T6167] do_syscall_64+0x12c/0x3b0 [ 169.513504][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.513524][ T6167] RIP: 0033:0x7fc38368d04e [ 169.513538][ T6167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.513555][ T6167] RSP: 002b:00007fc38211efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.513598][ T6167] RAX: ffffffffffffffda RBX: 00007fc38211f6c0 RCX: 00007fc38368d04e [ 169.513611][ T6167] RDX: 000000000000000f RSI: 00007fc38211f0a0 RDI: 0000000000000005 [ 169.513622][ T6167] RBP: 00007fc38211f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.513634][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.513700][ T6167] R13: 00007fc383946038 R14: 00007fc383945fa0 R15: 00007ffd84d44248 [ 169.513718][ T6167] [ 170.805745][ T6177] loop1: detected capacity change from 0 to 2048 [ 171.262757][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.289754][ T6177] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.558776][ T6198] program syz.0.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.905445][ T6186] loop3: detected capacity change from 0 to 8192 [ 171.965413][ T6198] loop0: detected capacity change from 0 to 8192 [ 171.983549][ T6186] bio_check_eod: 11064 callbacks suppressed [ 171.983563][ T6186] syz.3.823: attempt to access beyond end of device [ 171.983563][ T6186] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 172.057317][ T6186] buffer_io_error: 11064 callbacks suppressed [ 172.057422][ T6186] Buffer I/O error on dev loop3, logical block 57847, async page read [ 172.109391][ T6186] syz.3.823: attempt to access beyond end of device [ 172.109391][ T6186] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 172.154879][ T6186] Buffer I/O error on dev loop3, logical block 57847, async page read [ 172.176293][ T6186] syz.3.823: attempt to access beyond end of device [ 172.176293][ T6186] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 172.190377][ T6186] Buffer I/O error on dev loop3, logical block 57847, async page read [ 172.200948][ T6186] syz.3.823: attempt to access beyond end of device [ 172.200948][ T6186] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 172.217554][ T6186] Buffer I/O error on dev loop3, logical block 57847, async page read [ 172.218135][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.408931][ T6219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 172.427000][ T6219] 9p: Unknown Cache mode or invalid value l [ 172.494004][ T6222] netlink: 'syz.1.836': attribute type 3 has an invalid length. [ 172.640361][ T6223] loop3: detected capacity change from 0 to 1024 [ 172.765663][ T6223] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 172.777954][ T6223] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 172.791411][ T6223] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.832: inode #1: comm syz.3.832: iget: illegal inode # [ 172.805745][ T6223] loop3: lost filesystem error report for type 5 error -117 [ 172.809019][ T6223] EXT4-fs (loop3): no journal found [ 172.817147][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 172.817426][ C1] EXT4-fs (loop3): initial error at time 1776811457: ext4_get_journal_inode:5896 [ 172.817615][ C1] EXT4-fs (loop3): last error at time 1776811457: ext4_get_journal_inode:5896 [ 172.851356][ T6223] EXT4-fs (loop3): can't get journal size [ 172.876285][ T6223] EXT4-fs (loop3): failed to initialize system zone (-22) [ 172.884096][ T6223] EXT4-fs (loop3): mount failed [ 173.279497][ T6236] loop1: detected capacity change from 0 to 1024 [ 173.316606][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.525385][ T28] audit: type=1400 audit(1776811458.372:535): avc: denied { watch_reads } for pid=6240 comm="syz.2.841" path="/173" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.559709][ T28] audit: type=1400 audit(1776811458.402:536): avc: denied { bind } for pid=6242 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.636288][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 173.678567][ T6248] 9pnet_virtio: no channels available for device ./file0 [ 173.793310][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.166884][ T6254] loop3: detected capacity change from 0 to 164 [ 174.293781][ T6267] loop2: detected capacity change from 0 to 512 [ 174.307265][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.332693][ T6270] loop0: detected capacity change from 0 to 1024 [ 174.367489][ T6267] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.847: Unimplemented hash flags: 0x0001 [ 174.461930][ T6272] loop1: detected capacity change from 0 to 512 [ 174.551424][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.570396][ T6267] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.847: Corrupt directory, running e2fsck is recommended [ 174.852013][ T6279] loop3: detected capacity change from 0 to 1024 [ 174.946024][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.174154][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.301886][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.391240][ T6291] FAT-fs (loop3): bogus sectors per cluster 223 [ 175.434045][ T6291] FAT-fs (loop3): Can't find a valid FAT filesystem [ 175.465109][ T28] audit: type=1400 audit(1776811460.316:537): avc: denied { append } for pid=6290 comm="syz.3.853" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.520237][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.543323][ T6295] netlink: 'syz.0.855': attribute type 15 has an invalid length. [ 175.577133][ T28] audit: type=1400 audit(1776811460.396:538): avc: denied { create } for pid=6294 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.633710][ T28] audit: type=1400 audit(1776811460.396:539): avc: denied { write } for pid=6294 comm="syz.0.855" path="socket:[13671]" dev="sockfs" ino=13671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.722353][ T6303] EXT4-fs: test_dummy_encryption option not supported [ 176.116981][ T6306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 176.123563][ T6306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.131367][ T6306] vhci_hcd vhci_hcd.0: Device attached [ 176.511222][ T6310] ip6tnl1: entered allmulticast mode [ 176.674317][ T6307] vhci_hcd: connection closed [ 176.674623][ T4879] vhci_hcd vhci_hcd.0: stop threads [ 176.684975][ T4879] vhci_hcd vhci_hcd.0: release socket [ 176.690854][ T4879] vhci_hcd vhci_hcd.0: disconnect device [ 176.706210][ T28] audit: type=1400 audit(1776811461.559:540): avc: denied { mount } for pid=6309 comm="syz.2.856" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.734310][ T3989] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 176.753812][ T3989] usb 1-1: enqueue for inactive port 0 [ 176.764734][ T6317] set_capacity_and_notify: 2 callbacks suppressed [ 176.764748][ T6317] loop4: detected capacity change from 0 to 512 [ 176.779526][ T3989] usb 1-1: enqueue for inactive port 0 [ 176.787111][ T3989] usb 1-1: enqueue for inactive port 0 [ 176.874014][ T3989] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 176.925443][ T6317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.019779][ T6317] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.352622][ T6325] loop3: detected capacity change from 0 to 512 [ 177.387612][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.439330][ T6325] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.533013][ T6327] loop1: detected capacity change from 0 to 8192 [ 177.570033][ T28] audit: type=1400 audit(1776811462.421:541): avc: denied { mounton } for pid=6326 comm="syz.1.864" path="/179/file0/bus" dev="loop1" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 177.719146][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.953688][ T3323] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 177.978311][ T3323] FAT-fs (loop1): Filesystem has been set read-only [ 178.047249][ T6337] syzkaller0: entered promiscuous mode [ 178.053510][ T6337] syzkaller0: entered allmulticast mode [ 178.254715][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.392100][ T6344] loop0: detected capacity change from 0 to 512 [ 178.560129][ T28] audit: type=1400 audit(1776811463.403:542): avc: denied { connect } for pid=6346 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.893229][ T6353] loop3: detected capacity change from 0 to 512 [ 179.093914][ T6353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.180682][ T6353] EXT4-fs (loop3): orphan file too big: 4294967295 [ 179.193382][ T6353] EXT4-fs (loop3): mount failed [ 179.396835][ T6361] loop4: detected capacity change from 0 to 256 [ 179.431468][ T28] audit: type=1326 audit(1776811464.295:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989dcc819 code=0x7ffc0000 [ 179.458434][ T6361] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 179.466783][ T6361] audit: out of memory in audit_log_start [ 179.474420][ T28] audit: type=1326 audit(1776811464.315:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe989dcc819 code=0x7ffc0000 [ 179.506840][ T28] audit: type=1326 audit(1776811464.315:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989dcc819 code=0x7ffc0000 [ 179.550384][ T28] audit: type=1326 audit(1776811464.315:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe989dcc819 code=0x7ffc0000 [ 179.620145][ T28] audit: type=1326 audit(1776811464.315:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe989dcc819 code=0x7ffc0000 [ 179.688905][ T28] audit: type=1326 audit(1776811464.315:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe989d8d04e code=0x7ffc0000 [ 179.735717][ T6365] loop4: detected capacity change from 0 to 256 [ 179.743095][ T28] audit: type=1326 audit(1776811464.315:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe989d8d04e code=0x7ffc0000 [ 179.861690][ T6365] tap0: tun_chr_ioctl cmd 1074025677 [ 179.870707][ T6365] tap0: linktype set to 0 [ 179.974458][ T6368] veth1_to_bond: entered allmulticast mode [ 180.097511][ T6373] veth1_to_bond: left allmulticast mode [ 180.113362][ T6375] FAULT_INJECTION: forcing a failure. [ 180.113362][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.174656][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.0.880 Not tainted syzkaller #0 PREEMPT(full) [ 180.174738][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.174751][ T6375] Call Trace: [ 180.174758][ T6375] [ 180.174767][ T6375] __dump_stack+0x1d/0x30 [ 180.174813][ T6375] dump_stack_lvl+0x95/0xd0 [ 180.174847][ T6375] dump_stack+0x15/0x1b [ 180.174892][ T6375] should_fail_ex+0x263/0x280 [ 180.174963][ T6375] should_fail+0xb/0x20 [ 180.175001][ T6375] should_fail_usercopy+0x1a/0x20 [ 180.175052][ T6375] _copy_from_user+0x1c/0xb0 [ 180.175148][ T6375] do_ip6t_set_ctl+0x3b2/0x8f0 [ 180.175170][ T6375] ? kstrtoull+0x111/0x140 [ 180.175293][ T6375] ? __rcu_read_unlock+0x4e/0x70 [ 180.175332][ T6375] nf_setsockopt+0x199/0x1b0 [ 180.175357][ T6375] ipv6_setsockopt+0x11a/0x130 [ 180.175398][ T6375] sctp_setsockopt+0x126/0xea0 [ 180.175443][ T6375] sock_common_setsockopt+0x69/0x80 [ 180.175471][ T6375] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.175498][ T6375] __sys_setsockopt+0x184/0x200 [ 180.175666][ T6375] __x64_sys_setsockopt+0x64/0x80 [ 180.175701][ T6375] x64_sys_call+0x2327/0x3020 [ 180.175738][ T6375] do_syscall_64+0x12c/0x3b0 [ 180.175764][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.175868][ T6375] RIP: 0033:0x7f67e938c819 [ 180.175919][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.175937][ T6375] RSP: 002b:00007f67e7ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.175958][ T6375] RAX: ffffffffffffffda RBX: 00007f67e9605fa0 RCX: 00007f67e938c819 [ 180.175996][ T6375] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 180.176008][ T6375] RBP: 00007f67e7ddf090 R08: 0000000000000615 R09: 0000000000000000 [ 180.176021][ T6375] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 180.176038][ T6375] R13: 00007f67e9606038 R14: 00007f67e9605fa0 R15: 00007ffef69e3608 [ 180.176062][ T6375] [ 180.411675][ T6387] loop1: detected capacity change from 0 to 164 [ 180.423885][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.436335][ T6391] loop0: detected capacity change from 0 to 1024 [ 180.445449][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.501128][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.579307][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.652289][ T6402] loop0: detected capacity change from 0 to 256 [ 180.744942][ T6402] tap0: tun_chr_ioctl cmd 1074025677 [ 180.751358][ T6402] tap0: linktype set to 0 [ 180.851854][ T6408] xt_hashlimit: size too large, truncated to 1048576 [ 182.309015][ T6434] set_capacity_and_notify: 1 callbacks suppressed [ 182.309036][ T6434] loop0: detected capacity change from 0 to 1024 [ 183.307026][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.561111][ T6431] loop2: detected capacity change from 0 to 512 [ 183.635591][ T6432] loop4: detected capacity change from 0 to 512 [ 184.960815][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.266801][ T6440] loop0: detected capacity change from 0 to 128 [ 185.385809][ T6438] loop1: detected capacity change from 0 to 256 [ 185.399777][ T6448] loop4: detected capacity change from 0 to 1024 [ 185.438124][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.456958][ T6438] loop1: detected capacity change from 0 to 128 [ 185.707612][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 185.707646][ T28] audit: type=1326 audit(1776811470.569:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 185.949705][ T28] audit: type=1326 audit(1776811470.619:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 185.978850][ T6440] loop0: detected capacity change from 0 to 1024 [ 186.024719][ T6440] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 186.067553][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.076886][ T28] audit: type=1326 audit(1776811470.619:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.125825][ T28] audit: type=1326 audit(1776811470.659:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.149766][ T28] audit: type=1326 audit(1776811470.659:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.173218][ T28] audit: type=1326 audit(1776811470.679:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.196643][ T28] audit: type=1326 audit(1776811470.689:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.238432][ T28] audit: type=1326 audit(1776811470.689:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31daa3c819 code=0x7ffc0000 [ 186.291829][ T6440] loop0: detected capacity change from 0 to 128 [ 186.312395][ T6458] loop3: detected capacity change from 0 to 512 [ 186.334955][ T28] audit: type=1326 audit(1776811470.689:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f31da9fd04e code=0x7ffc0000 [ 186.359393][ T28] audit: type=1326 audit(1776811470.699:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31da9fd04e code=0x7ffc0000 [ 186.369519][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.393134][ T6440] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.416147][ T6458] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.427830][ T6440] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.690483][ T6473] tap0: tun_chr_ioctl cmd 1074025677 [ 186.719558][ T6473] tap0: linktype set to 0 [ 186.832861][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.369663][ T6486] set_capacity_and_notify: 1 callbacks suppressed [ 187.369682][ T6486] loop4: detected capacity change from 0 to 256 [ 187.450972][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.525437][ T6490] loop2: detected capacity change from 0 to 8192 [ 187.624556][ T6492] loop0: detected capacity change from 0 to 256 [ 187.665452][ T6494] loop3: detected capacity change from 0 to 256 [ 187.689807][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 187.921609][ T6499] tap0: tun_chr_ioctl cmd 1074025677 [ 187.937471][ T6499] tap0: linktype set to 0 [ 188.277449][ T6517] loop1: detected capacity change from 0 to 8192 [ 188.304488][ T6507] tap0: tun_chr_ioctl cmd 1074025677 [ 188.319152][ T6507] tap0: linktype set to 0 [ 188.351728][ T6508] tap0: tun_chr_ioctl cmd 1074025677 [ 188.359876][ T6508] tap0: linktype set to 0 [ 189.142528][ T6539] loop2: detected capacity change from 0 to 512 [ 189.176254][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.203391][ T6539] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.350922][ T6544] loop0: detected capacity change from 0 to 1024 [ 189.382860][ T6544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.572879][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.628481][ T6554] program syz.4.932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.065232][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.080852][ T6559] loop1: detected capacity change from 0 to 8192 [ 190.190822][ T6554] loop4: detected capacity change from 0 to 8192 [ 190.296845][ T6567] loop3: detected capacity change from 0 to 1024 [ 190.329963][ T6567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.464398][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.540149][ T6556] syz.0.933: attempt to access beyond end of device [ 190.540149][ T6556] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 190.574491][ T6556] Buffer I/O error on dev loop0, logical block 57847, async page read [ 190.607997][ T6556] syz.0.933: attempt to access beyond end of device [ 190.607997][ T6556] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 190.655118][ T6556] Buffer I/O error on dev loop0, logical block 57847, async page read [ 190.675520][ T6556] syz.0.933: attempt to access beyond end of device [ 190.675520][ T6556] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 190.709535][ T6556] Buffer I/O error on dev loop0, logical block 57847, async page read [ 190.831315][ T6576] syzkaller0: entered promiscuous mode [ 190.842830][ T6576] syzkaller0: entered allmulticast mode [ 190.851167][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 190.851200][ T28] audit: type=1400 audit(1776811475.729:581): avc: denied { sqpoll } for pid=6570 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.102964][ T6591] 9p: Unknown Cache mode or invalid value l [ 192.253784][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.266797][ T6600] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.345591][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.398987][ T6597] set_capacity_and_notify: 2 callbacks suppressed [ 192.399051][ T6597] loop2: detected capacity change from 0 to 8192 [ 192.419964][ T6564] ================================================================== [ 192.428088][ T6564] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 192.435912][ T6564] [ 192.438278][ T6564] write to 0xffffea0004d58a18 of 8 bytes by task 6498 on cpu 1: [ 192.445911][ T6564] __filemap_remove_folio+0x201/0x2e0 [ 192.451300][ T6564] filemap_remove_folio+0x6d/0x1d0 [ 192.456423][ T6564] truncate_inode_folio+0x42/0x50 [ 192.461480][ T6564] shmem_undo_range+0x26d/0xb10 [ 192.466356][ T6564] shmem_evict_inode+0x12e/0x540 [ 192.471306][ T6564] evict+0x2af/0x510 [ 192.475211][ T6564] iput+0x41a/0x580 [ 192.479031][ T6564] dentry_unlink_inode+0x26f/0x290 [ 192.484162][ T6564] __dentry_kill+0x145/0x4d0 [ 192.488752][ T6564] finish_dput+0x2b/0x200 [ 192.493092][ T6564] dput+0x52/0x60 [ 192.496742][ T6564] __fput+0x444/0x630 [ 192.500743][ T6564] ____fput+0x1c/0x30 [ 192.504736][ T6564] task_work_run+0x130/0x1a0 [ 192.509355][ T6564] do_exit+0x4ae/0x1530 [ 192.513528][ T6564] do_group_exit+0xfe/0x140 [ 192.518047][ T6564] get_signal+0xe30/0xf20 [ 192.522380][ T6564] arch_do_signal_or_restart+0x96/0x450 [ 192.527952][ T6564] exit_to_user_mode_loop+0x6a/0x6f0 [ 192.533250][ T6564] ret_from_fork+0x188/0x330 [ 192.537848][ T6564] ret_from_fork_asm+0x1a/0x30 [ 192.542629][ T6564] [ 192.544951][ T6564] read to 0xffffea0004d58a18 of 8 bytes by task 6564 on cpu 0: [ 192.552489][ T6564] folio_mapping+0xa1/0xe0 [ 192.556927][ T6564] evict_folios+0xdb0/0x3370 [ 192.561693][ T6564] try_to_shrink_lruvec+0x858/0xc20 [ 192.566894][ T6564] shrink_lruvec+0x256/0x1bc0 [ 192.571590][ T6564] shrink_node+0x697/0x20a0 [ 192.576190][ T6564] do_try_to_free_pages+0x408/0xc90 [ 192.581398][ T6564] try_to_free_mem_cgroup_pages+0x201/0x420 [ 192.587302][ T6564] try_charge_memcg+0x373/0xa10 [ 192.592168][ T6564] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 192.597722][ T6564] __alloc_frozen_pages_noprof+0x18a/0x350 [ 192.603540][ T6564] alloc_pages_mpol+0xb3/0x260 [ 192.608331][ T6564] alloc_pages_noprof+0x8f/0x140 [ 192.613289][ T6564] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 192.619216][ T6564] __kvmalloc_node_noprof+0x3d4/0x640 [ 192.624611][ T6564] futex_hash_allocate+0x190/0x9a0 [ 192.629766][ T6564] futex_hash_prctl+0xd8/0xf0 [ 192.634463][ T6564] __se_sys_prctl+0x4f4/0x1400 [ 192.639244][ T6564] __x64_sys_prctl+0x67/0x80 [ 192.643876][ T6564] x64_sys_call+0x2533/0x3020 [ 192.648565][ T6564] do_syscall_64+0x12c/0x3b0 [ 192.653157][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.659100][ T6564] [ 192.661433][ T6564] value changed: 0xffff88811c0bbd00 -> 0x0000000000000000 [ 192.668556][ T6564] [ 192.670882][ T6564] Reported by Kernel Concurrency Sanitizer on: [ 192.677032][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.1.934 Not tainted syzkaller #0 PREEMPT(full) [ 192.686237][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.696300][ T6564] ================================================================== [ 193.069666][ T6498] syz.1.919 (6498) used greatest stack depth: 8072 bytes left [ 193.130780][ T6608] loop4: detected capacity change from 0 to 256 [ 193.172254][ T6564] syz.1.934 (6564) used greatest stack depth: 8040 bytes left [ 193.179441][ T6608] msdos: Bad value for 'tz' [ 193.347364][ T6608] loop4: detected capacity change from 0 to 512 [ 193.384644][ T6608] EXT4-fs: Ignoring removed nobh option [ 193.392620][ T6608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.411011][ T6608] EXT4-fs (loop4): 1 truncate cleaned up [ 193.419803][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.469589][ T6608] FAULT_INJECTION: forcing a failure. [ 193.469589][ T6608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.484059][ T6608] CPU: 0 UID: 0 PID: 6608 Comm: syz.4.947 Not tainted syzkaller #0 PREEMPT(full) [ 193.484115][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.484130][ T6608] Call Trace: [ 193.484139][ T6608] [ 193.484148][ T6608] __dump_stack+0x1d/0x30 [ 193.484178][ T6608] dump_stack_lvl+0x95/0xd0 [ 193.484204][ T6608] dump_stack+0x15/0x1b [ 193.484230][ T6608] should_fail_ex+0x263/0x280 [ 193.484308][ T6608] should_fail+0xb/0x20 [ 193.484337][ T6608] should_fail_usercopy+0x1a/0x20 [ 193.484430][ T6608] _copy_to_user+0x20/0xa0 [ 193.484453][ T6608] simple_read_from_buffer+0xb5/0x130 [ 193.484482][ T6608] proc_fail_nth_read+0x10e/0x150 [ 193.484541][ T6608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.484580][ T6608] vfs_read+0x1ab/0x7f0 [ 193.484653][ T6608] ? __rcu_read_unlock+0x4e/0x70 [ 193.484728][ T6608] ? __fget_files+0x184/0x1c0 [ 193.484827][ T6608] ? mutex_lock+0x57/0x90 [ 193.484867][ T6608] ksys_read+0xdc/0x1a0 [ 193.484969][ T6608] __x64_sys_read+0x40/0x50 [ 193.485076][ T6608] x64_sys_call+0x2886/0x3020 [ 193.485112][ T6608] do_syscall_64+0x12c/0x3b0 [ 193.485201][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.485309][ T6608] RIP: 0033:0x7fe989d8d04e [ 193.485328][ T6608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.485353][ T6608] RSP: 002b:00007fe9887fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.485378][ T6608] RAX: ffffffffffffffda RBX: 00007fe9887fe6c0 RCX: 00007fe989d8d04e [ 193.485394][ T6608] RDX: 000000000000000f RSI: 00007fe9887fe0a0 RDI: 000000000000000c [ 193.485406][ T6608] RBP: 00007fe9887fe090 R08: 0000000000000000 R09: 0000000000000000 [ 193.485462][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.485479][ T6608] R13: 00007fe98a046128 R14: 00007fe98a046090 R15: 00007ffe6f774a98 [ 193.485500][ T6608] [ 193.771562][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.